diff --git a/.github/PULL_REQUEST_TEMPLATE.md b/.github/PULL_REQUEST_TEMPLATE.md new file mode 100644 index 000000000..c9811d54f --- /dev/null +++ b/.github/PULL_REQUEST_TEMPLATE.md @@ -0,0 +1,31 @@ +## Goal + + + +## Changes + + + +- Change 1 +- Change 2 +- Change 3 + +## Testing + + + +``` + commands +``` + +## Artifacts & Screenshots + + + +--- + +### Checklist + +- [ ] Title is clear (`feat(labN): ` style) +- [ ] No secrets/large temp files committed +- [ ] Submission file at `submissions/labN.md` exists \ No newline at end of file diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml new file mode 100644 index 000000000..03d6c4d2e --- /dev/null +++ b/.pre-commit-config.yaml @@ -0,0 +1,10 @@ +repos: + - repo: https://github.com/gitleaks/gitleaks + rev: v8.24.2 + hooks: + - id: gitleaks + - repo: https://github.com/pre-commit/pre-commit-hooks + rev: v6.0.0 + hooks: + - id: detect-private-key + - id: check-added-large-files \ No newline at end of file diff --git a/labs/lab11/reverse-proxy/nginx.conf b/labs/lab11/reverse-proxy/nginx.conf index dff91b265..cf6b6a6d9 100644 --- a/labs/lab11/reverse-proxy/nginx.conf +++ b/labs/lab11/reverse-proxy/nginx.conf @@ -29,6 +29,7 @@ http { # Rate limit zone for login # ~10 req/min per IP, burst of 5 limit_req_zone $binary_remote_addr zone=login:10m rate=10r/m; + limit_conn_zone $binary_remote_addr zone=conn:10m; limit_req_status 429; map $http_upgrade $connection_upgrade { default upgrade; '' close; } @@ -71,7 +72,7 @@ http { add_header Permissions-Policy "camera=(), geolocation=(), microphone=()" always; add_header Cross-Origin-Opener-Policy "same-origin" always; add_header Cross-Origin-Resource-Policy "same-origin" always; - add_header Content-Security-Policy-Report-Only "default-src 'self'; img-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'" always; + add_header Content-Security-Policy-Report-Only "default-src 'self'; script-src 'self'; style-src 'self'; font-src 'self'; img-src 'self'; connect-src 'self'" always; return 308 https://$host$request_uri; } @@ -85,11 +86,13 @@ http { ssl_certificate /etc/nginx/certs/localhost.crt; ssl_certificate_key /etc/nginx/certs/localhost.key; - ssl_session_timeout 10m; + ssl_session_timeout 1d; ssl_session_cache shared:SSL:10m; - ssl_protocols TLSv1.2 TLSv1.3; - ssl_ciphers "TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256:EECDH+AESGCM:EDH+AESGCM"; - ssl_prefer_server_ciphers on; + ssl_session_tickets off; + ssl_protocols TLSv1.3; + ssl_ecdh_curve X25519:secp384r1; + ssl_conf_command Ciphersuites TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256; + ssl_prefer_server_ciphers off; ssl_stapling off; # If using a publicly-trusted certificate, you may enable OCSP stapling: # ssl_stapling on; @@ -103,16 +106,17 @@ http { client_header_timeout 10s; keepalive_timeout 10s; send_timeout 10s; + limit_conn conn 50; # Security headers (include HSTS here only) - add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; + add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always; add_header X-Frame-Options "DENY" always; add_header X-Content-Type-Options "nosniff" always; add_header Referrer-Policy "strict-origin-when-cross-origin" always; add_header Permissions-Policy "camera=(), geolocation=(), microphone=()" always; add_header Cross-Origin-Opener-Policy "same-origin" always; add_header Cross-Origin-Resource-Policy "same-origin" always; - add_header Content-Security-Policy-Report-Only "default-src 'self'; img-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'" always; + add_header Content-Security-Policy-Report-Only "default-src 'self'; script-src 'self'; style-src 'self'; font-src 'self'; img-src 'self'; connect-src 'self'" always; location = /rest/user/login { limit_req zone=login burst=5 nodelay; diff --git a/labs/lab4/juice-shop-attestation.json b/labs/lab4/juice-shop-attestation.json new file mode 100644 index 000000000..f2c866e11 --- /dev/null +++ b/labs/lab4/juice-shop-attestation.json @@ -0,0 +1,73791 @@ +{ + "_type": "https://in-toto.io/Statement/v1", + "subject": [ + { + "name": "bkimminich/juice-shop:v20.0.0", + "digest": { + "sha256": "sha256:fd58bdc9745416afce8184ee0666278a436574633ea7880365153a63bfd418b0" + } + } + ], + "predicateType": "https://cyclonedx.org/bom/v1.5", + "predicate": { + "$schema": "http://cyclonedx.org/schema/bom-1.7.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.7", + "serialNumber": "urn:uuid:c9f730f3-8484-493e-b1dd-573b77aff8b3", + "version": 1, + "metadata": { + "timestamp": "2026-07-03T21:55:10+03:00", + "tools": { + "components": [ + { + "type": "application", + "author": "anchore", + "name": "syft", + "version": "1.46.0" + } + ] + }, + "component": { + "bom-ref": "73ec537d8d158676", + "type": "container", + "name": "bkimminich/juice-shop", + "version": "v20.0.0" + }, + "properties": [ + { + "name": "syft:image:labels:maintainer", + "value": "Bjoern Kimminich " + }, + { + "name": "syft:image:labels:org.opencontainers.image.authors", + "value": "Bjoern Kimminich " + }, + { + "name": "syft:image:labels:org.opencontainers.image.created", + "value": "”2026-05-12T21:09:09Z”" + }, + { + "name": "syft:image:labels:org.opencontainers.image.description", + "value": "Probably the most modern and sophisticated insecure web application" + }, + { + "name": "syft:image:labels:org.opencontainers.image.documentation", + "value": "https://help.owasp-juice.shop" + }, + { + "name": "syft:image:labels:org.opencontainers.image.licenses", + "value": "MIT" + }, + { + "name": "syft:image:labels:org.opencontainers.image.revision", + "value": "f356a09" + }, + { + "name": "syft:image:labels:org.opencontainers.image.source", + "value": "https://github.com/juice-shop/juice-shop" + }, + { + "name": "syft:image:labels:org.opencontainers.image.title", + "value": "OWASP Juice Shop" + }, + { + "name": "syft:image:labels:org.opencontainers.image.url", + "value": "https://owasp-juice.shop" + }, + { + "name": "syft:image:labels:org.opencontainers.image.vendor", + "value": "Open Worldwide Application Security Project" + }, + { + "name": "syft:image:labels:org.opencontainers.image.version", + "value": "20.0.0" + } + ] + }, + "components": [ + { + "bom-ref": "pkg:npm/1to2@1.0.0?package-id=3cea2309a653e6ed", + "type": "library", + "author": "Benjamin Byholm (https://github.com/kkoopa/), Mathias Küsel (https://github.com/mathiask88/)", + "name": "1to2", + "version": "1.0.0", + "description": "NAN 1 -> 2 Migration Script", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:nodejs:1to2:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/1to2@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/nodejs/nan.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:1to2:1to2:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/nan/tools/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40adraffy/ens-normalize@1.10.1?package-id=08449108469244be", + "type": "library", + "author": "raffy.eth (http://raffy.antistupid.com)", + "name": "@adraffy/ens-normalize", + "version": "1.10.1", + "description": "Ethereum Name Service (ENS) Name Normalizer", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@adraffy\\/ens-normalize:\\@adraffy\\/ens-normalize:1.10.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40adraffy/ens-normalize@1.10.1", + "externalReferences": [ + { + "url": "git+https://github.com/adraffy/ens-normalize.js.git", + "type": "distribution" + }, + { + "url": "https://github.com/adraffy/ens-normalize.js#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@adraffy\\/ens-normalize:\\@adraffy\\/ens_normalize:1.10.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@adraffy\\/ens_normalize:\\@adraffy\\/ens-normalize:1.10.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@adraffy\\/ens_normalize:\\@adraffy\\/ens_normalize:1.10.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@adraffy\\/ens:\\@adraffy\\/ens-normalize:1.10.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@adraffy\\/ens:\\@adraffy\\/ens_normalize:1.10.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:adraffy:\\@adraffy\\/ens-normalize:1.10.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:adraffy:\\@adraffy\\/ens_normalize:1.10.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@adraffy/ens-normalize/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40ai-sdk/gateway@3.0.114?package-id=58ba8f899e54409f", + "type": "library", + "name": "@ai-sdk/gateway", + "version": "3.0.114", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:\\@ai-sdk\\/gateway:\\@ai-sdk\\/gateway:3.0.114:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40ai-sdk/gateway@3.0.114", + "externalReferences": [ + { + "url": "https://github.com/vercel/ai", + "type": "distribution" + }, + { + "url": "https://ai-sdk.dev/docs", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@ai-sdk\\/gateway:\\@ai_sdk\\/gateway:3.0.114:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@ai_sdk\\/gateway:\\@ai-sdk\\/gateway:3.0.114:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@ai_sdk\\/gateway:\\@ai_sdk\\/gateway:3.0.114:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:vercel:\\@ai-sdk\\/gateway:3.0.114:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:vercel:\\@ai_sdk\\/gateway:3.0.114:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@ai:\\@ai-sdk\\/gateway:3.0.114:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@ai:\\@ai_sdk\\/gateway:3.0.114:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@ai-sdk/gateway/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40ai-sdk/openai-compatible@2.0.47?package-id=7050206931a8a0d7", + "type": "library", + "name": "@ai-sdk/openai-compatible", + "version": "2.0.47", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:\\@ai-sdk\\/openai-compatible:\\@ai-sdk\\/openai-compatible:2.0.47:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40ai-sdk/openai-compatible@2.0.47", + "externalReferences": [ + { + "url": "https://github.com/vercel/ai", + "type": "distribution" + }, + { + "url": "https://ai-sdk.dev/docs", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@ai-sdk\\/openai-compatible:\\@ai_sdk\\/openai_compatible:2.0.47:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@ai_sdk\\/openai_compatible:\\@ai-sdk\\/openai-compatible:2.0.47:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@ai_sdk\\/openai_compatible:\\@ai_sdk\\/openai_compatible:2.0.47:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@ai-sdk\\/openai:\\@ai-sdk\\/openai-compatible:2.0.47:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@ai-sdk\\/openai:\\@ai_sdk\\/openai_compatible:2.0.47:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@ai_sdk\\/openai:\\@ai-sdk\\/openai-compatible:2.0.47:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@ai_sdk\\/openai:\\@ai_sdk\\/openai_compatible:2.0.47:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:vercel:\\@ai-sdk\\/openai-compatible:2.0.47:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:vercel:\\@ai_sdk\\/openai_compatible:2.0.47:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@ai:\\@ai-sdk\\/openai-compatible:2.0.47:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@ai:\\@ai_sdk\\/openai_compatible:2.0.47:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@ai-sdk/openai-compatible/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40ai-sdk/provider@3.0.10?package-id=ddf033d1fcc3a4ce", + "type": "library", + "name": "@ai-sdk/provider", + "version": "3.0.10", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:\\@ai-sdk\\/provider:\\@ai-sdk\\/provider:3.0.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40ai-sdk/provider@3.0.10", + "externalReferences": [ + { + "url": "https://github.com/vercel/ai", + "type": "distribution" + }, + { + "url": "https://ai-sdk.dev/docs", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@ai-sdk\\/provider:\\@ai_sdk\\/provider:3.0.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@ai_sdk\\/provider:\\@ai-sdk\\/provider:3.0.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@ai_sdk\\/provider:\\@ai_sdk\\/provider:3.0.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:vercel:\\@ai-sdk\\/provider:3.0.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:vercel:\\@ai_sdk\\/provider:3.0.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@ai:\\@ai-sdk\\/provider:3.0.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@ai:\\@ai_sdk\\/provider:3.0.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@ai-sdk/provider/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40ai-sdk/provider-utils@4.0.27?package-id=f71eb29e81964317", + "type": "library", + "name": "@ai-sdk/provider-utils", + "version": "4.0.27", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:\\@ai-sdk\\/provider-utils:\\@ai-sdk\\/provider-utils:4.0.27:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40ai-sdk/provider-utils@4.0.27", + "externalReferences": [ + { + "url": "https://github.com/vercel/ai", + "type": "distribution" + }, + { + "url": "https://ai-sdk.dev/docs", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@ai-sdk\\/provider-utils:\\@ai_sdk\\/provider_utils:4.0.27:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@ai_sdk\\/provider_utils:\\@ai-sdk\\/provider-utils:4.0.27:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@ai_sdk\\/provider_utils:\\@ai_sdk\\/provider_utils:4.0.27:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@ai-sdk\\/provider:\\@ai-sdk\\/provider-utils:4.0.27:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@ai-sdk\\/provider:\\@ai_sdk\\/provider_utils:4.0.27:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@ai_sdk\\/provider:\\@ai-sdk\\/provider-utils:4.0.27:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@ai_sdk\\/provider:\\@ai_sdk\\/provider_utils:4.0.27:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:vercel:\\@ai-sdk\\/provider-utils:4.0.27:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:vercel:\\@ai_sdk\\/provider_utils:4.0.27:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@ai:\\@ai-sdk\\/provider-utils:4.0.27:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@ai:\\@ai_sdk\\/provider_utils:4.0.27:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@ai-sdk/provider-utils/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40babel/helper-string-parser@7.27.1?package-id=27b0de0facbfc672", + "type": "library", + "author": "The Babel Team (https://babel.dev/team)", + "name": "@babel/helper-string-parser", + "version": "7.27.1", + "description": "A utility package to parse strings", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-string-parser:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-string-parser@7.27.1", + "externalReferences": [ + { + "url": "https://github.com/babel/babel.git", + "type": "distribution" + }, + { + "url": "https://babel.dev/docs/en/next/babel-helper-string-parser", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-string-parser:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_string_parser:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_string_parser:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-string:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-string:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_string:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_string:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@babel/helper-string-parser/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40babel/helper-validator-identifier@7.28.5?package-id=479dbd661d17b859", + "type": "library", + "author": "The Babel Team (https://babel.dev/team)", + "name": "@babel/helper-validator-identifier", + "version": "7.28.5", + "description": "Validate identifier/keywords name", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/helper-validator-identifier:\\@babel\\/helper-validator-identifier:7.28.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/helper-validator-identifier@7.28.5", + "externalReferences": [ + { + "url": "https://github.com/babel/babel.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-validator-identifier:\\@babel\\/helper_validator_identifier:7.28.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_validator_identifier:\\@babel\\/helper-validator-identifier:7.28.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_validator_identifier:\\@babel\\/helper_validator_identifier:7.28.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-validator:\\@babel\\/helper-validator-identifier:7.28.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper-validator:\\@babel\\/helper_validator_identifier:7.28.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_validator:\\@babel\\/helper-validator-identifier:7.28.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper_validator:\\@babel\\/helper_validator_identifier:7.28.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper-validator-identifier:7.28.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper_validator_identifier:7.28.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/helper-validator-identifier:7.28.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/helper_validator_identifier:7.28.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@babel/helper-validator-identifier/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40babel/parser@7.29.3?package-id=f946fdff20133cb6", + "type": "library", + "author": "The Babel Team (https://babel.dev/team)", + "name": "@babel/parser", + "version": "7.29.3", + "description": "A JavaScript parser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/parser:\\@babel\\/parser:7.29.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/parser@7.29.3", + "externalReferences": [ + { + "url": "https://github.com/babel/babel.git", + "type": "distribution" + }, + { + "url": "https://babel.dev/docs/en/next/babel-parser", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/parser:7.29.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@babel/parser/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40babel/types@7.29.0?package-id=b6b729489b959534", + "type": "library", + "author": "The Babel Team (https://babel.dev/team)", + "name": "@babel/types", + "version": "7.29.0", + "description": "Babel Types is a Lodash-esque utility library for AST nodes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@babel\\/types:\\@babel\\/types:7.29.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40babel/types@7.29.0", + "externalReferences": [ + { + "url": "https://github.com/babel/babel.git", + "type": "distribution" + }, + { + "url": "https://babel.dev/docs/en/next/babel-types", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:\\@babel\\/types:7.29.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@babel/types/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40colors/colors@1.6.0?package-id=2aaa7cc50004f91b", + "type": "library", + "author": "DABH, DABH (https://github.com/DABH)", + "name": "@colors/colors", + "version": "1.6.0", + "description": "get colors in your node.js console", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@colors\\/colors:\\@colors\\/colors:1.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40colors/colors@1.6.0", + "externalReferences": [ + { + "url": "http://github.com/DABH/colors.js.git", + "type": "distribution" + }, + { + "url": "https://github.com/DABH/colors.js", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:DABH:\\@colors\\/colors:1.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/logform/node_modules/@colors/colors/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40colors/colors@1.6.0?package-id=3b8ecc6044fe8e57", + "type": "library", + "author": "DABH, DABH (https://github.com/DABH)", + "name": "@colors/colors", + "version": "1.6.0", + "description": "get colors in your node.js console", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@colors\\/colors:\\@colors\\/colors:1.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40colors/colors@1.6.0", + "externalReferences": [ + { + "url": "http://github.com/DABH/colors.js.git", + "type": "distribution" + }, + { + "url": "https://github.com/DABH/colors.js", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:DABH:\\@colors\\/colors:1.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/winston/node_modules/@colors/colors/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40dabh/diagnostics@2.0.8?package-id=8402a3ee9b2da555", + "type": "library", + "author": "Arnout Kazemier, Martijn Swaagman (https://github.com/swaagie), Jarrett Cruger (https://github.com/jcrugzz), Sevastos (https://github.com/sevastos)", + "name": "@dabh/diagnostics", + "version": "2.0.8", + "description": "Tools for debugging your node.js modules and event loop", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@dabh\\/diagnostics:\\@dabh\\/diagnostics:2.0.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40dabh/diagnostics@2.0.8", + "externalReferences": [ + { + "url": "git://github.com/DABH/diagnostics.git", + "type": "distribution" + }, + { + "url": "https://github.com/DABH/diagnostics", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:DABH:\\@dabh\\/diagnostics:2.0.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@dabh/diagnostics/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40fontsource/roboto@5.2.10?package-id=f1e3cc681fc66fc0", + "type": "library", + "author": "Google Inc.", + "name": "@fontsource/roboto", + "version": "5.2.10", + "description": "Self-host the Roboto font in a neatly bundled NPM package.", + "licenses": [ + { + "license": { + "id": "OFL-1.1" + } + } + ], + "cpe": "cpe:2.3:a:\\@fontsource\\/roboto:\\@fontsource\\/roboto:5.2.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40fontsource/roboto@5.2.10", + "externalReferences": [ + { + "url": "git+https://github.com/fontsource/font-files.git", + "type": "distribution" + }, + { + "url": "https://fontsource.org/fonts/roboto", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@fontsource/roboto/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40gar/promisify@1.1.3?package-id=8e41d6aa1fe261a3", + "type": "library", + "author": "Gar ", + "name": "@gar/promisify", + "version": "1.1.3", + "description": "Promisify an entire class or object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@gar\\/promisify:\\@gar\\/promisify:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40gar/promisify@1.1.3", + "externalReferences": [ + { + "url": "https://github.com/wraithgar/gar-promisify.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wraithgar:\\@gar\\/promisify:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@gar/promisify/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40isaacs/cliui@8.0.2?package-id=1b734807f495fb6f", + "type": "library", + "author": "Ben Coe ", + "name": "@isaacs/cliui", + "version": "8.0.2", + "description": "easily create complex multi-column command-line-interfaces", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@isaacs\\/cliui:\\@isaacs\\/cliui:8.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40isaacs/cliui@8.0.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@isaacs/cliui/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40isaacs/fs-minipass@4.0.1?package-id=0ab257647e45f4d4", + "type": "library", + "author": "Isaac Z. Schlueter", + "name": "@isaacs/fs-minipass", + "version": "4.0.1", + "description": "fs read and write streams based on minipass", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@isaacs\\/fs-minipass:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40isaacs/fs-minipass@4.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/fs-minipass.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@isaacs\\/fs-minipass:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@isaacs\\/fs_minipass:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@isaacs\\/fs_minipass:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@isaacs\\/fs:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@isaacs\\/fs:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@isaacs/fs-minipass/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40material/material-color-utilities@0.3.0?package-id=6720a0856054de8d", + "type": "library", + "author": "Material Eng", + "name": "@material/material-color-utilities", + "version": "0.3.0", + "description": "Algorithms and utilities that power the Material Design 3 (M3) color system, including choosing theme colors from images and creating tones of colors; all in a new color space.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:\\@material\\/material-color-utilities:\\@material\\/material-color-utilities:0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40material/material-color-utilities@0.3.0", + "externalReferences": [ + { + "url": "https://github.com/material-foundation/material-color-utilities.git", + "type": "distribution" + }, + { + "url": "https://github.com/material-foundation/material-color-utilities/tree/main/typescript", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@material\\/material-color-utilities:\\@material\\/material_color_utilities:0.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@material\\/material_color_utilities:\\@material\\/material-color-utilities:0.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@material\\/material_color_utilities:\\@material\\/material_color_utilities:0.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@material\\/material-color:\\@material\\/material-color-utilities:0.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@material\\/material-color:\\@material\\/material_color_utilities:0.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@material\\/material_color:\\@material\\/material-color-utilities:0.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@material\\/material_color:\\@material\\/material_color_utilities:0.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:material-foundation:\\@material\\/material-color-utilities:0.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:material-foundation:\\@material\\/material_color_utilities:0.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@material\\/material:\\@material\\/material-color-utilities:0.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@material\\/material:\\@material\\/material_color_utilities:0.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@material/material-color-utilities/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40my-scope/package-a@0.0.0?package-id=e38f30a540597121", + "type": "library", + "name": "@my-scope/package-a", + "version": "0.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@my-scope\\/package-a:\\@my-scope\\/package-a:0.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40my-scope/package-a@0.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@my-scope\\/package-a:\\@my_scope\\/package_a:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@my_scope\\/package_a:\\@my-scope\\/package-a:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@my_scope\\/package_a:\\@my_scope\\/package_a:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@my-scope\\/package:\\@my-scope\\/package-a:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@my-scope\\/package:\\@my_scope\\/package_a:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@my_scope\\/package:\\@my-scope\\/package-a:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@my_scope\\/package:\\@my_scope\\/package_a:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@my:\\@my-scope\\/package-a:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@my:\\@my_scope\\/package_a:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40my-scope/package-b@0.0.0?package-id=7c30bf5441790ef5", + "type": "library", + "name": "@my-scope/package-b", + "version": "0.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@my-scope\\/package-b:\\@my-scope\\/package-b:0.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40my-scope/package-b@0.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@my-scope\\/package-b:\\@my_scope\\/package_b:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@my_scope\\/package_b:\\@my-scope\\/package-b:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@my_scope\\/package_b:\\@my_scope\\/package_b:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@my-scope\\/package:\\@my-scope\\/package-b:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@my-scope\\/package:\\@my_scope\\/package_b:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@my_scope\\/package:\\@my-scope\\/package-b:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@my_scope\\/package:\\@my_scope\\/package_b:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@my:\\@my-scope\\/package-b:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@my:\\@my_scope\\/package_b:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40noble/curves@1.2.0?package-id=2a40db3b54912cbf", + "type": "library", + "author": "Paul Miller (https://paulmillr.com)", + "name": "@noble/curves", + "version": "1.2.0", + "description": "Audited & minimal JS implementation of elliptic curve cryptography", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@noble\\/curves:\\@noble\\/curves:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40noble/curves@1.2.0", + "externalReferences": [ + { + "url": "https://github.com/paulmillr/noble-curves.git", + "type": "distribution" + }, + { + "url": "https://paulmillr.com/noble/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:paulmillr:\\@noble\\/curves:1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@noble/curves/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40noble/hashes@1.3.2?package-id=46670510cb133f58", + "type": "library", + "author": "Paul Miller (https://paulmillr.com)", + "name": "@noble/hashes", + "version": "1.3.2", + "description": "Audited & minimal 0-dependency JS implementation of SHA2, SHA3, RIPEMD, BLAKE2/3, HMAC, HKDF, PBKDF2, Scrypt", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@noble\\/hashes:\\@noble\\/hashes:1.3.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40noble/hashes@1.3.2", + "externalReferences": [ + { + "url": "https://github.com/paulmillr/noble-hashes.git", + "type": "distribution" + }, + { + "url": "https://paulmillr.com/noble/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:paulmillr:\\@noble\\/hashes:1.3.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@noble/hashes/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40noble/hashes@2.2.0?package-id=f3098e32ab08ad1a", + "type": "library", + "author": "Paul Miller (https://paulmillr.com)", + "name": "@noble/hashes", + "version": "2.2.0", + "description": "Audited & minimal 0-dependency JS implementation of SHA, RIPEMD, BLAKE, HMAC, HKDF, PBKDF & Scrypt", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@noble\\/hashes:\\@noble\\/hashes:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40noble/hashes@2.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/paulmillr/noble-hashes.git", + "type": "distribution" + }, + { + "url": "https://paulmillr.com/noble/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@otplib/plugin-crypto-noble/node_modules/@noble/hashes/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40npmcli/agent@3.0.0?package-id=114921a3f2bc9d12", + "type": "library", + "author": "GitHub Inc.", + "name": "@npmcli/agent", + "version": "3.0.0", + "description": "the http/https agent used by the npm cli", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/agent:\\@npmcli\\/agent:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/agent@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/npm/agent.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/agent#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:\\@npmcli\\/agent:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@npmcli/agent/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40npmcli/fs@1.1.1?package-id=644572bbb1e01679", + "type": "library", + "author": "GitHub Inc.", + "name": "@npmcli/fs", + "version": "1.1.1", + "description": "filesystem utilities for the npm cli", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/fs:\\@npmcli\\/fs:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/fs@1.1.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/@npmcli/fs/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40npmcli/fs@4.0.0?package-id=2f7974422b4dc793", + "type": "library", + "author": "GitHub Inc.", + "name": "@npmcli/fs", + "version": "4.0.0", + "description": "filesystem utilities for the npm cli", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/fs:\\@npmcli\\/fs:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/fs@4.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/npm/fs.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@npmcli/fs/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40npmcli/move-file@1.1.2?package-id=a988a9e98434d4e0", + "type": "library", + "name": "@npmcli/move-file", + "version": "1.1.2", + "description": "move a file (fork of move-file)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@npmcli\\/move-file:\\@npmcli\\/move-file:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40npmcli/move-file@1.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/npm/move-file", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/move-file:\\@npmcli\\/move_file:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/move_file:\\@npmcli\\/move-file:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/move_file:\\@npmcli\\/move_file:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/move:\\@npmcli\\/move-file:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@npmcli\\/move:\\@npmcli\\/move_file:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@npmcli/move-file/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40opentelemetry/api@1.9.1?package-id=cec9eae229b431dd", + "type": "library", + "author": "OpenTelemetry Authors", + "name": "@opentelemetry/api", + "version": "1.9.1", + "description": "Public API for OpenTelemetry", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:\\@opentelemetry\\/api:\\@opentelemetry\\/api:1.9.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40opentelemetry/api@1.9.1", + "externalReferences": [ + { + "url": "https://github.com/open-telemetry/opentelemetry-js/tree/main/api", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:open-telemetry:\\@opentelemetry\\/api:1.9.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@opentelemetry/api/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40otplib/core@13.4.0?package-id=cbb29ecdd13a1687", + "type": "library", + "author": "Gerald Yeo ", + "name": "@otplib/core", + "version": "13.4.0", + "description": "Core interfaces, types, and crypto abstraction for otplib", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@otplib\\/core:\\@otplib\\/core:13.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40otplib/core@13.4.0", + "externalReferences": [ + { + "url": "git+https://github.com/yeojz/otplib.git", + "type": "distribution" + }, + { + "url": "https://otplib.yeojz.dev", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@otplib/core/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40otplib/hotp@13.4.0?package-id=9b8148ea6c71fed4", + "type": "library", + "author": "Gerald Yeo ", + "name": "@otplib/hotp", + "version": "13.4.0", + "description": "RFC 4226 HOTP implementation for otplib", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@otplib\\/hotp:\\@otplib\\/hotp:13.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40otplib/hotp@13.4.0", + "externalReferences": [ + { + "url": "git+https://github.com/yeojz/otplib.git", + "type": "distribution" + }, + { + "url": "https://otplib.yeojz.dev", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@otplib/hotp/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40otplib/plugin-base32-scure@13.4.0?package-id=a47960048d5c6e0f", + "type": "library", + "author": "Gerald Yeo ", + "name": "@otplib/plugin-base32-scure", + "version": "13.4.0", + "description": "Base32 plugin for otplib using @scure/base", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@otplib\\/plugin-base32-scure:\\@otplib\\/plugin-base32-scure:13.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40otplib/plugin-base32-scure@13.4.0", + "externalReferences": [ + { + "url": "git+https://github.com/yeojz/otplib.git", + "type": "distribution" + }, + { + "url": "https://otplib.yeojz.dev", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@otplib\\/plugin-base32-scure:\\@otplib\\/plugin_base32_scure:13.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@otplib\\/plugin_base32_scure:\\@otplib\\/plugin-base32-scure:13.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@otplib\\/plugin_base32_scure:\\@otplib\\/plugin_base32_scure:13.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@otplib\\/plugin-base32:\\@otplib\\/plugin-base32-scure:13.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@otplib\\/plugin-base32:\\@otplib\\/plugin_base32_scure:13.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@otplib\\/plugin_base32:\\@otplib\\/plugin-base32-scure:13.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@otplib\\/plugin_base32:\\@otplib\\/plugin_base32_scure:13.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@otplib\\/plugin:\\@otplib\\/plugin-base32-scure:13.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@otplib\\/plugin:\\@otplib\\/plugin_base32_scure:13.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@otplib/plugin-base32-scure/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40otplib/plugin-crypto-noble@13.4.0?package-id=4d1b6166fb37fae8", + "type": "library", + "author": "Gerald Yeo ", + "name": "@otplib/plugin-crypto-noble", + "version": "13.4.0", + "description": "Pure JavaScript crypto implementation using noble-hashes for otplib", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@otplib\\/plugin-crypto-noble:\\@otplib\\/plugin-crypto-noble:13.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40otplib/plugin-crypto-noble@13.4.0", + "externalReferences": [ + { + "url": "git+https://github.com/yeojz/otplib.git", + "type": "distribution" + }, + { + "url": "https://otplib.yeojz.dev", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@otplib\\/plugin-crypto-noble:\\@otplib\\/plugin_crypto_noble:13.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@otplib\\/plugin_crypto_noble:\\@otplib\\/plugin-crypto-noble:13.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@otplib\\/plugin_crypto_noble:\\@otplib\\/plugin_crypto_noble:13.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@otplib\\/plugin-crypto:\\@otplib\\/plugin-crypto-noble:13.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@otplib\\/plugin-crypto:\\@otplib\\/plugin_crypto_noble:13.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@otplib\\/plugin_crypto:\\@otplib\\/plugin-crypto-noble:13.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@otplib\\/plugin_crypto:\\@otplib\\/plugin_crypto_noble:13.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@otplib\\/plugin:\\@otplib\\/plugin-crypto-noble:13.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@otplib\\/plugin:\\@otplib\\/plugin_crypto_noble:13.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@otplib/plugin-crypto-noble/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40otplib/totp@13.4.0?package-id=a1c0314d0d8a9007", + "type": "library", + "author": "Gerald Yeo ", + "name": "@otplib/totp", + "version": "13.4.0", + "description": "RFC 6238 TOTP implementation for otplib", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@otplib\\/totp:\\@otplib\\/totp:13.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40otplib/totp@13.4.0", + "externalReferences": [ + { + "url": "git+https://github.com/yeojz/otplib.git", + "type": "distribution" + }, + { + "url": "https://otplib.yeojz.dev", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@otplib/totp/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40otplib/uri@13.4.0?package-id=6133631980d96c3a", + "type": "library", + "author": "Gerald Yeo ", + "name": "@otplib/uri", + "version": "13.4.0", + "description": "otpauth:// URI parsing and generation for otplib", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@otplib\\/uri:\\@otplib\\/uri:13.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40otplib/uri@13.4.0", + "externalReferences": [ + { + "url": "git+https://github.com/yeojz/otplib.git", + "type": "distribution" + }, + { + "url": "https://otplib.yeojz.dev", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@otplib/uri/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40pkgjs/parseargs@0.11.0?package-id=80ef1a2248d5a920", + "type": "library", + "name": "@pkgjs/parseargs", + "version": "0.11.0", + "description": "Polyfill of future proposal for `util.parseArgs()`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@pkgjs\\/parseargs:\\@pkgjs\\/parseargs:0.11.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40pkgjs/parseargs@0.11.0", + "externalReferences": [ + { + "url": "https://github.com/pkgjs/parseargs#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pkgjs:\\@pkgjs\\/parseargs:0.11.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@pkgjs/parseargs/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40scarf/scarf@1.4.0?package-id=19e6077d1014f2df", + "type": "library", + "author": "Scarf Systems", + "name": "@scarf/scarf", + "version": "1.4.0", + "description": "Scarf is like Google Analytics for your npm packages. Gain insights into how your packages are installed and used, and by which companies.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:\\@scarf\\/scarf:\\@scarf\\/scarf:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40scarf/scarf@1.4.0", + "externalReferences": [ + { + "url": "git+https://github.com/scarf-sh/scarf-js.git", + "type": "distribution" + }, + { + "url": "https://github.com/scarf-sh/scarf-js", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:scarf-sh:\\@scarf\\/scarf:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@scarf/scarf/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40scure/base@2.2.0?package-id=ee108a8614147fd3", + "type": "library", + "author": "Paul Miller (https://paulmillr.com)", + "name": "@scure/base", + "version": "2.2.0", + "description": "Secure, audited & 0-dep implementation of base64, bech32, base58, base32 & base16", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@scure\\/base:\\@scure\\/base:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40scure/base@2.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/paulmillr/scure-base.git", + "type": "distribution" + }, + { + "url": "https://paulmillr.com/noble/#scure", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@scure/base/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40sindresorhus/is@0.7.0?package-id=a29ebe9c01a24b05", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "@sindresorhus/is", + "version": "0.7.0", + "description": "Type check values: `is.string('🦄') //=> true`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@sindresorhus\\/is:\\@sindresorhus\\/is:0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40sindresorhus/is@0.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@sindresorhus/is/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40so-ric/colorspace@1.1.6?package-id=17777e0ca19ea47c", + "type": "library", + "author": "Arnout Kazemier", + "name": "@so-ric/colorspace", + "version": "1.1.6", + "description": "Generate HEX colors for a given namespace using color v5", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@so-ric\\/colorspace:\\@so-ric\\/colorspace:1.1.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40so-ric/colorspace@1.1.6", + "externalReferences": [ + { + "url": "https://github.com/so-ric/colorspace", + "type": "distribution" + }, + { + "url": "https://github.com/so-ric/colorspace", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@so-ric\\/colorspace:\\@so_ric\\/colorspace:1.1.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@so_ric\\/colorspace:\\@so-ric\\/colorspace:1.1.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@so_ric\\/colorspace:\\@so_ric\\/colorspace:1.1.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:so-ric:\\@so-ric\\/colorspace:1.1.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:so-ric:\\@so_ric\\/colorspace:1.1.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@so:\\@so-ric\\/colorspace:1.1.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@so:\\@so_ric\\/colorspace:1.1.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@so-ric/colorspace/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40standard-schema/spec@1.1.0?package-id=e5e6f6143a3e5536", + "type": "library", + "author": "Colin McDonnell", + "name": "@standard-schema/spec", + "version": "1.1.0", + "description": "A family of specs for interoperable TypeScript", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@standard-schema\\/spec:\\@standard-schema\\/spec:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40standard-schema/spec@1.1.0", + "externalReferences": [ + { + "url": "https://github.com/standard-schema/standard-schema", + "type": "distribution" + }, + { + "url": "https://standardschema.dev", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@standard-schema\\/spec:\\@standard_schema\\/spec:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@standard_schema\\/spec:\\@standard-schema\\/spec:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@standard_schema\\/spec:\\@standard_schema\\/spec:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:standard-schema:\\@standard-schema\\/spec:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:standard-schema:\\@standard_schema\\/spec:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@standard:\\@standard-schema\\/spec:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@standard:\\@standard_schema\\/spec:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@standard-schema/spec/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40swc/helpers@0.3.17?package-id=079d0d4fdf762801", + "type": "library", + "author": "강동윤 ", + "name": "@swc/helpers", + "version": "0.3.17", + "description": "External helpers for the swc project.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@swc\\/helpers:\\@swc\\/helpers:0.3.17:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40swc/helpers@0.3.17", + "externalReferences": [ + { + "url": "git+https://github.com/swc-project/swc.git", + "type": "distribution" + }, + { + "url": "https://swc.rs", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@swc/helpers/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40tokenizer/token@0.3.0?package-id=43352d2f6855caf1", + "type": "library", + "author": "Borewit (https://github.com/Borewit)", + "name": "@tokenizer/token", + "version": "0.3.0", + "description": "TypeScript definition for strtok3 token", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@tokenizer\\/token:\\@tokenizer\\/token:0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40tokenizer/token@0.3.0", + "externalReferences": [ + { + "url": "https://github.com/Borewit/tokenizer-token.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Borewit:\\@tokenizer\\/token:0.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@tokenizer/token/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40tootallnate/once@1.1.2?package-id=eeeda4243db3c868", + "type": "library", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "@tootallnate/once", + "version": "1.1.2", + "description": "Creates a Promise that waits for a single event", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@tootallnate\\/once:\\@tootallnate\\/once:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40tootallnate/once@1.1.2", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/once.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:TooTallNate:\\@tootallnate\\/once:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@tootallnate/once/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40types/component-emitter@1.2.14?package-id=ae93160dfc27d07c", + "type": "library", + "author": "Peter Snider (https://github.com/psnider)", + "name": "@types/component-emitter", + "version": "1.2.14", + "description": "TypeScript definitions for component-emitter", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/component-emitter:\\@types\\/component-emitter:1.2.14:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/component-emitter@1.2.14", + "externalReferences": [ + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git", + "type": "distribution" + }, + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/component-emitter", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@types\\/component-emitter:\\@types\\/component_emitter:1.2.14:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@types\\/component_emitter:\\@types\\/component-emitter:1.2.14:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@types\\/component_emitter:\\@types\\/component_emitter:1.2.14:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@types\\/component:\\@types\\/component-emitter:1.2.14:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@types\\/component:\\@types\\/component_emitter:1.2.14:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/component-emitter:1.2.14:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/component_emitter:1.2.14:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@types/component-emitter/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40types/cookie@0.4.1?package-id=1339467e13b5c752", + "type": "library", + "author": "Pine Mizune (https://github.com/pine), Piotr Błażejewicz (https://github.com/peterblazejewicz)", + "name": "@types/cookie", + "version": "0.4.1", + "description": "TypeScript definitions for cookie", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/cookie:0.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/cookie@0.4.1", + "externalReferences": [ + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git", + "type": "distribution" + }, + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/cookie", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@types\\/cookie:\\@types\\/cookie:0.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@types/cookie/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40types/cors@2.8.19?package-id=bc4bb778990d4ea4", + "type": "library", + "author": "Alan Plum (https://github.com/pluma), Gaurav Sharma (https://github.com/gtpan77), Sebastian Beltran (https://github.com/bjohansebas)", + "name": "@types/cors", + "version": "2.8.19", + "description": "TypeScript definitions for cors", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/cors:2.8.19:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/cors@2.8.19", + "externalReferences": [ + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git", + "type": "distribution" + }, + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/cors", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@types\\/cors:\\@types\\/cors:2.8.19:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@types/cors/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40types/debug@4.1.13?package-id=b2c0dc194c1425e6", + "type": "library", + "author": "Seon-Wook Park (https://github.com/swook), Gal Talmor (https://github.com/galtalmor), John McLaughlin (https://github.com/zamb3zi), Brasten Sager (https://github.com/brasten), Nicolas Penin (https://github.com/npenin), Kristian Brünn (https://github.com/kristianmitk), Caleb Gregory (https://github.com/calebgregory)", + "name": "@types/debug", + "version": "4.1.13", + "description": "TypeScript definitions for debug", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/debug:4.1.13:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/debug@4.1.13", + "externalReferences": [ + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git", + "type": "distribution" + }, + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/debug", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@types\\/debug:\\@types\\/debug:4.1.13:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@types/debug/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40types/ms@2.1.0?package-id=495a18008d72fd0f", + "type": "library", + "author": "Zhiyuan Wang (https://github.com/danny8002)", + "name": "@types/ms", + "version": "2.1.0", + "description": "TypeScript definitions for ms", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/ms:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/ms@2.1.0", + "externalReferences": [ + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git", + "type": "distribution" + }, + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/ms", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@types\\/ms:\\@types\\/ms:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@types/ms/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40types/node@20.19.41?package-id=507abdbdc4dc5589", + "type": "library", + "author": "Microsoft TypeScript (https://github.com/Microsoft), Alberto Schiabel (https://github.com/jkomyno), Andrew Makarov (https://github.com/r3nya), Benjamin Toueg (https://github.com/btoueg), David Junger (https://github.com/touffy), Mohsen Azimi (https://github.com/mohsen1), Nikita Galkin (https://github.com/galkin), Sebastian Silbermann (https://github.com/eps1lon), Wilco Bakker (https://github.com/WilcoBakker), Marcin Kopacz (https://github.com/chyzwar), Trivikram Kamat (https://github.com/trivikr), Junxiao Shi (https://github.com/yoursunny), Ilia Baryshnikov (https://github.com/qwelias), ExE Boss (https://github.com/ExE-Boss), Piotr Błażejewicz (https://github.com/peterblazejewicz), Anna Henningsen (https://github.com/addaleax), Victor Perin (https://github.com/victorperin), NodeJS Contributors (https://github.com/NodeJS), Linus Unnebäck (https://github.com/LinusU), wafuwafu13 (https://github.com/wafuwafu13), Matteo Collina (https://github.com/mcollina), Dmitry Semigradsky (https://github.com/Semigradsky)", + "name": "@types/node", + "version": "20.19.41", + "description": "TypeScript definitions for node", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/node:20.19.41:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/node@20.19.41", + "externalReferences": [ + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git", + "type": "distribution" + }, + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@types\\/node:\\@types\\/node:20.19.41:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@types/node/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40types/node@22.7.5?package-id=6fe716e8b0927a9d", + "type": "library", + "author": "Microsoft TypeScript (https://github.com/Microsoft), Alberto Schiabel (https://github.com/jkomyno), Alvis HT Tang (https://github.com/alvis), Andrew Makarov (https://github.com/r3nya), Benjamin Toueg (https://github.com/btoueg), Chigozirim C. (https://github.com/smac89), David Junger (https://github.com/touffy), Deividas Bakanas (https://github.com/DeividasBakanas), Eugene Y. Q. Shen (https://github.com/eyqs), Hannes Magnusson (https://github.com/Hannes-Magnusson-CK), Huw (https://github.com/hoo29), Kelvin Jin (https://github.com/kjin), Klaus Meinhardt (https://github.com/ajafff), Lishude (https://github.com/islishude), Mariusz Wiktorczyk (https://github.com/mwiktorczyk), Mohsen Azimi (https://github.com/mohsen1), Nikita Galkin (https://github.com/galkin), Parambir Singh (https://github.com/parambirs), Sebastian Silbermann (https://github.com/eps1lon), Thomas den Hollander (https://github.com/ThomasdenH), Wilco Bakker (https://github.com/WilcoBakker), wwwy3y3 (https://github.com/wwwy3y3), Samuel Ainsworth (https://github.com/samuela), Kyle Uehlein (https://github.com/kuehlein), Thanik Bhongbhibhat (https://github.com/bhongy), Marcin Kopacz (https://github.com/chyzwar), Trivikram Kamat (https://github.com/trivikr), Junxiao Shi (https://github.com/yoursunny), Ilia Baryshnikov (https://github.com/qwelias), ExE Boss (https://github.com/ExE-Boss), Piotr Błażejewicz (https://github.com/peterblazejewicz), Anna Henningsen (https://github.com/addaleax), Victor Perin (https://github.com/victorperin), Yongsheng Zhang (https://github.com/ZYSzys), NodeJS Contributors (https://github.com/NodeJS), Linus Unnebäck (https://github.com/LinusU), wafuwafu13 (https://github.com/wafuwafu13), Matteo Collina (https://github.com/mcollina), Dmitry Semigradsky (https://github.com/Semigradsky)", + "name": "@types/node", + "version": "22.7.5", + "description": "TypeScript definitions for node", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/node:22.7.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/node@22.7.5", + "externalReferences": [ + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git", + "type": "distribution" + }, + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@types\\/node:\\@types\\/node:22.7.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/ethers/node_modules/@types/node/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40types/triple-beam@1.3.5?package-id=3e3be5c397de8382", + "type": "library", + "author": "Daniel Byrne (https://github.com/danwbyrne)", + "name": "@types/triple-beam", + "version": "1.3.5", + "description": "TypeScript definitions for triple-beam", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/triple-beam:\\@types\\/triple-beam:1.3.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/triple-beam@1.3.5", + "externalReferences": [ + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git", + "type": "distribution" + }, + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/triple-beam", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@types\\/triple-beam:\\@types\\/triple_beam:1.3.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@types\\/triple_beam:\\@types\\/triple-beam:1.3.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@types\\/triple_beam:\\@types\\/triple_beam:1.3.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/triple-beam:1.3.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/triple_beam:1.3.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@types\\/triple:\\@types\\/triple-beam:1.3.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:\\@types\\/triple:\\@types\\/triple_beam:1.3.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@types/triple-beam/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40types/validator@13.15.10?package-id=361105c50aa24065", + "type": "library", + "author": "tgfjt (https://github.com/tgfjt), Ilya Mochalov (https://github.com/chrootsu), Ayman Nedjmeddine (https://github.com/IOAyman), Louay Alakkad (https://github.com/louy), Bonggyun Lee (https://github.com/deptno), Naoto Yokoyama (https://github.com/builtinnya), Philipp Katz (https://github.com/qqilihq), Jace Warren (https://github.com/keatz55), Vlad Poluch (https://github.com/vlapo), Piotr Błażejewicz (https://github.com/peterblazejewicz), Matteo Nista (https://github.com/Mattewn99), Daniel Freire (https://github.com/dcfreire), Rik Smale (https://github.com/WikiRik)", + "name": "@types/validator", + "version": "13.15.10", + "description": "TypeScript definitions for validator", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:\\@types\\/validator:\\@types\\/validator:13.15.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40types/validator@13.15.10", + "externalReferences": [ + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git", + "type": "distribution" + }, + { + "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/validator", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/validator:13.15.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@types/validator/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/%40vercel/oidc@3.2.0?package-id=aa9ae944ca729d3f", + "type": "library", + "name": "@vercel/oidc", + "version": "3.2.0", + "description": "Runtime OIDC helpers intended for use with Vercel Functions", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:\\@vercel\\/oidc:\\@vercel\\/oidc:3.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/%40vercel/oidc@3.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/vercel/vercel.git", + "type": "distribution" + }, + { + "url": "https://vercel.com", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@vercel/oidc/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/abbrev@1.1.1?package-id=7797aed52ef29847", + "type": "library", + "author": "Isaac Z. Schlueter ", + "name": "abbrev", + "version": "1.1.1", + "description": "Like ruby's abbrev module, but in js", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:abbrev:abbrev:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/abbrev@1.1.1", + "externalReferences": [ + { + "url": "http://github.com/isaacs/abbrev-js", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:abbrev:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/abbrev/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/abbrev@3.0.1?package-id=bfcf5eaa5daa3133", + "type": "library", + "author": "GitHub Inc.", + "name": "abbrev", + "version": "3.0.1", + "description": "Like ruby's abbrev module, but in js", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:abbrev:abbrev:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/abbrev@3.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/abbrev-js.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/node-gyp/node_modules/abbrev/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/abort-controller@3.0.0?package-id=7832aa1cacf310b2", + "type": "library", + "author": "Toru Nagashima (https://github.com/mysticatea)", + "name": "abort-controller", + "version": "3.0.0", + "description": "An implementation of WHATWG AbortController interface.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:abort-controller:abort-controller:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/abort-controller@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/mysticatea/abort-controller.git", + "type": "distribution" + }, + { + "url": "https://github.com/mysticatea/abort-controller#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:abort-controller:abort_controller:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:abort_controller:abort-controller:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:abort_controller:abort_controller:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mysticatea:abort-controller:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mysticatea:abort_controller:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:abort:abort-controller:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:abort:abort_controller:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/abort-controller/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/accepts@1.3.8?package-id=fe1f2ff03fb9475c", + "type": "library", + "author": "Douglas Christopher Wilson , Jonathan Ong (http://jongleberry.com)", + "name": "accepts", + "version": "1.3.8", + "description": "Higher-level content negotiation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:accepts:accepts:1.3.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/accepts@1.3.8", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/accepts/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/acorn@7.4.1?package-id=c0f7127acbceb420", + "type": "library", + "author": "Marijn Haverbeke , Ingvar Stepanyan , Adrian Heine", + "name": "acorn", + "version": "7.4.1", + "description": "ECMAScript parser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:acornjs:acorn:7.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/acorn@7.4.1", + "externalReferences": [ + { + "url": "https://github.com/acornjs/acorn.git", + "type": "distribution" + }, + { + "url": "https://github.com/acornjs/acorn", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:acorn:acorn:7.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-expression/node_modules/acorn/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/aes-js@4.0.0-beta.5?package-id=6ad4b0036eebc3a0", + "type": "library", + "author": "Richard Moore ", + "name": "aes-js", + "version": "4.0.0-beta.5", + "description": "A pure JavaScript implementation of the AES block cipher and all common modes of operation.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:aes-js:aes-js:4.0.0-beta.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/aes-js@4.0.0-beta.5", + "externalReferences": [ + { + "url": "git://github.com/ricmoo/aes-js.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aes-js:aes_js:4.0.0-beta.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aes_js:aes-js:4.0.0-beta.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aes_js:aes_js:4.0.0-beta.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ricmoo:aes-js:4.0.0-beta.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ricmoo:aes_js:4.0.0-beta.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aes:aes-js:4.0.0-beta.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aes:aes_js:4.0.0-beta.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/aes-js/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/agent-base@6.0.2?package-id=51a9723b91dc3bb1", + "type": "library", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "agent-base", + "version": "6.0.2", + "description": "Turn a function into an `http.Agent` instance", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:TooTallNate:agent-base:6.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/agent-base@6.0.2", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-agent-base.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:TooTallNate:agent_base:6.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:agent-base:agent-base:6.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:agent-base:agent_base:6.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:agent_base:agent-base:6.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:agent_base:agent_base:6.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:agent:agent-base:6.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:agent:agent_base:6.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/agent-base/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/agent-base@7.1.4?package-id=0dfda7c3870cf8f4", + "type": "library", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "agent-base", + "version": "7.1.4", + "description": "Turn a function into an `http.Agent` instance", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:TooTallNate:agent-base:7.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/agent-base@7.1.4", + "externalReferences": [ + { + "url": "https://github.com/TooTallNate/proxy-agents.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:TooTallNate:agent_base:7.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:agent-base:agent-base:7.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:agent-base:agent_base:7.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:agent_base:agent-base:7.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:agent_base:agent_base:7.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:agent:agent-base:7.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:agent:agent_base:7.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/agent-base/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/agentkeepalive@4.6.0?package-id=c6a7724321f5beae", + "type": "library", + "author": "fengmk2 (https://github.com/fengmk2)", + "name": "agentkeepalive", + "version": "4.6.0", + "description": "Missing keepalive http.Agent", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:agentkeepalive:agentkeepalive:4.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/agentkeepalive@4.6.0", + "externalReferences": [ + { + "url": "git://github.com/node-modules/agentkeepalive.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node-modules:agentkeepalive:4.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/agentkeepalive/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/aggregate-error@3.1.0?package-id=7cedce27af4fa8d6", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "aggregate-error", + "version": "3.1.0", + "description": "Create an error from multiple errors", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:aggregate-error:aggregate-error:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aggregate-error@3.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aggregate-error:aggregate_error:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aggregate_error:aggregate-error:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aggregate_error:aggregate_error:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aggregate:aggregate-error:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aggregate:aggregate_error:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/aggregate-error/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ai@6.0.180?package-id=46d6f2a266f873e3", + "type": "library", + "name": "ai", + "version": "6.0.180", + "description": "AI SDK by Vercel - build apps like ChatGPT, Claude, Gemini, and more with a single interface for any model using the Vercel AI Gateway or go direct to OpenAI, Anthropic, Google, or any other model provider.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:vercel:ai:6.0.180:*:*:*:*:*:*:*", + "purl": "pkg:npm/ai@6.0.180", + "externalReferences": [ + { + "url": "https://github.com/vercel/ai", + "type": "distribution" + }, + { + "url": "https://ai-sdk.dev/docs", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ai:ai:6.0.180:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/ai/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ansi-regex@2.1.1?package-id=ba5607392e56dee9", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com), Sindre Sorhus (sindresorhus.com), Joshua Appelman (jbnicolai.com), JD Ballard (github.com/qix-)", + "name": "ansi-regex", + "version": "2.1.1", + "description": "Regular expression for matching ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-regex_project:ansi-regex:2.1.1:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/ansi-regex@2.1.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/gauge/node_modules/ansi-regex/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ansi-regex@2.1.1?package-id=2b280fc78a93d0b1", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com), Sindre Sorhus (sindresorhus.com), Joshua Appelman (jbnicolai.com), JD Ballard (github.com/qix-)", + "name": "ansi-regex", + "version": "2.1.1", + "description": "Regular expression for matching ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-regex_project:ansi-regex:2.1.1:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/ansi-regex@2.1.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/grunt-contrib-compress/node_modules/ansi-regex/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ansi-regex@2.1.1?package-id=b93db3f55b850b14", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com), Sindre Sorhus (sindresorhus.com), Joshua Appelman (jbnicolai.com), JD Ballard (github.com/qix-)", + "name": "ansi-regex", + "version": "2.1.1", + "description": "Regular expression for matching ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-regex_project:ansi-regex:2.1.1:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/ansi-regex@2.1.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/has-ansi/node_modules/ansi-regex/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ansi-regex@3.0.1?package-id=dddd120589f7009b", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-regex", + "version": "3.0.1", + "description": "Regular expression for matching ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-regex_project:ansi-regex:3.0.1:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/ansi-regex@3.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/wide-align/node_modules/ansi-regex/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ansi-regex@5.0.1?package-id=215b7da2acde9858", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-regex", + "version": "5.0.1", + "description": "Regular expression for matching ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-regex_project:ansi-regex:5.0.1:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/ansi-regex@5.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/ansi-regex/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ansi-regex@6.2.2?package-id=836bae2338a59355", + "type": "library", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "ansi-regex", + "version": "6.2.2", + "description": "Regular expression for matching ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-regex_project:ansi-regex:6.2.2:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/ansi-regex@6.2.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@isaacs/cliui/node_modules/ansi-regex/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ansi-regex@6.2.2?package-id=02cdd6725ca2a358", + "type": "library", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "ansi-regex", + "version": "6.2.2", + "description": "Regular expression for matching ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-regex_project:ansi-regex:6.2.2:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/ansi-regex@6.2.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/wrap-ansi/node_modules/ansi-regex/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ansi-styles@2.2.1?package-id=65b4c3eb14b71ee6", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com), Sindre Sorhus (sindresorhus.com), Joshua Appelman (jbnicolai.com)", + "name": "ansi-styles", + "version": "2.2.1", + "description": "ANSI escape codes for styling strings in the terminal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:2.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-styles@2.2.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi-styles:ansi_styles:2.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi_styles:ansi-styles:2.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi_styles:ansi_styles:2.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi:ansi-styles:2.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi:ansi_styles:2.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/grunt-contrib-compress/node_modules/ansi-styles/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ansi-styles@3.2.1?package-id=f879ff424c2ec284", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-styles", + "version": "3.2.1", + "description": "ANSI escape codes for styling strings in the terminal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:3.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-styles@3.2.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi-styles:ansi_styles:3.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi_styles:ansi-styles:3.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi_styles:ansi_styles:3.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi:ansi-styles:3.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi:ansi_styles:3.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/ansi-styles/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ansi-styles@4.3.0?package-id=c3f3679aac65318b", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-styles", + "version": "4.3.0", + "description": "ANSI escape codes for styling strings in the terminal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:4.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-styles@4.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi-styles:ansi_styles:4.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi_styles:ansi-styles:4.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi_styles:ansi_styles:4.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi:ansi-styles:4.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi:ansi_styles:4.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/ansi-styles/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ansi-styles@4.3.0?package-id=c365b03d53f8ca80", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-styles", + "version": "4.3.0", + "description": "ANSI escape codes for styling strings in the terminal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:4.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-styles@4.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi-styles:ansi_styles:4.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi_styles:ansi-styles:4.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi_styles:ansi_styles:4.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi:ansi-styles:4.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi:ansi_styles:4.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/replace/node_modules/ansi-styles/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ansi-styles@4.3.0?package-id=f3dee5a49bb85e72", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "ansi-styles", + "version": "4.3.0", + "description": "ANSI escape codes for styling strings in the terminal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:4.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-styles@4.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi-styles:ansi_styles:4.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi_styles:ansi-styles:4.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi_styles:ansi_styles:4.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi:ansi-styles:4.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi:ansi_styles:4.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/wrap-ansi-cjs/node_modules/ansi-styles/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ansi-styles@6.2.3?package-id=c9c45ead032034a0", + "type": "library", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "ansi-styles", + "version": "6.2.3", + "description": "ANSI escape codes for styling strings in the terminal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:6.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/ansi-styles@6.2.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi-styles:ansi_styles:6.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi_styles:ansi-styles:6.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi_styles:ansi_styles:6.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi:ansi-styles:6.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ansi:ansi_styles:6.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/wrap-ansi/node_modules/ansi-styles/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/append-field@1.0.0?package-id=40d1f9967f309c48", + "type": "library", + "author": "Linus Unnebäck ", + "name": "append-field", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:append-field:append-field:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/append-field@1.0.0", + "externalReferences": [ + { + "url": "http://github.com/LinusU/node-append-field.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:append-field:append_field:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:append_field:append-field:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:append_field:append_field:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:LinusU:append-field:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:LinusU:append_field:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:append:append-field:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:append:append_field:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/append-field/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/aproba@1.2.0?package-id=81de4b22dbb401d0", + "type": "library", + "author": "Rebecca Turner ", + "name": "aproba", + "version": "1.2.0", + "description": "A ridiculously light-weight argument validator (now browser friendly)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:aproba:aproba:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/aproba@1.2.0", + "externalReferences": [ + { + "url": "https://github.com/iarna/aproba", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/aproba", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iarna:aproba:1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/aproba/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/archive-type@4.0.0?package-id=3fb8ce78823b4311", + "type": "library", + "author": "Kevin Mårtensson (https://github.com/kevva)", + "name": "archive-type", + "version": "4.0.0", + "description": "Detect the archive type of a Buffer/Uint8Array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:archive-type:archive-type:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/archive-type@4.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:archive-type:archive_type:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:archive_type:archive-type:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:archive_type:archive_type:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:archive:archive-type:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:archive:archive_type:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/archive-type/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/archiver@1.3.0?package-id=dec4b5088a113d49", + "type": "library", + "author": "Chris Talkington (http://christalkington.com/)", + "name": "archiver", + "version": "1.3.0", + "description": "a streaming interface for archive generation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:archiverjs:archiver:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/archiver@1.3.0", + "externalReferences": [ + { + "url": "https://github.com/archiverjs/node-archiver.git", + "type": "distribution" + }, + { + "url": "https://github.com/archiverjs/node-archiver", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:archiver:archiver:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/archiver/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/archiver-utils@1.3.0?package-id=35ab1a4a9ad1f907", + "type": "library", + "author": "Chris Talkington (http://christalkington.com/)", + "name": "archiver-utils", + "version": "1.3.0", + "description": "utility functions for archiver", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:archiver-utils:archiver-utils:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/archiver-utils@1.3.0", + "externalReferences": [ + { + "url": "https://github.com/archiverjs/archiver-utils.git", + "type": "distribution" + }, + { + "url": "https://github.com/archiverjs/archiver-utils#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:archiver-utils:archiver_utils:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:archiver_utils:archiver-utils:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:archiver_utils:archiver_utils:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:archiverjs:archiver-utils:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:archiverjs:archiver_utils:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:archiver:archiver-utils:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:archiver:archiver_utils:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/archiver-utils/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/are-we-there-yet@1.1.7?package-id=38e39a5c3788e5c4", + "type": "library", + "author": "Rebecca Turner (http://re-becca.org)", + "name": "are-we-there-yet", + "version": "1.1.7", + "description": "Keep track of the overall completion of many disparate processes", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:are-we-there-yet:are-we-there-yet:1.1.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/are-we-there-yet@1.1.7", + "externalReferences": [ + { + "url": "https://github.com/iarna/are-we-there-yet.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/are-we-there-yet", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are-we-there-yet:are_we_there_yet:1.1.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are_we_there_yet:are-we-there-yet:1.1.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are_we_there_yet:are_we_there_yet:1.1.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are-we-there:are-we-there-yet:1.1.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are-we-there:are_we_there_yet:1.1.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are_we_there:are-we-there-yet:1.1.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are_we_there:are_we_there_yet:1.1.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are-we:are-we-there-yet:1.1.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are-we:are_we_there_yet:1.1.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are_we:are-we-there-yet:1.1.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are_we:are_we_there_yet:1.1.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iarna:are-we-there-yet:1.1.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iarna:are_we_there_yet:1.1.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are:are-we-there-yet:1.1.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are:are_we_there_yet:1.1.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/are-we-there-yet/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/are-we-there-yet@3.0.1?package-id=a1e5dbdcb445cc0b", + "type": "library", + "author": "GitHub Inc.", + "name": "are-we-there-yet", + "version": "3.0.1", + "description": "Keep track of the overall completion of many disparate processes", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:are-we-there-yet:are-we-there-yet:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/are-we-there-yet@3.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/are-we-there-yet.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/are-we-there-yet", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are-we-there-yet:are_we_there_yet:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are_we_there_yet:are-we-there-yet:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are_we_there_yet:are_we_there_yet:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are-we-there:are-we-there-yet:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are-we-there:are_we_there_yet:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are_we_there:are-we-there-yet:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are_we_there:are_we_there_yet:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are-we:are-we-there-yet:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are-we:are_we_there_yet:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are_we:are-we-there-yet:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are_we:are_we_there_yet:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are:are-we-there-yet:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:are:are_we_there_yet:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:are-we-there-yet:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:are_we_there_yet:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/are-we-there-yet/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/argparse@1.0.10?package-id=d60313d70eaae47d", + "type": "library", + "author": "Eugene Shkuropat, Paul Jacobson", + "name": "argparse", + "version": "1.0.10", + "description": "Very powerful CLI arguments parser. Native port of argparse - python's options parsing library", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:argparse:argparse:1.0.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/argparse@1.0.10", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/argparse/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/array-buffer-byte-length@1.0.2?package-id=f2867470e7b27597", + "type": "library", + "author": "Jordan Harband ", + "name": "array-buffer-byte-length", + "version": "1.0.2", + "description": "Get the byte length of an ArrayBuffer, even in engines without a `.byteLength` method.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:array-buffer-byte-length:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/array-buffer-byte-length@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/inspect-js/array-buffer-byte-length.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/array-buffer-byte-length#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:array-buffer-byte-length:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:array_buffer_byte_length:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:array_buffer_byte_length:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:array-buffer-byte:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:array-buffer-byte:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:array_buffer_byte:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:array_buffer_byte:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:array-buffer:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:array-buffer:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:array_buffer:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:array_buffer:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:array:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:array:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/array-buffer-byte-length/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/array-each@1.0.1?package-id=7aadb2fc6095104c", + "type": "library", + "author": "Jon Schlinkert (https://github.com/jonschlinkert)", + "name": "array-each", + "version": "1.0.1", + "description": "Loop over each item in an array and call the given function on every element.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jonschlinkert:array-each:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/array-each@1.0.1", + "externalReferences": [ + { + "url": "https://github.com/jonschlinkert/array-each", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jonschlinkert:array_each:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:array-each:array-each:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:array-each:array_each:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:array_each:array-each:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:array_each:array_each:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:array:array-each:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:array:array_each:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/array-each/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/array-flatten@1.1.1?package-id=5041c141565d0833", + "type": "library", + "author": "Blake Embrey (http://blakeembrey.me)", + "name": "array-flatten", + "version": "1.1.1", + "description": "Flatten an array of nested arrays into a single flat array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:array-flatten:array-flatten:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/array-flatten@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/blakeembrey/array-flatten.git", + "type": "distribution" + }, + { + "url": "https://github.com/blakeembrey/array-flatten", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:array-flatten:array_flatten:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:array_flatten:array-flatten:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:array_flatten:array_flatten:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:blakeembrey:array-flatten:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:blakeembrey:array_flatten:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:array:array-flatten:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:array:array_flatten:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/array-flatten/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/array-slice@1.1.0?package-id=a261f10f751ab469", + "type": "library", + "author": "Jon Schlinkert (https://github.com/jonschlinkert)", + "name": "array-slice", + "version": "1.1.0", + "description": "Array-slice method. Slices `array` from the `start` index up to, but not including, the `end` index.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jonschlinkert:array-slice:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/array-slice@1.1.0", + "externalReferences": [ + { + "url": "https://github.com/jonschlinkert/array-slice", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jonschlinkert:array_slice:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:array-slice:array-slice:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:array-slice:array_slice:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:array_slice:array-slice:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:array_slice:array_slice:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:array:array-slice:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:array:array_slice:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/array-slice/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/asap@2.0.6?package-id=1c54e38011c51e5b", + "type": "library", + "name": "asap", + "version": "2.0.6", + "description": "High-priority task queue for Node.js and browsers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:kriskowal:asap:2.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/asap@2.0.6", + "externalReferences": [ + { + "url": "https://github.com/kriskowal/asap.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:asap:asap:2.0.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/asap/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/assert-never@1.4.0?package-id=e57cc97cb7061a4e", + "type": "library", + "author": "Daniel Lytkin ", + "name": "assert-never", + "version": "1.4.0", + "description": "Helper function for exhaustive checks of discriminated unions in TypeScript", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:assert-never:assert-never:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/assert-never@1.4.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:assert-never:assert_never:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:assert_never:assert-never:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:assert_never:assert_never:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:assert:assert-never:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:assert:assert_never:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/assert-never/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/async@2.6.4?package-id=50f2f4c26ff2ccab", + "type": "library", + "author": "Caolan McMahon", + "name": "async", + "version": "2.6.4", + "description": "Higher-order functions and common patterns for asynchronous code", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:caolan:async:2.6.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/async@2.6.4", + "externalReferences": [ + { + "url": "https://github.com/caolan/async.git", + "type": "distribution" + }, + { + "url": "https://caolan.github.io/async/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:async:async:2.6.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/archiver/node_modules/async/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/async@2.6.4?package-id=5aa21ddd678e2c5a", + "type": "library", + "author": "Caolan McMahon", + "name": "async", + "version": "2.6.4", + "description": "Higher-order functions and common patterns for asynchronous code", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:caolan:async:2.6.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/async@2.6.4", + "externalReferences": [ + { + "url": "https://github.com/caolan/async.git", + "type": "distribution" + }, + { + "url": "https://caolan.github.io/async/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:async:async:2.6.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/portscanner/node_modules/async/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/async@3.2.6?package-id=6753e2a5837ba461", + "type": "library", + "author": "Caolan McMahon", + "name": "async", + "version": "3.2.6", + "description": "Higher-order functions and common patterns for asynchronous code", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:caolan:async:3.2.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/async@3.2.6", + "externalReferences": [ + { + "url": "https://github.com/caolan/async.git", + "type": "distribution" + }, + { + "url": "https://caolan.github.io/async/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:async:async:3.2.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/async/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/at-least-node@1.0.0?package-id=dd9e19320bbf0929", + "type": "library", + "author": "Ryan Zimmerman ", + "name": "at-least-node", + "version": "1.0.0", + "description": "Lightweight Node.js version sniffing/comparison", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:at-least-node:at-least-node:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/at-least-node@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/RyanZim/at-least-node.git", + "type": "distribution" + }, + { + "url": "https://github.com/RyanZim/at-least-node#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:at-least-node:at_least_node:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:at_least_node:at-least-node:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:at_least_node:at_least_node:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:at-least:at-least-node:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:at-least:at_least_node:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:at_least:at-least-node:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:at_least:at_least_node:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:RyanZim:at-least-node:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:RyanZim:at_least_node:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:at:at-least-node:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:at:at_least_node:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/at-least-node/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/available-typed-arrays@1.0.7?package-id=91c13e4c18804052", + "type": "library", + "author": "Jordan Harband ", + "name": "available-typed-arrays", + "version": "1.0.7", + "description": "Returns an array of Typed Array names that are available in the current environment", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:available-typed-arrays:available-typed-arrays:1.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/available-typed-arrays@1.0.7", + "externalReferences": [ + { + "url": "git+https://github.com/inspect-js/available-typed-arrays.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/available-typed-arrays#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:available-typed-arrays:available_typed_arrays:1.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:available_typed_arrays:available-typed-arrays:1.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:available_typed_arrays:available_typed_arrays:1.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:available-typed:available-typed-arrays:1.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:available-typed:available_typed_arrays:1.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:available_typed:available-typed-arrays:1.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:available_typed:available_typed_arrays:1.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:available-typed-arrays:1.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:available_typed_arrays:1.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:available:available-typed-arrays:1.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:available:available_typed_arrays:1.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/available-typed-arrays/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/babel-walk@3.0.0-canary-5?package-id=716281520579424d", + "type": "library", + "author": "Timothy Gu ", + "name": "babel-walk", + "version": "3.0.0-canary-5", + "description": "Lightweight Babel AST traversal", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:babel-walk:babel-walk:3.0.0-canary-5:*:*:*:*:*:*:*", + "purl": "pkg:npm/babel-walk@3.0.0-canary-5", + "externalReferences": [ + { + "url": "https://github.com/pugjs/babel-walk.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel-walk:babel_walk:3.0.0-canary-5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel_walk:babel-walk:3.0.0-canary-5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel_walk:babel_walk:3.0.0-canary-5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:babel-walk:3.0.0-canary-5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:babel:babel_walk:3.0.0-canary-5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pugjs:babel-walk:3.0.0-canary-5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pugjs:babel_walk:3.0.0-canary-5:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/babel-walk/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/balanced-match@1.0.2?package-id=956658d078dc7d57", + "type": "library", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "balanced-match", + "version": "1.0.2", + "description": "Match balanced character pairs, like \"{\" and \"}\"", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:balanced-match:balanced-match:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/balanced-match@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/balanced-match.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/balanced-match", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:balanced-match:balanced_match:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:balanced_match:balanced-match:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:balanced_match:balanced_match:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:juliangruber:balanced-match:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:juliangruber:balanced_match:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:balanced:balanced-match:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:balanced:balanced_match:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/balanced-match/package.json" + } + ] + }, + { + "bom-ref": "pkg:deb/debian/base-files@13.8%2Bdeb13u4?arch=amd64&distro=debian-13&package-id=ecb27f2946067446", + "type": "library", + "publisher": "Santiago Vila ", + "name": "base-files", + "version": "13.8+deb13u4", + "licenses": [ + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "name": "GPL" + } + }, + { + "license": { + "name": "verbatim" + } + } + ], + "cpe": "cpe:2.3:a:base-files:base-files:13.8\\+deb13u4:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/base-files@13.8%2Bdeb13u4?arch=amd64&distro=debian-13", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "dpkg-db-cataloger" + }, + { + "name": "syft:package:type", + "value": "deb" + }, + { + "name": "syft:package:metadataType", + "value": "dpkg-db-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:base-files:base_files:13.8\\+deb13u4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:base_files:base-files:13.8\\+deb13u4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:base_files:base_files:13.8\\+deb13u4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:base:base-files:13.8\\+deb13u4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:base:base_files:13.8\\+deb13u4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:82c60ccaf916322916d16bcdb4223f93acc1f68e2087dba4ddf64990b1dc27fb" + }, + { + "name": "syft:location:0:path", + "value": "/var/lib/dpkg/status.d/base-files" + }, + { + "name": "syft:location:1:layerID", + "value": "sha256:82c60ccaf916322916d16bcdb4223f93acc1f68e2087dba4ddf64990b1dc27fb" + }, + { + "name": "syft:location:1:path", + "value": "/usr/share/doc/base-files/copyright" + }, + { + "name": "syft:location:2:layerID", + "value": "sha256:82c60ccaf916322916d16bcdb4223f93acc1f68e2087dba4ddf64990b1dc27fb" + }, + { + "name": "syft:location:2:path", + "value": "/var/lib/dpkg/status.d/base-files.md5sums" + }, + { + "name": "syft:metadata:installedSize", + "value": "350" + } + ] + }, + { + "bom-ref": "pkg:npm/base64-arraybuffer@0.1.4?package-id=7b4063d10599bfae", + "type": "library", + "author": "Niklas von Hertzen (http://hertzen.com)", + "name": "base64-arraybuffer", + "version": "0.1.4", + "description": "Encode/decode base64 data into ArrayBuffers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:base64-arraybuffer:base64-arraybuffer:0.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/base64-arraybuffer@0.1.4", + "externalReferences": [ + { + "url": "https://github.com/niklasvh/base64-arraybuffer", + "type": "distribution" + }, + { + "url": "https://github.com/niklasvh/base64-arraybuffer", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:base64-arraybuffer:base64_arraybuffer:0.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:base64_arraybuffer:base64-arraybuffer:0.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:base64_arraybuffer:base64_arraybuffer:0.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:niklasvh:base64-arraybuffer:0.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:niklasvh:base64_arraybuffer:0.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:base64:base64-arraybuffer:0.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:base64:base64_arraybuffer:0.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/base64-arraybuffer/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/base64-js@0.0.8?package-id=6f1f1a7796cb63d0", + "type": "library", + "author": "T. Jameson Little ", + "name": "base64-js", + "version": "0.0.8", + "description": "Base64 encoding/decoding in pure JS", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:beatgammit:base64-js:0.0.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/base64-js@0.0.8", + "externalReferences": [ + { + "url": "git://github.com/beatgammit/base64-js.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:beatgammit:base64_js:0.0.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:base64-js:base64-js:0.0.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:base64-js:base64_js:0.0.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:base64_js:base64-js:0.0.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:base64_js:base64_js:0.0.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:base64:base64-js:0.0.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:base64:base64_js:0.0.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/linebreak/node_modules/base64-js/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/base64-js@1.5.1?package-id=c493a9a41b36da0b", + "type": "library", + "author": "T. Jameson Little ", + "name": "base64-js", + "version": "1.5.1", + "description": "Base64 encoding/decoding in pure JS", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:beatgammit:base64-js:1.5.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/base64-js@1.5.1", + "externalReferences": [ + { + "url": "git://github.com/beatgammit/base64-js.git", + "type": "distribution" + }, + { + "url": "https://github.com/beatgammit/base64-js", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:beatgammit:base64_js:1.5.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:base64-js:base64-js:1.5.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:base64-js:base64_js:1.5.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:base64_js:base64-js:1.5.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:base64_js:base64_js:1.5.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:base64:base64-js:1.5.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:base64:base64_js:1.5.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/base64-js/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/base64id@2.0.0?package-id=d1750eb90689f1a4", + "type": "library", + "author": "Kristian Faeldt ", + "name": "base64id", + "version": "2.0.0", + "description": "Generates a base64 id", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:base64id:base64id:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/base64id@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/faeldt/base64id.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:faeldt:base64id:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/base64id/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/base64url@0.0.6?package-id=2f8a9d6c7656ba10", + "type": "library", + "author": "Brian J Brennan", + "name": "base64url", + "version": "0.0.6", + "description": "For encoding to/from base64urls", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brianloveswords:base64url:0.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/base64url@0.0.6", + "externalReferences": [ + { + "url": "git://github.com/brianloveswords/base64url.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:base64url:base64url:0.0.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/base64url/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/basic-auth@2.0.1?package-id=0ed4c1f07b04e9ef", + "type": "library", + "name": "basic-auth", + "version": "2.0.1", + "description": "node.js basic auth parser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:basic-auth:basic-auth:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/basic-auth@2.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:basic-auth:basic_auth:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:basic_auth:basic-auth:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:basic_auth:basic_auth:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:basic:basic-auth:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:basic:basic_auth:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/basic-auth/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/batch@0.6.1?package-id=344c43aaf43bb8dc", + "type": "library", + "author": "TJ Holowaychuk ", + "name": "batch", + "version": "0.6.1", + "description": "Simple async batch with concurrency control and progress reporting.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:visionmedia:batch:0.6.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/batch@0.6.1", + "externalReferences": [ + { + "url": "https://github.com/visionmedia/batch.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:batch:batch:0.6.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/batch/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/baz?package-id=99a08ef6ddd74ba7", + "type": "library", + "name": "baz", + "version": "UNKNOWN", + "cpe": "cpe:2.3:a:baz:baz:*:*:*:*:*:*:*:*", + "purl": "pkg:npm/baz", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/resolve/test/resolver/baz/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/beep-boop@1.2.3?package-id=ac8f35c9bc6d4edc", + "type": "library", + "name": "beep-boop", + "version": "1.2.3", + "cpe": "cpe:2.3:a:beep-boop:beep-boop:1.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/beep-boop@1.2.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:beep-boop:beep_boop:1.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:beep_boop:beep-boop:1.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:beep_boop:beep_boop:1.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:beep:beep-boop:1.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:beep:beep_boop:1.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/github-from-package/example/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/beercss@4.0.21?package-id=22ede90a702de103", + "type": "library", + "author": "Everton and Leonardo", + "name": "beercss", + "version": "4.0.21", + "description": "Build material design interfaces in record time... without stress for devs.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:beercss:beercss:4.0.21:*:*:*:*:*:*:*", + "purl": "pkg:npm/beercss@4.0.21", + "externalReferences": [ + { + "url": "git+https://github.com/beercss/beercss.git", + "type": "distribution" + }, + { + "url": "https://www.beercss.com/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/beercss/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/big-integer@1.6.52?package-id=6efaee3d2e9117ff", + "type": "library", + "author": "Peter Olson ", + "name": "big-integer", + "version": "1.6.52", + "description": "An arbitrary length integer library for Javascript", + "licenses": [ + { + "license": { + "id": "Unlicense" + } + } + ], + "cpe": "cpe:2.3:a:big-integer:big-integer:1.6.52:*:*:*:*:*:*:*", + "purl": "pkg:npm/big-integer@1.6.52", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:big-integer:big_integer:1.6.52:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:big_integer:big-integer:1.6.52:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:big_integer:big_integer:1.6.52:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:big:big-integer:1.6.52:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:big:big_integer:1.6.52:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/big-integer/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/binary@0.3.0?package-id=aac28aacec14e6f2", + "type": "library", + "author": "James Halliday (http://substack.net)", + "name": "binary", + "version": "0.3.0", + "description": "Unpack multibyte binary values from buffers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:substack:binary:0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/binary@0.3.0", + "externalReferences": [ + { + "url": "http://github.com/substack/node-binary.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:binary:binary:0.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/binary/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/bindings@1.5.0?package-id=848e919a5348c76e", + "type": "library", + "author": "Nathan Rajlich (http://tootallnate.net)", + "name": "bindings", + "version": "1.5.0", + "description": "Helper module for loading your native module's .node file", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:TooTallNate:bindings:1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/bindings@1.5.0", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-bindings.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/node-bindings", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:bindings:bindings:1.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/bindings/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/bintrees@1.0.2?package-id=db53f4ebaee4e2cf", + "type": "library", + "author": "Vadim Graboys ", + "name": "bintrees", + "version": "1.0.2", + "description": "Binary Search Trees", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:bintrees:bintrees:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/bintrees@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/vadimg/js_bintrees.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:vadimg:bintrees:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/bintrees/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/bl@1.2.3?package-id=1d71c68896a44c86", + "type": "library", + "author": "Rod Vagg (https://github.com/rvagg), Matteo Collina (https://github.com/mcollina), Jarett Cruger (https://github.com/jcrugzz)", + "name": "bl", + "version": "1.2.3", + "description": "Buffer List: collect buffers and access with a standard readable Buffer interface, streamable too!", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:rvagg:bl:1.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/bl@1.2.3", + "externalReferences": [ + { + "url": "https://github.com/rvagg/bl.git", + "type": "distribution" + }, + { + "url": "https://github.com/rvagg/bl", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:bl:bl:1.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/bl/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/bl@4.1.0?package-id=846a0edd607229fd", + "type": "library", + "author": "Rod Vagg (https://github.com/rvagg), Matteo Collina (https://github.com/mcollina), Jarett Cruger (https://github.com/jcrugzz)", + "name": "bl", + "version": "4.1.0", + "description": "Buffer List: collect buffers and access with a standard readable Buffer interface, streamable too!", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:rvagg:bl:4.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/bl@4.1.0", + "externalReferences": [ + { + "url": "https://github.com/rvagg/bl.git", + "type": "distribution" + }, + { + "url": "https://github.com/rvagg/bl", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:bl:bl:4.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/tar-fs/node_modules/bl/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/bluebird@3.4.7?package-id=441b568aa058ddd4", + "type": "library", + "author": "Petka Antonov (http://github.com/petkaantonov/)", + "name": "bluebird", + "version": "3.4.7", + "description": "Full featured Promises/A+ implementation with exceptionally good performance", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:petkaantonov:bluebird:3.4.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/bluebird@3.4.7", + "externalReferences": [ + { + "url": "git://github.com/petkaantonov/bluebird.git", + "type": "distribution" + }, + { + "url": "https://github.com/petkaantonov/bluebird", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:bluebird:bluebird:3.4.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/unzipper/node_modules/bluebird/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/bluebird@3.7.2?package-id=45ec017cc93f373c", + "type": "library", + "author": "Petka Antonov (http://github.com/petkaantonov/)", + "name": "bluebird", + "version": "3.7.2", + "description": "Full featured Promises/A+ implementation with exceptionally good performance", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:petkaantonov:bluebird:3.7.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/bluebird@3.7.2", + "externalReferences": [ + { + "url": "git://github.com/petkaantonov/bluebird.git", + "type": "distribution" + }, + { + "url": "https://github.com/petkaantonov/bluebird", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:bluebird:bluebird:3.7.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/bluebird/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/body-parser@1.20.5?package-id=ddc8c87ed1c65da3", + "type": "library", + "author": "Douglas Christopher Wilson , Jonathan Ong (http://jongleberry.com)", + "name": "body-parser", + "version": "1.20.5", + "description": "Node.js body parsing middleware", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:openjsf:body-parser:1.20.5:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/body-parser@1.20.5", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/body-parser/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/brace-expansion@1.1.14?package-id=0255070021979c9b", + "type": "library", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "brace-expansion", + "version": "1.1.14", + "description": "Brace expansion as known from sh/bash", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:juliangruber:brace-expansion:1.1.14:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/brace-expansion@1.1.14", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/brace-expansion/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/brace-expansion@2.1.0?package-id=93130034832e0228", + "type": "library", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "brace-expansion", + "version": "2.1.0", + "description": "Brace expansion as known from sh/bash", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:juliangruber:brace-expansion:2.1.0:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/brace-expansion@2.1.0", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/brace-expansion.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/brace-expansion", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/glob/node_modules/brace-expansion/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/braces@3.0.3?package-id=b57d894966249598", + "type": "library", + "author": "Jon Schlinkert (https://github.com/jonschlinkert), Brian Woodward (https://twitter.com/doowb), Elan Shanker (https://github.com/es128), Eugene Sharygin (https://github.com/eush77), hemanth.hm (http://h3manth.com), Jon Schlinkert (http://twitter.com/jonschlinkert)", + "name": "braces", + "version": "3.0.3", + "description": "Bash-like brace expansion, implemented in JavaScript. Safer than other brace expansion libs, with complete support for the Bash 4.3 braces specification, without sacrificing speed.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:braces_project:braces:3.0.3:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/braces@3.0.3", + "externalReferences": [ + { + "url": "https://github.com/micromatch/braces", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jonschlinkert:braces:3.0.3:*:*:*:*:node.js:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/braces/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/brotli@1.3.3?package-id=470bc485996d4bbe", + "type": "library", + "author": "Devon Govett ", + "name": "brotli", + "version": "1.3.3", + "description": "A port of the Brotli compression algorithm as used in WOFF2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:devongovett:brotli:1.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/brotli@1.3.3", + "externalReferences": [ + { + "url": "https://github.com/devongovett/brotli.js.git", + "type": "distribution" + }, + { + "url": "https://github.com/devongovett/brotli.js", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:brotli:brotli:1.3.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/brotli/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/browser_field?package-id=0ec800aec91252a5", + "type": "library", + "name": "browser_field", + "version": "UNKNOWN", + "cpe": "cpe:2.3:a:browser-field:browser-field:*:*:*:*:*:*:*:*", + "purl": "pkg:npm/browser_field", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:browser-field:browser_field:*:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:browser_field:browser-field:*:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:browser_field:browser_field:*:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:browser:browser-field:*:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:browser:browser_field:*:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/resolve/test/resolver/browser_field/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/browserify-zlib@0.2.0?package-id=b5aa99aae4fb60df", + "type": "library", + "author": "Devon Govett ", + "name": "browserify-zlib", + "version": "0.2.0", + "description": "Full zlib module for the browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:browserify-zlib:browserify-zlib:0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/browserify-zlib@0.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/devongovett/browserify-zlib.git", + "type": "distribution" + }, + { + "url": "https://github.com/devongovett/browserify-zlib", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:browserify-zlib:browserify_zlib:0.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:browserify_zlib:browserify-zlib:0.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:browserify_zlib:browserify_zlib:0.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:devongovett:browserify-zlib:0.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:devongovett:browserify_zlib:0.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:browserify:browserify-zlib:0.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:browserify:browserify_zlib:0.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/browserify-zlib/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/buffer@5.7.1?package-id=8160d61272f16fc2", + "type": "library", + "author": "Feross Aboukhadijeh (https://feross.org), Romain Beauxis , James Halliday ", + "name": "buffer", + "version": "5.7.1", + "description": "Node.js Buffer API, for the browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:buffer:buffer:5.7.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer@5.7.1", + "externalReferences": [ + { + "url": "git://github.com/feross/buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/buffer", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:feross:buffer:5.7.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/buffer/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/buffer@6.0.3?package-id=b34920cb2184e6ad", + "type": "library", + "author": "Feross Aboukhadijeh (https://feross.org), Romain Beauxis , James Halliday ", + "name": "buffer", + "version": "6.0.3", + "description": "Node.js Buffer API, for the browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:buffer:buffer:6.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer@6.0.3", + "externalReferences": [ + { + "url": "git://github.com/feross/buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/buffer", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:feross:buffer:6.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/readable-web-to-node-stream/node_modules/buffer/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/buffer-alloc@1.2.0?package-id=0215db4a4aa6cd05", + "type": "library", + "name": "buffer-alloc", + "version": "1.2.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:buffer-alloc:buffer-alloc:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer-alloc@1.2.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer-alloc:buffer_alloc:1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer_alloc:buffer-alloc:1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer_alloc:buffer_alloc:1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer:buffer-alloc:1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer:buffer_alloc:1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/buffer-alloc/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/buffer-alloc-unsafe@1.1.0?package-id=72525885a05217f9", + "type": "library", + "name": "buffer-alloc-unsafe", + "version": "1.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:buffer-alloc-unsafe:buffer-alloc-unsafe:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer-alloc-unsafe@1.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer-alloc-unsafe:buffer_alloc_unsafe:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer_alloc_unsafe:buffer-alloc-unsafe:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer_alloc_unsafe:buffer_alloc_unsafe:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer-alloc:buffer-alloc-unsafe:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer-alloc:buffer_alloc_unsafe:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer_alloc:buffer-alloc-unsafe:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer_alloc:buffer_alloc_unsafe:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer:buffer-alloc-unsafe:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer:buffer_alloc_unsafe:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/buffer-alloc-unsafe/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/buffer-crc32@0.2.13?package-id=018e707480d9a394", + "type": "library", + "author": "Brian J. Brennan , Vladimir Kuznetsov", + "name": "buffer-crc32", + "version": "0.2.13", + "description": "A pure javascript CRC32 algorithm that plays nice with binary data", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brianloveswords:buffer-crc32:0.2.13:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer-crc32@0.2.13", + "externalReferences": [ + { + "url": "git://github.com/brianloveswords/buffer-crc32.git", + "type": "distribution" + }, + { + "url": "https://github.com/brianloveswords/buffer-crc32", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:brianloveswords:buffer_crc32:0.2.13:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer-crc32:buffer-crc32:0.2.13:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer-crc32:buffer_crc32:0.2.13:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer_crc32:buffer-crc32:0.2.13:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer_crc32:buffer_crc32:0.2.13:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer:buffer-crc32:0.2.13:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer:buffer_crc32:0.2.13:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/buffer-crc32/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/buffer-fill@1.0.0?package-id=b5b4b05d23ef0590", + "type": "library", + "name": "buffer-fill", + "version": "1.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:buffer-fill:buffer-fill:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer-fill@1.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer-fill:buffer_fill:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer_fill:buffer-fill:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer_fill:buffer_fill:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer:buffer-fill:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer:buffer_fill:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/buffer-fill/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/buffer-from@1.1.2?package-id=d2869a97005ddd30", + "type": "library", + "name": "buffer-from", + "version": "1.1.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:buffer-from:buffer-from:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer-from@1.1.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer-from:buffer_from:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer_from:buffer-from:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer_from:buffer_from:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer:buffer-from:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer:buffer_from:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/buffer-from/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/buffer-indexof-polyfill@1.0.2?package-id=08bc6bd9a895200f", + "type": "library", + "author": "https://github.com/sarosia", + "name": "buffer-indexof-polyfill", + "version": "1.0.2", + "description": "This is a polyfill for Buffer#indexOf introduced in NodeJS 4.0.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:buffer-indexof-polyfill:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffer-indexof-polyfill@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/sarosia/buffer-indexof-polyfill.git", + "type": "distribution" + }, + { + "url": "https://github.com/sarosia/buffer-indexof-polyfill#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer-indexof-polyfill:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer_indexof_polyfill:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer_indexof_polyfill:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer-indexof:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer-indexof:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer_indexof:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer_indexof:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sarosia:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sarosia:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffer:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/buffer-indexof-polyfill/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/buffers@0.1.1?package-id=fd60bbd17e6803d8", + "type": "library", + "author": "James Halliday (http://substack.net)", + "name": "buffers", + "version": "0.1.1", + "description": "Treat a collection of Buffers as a single contiguous partially mutable Buffer.", + "cpe": "cpe:2.3:a:substack:buffers:0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/buffers@0.1.1", + "externalReferences": [ + { + "url": "http://github.com/substack/node-buffers.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:buffers:buffers:0.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/buffers/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/busboy@1.6.0?package-id=72b84630ff8aade7", + "type": "library", + "author": "Brian White ", + "name": "busboy", + "version": "1.6.0", + "description": "A streaming parser for HTML form data for node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:busboy:busboy:1.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/busboy@1.6.0", + "externalReferences": [ + { + "url": "http://github.com/mscdex/busboy.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mscdex:busboy:1.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/busboy/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/bytes@3.1.2?package-id=1d0cce2090c4dc09", + "type": "library", + "author": "TJ Holowaychuk (http://tjholowaychuk.com), Jed Watson , Théo FIDRY ", + "name": "bytes", + "version": "3.1.2", + "description": "Utility to parse a string bytes to bytes and vice-versa", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:bytes:bytes:3.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/bytes@3.1.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/bytes/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/cacache@15.3.0?package-id=f5c0681a2e946e2d", + "type": "library", + "name": "cacache", + "version": "15.3.0", + "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:cacache:cacache:15.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cacache@15.3.0", + "externalReferences": [ + { + "url": "https://github.com/npm/cacache", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:cacache:15.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/cacache/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/cacache@19.0.1?package-id=ace0af3ce948f36b", + "type": "library", + "author": "GitHub Inc.", + "name": "cacache", + "version": "19.0.1", + "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:cacache:cacache:19.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/cacache@19.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/cacache.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/cacache/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/cacheable-request@2.1.4?package-id=346e1627c1f72870", + "type": "library", + "author": "Luke Childs (http://lukechilds.co.uk)", + "name": "cacheable-request", + "version": "2.1.4", + "description": "Wrap native HTTP requests with RFC compliant cache support", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cacheable-request:cacheable-request:2.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/cacheable-request@2.1.4", + "externalReferences": [ + { + "url": "git+https://github.com/lukechilds/cacheable-request.git", + "type": "distribution" + }, + { + "url": "https://github.com/lukechilds/cacheable-request", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cacheable-request:cacheable_request:2.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cacheable_request:cacheable-request:2.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cacheable_request:cacheable_request:2.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:lukechilds:cacheable-request:2.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:lukechilds:cacheable_request:2.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cacheable:cacheable-request:2.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cacheable:cacheable_request:2.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/cacheable-request/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/call-bind@1.0.9?package-id=dbc99e7ef70e6653", + "type": "library", + "author": "Jordan Harband ", + "name": "call-bind", + "version": "1.0.9", + "description": "Robustly `.call.bind()` a function", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:call-bind:call-bind:1.0.9:*:*:*:*:*:*:*", + "purl": "pkg:npm/call-bind@1.0.9", + "externalReferences": [ + { + "url": "git+https://github.com/ljharb/call-bind.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/call-bind#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:call-bind:call_bind:1.0.9:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:call_bind:call-bind:1.0.9:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:call_bind:call_bind:1.0.9:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:call-bind:1.0.9:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:call_bind:1.0.9:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:call:call-bind:1.0.9:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:call:call_bind:1.0.9:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/call-bind/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/call-bind-apply-helpers@1.0.2?package-id=0d18b02f5378691f", + "type": "library", + "author": "Jordan Harband ", + "name": "call-bind-apply-helpers", + "version": "1.0.2", + "description": "Helper functions around Function call/apply/bind, for use in `call-bind`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:call-bind-apply-helpers:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/call-bind-apply-helpers@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/ljharb/call-bind-apply-helpers.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/call-bind-apply-helpers#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:call-bind-apply-helpers:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:call_bind_apply_helpers:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:call_bind_apply_helpers:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:call-bind-apply:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:call-bind-apply:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:call_bind_apply:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:call_bind_apply:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:call-bind:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:call-bind:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:call_bind:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:call_bind:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:call:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:call:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/call-bind-apply-helpers/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/call-bound@1.0.4?package-id=44af6e189fe32d87", + "type": "library", + "author": "Jordan Harband ", + "name": "call-bound", + "version": "1.0.4", + "description": "Robust call-bound JavaScript intrinsics, using `call-bind` and `get-intrinsic`.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:call-bound:call-bound:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/call-bound@1.0.4", + "externalReferences": [ + { + "url": "git+https://github.com/ljharb/call-bound.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/call-bound#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:call-bound:call_bound:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:call_bound:call-bound:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:call_bound:call_bound:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:call-bound:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:call_bound:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:call:call-bound:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:call:call_bound:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/call-bound/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/camelcase@5.3.1?package-id=92e4f8e8e365d6ef", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "camelcase", + "version": "5.3.1", + "description": "Convert a dash/dot/underscore/space separated string to camelCase or PascalCase: `foo-bar` → `fooBar`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:camelcase:camelcase:5.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/camelcase@5.3.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/camelcase/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/chainsaw@0.1.0?package-id=6e4c3d3622249d54", + "type": "library", + "author": "James Halliday (http://substack.net)", + "name": "chainsaw", + "version": "0.1.0", + "description": "Build chainable fluent interfaces the easy way... with a freakin' chainsaw!", + "licenses": [ + { + "license": { + "name": "MIT/X11" + } + } + ], + "cpe": "cpe:2.3:a:chainsaw:chainsaw:0.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/chainsaw@0.1.0", + "externalReferences": [ + { + "url": "http://github.com/substack/node-chainsaw.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:substack:chainsaw:0.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/chainsaw/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/chalk@1.1.3?package-id=af9826c69b6847f8", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com), Joshua Appelman (jbnicolai.com), JD Ballard (github.com/qix-)", + "name": "chalk", + "version": "1.1.3", + "description": "Terminal string styling done right. Much color.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:chalk:chalk:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/chalk@1.1.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/grunt-contrib-compress/node_modules/chalk/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/chalk@2.4.2?package-id=015bdd0e54562d25", + "type": "library", + "name": "chalk", + "version": "2.4.2", + "description": "Terminal string styling done right", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:chalk:chalk:2.4.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/chalk@2.4.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/chalk/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/chalk@4.1.2?package-id=7fe24d7225fc8b9a", + "type": "library", + "name": "chalk", + "version": "4.1.2", + "description": "Terminal string styling done right", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:chalk:chalk:4.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/chalk@4.1.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/chalk/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/character-parser@2.2.0?package-id=34bd9ccc72e70b6f", + "type": "library", + "author": "ForbesLindesay", + "name": "character-parser", + "version": "2.2.0", + "description": "Parse JavaScript one character at a time to look for snippets in Templates. This is not a validator, it's just designed to allow you to have sections of JavaScript delimited by brackets robustly.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:character-parser:character-parser:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/character-parser@2.2.0", + "externalReferences": [ + { + "url": "https://github.com/ForbesLindesay/character-parser.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:character-parser:character_parser:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:character_parser:character-parser:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:character_parser:character_parser:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ForbesLindesay:character-parser:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ForbesLindesay:character_parser:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:character:character-parser:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:character:character_parser:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/character-parser/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/check-dependencies@2.0.0?package-id=3b4717bda67c27ad", + "type": "library", + "author": "Michał Gołębiowski-Owczarek ", + "name": "check-dependencies", + "version": "2.0.0", + "description": "Checks if currently installed npm dependencies are installed in the exact same versions that are specified in package.json", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:check-dependencies:check-dependencies:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/check-dependencies@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/mgol/check-dependencies.git", + "type": "distribution" + }, + { + "url": "https://github.com/mgol/check-dependencies", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:check-dependencies:check_dependencies:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:check_dependencies:check-dependencies:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:check_dependencies:check_dependencies:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:check:check-dependencies:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:check:check_dependencies:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mgol:check-dependencies:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mgol:check_dependencies:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/check-dependencies/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/check-types@6.0.0?package-id=85b9eff83ffcd831", + "type": "library", + "author": "Phil Booth (https://github.com/philbooth)", + "name": "check-types", + "version": "6.0.0", + "description": "A little library for asserting types and values.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:check-types:check-types:6.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/check-types@6.0.0", + "externalReferences": [ + { + "url": "https://github.com/philbooth/check-types.js.git", + "type": "distribution" + }, + { + "url": "https://github.com/philbooth/check-types.js", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:check-types:check_types:6.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:check_types:check-types:6.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:check_types:check_types:6.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:philbooth:check-types:6.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:philbooth:check_types:6.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:check:check-types:6.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:check:check_types:6.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/check-types/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/chownr@1.1.4?package-id=7ebcfb2902378122", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "chownr", + "version": "1.1.4", + "description": "like `chown -R`", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:chownr:chownr:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/chownr@1.1.4", + "externalReferences": [ + { + "url": "git://github.com/isaacs/chownr.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:chownr:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/node-pre-gyp/node_modules/chownr/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/chownr@1.1.4?package-id=671f64716b19d5fb", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "chownr", + "version": "1.1.4", + "description": "like `chown -R`", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:chownr:chownr:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/chownr@1.1.4", + "externalReferences": [ + { + "url": "git://github.com/isaacs/chownr.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:chownr:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/tar-fs/node_modules/chownr/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/chownr@2.0.0?package-id=3189617deb2bc884", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "chownr", + "version": "2.0.0", + "description": "like `chown -R`", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:chownr:chownr:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/chownr@2.0.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/chownr.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:chownr:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/chownr/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/chownr@3.0.0?package-id=fffff6468e7930c0", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "chownr", + "version": "3.0.0", + "description": "like `chown -R`", + "licenses": [ + { + "license": { + "id": "BlueOak-1.0.0" + } + } + ], + "cpe": "cpe:2.3:a:chownr:chownr:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/chownr@3.0.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/chownr.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:chownr:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/chownr/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/clarinet@0.12.6?package-id=6cef1d3c36e6024e", + "type": "library", + "author": "Nuno Job (http://nunojob.com/), Jann Horn (https://github.com/thejh), Justin Makeig (http://www.audiblepop.com), Roly Fentanes (http://about.me/roly), John Lancaster (http://jlank.com)", + "name": "clarinet", + "version": "0.12.6", + "description": "SAX based evented streaming JSON parser in JavaScript (browser and node)", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:clarinet:clarinet:0.12.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/clarinet@0.12.6", + "externalReferences": [ + { + "url": "http://github.com/dscape/clarinet.git", + "type": "distribution" + }, + { + "url": "https://github.com/dscape/clarinet", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:dscape:clarinet:0.12.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/clarinet/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/clean-stack@2.2.0?package-id=08eaf1d1a1378cc5", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "clean-stack", + "version": "2.2.0", + "description": "Clean up error stack traces", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:clean-stack:clean-stack:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/clean-stack@2.2.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:clean-stack:clean_stack:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:clean_stack:clean-stack:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:clean_stack:clean_stack:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:clean:clean-stack:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:clean:clean_stack:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/clean-stack/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/cliui@6.0.0?package-id=6fb115e3b5d5d3f2", + "type": "library", + "author": "Ben Coe ", + "name": "cliui", + "version": "6.0.0", + "description": "easily create complex multi-column command-line-interfaces", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:cliui:cliui:6.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/cliui@6.0.0", + "externalReferences": [ + { + "url": "http://github.com/yargs/cliui.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:yargs:cliui:6.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/replace/node_modules/cliui/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/clone@2.1.2?package-id=080e255664d33bc7", + "type": "library", + "author": "Paul Vorbach (http://paul.vorba.ch/), Blake Miner (http://www.blakeminer.com/), Tian You (http://blog.axqd.net/), George Stagas (http://stagas.com/), Tobiasz Cudnik (https://github.com/TobiaszCudnik), Pavel Lang (https://github.com/langpavel), Dan MacTough (http://yabfog.com/), w1nk (https://github.com/w1nk), Hugh Kennedy (http://twitter.com/hughskennedy), Dustin Diaz (http://dustindiaz.com), Ilya Shaisultanov (https://github.com/diversario), Nathan MacInnes (http://macinn.es/), Benjamin E. Coe (https://twitter.com/benjamincoe), Nathan Zadoks (https://github.com/nathan7), Róbert Oroszi (https://github.com/oroce), Aurélio A. Heckert (http://softwarelivre.org/aurium), Guy Ellis (http://www.guyellisrocks.com/), fscherwi (https://fscherwi.github.io), rictic (https://github.com/rictic), Martin Jurča (https://github.com/jurca), Misery Lee (https://github.com/miserylee), Clemens Wolff (https://github.com/c-w)", + "name": "clone", + "version": "2.1.2", + "description": "deep cloning of objects and arrays", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:clone:clone:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/clone@2.1.2", + "externalReferences": [ + { + "url": "git://github.com/pvorb/node-clone.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pvorb:clone:2.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/clone/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/clone-response@1.0.2?package-id=1ca687973f79cd5a", + "type": "library", + "author": "Luke Childs (http://lukechilds.co.uk)", + "name": "clone-response", + "version": "1.0.2", + "description": "Clone a Node.js HTTP response stream", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:clone-response:clone-response:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/clone-response@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/lukechilds/clone-response.git", + "type": "distribution" + }, + { + "url": "https://github.com/lukechilds/clone-response", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:clone-response:clone_response:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:clone_response:clone-response:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:clone_response:clone_response:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:lukechilds:clone-response:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:lukechilds:clone_response:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:clone:clone-response:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:clone:clone_response:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/clone-response/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/code-point-at@1.1.0?package-id=15db8f5283662b54", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "code-point-at", + "version": "1.1.0", + "description": "ES2015 `String#codePointAt()` ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:code-point-at:code-point-at:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/code-point-at@1.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:code-point-at:code_point_at:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:code_point_at:code-point-at:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:code_point_at:code_point_at:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:code-point:code-point-at:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:code-point:code_point_at:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:code_point:code-point-at:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:code_point:code_point_at:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:code:code-point-at:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:code:code_point_at:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/code-point-at/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/color@5.0.3?package-id=3402b3c6598fe1f0", + "type": "library", + "author": "Josh Junon , Heather Arthur , Maxime Thirouin", + "name": "color", + "version": "5.0.3", + "description": "Color conversion and manipulation with CSS string support", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color:color:5.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/color@5.0.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/color/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/color-convert@1.9.3?package-id=832fbb197a382df6", + "type": "library", + "author": "Heather Arthur ", + "name": "color-convert", + "version": "1.9.3", + "description": "Plain color conversion functions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-convert:color-convert:1.9.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-convert@1.9.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color-convert:color_convert:1.9.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color_convert:color-convert:1.9.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color_convert:color_convert:1.9.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color:color-convert:1.9.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color:color_convert:1.9.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/color-convert/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/color-convert@2.0.1?package-id=ad73ceb607fdd321", + "type": "library", + "author": "Heather Arthur ", + "name": "color-convert", + "version": "2.0.1", + "description": "Plain color conversion functions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-convert:color-convert:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-convert@2.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color-convert:color_convert:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color_convert:color-convert:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color_convert:color_convert:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color:color-convert:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color:color_convert:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/color-convert/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/color-convert@2.0.1?package-id=c216a258a2dd7fdf", + "type": "library", + "author": "Heather Arthur ", + "name": "color-convert", + "version": "2.0.1", + "description": "Plain color conversion functions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-convert:color-convert:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-convert@2.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color-convert:color_convert:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color_convert:color-convert:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color_convert:color_convert:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color:color-convert:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color:color_convert:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/replace/node_modules/color-convert/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/color-convert@2.0.1?package-id=d7906a8074d4b4f9", + "type": "library", + "author": "Heather Arthur ", + "name": "color-convert", + "version": "2.0.1", + "description": "Plain color conversion functions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-convert:color-convert:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-convert@2.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color-convert:color_convert:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color_convert:color-convert:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color_convert:color_convert:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color:color-convert:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color:color_convert:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/wrap-ansi-cjs/node_modules/color-convert/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/color-convert@3.1.3?package-id=77239f07f827fd54", + "type": "library", + "author": "Josh Junon , Heather Arthur ", + "name": "color-convert", + "version": "3.1.3", + "description": "Plain color conversion functions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-convert:color-convert:3.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-convert@3.1.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color-convert:color_convert:3.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color_convert:color-convert:3.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color_convert:color_convert:3.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color:color-convert:3.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color:color_convert:3.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/color/node_modules/color-convert/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/color-name@1.1.3?package-id=92662d8a3adbe0c9", + "type": "library", + "author": "DY ", + "name": "color-name", + "version": "1.1.3", + "description": "A list of color names and its values", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-name:color-name:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-name@1.1.3", + "externalReferences": [ + { + "url": "https://github.com/dfcreative/color-name", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color-name:color_name:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color_name:color-name:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color_name:color_name:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:dfcreative:color-name:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:dfcreative:color_name:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color:color-name:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color:color_name:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/color-name/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/color-name@1.1.4?package-id=a184510682ce4734", + "type": "library", + "author": "DY ", + "name": "color-name", + "version": "1.1.4", + "description": "A list of color names and its values", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-name:color-name:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-name@1.1.4", + "externalReferences": [ + { + "url": "https://github.com/colorjs/color-name", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color-name:color_name:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color_name:color-name:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color_name:color_name:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:colorjs:color-name:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:colorjs:color_name:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color:color-name:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color:color_name:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/color-name/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/color-name@1.1.4?package-id=a80b99ad61e48555", + "type": "library", + "author": "DY ", + "name": "color-name", + "version": "1.1.4", + "description": "A list of color names and its values", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-name:color-name:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-name@1.1.4", + "externalReferences": [ + { + "url": "https://github.com/colorjs/color-name", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color-name:color_name:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color_name:color-name:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color_name:color_name:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:colorjs:color-name:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:colorjs:color_name:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color:color-name:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color:color_name:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/replace/node_modules/color-name/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/color-name@1.1.4?package-id=01c750f52978cfc6", + "type": "library", + "author": "DY ", + "name": "color-name", + "version": "1.1.4", + "description": "A list of color names and its values", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-name:color-name:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-name@1.1.4", + "externalReferences": [ + { + "url": "https://github.com/colorjs/color-name", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color-name:color_name:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color_name:color-name:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color_name:color_name:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:colorjs:color-name:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:colorjs:color_name:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color:color-name:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color:color_name:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/wrap-ansi-cjs/node_modules/color-name/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/color-name@2.1.0?package-id=c912833a0dc0f66b", + "type": "library", + "author": "Dmitry Iv ", + "name": "color-name", + "version": "2.1.0", + "description": "A list of color names and its values", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-name:color-name:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-name@2.1.0", + "externalReferences": [ + { + "url": "http://github.com/colorjs/color-name.git", + "type": "distribution" + }, + { + "url": "https://github.com/colorjs/color-name", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color-name:color_name:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color_name:color-name:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color_name:color_name:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:colorjs:color-name:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:colorjs:color_name:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color:color-name:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color:color_name:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/color-string/node_modules/color-name/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/color-name@2.1.0?package-id=ccb5c4e0781c9f6b", + "type": "library", + "author": "Dmitry Iv ", + "name": "color-name", + "version": "2.1.0", + "description": "A list of color names and its values", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-name:color-name:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-name@2.1.0", + "externalReferences": [ + { + "url": "http://github.com/colorjs/color-name.git", + "type": "distribution" + }, + { + "url": "https://github.com/colorjs/color-name", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color-name:color_name:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color_name:color-name:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color_name:color_name:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:colorjs:color-name:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:colorjs:color_name:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color:color-name:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color:color_name:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/color/node_modules/color-name/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/color-string@2.1.4?package-id=fd7a5e418139965b", + "type": "library", + "author": "Josh Junon (https://github.com/qix-), Maxime Thirouin, Dyma Ywanov , Heather Arthur , LitoMore (https://github.com/LitoMore)", + "name": "color-string", + "version": "2.1.4", + "description": "Parser and generator for CSS color strings", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:color-string_project:color-string:2.1.4:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/color-string@2.1.4", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/color-string/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/color-support@1.1.3?package-id=a1e232528ce637f4", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "color-support", + "version": "1.1.3", + "description": "A module which will endeavor to guess your terminal's level of color support.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:color-support:color-support:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/color-support@1.1.3", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/color-support.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color-support:color_support:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color_support:color-support:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color_support:color_support:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color:color-support:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:color:color_support:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/color-support/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/colors@1.1.2?package-id=774e316934f12a96", + "type": "library", + "author": "Marak Squires", + "name": "colors", + "version": "1.1.2", + "description": "get colors in your node.js console", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:colors:colors:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/colors@1.1.2", + "externalReferences": [ + { + "url": "http://github.com/Marak/colors.js.git", + "type": "distribution" + }, + { + "url": "https://github.com/Marak/colors.js", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Marak:colors:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/grunt-legacy-log/node_modules/colors/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/colors@1.4.0?package-id=ba9f99e8572f2682", + "type": "library", + "author": "Marak Squires, DABH (https://github.com/DABH)", + "name": "colors", + "version": "1.4.0", + "description": "get colors in your node.js console", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:colors:colors:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/colors@1.4.0", + "externalReferences": [ + { + "url": "http://github.com/Marak/colors.js.git", + "type": "distribution" + }, + { + "url": "https://github.com/Marak/colors.js", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Marak:colors:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/colors/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/commander@2.20.3?package-id=23da7748c749bc68", + "type": "library", + "author": "TJ Holowaychuk ", + "name": "commander", + "version": "2.20.3", + "description": "the complete solution for node.js command-line programs", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:commander:commander:2.20.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/commander@2.20.3", + "externalReferences": [ + { + "url": "https://github.com/tj/commander.js.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tj:commander:2.20.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/seek-bzip/node_modules/commander/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/commander@2.20.3?package-id=3facda85b5f59f2a", + "type": "library", + "author": "TJ Holowaychuk ", + "name": "commander", + "version": "2.20.3", + "description": "the complete solution for node.js command-line programs", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:commander:commander:2.20.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/commander@2.20.3", + "externalReferences": [ + { + "url": "https://github.com/tj/commander.js.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tj:commander:2.20.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/yaml-schema-validator/node_modules/commander/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/component-emitter@1.3.1?package-id=ebc8491ac18b63ae", + "type": "library", + "name": "component-emitter", + "version": "1.3.1", + "description": "Event emitter", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:component-emitter:component-emitter:1.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/component-emitter@1.3.1", + "externalReferences": [ + { + "url": "https://github.com/sindresorhus/component-emitter.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:component-emitter:component_emitter:1.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:component_emitter:component-emitter:1.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:component_emitter:component_emitter:1.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sindresorhus:component-emitter:1.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sindresorhus:component_emitter:1.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:component:component-emitter:1.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:component:component_emitter:1.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/component-emitter/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/component-type@1.2.1?package-id=e91a1227114ad372", + "type": "library", + "name": "component-type", + "version": "1.2.1", + "description": "Cross-browser type assertions (less broken typeof)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:component-type:component-type:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/component-type@1.2.1", + "externalReferences": [ + { + "url": "https://github.com/component/type.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:component-type:component_type:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:component_type:component-type:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:component_type:component_type:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:component:component-type:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:component:component_type:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/component-type/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/compress-commons@1.2.2?package-id=798bc97add5e6f68", + "type": "library", + "author": "Chris Talkington (http://christalkington.com/)", + "name": "compress-commons", + "version": "1.2.2", + "description": "a library that defines a common interface for working with archive formats within node", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:compress-commons:compress-commons:1.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/compress-commons@1.2.2", + "externalReferences": [ + { + "url": "https://github.com/archiverjs/node-compress-commons.git", + "type": "distribution" + }, + { + "url": "https://github.com/archiverjs/node-compress-commons", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:compress-commons:compress_commons:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:compress_commons:compress-commons:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:compress_commons:compress_commons:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:archiverjs:compress-commons:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:archiverjs:compress_commons:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:compress:compress-commons:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:compress:compress_commons:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/compress-commons/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/compressible@2.0.18?package-id=d33659b98b525c44", + "type": "library", + "author": "Douglas Christopher Wilson , Jonathan Ong (http://jongleberry.com), Jeremiah Senkpiel (https://searchbeam.jit.su)", + "name": "compressible", + "version": "2.0.18", + "description": "Compressible Content-Type / mime checking", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:compressible:compressible:2.0.18:*:*:*:*:*:*:*", + "purl": "pkg:npm/compressible@2.0.18", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/compressible/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/compression@1.8.1?package-id=828f0284d303f177", + "type": "library", + "author": "Douglas Christopher Wilson , Jonathan Ong (http://jongleberry.com)", + "name": "compression", + "version": "1.8.1", + "description": "Node.js compression middleware", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:compression:compression:1.8.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/compression@1.8.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/compression/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/concat-map@0.0.1?package-id=e899cd35e0ecfcf6", + "type": "library", + "author": "James Halliday (http://substack.net)", + "name": "concat-map", + "version": "0.0.1", + "description": "concatenative mapdashery", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:concat-map:concat-map:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/concat-map@0.0.1", + "externalReferences": [ + { + "url": "git://github.com/substack/node-concat-map.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:concat-map:concat_map:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:concat_map:concat-map:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:concat_map:concat_map:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:substack:concat-map:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:substack:concat_map:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:concat:concat-map:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:concat:concat_map:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/concat-map/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/concat-stream@1.6.2?package-id=3cf686e52af98b9c", + "type": "library", + "author": "Max Ogden ", + "name": "concat-stream", + "version": "1.6.2", + "description": "writable stream that concatenates strings or binary data and calls a callback with the result", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:concat-stream:concat-stream:1.6.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/concat-stream@1.6.2", + "externalReferences": [ + { + "url": "http://github.com/maxogden/concat-stream.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:concat-stream:concat_stream:1.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:concat_stream:concat-stream:1.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:concat_stream:concat_stream:1.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:maxogden:concat-stream:1.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:maxogden:concat_stream:1.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:concat:concat-stream:1.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:concat:concat_stream:1.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/concat-stream/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/config@3.3.12?package-id=f5d30e88e089520d", + "type": "library", + "author": "Loren West ", + "name": "config", + "version": "3.3.12", + "description": "Configuration control for production node deployments", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-config:config:3.3.12:*:*:*:*:*:*:*", + "purl": "pkg:npm/config@3.3.12", + "externalReferences": [ + { + "url": "http://github.com/node-config/node-config.git", + "type": "distribution" + }, + { + "url": "http://github.com/node-config/node-config.git", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:config:config:3.3.12:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/config/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/console-control-strings@1.1.0?package-id=62af6322c8da5d46", + "type": "library", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "console-control-strings", + "version": "1.1.0", + "description": "A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning. This is a subset of both ansi and vt100. All control codes included work on both Windows & Unix-like OSes, except where noted.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:console-control-strings:console-control-strings:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/console-control-strings@1.1.0", + "externalReferences": [ + { + "url": "https://github.com/iarna/console-control-strings", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:console-control-strings:console_control_strings:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:console_control_strings:console-control-strings:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:console_control_strings:console_control_strings:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:console-control:console-control-strings:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:console-control:console_control_strings:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:console_control:console-control-strings:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:console_control:console_control_strings:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:console:console-control-strings:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:console:console_control_strings:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iarna:console-control-strings:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iarna:console_control_strings:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/console-control-strings/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/constantinople@4.0.1?package-id=64ecabe801d13657", + "type": "library", + "author": "ForbesLindesay", + "name": "constantinople", + "version": "4.0.1", + "description": "Determine whether a JavaScript expression evaluates to a constant", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ForbesLindesay:constantinople:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/constantinople@4.0.1", + "externalReferences": [ + { + "url": "https://github.com/ForbesLindesay/constantinople.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:constantinople:constantinople:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/constantinople/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/content-disposition@0.5.4?package-id=6d99ffbaf9a3dbf2", + "type": "library", + "author": "Douglas Christopher Wilson ", + "name": "content-disposition", + "version": "0.5.4", + "description": "Create and parse Content-Disposition header", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:content-disposition:content-disposition:0.5.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/content-disposition@0.5.4", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:content-disposition:content_disposition:0.5.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:content_disposition:content-disposition:0.5.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:content_disposition:content_disposition:0.5.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:content:content-disposition:0.5.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:content:content_disposition:0.5.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/content-disposition/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/content-type@1.0.5?package-id=1e680466175b93f0", + "type": "library", + "author": "Douglas Christopher Wilson ", + "name": "content-type", + "version": "1.0.5", + "description": "Create and parse HTTP Content-Type header", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:content-type:content-type:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/content-type@1.0.5", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:content-type:content_type:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:content_type:content-type:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:content_type:content_type:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:content:content-type:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:content:content_type:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/content-type/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/cookie@0.4.2?package-id=299182936c2fe78a", + "type": "library", + "author": "Roman Shtylman , Douglas Christopher Wilson ", + "name": "cookie", + "version": "0.4.2", + "description": "HTTP server cookie parsing and serialization", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cookie:cookie:0.4.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/cookie@0.4.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/engine.io/node_modules/cookie/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/cookie@0.7.2?package-id=f30613fbb68ad643", + "type": "library", + "author": "Roman Shtylman , Douglas Christopher Wilson ", + "name": "cookie", + "version": "0.7.2", + "description": "HTTP server cookie parsing and serialization", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cookie:cookie:0.7.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/cookie@0.7.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/cookie/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/cookie-parser@1.4.7?package-id=52b0adc8ff09f017", + "type": "library", + "author": "TJ Holowaychuk (http://tjholowaychuk.com), Douglas Christopher Wilson ", + "name": "cookie-parser", + "version": "1.4.7", + "description": "Parse HTTP request cookies", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cookie-parser:cookie-parser:1.4.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/cookie-parser@1.4.7", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cookie-parser:cookie_parser:1.4.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cookie_parser:cookie-parser:1.4.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cookie_parser:cookie_parser:1.4.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cookie:cookie-parser:1.4.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cookie:cookie_parser:1.4.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/cookie-parser/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/cookie-signature@1.0.6?package-id=f7961879936cc1c0", + "type": "library", + "author": "TJ Holowaychuk ", + "name": "cookie-signature", + "version": "1.0.6", + "description": "Sign and unsign cookies", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cookie-signature_project:cookie-signature:1.0.6:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/cookie-signature@1.0.6", + "externalReferences": [ + { + "url": "https://github.com/visionmedia/node-cookie-signature.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/cookie-signature/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/cookieconsent@3.1.1?package-id=bb40a8bd1a8c4f47", + "type": "library", + "author": "Osano, Inc., a Public Benefit Corporation", + "name": "cookieconsent", + "version": "3.1.1", + "description": "Osano cookie consent tool.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cookieconsent:cookieconsent:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/cookieconsent@3.1.1", + "externalReferences": [ + { + "url": "https://github.com/osano/cookieconsent.git", + "type": "distribution" + }, + { + "url": "http://cookieconsent.osano.com/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:osano:cookieconsent:3.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/cookieconsent/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/core-util-is@1.0.2?package-id=36ced86f8d381680", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "core-util-is", + "version": "1.0.2", + "description": "The `util.is*` functions introduced in Node v0.12.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:core-util-is:core-util-is:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/core-util-is@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/core-util-is", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:core-util-is:core_util_is:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:core_util_is:core-util-is:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:core_util_is:core_util_is:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:core-util:core-util-is:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:core-util:core_util_is:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:core_util:core-util-is:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:core_util:core_util_is:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:core-util-is:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:core_util_is:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:core:core-util-is:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:core:core_util_is:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/core-util-is/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/cors@2.8.6?package-id=28cd483ddf972fcf", + "type": "library", + "author": "Troy Goode (https://github.com/troygoode/)", + "name": "cors", + "version": "2.8.6", + "description": "Node.js CORS middleware", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cors:cors:2.8.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/cors@2.8.6", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/cors/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/crc@3.8.0?package-id=5e060917a7b152aa", + "type": "library", + "author": "Alex Gorbatchev (https://github.com/alexgorbatchev)", + "name": "crc", + "version": "3.8.0", + "description": "Module for calculating Cyclic Redundancy Check (CRC) for Node.js and the Browser.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:alexgorbatchev:crc:3.8.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/crc@3.8.0", + "externalReferences": [ + { + "url": "git://github.com/alexgorbatchev/node-crc.git", + "type": "distribution" + }, + { + "url": "https://github.com/alexgorbatchev/node-crc", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:crc:crc:3.8.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/crc/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/crc32-stream@2.0.0?package-id=828196a2c6a9e027", + "type": "library", + "author": "Chris Talkington (http://christalkington.com/)", + "name": "crc32-stream", + "version": "2.0.0", + "description": "a streaming CRC32 checksumer", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:crc32-stream:crc32-stream:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/crc32-stream@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/archiverjs/node-crc32-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/archiverjs/node-crc32-stream", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:crc32-stream:crc32_stream:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:crc32_stream:crc32-stream:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:crc32_stream:crc32_stream:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:archiverjs:crc32-stream:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:archiverjs:crc32_stream:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:crc32:crc32-stream:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:crc32:crc32_stream:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/crc32-stream/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/cross-spawn@7.0.6?package-id=1b99c2dc3022043f", + "type": "library", + "author": "André Cruz ", + "name": "cross-spawn", + "version": "7.0.6", + "description": "Cross platform child_process#spawn and child_process#spawnSync", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cross-spawn:cross-spawn:7.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/cross-spawn@7.0.6", + "externalReferences": [ + { + "url": "https://github.com/moxystudio/node-cross-spawn", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cross-spawn:cross_spawn:7.0.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cross_spawn:cross-spawn:7.0.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cross_spawn:cross_spawn:7.0.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:moxystudio:cross-spawn:7.0.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:moxystudio:cross_spawn:7.0.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cross:cross-spawn:7.0.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cross:cross_spawn:7.0.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/cross-spawn/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/crypto-js@3.3.0?package-id=c00a8b8b043aae72", + "type": "library", + "author": "Evan Vosberg (http://github.com/evanvosberg)", + "name": "crypto-js", + "version": "3.3.0", + "description": "JavaScript library of crypto standards.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:crypto-js:crypto-js:3.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/crypto-js@3.3.0", + "externalReferences": [ + { + "url": "http://github.com/brix/crypto-js.git", + "type": "distribution" + }, + { + "url": "http://github.com/brix/crypto-js", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:crypto-js:crypto_js:3.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:crypto_js:crypto-js:3.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:crypto_js:crypto_js:3.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:crypto:crypto-js:3.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:crypto:crypto_js:3.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:brix:crypto-js:3.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:brix:crypto_js:3.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/crypto-js/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/dateformat@4.6.3?package-id=a64626d34d414995", + "type": "library", + "author": "Steven Levithan, Steven Levithan, Felix Geisendörfer , Christoph Tavan , Jon Schlinkert (https://github.com/jonschlinkert), Felix Geisendörfer ", + "name": "dateformat", + "version": "4.6.3", + "description": "A node.js package for Steven Levithan's excellent dateFormat() function.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dateformat:dateformat:4.6.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/dateformat@4.6.3", + "externalReferences": [ + { + "url": "https://github.com/felixge/node-dateformat.git", + "type": "distribution" + }, + { + "url": "https://github.com/felixge/node-dateformat", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:felixge:dateformat:4.6.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/dateformat/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/debug@2.6.9?package-id=10669af3063683d1", + "type": "library", + "author": "TJ Holowaychuk , Nathan Rajlich (http://n8.io), Andrew Rhyne ", + "name": "debug", + "version": "2.6.9", + "description": "small debugging utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:debug_project:debug:2.6.9:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/debug@2.6.9", + "externalReferences": [ + { + "url": "git://github.com/visionmedia/debug.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/debug/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/debug@3.2.7?package-id=264ab504b40249b9", + "type": "library", + "author": "TJ Holowaychuk , Nathan Rajlich (http://n8.io), Andrew Rhyne ", + "name": "debug", + "version": "3.2.7", + "description": "small debugging utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:debug_project:debug:3.2.7:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/debug@3.2.7", + "externalReferences": [ + { + "url": "git://github.com/visionmedia/debug.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/needle/node_modules/debug/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/debug@4.3.7?package-id=22ca8deef5f297f6", + "type": "library", + "author": "Josh Junon (https://github.com/qix-), TJ Holowaychuk , Nathan Rajlich (http://n8.io), Andrew Rhyne ", + "name": "debug", + "version": "4.3.7", + "description": "Lightweight debugging utility for Node.js and the browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:debug_project:debug:4.3.7:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/debug@4.3.7", + "externalReferences": [ + { + "url": "git://github.com/debug-js/debug.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/engine.io/node_modules/debug/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/debug@4.3.7?package-id=e7f20fd9a328a043", + "type": "library", + "author": "Josh Junon (https://github.com/qix-), TJ Holowaychuk , Nathan Rajlich (http://n8.io), Andrew Rhyne ", + "name": "debug", + "version": "4.3.7", + "description": "Lightweight debugging utility for Node.js and the browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:debug_project:debug:4.3.7:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/debug@4.3.7", + "externalReferences": [ + { + "url": "git://github.com/debug-js/debug.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/socket.io-parser/node_modules/debug/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/debug@4.3.7?package-id=6d203381ab9d6e72", + "type": "library", + "author": "Josh Junon (https://github.com/qix-), TJ Holowaychuk , Nathan Rajlich (http://n8.io), Andrew Rhyne ", + "name": "debug", + "version": "4.3.7", + "description": "Lightweight debugging utility for Node.js and the browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:debug_project:debug:4.3.7:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/debug@4.3.7", + "externalReferences": [ + { + "url": "git://github.com/debug-js/debug.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/socket.io/node_modules/debug/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/debug@4.4.3?package-id=96a05aabc0ed29ae", + "type": "library", + "author": "Josh Junon (https://github.com/qix-), TJ Holowaychuk , Nathan Rajlich (http://n8.io), Andrew Rhyne ", + "name": "debug", + "version": "4.4.3", + "description": "Lightweight debugging utility for Node.js and the browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:debug_project:debug:4.4.3:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/debug@4.4.3", + "externalReferences": [ + { + "url": "git://github.com/debug-js/debug.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/http-proxy-agent/node_modules/debug/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/debug@4.4.3?package-id=5f2bc8a7a1df0ac9", + "type": "library", + "author": "Josh Junon (https://github.com/qix-), TJ Holowaychuk , Nathan Rajlich (http://n8.io), Andrew Rhyne ", + "name": "debug", + "version": "4.4.3", + "description": "Lightweight debugging utility for Node.js and the browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:debug_project:debug:4.4.3:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/debug@4.4.3", + "externalReferences": [ + { + "url": "git://github.com/debug-js/debug.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/https-proxy-agent/node_modules/debug/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/debug@4.4.3?package-id=147dc5d482c47542", + "type": "library", + "author": "Josh Junon (https://github.com/qix-), TJ Holowaychuk , Nathan Rajlich (http://n8.io), Andrew Rhyne ", + "name": "debug", + "version": "4.4.3", + "description": "Lightweight debugging utility for Node.js and the browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:debug_project:debug:4.4.3:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/debug@4.4.3", + "externalReferences": [ + { + "url": "git://github.com/debug-js/debug.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sequelize/node_modules/debug/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/debug@4.4.3?package-id=e66299331a6f8bdf", + "type": "library", + "author": "Josh Junon (https://github.com/qix-), TJ Holowaychuk , Nathan Rajlich (http://n8.io), Andrew Rhyne ", + "name": "debug", + "version": "4.4.3", + "description": "Lightweight debugging utility for Node.js and the browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:debug_project:debug:4.4.3:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/debug@4.4.3", + "externalReferences": [ + { + "url": "git://github.com/debug-js/debug.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/socks-proxy-agent/node_modules/debug/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/debug@4.4.3?package-id=fa51368f69175110", + "type": "library", + "author": "Josh Junon (https://github.com/qix-), TJ Holowaychuk , Nathan Rajlich (http://n8.io), Andrew Rhyne ", + "name": "debug", + "version": "4.4.3", + "description": "Lightweight debugging utility for Node.js and the browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:debug_project:debug:4.4.3:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/debug@4.4.3", + "externalReferences": [ + { + "url": "git://github.com/debug-js/debug.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/debug/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/decamelize@1.2.0?package-id=0373f8c69a364fc0", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "decamelize", + "version": "1.2.0", + "description": "Convert a camelized string into a lowercased one with a custom separator: unicornRainbow → unicorn_rainbow", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:decamelize:decamelize:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/decamelize@1.2.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/decamelize/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/decode-uri-component@0.2.2?package-id=74df95998cf0457f", + "type": "library", + "author": "Sam Verschueren (github.com/SamVerschueren)", + "name": "decode-uri-component", + "version": "0.2.2", + "description": "A better decodeURIComponent", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:decode-uri-component_project:decode-uri-component:0.2.2:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/decode-uri-component@0.2.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/decode-uri-component/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/decompress@4.2.1?package-id=6b277cfffb36ff6b", + "type": "library", + "author": "Kevin Mårtensson (github.com/kevva)", + "name": "decompress", + "version": "4.2.1", + "description": "Extracting archives made easy", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:decompress_project:decompress:4.2.1:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/decompress@4.2.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/decompress/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/decompress-response@3.3.0?package-id=677d9609cb5a01bc", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com), Vsevolod Strukchinsky (github.com/floatdrop)", + "name": "decompress-response", + "version": "3.3.0", + "description": "Decompress a HTTP response if needed", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:decompress-response:decompress-response:3.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/decompress-response@3.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress-response:decompress_response:3.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress_response:decompress-response:3.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress_response:decompress_response:3.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress:decompress-response:3.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress:decompress_response:3.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/decompress-response/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/decompress-response@4.2.1?package-id=a1d858a92cd4e324", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "decompress-response", + "version": "4.2.1", + "description": "Decompress a HTTP response if needed", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:decompress-response:decompress-response:4.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/decompress-response@4.2.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress-response:decompress_response:4.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress_response:decompress-response:4.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress_response:decompress_response:4.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress:decompress-response:4.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress:decompress_response:4.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/simple-get/node_modules/decompress-response/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/decompress-response@6.0.0?package-id=4181e152e271bc83", + "type": "library", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "decompress-response", + "version": "6.0.0", + "description": "Decompress a HTTP response if needed", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:decompress-response:decompress-response:6.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/decompress-response@6.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress-response:decompress_response:6.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress_response:decompress-response:6.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress_response:decompress_response:6.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress:decompress-response:6.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress:decompress_response:6.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/libxmljs2/node_modules/decompress-response/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/decompress-response@6.0.0?package-id=ab3ad7acc2109685", + "type": "library", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "decompress-response", + "version": "6.0.0", + "description": "Decompress a HTTP response if needed", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:decompress-response:decompress-response:6.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/decompress-response@6.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress-response:decompress_response:6.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress_response:decompress-response:6.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress_response:decompress_response:6.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress:decompress-response:6.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress:decompress_response:6.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/decompress-response/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/decompress-tar@4.1.1?package-id=1935244d7cb90f17", + "type": "library", + "author": "Kevin Mårtensson (https://github.com/kevva)", + "name": "decompress-tar", + "version": "4.1.1", + "description": "decompress tar plugin", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:decompress-tar:decompress-tar:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/decompress-tar@4.1.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress-tar:decompress_tar:4.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress_tar:decompress-tar:4.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress_tar:decompress_tar:4.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress:decompress-tar:4.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress:decompress_tar:4.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/decompress-tar/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/decompress-tarbz2@4.1.1?package-id=ebabda097779037b", + "type": "library", + "author": "Kevin Mårtensson (github.com/kevva)", + "name": "decompress-tarbz2", + "version": "4.1.1", + "description": "decompress tar.bz2 plugin", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:decompress-tarbz2:decompress-tarbz2:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/decompress-tarbz2@4.1.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress-tarbz2:decompress_tarbz2:4.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress_tarbz2:decompress-tarbz2:4.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress_tarbz2:decompress_tarbz2:4.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress:decompress-tarbz2:4.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress:decompress_tarbz2:4.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/decompress-tarbz2/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/decompress-targz@4.1.1?package-id=9dc81698c9e5e345", + "type": "library", + "author": "Kevin Mårtensson (https://github.com/kevva)", + "name": "decompress-targz", + "version": "4.1.1", + "description": "decompress tar.gz plugin", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:decompress-targz:decompress-targz:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/decompress-targz@4.1.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress-targz:decompress_targz:4.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress_targz:decompress-targz:4.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress_targz:decompress_targz:4.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress:decompress-targz:4.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress:decompress_targz:4.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/decompress-targz/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/decompress-unzip@4.0.1?package-id=8979cd9c25111673", + "type": "library", + "author": "Kevin Mårtensson (https://github.com/kevva)", + "name": "decompress-unzip", + "version": "4.0.1", + "description": "decompress zip plugin", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:decompress-unzip:decompress-unzip:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/decompress-unzip@4.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress-unzip:decompress_unzip:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress_unzip:decompress-unzip:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress_unzip:decompress_unzip:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress:decompress-unzip:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:decompress:decompress_unzip:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/decompress-unzip/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/deep-equal@2.2.3?package-id=ddff5e641b501fb1", + "type": "library", + "author": "James Halliday (http://substack.net), James Halliday (https://substack.net), Jordan Harband ", + "name": "deep-equal", + "version": "2.2.3", + "description": "node's assert.deepEqual algorithm", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:deep-equal:deep-equal:2.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/deep-equal@2.2.3", + "externalReferences": [ + { + "url": "http://github.com/inspect-js/node-deep-equal.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:deep-equal:deep_equal:2.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:deep_equal:deep-equal:2.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:deep_equal:deep_equal:2.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:deep-equal:2.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:deep_equal:2.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:deep:deep-equal:2.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:deep:deep_equal:2.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/deep-equal/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/deep-extend@0.6.0?package-id=8b13bde9c77e7706", + "type": "library", + "author": "Viacheslav Lotsmanov , Romain Prieto (https://github.com/rprieto), Max Maximov (https://github.com/maxmaximov), Marshall Bowers (https://github.com/maxdeviant), Misha Wakerman (https://github.com/mwakerman)", + "name": "deep-extend", + "version": "0.6.0", + "description": "Recursive object extending", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:deep_extend_project:deep_extend:0.6.0:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/deep-extend@0.6.0", + "externalReferences": [ + { + "url": "git://github.com/unclechu/node-deep-extend.git", + "type": "distribution" + }, + { + "url": "https://github.com/unclechu/node-deep-extend", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/deep-extend/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/define-data-property@1.1.4?package-id=1cebccf42426559d", + "type": "library", + "author": "Jordan Harband ", + "name": "define-data-property", + "version": "1.1.4", + "description": "Define a data property on an object. Will fall back to assignment in an engine without descriptors.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:define-data-property:define-data-property:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/define-data-property@1.1.4", + "externalReferences": [ + { + "url": "git+https://github.com/ljharb/define-data-property.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/define-data-property#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:define-data-property:define_data_property:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:define_data_property:define-data-property:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:define_data_property:define_data_property:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:define-data:define-data-property:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:define-data:define_data_property:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:define_data:define-data-property:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:define_data:define_data_property:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:define:define-data-property:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:define:define_data_property:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:define-data-property:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:define_data_property:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/define-data-property/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/define-properties@1.2.1?package-id=c3e457ef9955cb09", + "type": "library", + "author": "Jordan Harband ", + "name": "define-properties", + "version": "1.2.1", + "description": "Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:define-properties:define-properties:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/define-properties@1.2.1", + "externalReferences": [ + { + "url": "git://github.com/ljharb/define-properties.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:define-properties:define_properties:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:define_properties:define-properties:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:define_properties:define_properties:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:define:define-properties:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:define:define_properties:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:define-properties:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:define_properties:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/define-properties/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/delegates@1.0.0?package-id=36ba8b211a3558dd", + "type": "library", + "name": "delegates", + "version": "1.0.0", + "description": "delegate methods and accessors to another property", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:delegates:delegates:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/delegates@1.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/delegates/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/depd@1.1.2?package-id=d03c5ad5ccf7e9e9", + "type": "library", + "author": "Douglas Christopher Wilson ", + "name": "depd", + "version": "1.1.2", + "description": "Deprecate all the things", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:depd:depd:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/depd@1.1.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/serve-index/node_modules/depd/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/depd@2.0.0?package-id=bdc1789d5398f38c", + "type": "library", + "author": "Douglas Christopher Wilson ", + "name": "depd", + "version": "2.0.0", + "description": "Deprecate all the things", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:depd:depd:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/depd@2.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/depd/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/destroy@1.2.0?package-id=a84307f7c46d36c4", + "type": "library", + "author": "Jonathan Ong (http://jongleberry.com), Douglas Christopher Wilson ", + "name": "destroy", + "version": "1.2.0", + "description": "destroy a stream if possible", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:destroy:destroy:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/destroy@1.2.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/destroy/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/detect-file@1.0.0?package-id=7900e478eb751255", + "type": "library", + "author": "Brian Woodward (https://github.com/doowb)", + "name": "detect-file", + "version": "1.0.0", + "description": "Detects if a file exists and returns the resolved filepath.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:detect-file:detect-file:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/detect-file@1.0.0", + "externalReferences": [ + { + "url": "https://github.com/doowb/detect-file", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:detect-file:detect_file:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:detect_file:detect-file:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:detect_file:detect_file:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:detect:detect-file:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:detect:detect_file:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:doowb:detect-file:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:doowb:detect_file:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/detect-file/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/detect-libc@1.0.3?package-id=f7f8634dce77a9d4", + "type": "library", + "author": "Lovell Fuller , Niklas Salmoukas ", + "name": "detect-libc", + "version": "1.0.3", + "description": "Node.js module to detect the C standard library (libc) implementation family and version", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:detect-libc:detect-libc:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/detect-libc@1.0.3", + "externalReferences": [ + { + "url": "git://github.com/lovell/detect-libc", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:detect-libc:detect_libc:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:detect_libc:detect-libc:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:detect_libc:detect_libc:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:detect:detect-libc:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:detect:detect_libc:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:lovell:detect-libc:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:lovell:detect_libc:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/detect-libc/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/detect-libc@2.1.2?package-id=2c10f1616cf4c3dd", + "type": "library", + "author": "Lovell Fuller , Niklas Salmoukas , Vinícius Lourenço ", + "name": "detect-libc", + "version": "2.1.2", + "description": "Node.js module to detect the C standard library (libc) implementation family and version", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:detect-libc:detect-libc:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/detect-libc@2.1.2", + "externalReferences": [ + { + "url": "git://github.com/lovell/detect-libc.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:detect-libc:detect_libc:2.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:detect_libc:detect-libc:2.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:detect_libc:detect_libc:2.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:detect:detect-libc:2.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:detect:detect_libc:2.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:lovell:detect-libc:2.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:lovell:detect_libc:2.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/libxmljs2/node_modules/detect-libc/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/detect-libc@2.1.2?package-id=6d778b0d97d5f5f2", + "type": "library", + "author": "Lovell Fuller , Niklas Salmoukas , Vinícius Lourenço ", + "name": "detect-libc", + "version": "2.1.2", + "description": "Node.js module to detect the C standard library (libc) implementation family and version", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:detect-libc:detect-libc:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/detect-libc@2.1.2", + "externalReferences": [ + { + "url": "git://github.com/lovell/detect-libc.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:detect-libc:detect_libc:2.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:detect_libc:detect-libc:2.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:detect_libc:detect_libc:2.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:detect:detect-libc:2.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:detect:detect_libc:2.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:lovell:detect-libc:2.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:lovell:detect_libc:2.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/detect-libc/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/dfa@1.2.0?package-id=bf5c1ed7af4e574c", + "type": "library", + "author": "Devon Govett ", + "name": "dfa", + "version": "1.2.0", + "description": "A state machine compiler", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:devongovett:dfa:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/dfa@1.2.0", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/devongovett/dfa.git", + "type": "distribution" + }, + { + "url": "https://github.com/devongovett/dfa#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:dfa:dfa:1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/dfa/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/doctypes@1.1.0?package-id=3f4ef5f1be454910", + "type": "library", + "author": "ForbesLindesay", + "name": "doctypes", + "version": "1.1.0", + "description": "Shorthands for commonly used doctypes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:doctypes:doctypes:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/doctypes@1.1.0", + "externalReferences": [ + { + "url": "https://github.com/pugjs/doctypes.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pugjs:doctypes:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/doctypes/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/domelementtype@1.3.1?package-id=0d6ad87159c99050", + "type": "library", + "author": "Felix Boehm ", + "name": "domelementtype", + "version": "1.3.1", + "description": "all the types of nodes in htmlparser2's dom", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:domelementtype:domelementtype:1.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/domelementtype@1.3.1", + "externalReferences": [ + { + "url": "git://github.com/fb55/domelementtype.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fb55:domelementtype:1.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sanitize-html/node_modules/domelementtype/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/domhandler@2.1.0?package-id=a2a50cc71f9f1510", + "type": "library", + "author": "Felix Boehm ", + "name": "domhandler", + "version": "2.1.0", + "description": "handler for htmlparser2 that turns pages into a dom", + "licenses": [ + { + "license": { + "name": "sha256:cb992345949ccd6e8394b2cd6c465f7b897c864f845937dbf64e8997f389e164" + } + } + ], + "cpe": "cpe:2.3:a:domhandler:domhandler:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/domhandler@2.1.0", + "externalReferences": [ + { + "url": "git://github.com/fb55/domhandler.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fb55:domhandler:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sanitize-html/node_modules/domhandler/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/domutils@1.1.6?package-id=66e2979442791477", + "type": "library", + "author": "Felix Boehm ", + "name": "domutils", + "version": "1.1.6", + "description": "utilities for working with htmlparser2's dom", + "licenses": [ + { + "license": { + "name": "sha256:cb992345949ccd6e8394b2cd6c465f7b897c864f845937dbf64e8997f389e164" + } + } + ], + "cpe": "cpe:2.3:a:domutils:domutils:1.1.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/domutils@1.1.6", + "externalReferences": [ + { + "url": "git://github.com/FB55/domutils.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:FB55:domutils:1.1.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sanitize-html/node_modules/domutils/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/dottie@2.0.7?package-id=4d0527c1ef4f6b69", + "type": "library", + "author": "Mick Hansen ", + "name": "dottie", + "version": "2.0.7", + "description": "Fast and safe nested object access and manipulation in JavaScript", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dottie_project:dottie:2.0.7:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/dottie@2.0.7", + "externalReferences": [ + { + "url": "git://github.com/mickhansen/dottie.js.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/dottie/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/double-ended-queue@0.9.7?package-id=5725c7f9e5544384", + "type": "library", + "author": "Petka Antonov (http://github.com/petkaantonov/)", + "name": "double-ended-queue", + "version": "0.9.7", + "description": "Extremely fast double-ended queue implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:double-ended-queue:double-ended-queue:0.9.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/double-ended-queue@0.9.7", + "externalReferences": [ + { + "url": "git://github.com/petkaantonov/deque.git", + "type": "distribution" + }, + { + "url": "https://github.com/petkaantonov/deque", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:double-ended-queue:double_ended_queue:0.9.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:double_ended_queue:double-ended-queue:0.9.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:double_ended_queue:double_ended_queue:0.9.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:double-ended:double-ended-queue:0.9.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:double-ended:double_ended_queue:0.9.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:double_ended:double-ended-queue:0.9.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:double_ended:double_ended_queue:0.9.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:petkaantonov:double-ended-queue:0.9.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:petkaantonov:double_ended_queue:0.9.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:double:double-ended-queue:0.9.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:double:double_ended_queue:0.9.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/double-ended-queue/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/download@8.0.0?package-id=303671788db63ed8", + "type": "library", + "author": "Kevin Mårtensson (github.com/kevva)", + "name": "download", + "version": "8.0.0", + "description": "Download and extract files", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:download:download:8.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/download@8.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/download/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/dunder-proto@1.0.1?package-id=c93aa5bde2f41455", + "type": "library", + "author": "Jordan Harband ", + "name": "dunder-proto", + "version": "1.0.1", + "description": "If available, the `Object.prototype.__proto__` accessor and mutator, call-bound", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dunder-proto:dunder-proto:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/dunder-proto@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/es-shims/dunder-proto.git", + "type": "distribution" + }, + { + "url": "https://github.com/es-shims/dunder-proto#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:dunder-proto:dunder_proto:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:dunder_proto:dunder-proto:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:dunder_proto:dunder_proto:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es-shims:dunder-proto:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es-shims:dunder_proto:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:dunder:dunder-proto:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:dunder:dunder_proto:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/dunder-proto/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/duplexer2@0.1.4?package-id=937130df2f15286c", + "type": "library", + "author": "Conrad Pankoff (http://www.fknsrs.biz/)", + "name": "duplexer2", + "version": "0.1.4", + "description": "Like duplexer but using streams3", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:duplexer2:duplexer2:0.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/duplexer2@0.1.4", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/duplexer2/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/duplexer3@0.1.5?package-id=48435aec46970511", + "type": "library", + "name": "duplexer3", + "version": "0.1.5", + "description": "Like duplexer but using streams3", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:duplexer3:duplexer3:0.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/duplexer3@0.1.5", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/duplexer3/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/eastasianwidth@0.2.0?package-id=ea06a962daee959b", + "type": "library", + "author": "Masaki Komagata", + "name": "eastasianwidth", + "version": "0.2.0", + "description": "Get East Asian Width from a character.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:eastasianwidth:eastasianwidth:0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/eastasianwidth@0.2.0", + "externalReferences": [ + { + "url": "git://github.com/komagata/eastasianwidth.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:komagata:eastasianwidth:0.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/eastasianwidth/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ee-first@1.1.1?package-id=5a203220d6135893", + "type": "library", + "author": "Jonathan Ong (http://jongleberry.com), Douglas Christopher Wilson ", + "name": "ee-first", + "version": "1.1.1", + "description": "return the first event in a set of ee/event pairs", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ee-first:ee-first:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ee-first@1.1.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ee-first:ee_first:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ee_first:ee-first:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ee_first:ee_first:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ee:ee-first:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ee:ee_first:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/ee-first/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/eivindfjeldstad-dot@0.0.1?package-id=11589b7a5b7cc74d", + "type": "library", + "name": "eivindfjeldstad-dot", + "version": "0.0.1", + "description": "Get and set object properties with dot notation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:eivindfjeldstad-dot:eivindfjeldstad-dot:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/eivindfjeldstad-dot@0.0.1", + "externalReferences": [ + { + "url": "https://github.com/eivindfjeldstad/dot.git", + "type": "distribution" + }, + { + "url": "https://github.com/eivindfjeldstad/dot", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:eivindfjeldstad-dot:eivindfjeldstad_dot:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:eivindfjeldstad_dot:eivindfjeldstad-dot:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:eivindfjeldstad_dot:eivindfjeldstad_dot:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:eivindfjeldstad:eivindfjeldstad-dot:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:eivindfjeldstad:eivindfjeldstad_dot:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/eivindfjeldstad-dot/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/emoji-regex@8.0.0?package-id=1acb6377c4d1be44", + "type": "library", + "author": "Mathias Bynens (https://mathiasbynens.be/)", + "name": "emoji-regex", + "version": "8.0.0", + "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mathiasbynens:emoji-regex:8.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/emoji-regex@8.0.0", + "externalReferences": [ + { + "url": "https://github.com/mathiasbynens/emoji-regex.git", + "type": "distribution" + }, + { + "url": "https://mths.be/emoji-regex", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mathiasbynens:emoji_regex:8.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:emoji-regex:emoji-regex:8.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:emoji-regex:emoji_regex:8.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:emoji_regex:emoji-regex:8.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:emoji_regex:emoji_regex:8.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:emoji:emoji-regex:8.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:emoji:emoji_regex:8.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/emoji-regex/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/emoji-regex@9.2.2?package-id=01b12619eb310009", + "type": "library", + "author": "Mathias Bynens (https://mathiasbynens.be/)", + "name": "emoji-regex", + "version": "9.2.2", + "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mathiasbynens:emoji-regex:9.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/emoji-regex@9.2.2", + "externalReferences": [ + { + "url": "https://github.com/mathiasbynens/emoji-regex.git", + "type": "distribution" + }, + { + "url": "https://mths.be/emoji-regex", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mathiasbynens:emoji_regex:9.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:emoji-regex:emoji-regex:9.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:emoji-regex:emoji_regex:9.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:emoji_regex:emoji-regex:9.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:emoji_regex:emoji_regex:9.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:emoji:emoji-regex:9.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:emoji:emoji_regex:9.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@isaacs/cliui/node_modules/emoji-regex/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/emoji-regex@9.2.2?package-id=28604ba4f35e223d", + "type": "library", + "author": "Mathias Bynens (https://mathiasbynens.be/)", + "name": "emoji-regex", + "version": "9.2.2", + "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mathiasbynens:emoji-regex:9.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/emoji-regex@9.2.2", + "externalReferences": [ + { + "url": "https://github.com/mathiasbynens/emoji-regex.git", + "type": "distribution" + }, + { + "url": "https://mths.be/emoji-regex", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mathiasbynens:emoji_regex:9.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:emoji-regex:emoji-regex:9.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:emoji-regex:emoji_regex:9.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:emoji_regex:emoji-regex:9.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:emoji_regex:emoji_regex:9.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:emoji:emoji-regex:9.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:emoji:emoji_regex:9.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/wrap-ansi/node_modules/emoji-regex/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/enabled@2.0.0?package-id=4d6bcacb368fa08d", + "type": "library", + "author": "Arnout Kazemier", + "name": "enabled", + "version": "2.0.0", + "description": "Check if a certain debug flag is enabled.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:3rd-Eden:enabled:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/enabled@2.0.0", + "externalReferences": [ + { + "url": "git://github.com/3rd-Eden/enabled.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:enabled:enabled:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/enabled/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/encodeurl@2.0.0?package-id=b55917a42e374d3b", + "type": "library", + "author": "Douglas Christopher Wilson ", + "name": "encodeurl", + "version": "2.0.0", + "description": "Encode a URL to a percent-encoded form, excluding already-encoded sequences", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:encodeurl:encodeurl:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/encodeurl@2.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/encodeurl/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/encoding@0.1.13?package-id=6edb52dab3ea3e2a", + "type": "library", + "author": "Andris Reinman", + "name": "encoding", + "version": "0.1.13", + "description": "Convert encodings, uses iconv-lite", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:encoding:encoding:0.1.13:*:*:*:*:*:*:*", + "purl": "pkg:npm/encoding@0.1.13", + "externalReferences": [ + { + "url": "https://github.com/andris9/encoding.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:andris9:encoding:0.1.13:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/encoding/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/end-of-stream@1.4.5?package-id=b935e39bff7e678c", + "type": "library", + "author": "Mathias Buus ", + "name": "end-of-stream", + "version": "1.4.5", + "description": "Call a callback when a readable/writable/duplex stream has completed or failed.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:end-of-stream:end-of-stream:1.4.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/end-of-stream@1.4.5", + "externalReferences": [ + { + "url": "git://github.com/mafintosh/end-of-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/end-of-stream", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:end-of-stream:end_of_stream:1.4.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:end_of_stream:end-of-stream:1.4.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:end_of_stream:end_of_stream:1.4.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mafintosh:end-of-stream:1.4.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mafintosh:end_of_stream:1.4.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:end-of:end-of-stream:1.4.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:end-of:end_of_stream:1.4.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:end_of:end-of-stream:1.4.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:end_of:end_of_stream:1.4.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:end:end-of-stream:1.4.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:end:end_of_stream:1.4.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/end-of-stream/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/engine.io@4.1.2?package-id=8c4af4f22e5de7e4", + "type": "library", + "author": "Guillermo Rauch , Eugen Dueck, Afshin Mehrabani, Christoph Dorn, Mark Mokryn ", + "name": "engine.io", + "version": "4.1.2", + "description": "The realtime engine behind Socket.IO. Provides the foundation of a bidirectional connection between client and server", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:socket:engine.io:4.1.2:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/engine.io@4.1.2", + "externalReferences": [ + { + "url": "https://github.com/socketio/engine.io", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/engine.io/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/engine.io-parser@4.0.3?package-id=1c0c027153be229a", + "type": "library", + "name": "engine.io-parser", + "version": "4.0.3", + "description": "Parser for the client for the realtime Engine", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:engine.io-parser:engine.io-parser:4.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/engine.io-parser@4.0.3", + "externalReferences": [ + { + "url": "https://github.com/socketio/engine.io-parser", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:engine.io-parser:engine.io_parser:4.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:engine.io_parser:engine.io-parser:4.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:engine.io_parser:engine.io_parser:4.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:engine.io:engine.io-parser:4.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:engine.io:engine.io_parser:4.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socketio:engine.io-parser:4.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socketio:engine.io_parser:4.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/engine.io-parser/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/env-paths@2.2.1?package-id=8a04a7a9aa4f21f3", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "env-paths", + "version": "2.2.1", + "description": "Get paths for storing things like data, config, cache, etc", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:env-paths:env-paths:2.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/env-paths@2.2.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:env-paths:env_paths:2.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:env_paths:env-paths:2.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:env_paths:env_paths:2.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:env:env-paths:2.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:env:env_paths:2.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/env-paths/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/err-code@2.0.3?package-id=eb67f19cafbd6c3f", + "type": "library", + "author": "IndigoUnited (http://indigounited.com)", + "name": "err-code", + "version": "2.0.3", + "description": "Create an error with a code", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:IndigoUnited:err-code:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/err-code@2.0.3", + "externalReferences": [ + { + "url": "git://github.com/IndigoUnited/js-err-code.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:IndigoUnited:err_code:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:err-code:err-code:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:err-code:err_code:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:err_code:err-code:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:err_code:err_code:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:err:err-code:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:err:err_code:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/err-code/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/errorhandler@1.5.2?package-id=8ed65ca95e3bdfd3", + "type": "library", + "author": "Douglas Christopher Wilson , Jonathan Ong (http://jongleberry.com)", + "name": "errorhandler", + "version": "1.5.2", + "description": "Development-only error handler middleware", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:errorhandler:errorhandler:1.5.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/errorhandler@1.5.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/errorhandler/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/es-define-property@1.0.1?package-id=cbcde0a9a6111387", + "type": "library", + "author": "Jordan Harband ", + "name": "es-define-property", + "version": "1.0.1", + "description": "`Object.defineProperty`, but not IE 8's broken one.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:es-define-property:es-define-property:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/es-define-property@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/ljharb/es-define-property.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/es-define-property#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es-define-property:es_define_property:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es_define_property:es-define-property:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es_define_property:es_define_property:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es-define:es-define-property:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es-define:es_define_property:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es_define:es-define-property:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es_define:es_define_property:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:es-define-property:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:es_define_property:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es:es-define-property:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es:es_define_property:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/es-define-property/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/es-errors@1.3.0?package-id=b80402f3b1ddfc9d", + "type": "library", + "author": "Jordan Harband ", + "name": "es-errors", + "version": "1.3.0", + "description": "A simple cache for a few of the JS Error constructors.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:es-errors:es-errors:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/es-errors@1.3.0", + "externalReferences": [ + { + "url": "git+https://github.com/ljharb/es-errors.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/es-errors#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es-errors:es_errors:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es_errors:es-errors:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es_errors:es_errors:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:es-errors:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:es_errors:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es:es-errors:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es:es_errors:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/es-errors/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/es-get-iterator@1.1.3?package-id=916d823925222e15", + "type": "library", + "author": "Jordan Harband ", + "name": "es-get-iterator", + "version": "1.1.3", + "description": "Get an iterator for any JS language value. Works robustly across all environments, all versions.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:es-get-iterator:es-get-iterator:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/es-get-iterator@1.1.3", + "externalReferences": [ + { + "url": "git+https://github.com/ljharb/es-get-iterator.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/es-get-iterator#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es-get-iterator:es_get_iterator:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es_get_iterator:es-get-iterator:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es_get_iterator:es_get_iterator:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es-get:es-get-iterator:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es-get:es_get_iterator:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es_get:es-get-iterator:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es_get:es_get_iterator:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:es-get-iterator:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:es_get_iterator:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es:es-get-iterator:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es:es_get_iterator:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/es-get-iterator/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/es-object-atoms@1.1.1?package-id=2d8cc620cca5c55e", + "type": "library", + "author": "Jordan Harband ", + "name": "es-object-atoms", + "version": "1.1.1", + "description": "ES Object-related atoms: Object, ToObject, RequireObjectCoercible", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:es-object-atoms:es-object-atoms:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/es-object-atoms@1.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/ljharb/es-object-atoms.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/es-object-atoms#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es-object-atoms:es_object_atoms:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es_object_atoms:es-object-atoms:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es_object_atoms:es_object_atoms:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es-object:es-object-atoms:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es-object:es_object_atoms:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es_object:es-object-atoms:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es_object:es_object_atoms:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:es-object-atoms:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:es_object_atoms:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es:es-object-atoms:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es:es_object_atoms:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/es-object-atoms/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/escape-html@1.0.3?package-id=9f83c2eadc36cf52", + "type": "library", + "name": "escape-html", + "version": "1.0.3", + "description": "Escape string for use in HTML", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:escape-html:escape-html:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/escape-html@1.0.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:escape-html:escape_html:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:escape_html:escape-html:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:escape_html:escape_html:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:escape:escape-html:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:escape:escape_html:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/escape-html/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/escape-string-regexp@1.0.5?package-id=6ec01e61f077601f", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com), Sindre Sorhus (sindresorhus.com), Joshua Boy Nicolai Appelman (jbna.nl)", + "name": "escape-string-regexp", + "version": "1.0.5", + "description": "Escape RegExp special characters", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:escape-string-regexp:escape-string-regexp:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/escape-string-regexp@1.0.5", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:escape-string-regexp:escape_string_regexp:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:escape_string_regexp:escape-string-regexp:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:escape_string_regexp:escape_string_regexp:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:escape-string:escape-string-regexp:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:escape-string:escape_string_regexp:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:escape_string:escape-string-regexp:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:escape_string:escape_string_regexp:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:escape:escape-string-regexp:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:escape:escape_string_regexp:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/escape-string-regexp/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/esprima@1.0.4?package-id=6ca86a7d5c3b7019", + "type": "library", + "author": "Ariya Hidayat ", + "name": "esprima", + "version": "1.0.4", + "description": "ECMAScript parsing infrastructure for multipurpose analysis", + "licenses": [ + { + "license": { + "name": "BSD" + } + } + ], + "cpe": "cpe:2.3:a:esprima:esprima:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/esprima@1.0.4", + "externalReferences": [ + { + "url": "http://github.com/ariya/esprima.git", + "type": "distribution" + }, + { + "url": "http://esprima.org", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ariya:esprima:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/notevil/node_modules/esprima/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/esprima@4.0.1?package-id=d77e18bbba704dde", + "type": "library", + "author": "Ariya Hidayat , Ariya Hidayat ", + "name": "esprima", + "version": "4.0.1", + "description": "ECMAScript parsing infrastructure for multipurpose analysis", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:esprima:esprima:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/esprima@4.0.1", + "externalReferences": [ + { + "url": "https://github.com/jquery/esprima.git", + "type": "distribution" + }, + { + "url": "http://esprima.org", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jquery:esprima:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/esprima/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/etag@1.8.1?package-id=5bf7a215d5351e40", + "type": "library", + "author": "Douglas Christopher Wilson , David Björklund ", + "name": "etag", + "version": "1.8.1", + "description": "Create simple HTTP ETags", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:etag:etag:1.8.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/etag@1.8.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/etag/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ethers@6.16.0?package-id=086cdac5ff7442ec", + "type": "library", + "author": "Richard Moore ", + "name": "ethers", + "version": "6.16.0", + "description": "A complete and compact Ethereum library, for dapps, wallets and any other tools.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ethers-io:ethers:6.16.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ethers@6.16.0", + "externalReferences": [ + { + "url": "git://github.com/ethers-io/ethers.js.git", + "type": "distribution" + }, + { + "url": "https://ethers.org", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ethers:ethers:6.16.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/ethers/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/event-target-shim@5.0.1?package-id=38d2981e57e00f35", + "type": "library", + "author": "Toru Nagashima", + "name": "event-target-shim", + "version": "5.0.1", + "description": "An implementation of WHATWG EventTarget interface.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:event-target-shim:event-target-shim:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/event-target-shim@5.0.1", + "externalReferences": [ + { + "url": "https://github.com/mysticatea/event-target-shim.git", + "type": "distribution" + }, + { + "url": "https://github.com/mysticatea/event-target-shim", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:event-target-shim:event_target_shim:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:event_target_shim:event-target-shim:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:event_target_shim:event_target_shim:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:event-target:event-target-shim:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:event-target:event_target_shim:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:event_target:event-target-shim:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:event_target:event_target_shim:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mysticatea:event-target-shim:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mysticatea:event_target_shim:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:event:event-target-shim:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:event:event_target_shim:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/event-target-shim/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/eventemitter2@0.4.14?package-id=f97beb76cff278cb", + "type": "library", + "author": "Eric Elliott, , , , ", + "name": "eventemitter2", + "version": "0.4.14", + "description": "A Node.js event emitter implementation with namespaces, wildcards, TTL and browser support.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:eventemitter2:eventemitter2:0.4.14:*:*:*:*:*:*:*", + "purl": "pkg:npm/eventemitter2@0.4.14", + "externalReferences": [ + { + "url": "git://github.com/hij1nx/EventEmitter2.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hij1nx:eventemitter2:0.4.14:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/grunt/node_modules/eventemitter2/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/eventemitter3@1.1.1?package-id=26888713cea7d58a", + "type": "library", + "author": "Arnout Kazemier", + "name": "eventemitter3", + "version": "1.1.1", + "description": "EventEmitter3 focuses on performance while maintaining a Node.js AND browser compatible interface.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:eventemitter3:eventemitter3:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/eventemitter3@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/primus/eventemitter3.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:primus:eventemitter3:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/eventemitter3/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/events@3.3.0?package-id=a91d0202fa8ea285", + "type": "library", + "author": "Irakli Gozalishvili (http://jeditoolkit.com)", + "name": "events", + "version": "3.3.0", + "description": "Node's event emitter for all engines.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:Gozala:events:3.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/events@3.3.0", + "externalReferences": [ + { + "url": "git://github.com/Gozala/events.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:events:events:3.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/events/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/eventsource-parser@3.0.8?package-id=eb00f4505da970a6", + "type": "library", + "author": "Espen Hovlandsdal ", + "name": "eventsource-parser", + "version": "3.0.8", + "description": "Streaming, source-agnostic EventSource/Server-Sent Events parser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:eventsource-parser:eventsource-parser:3.0.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/eventsource-parser@3.0.8", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/rexxars/eventsource-parser.git", + "type": "distribution" + }, + { + "url": "https://github.com/rexxars/eventsource-parser#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:eventsource-parser:eventsource_parser:3.0.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:eventsource_parser:eventsource-parser:3.0.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:eventsource_parser:eventsource_parser:3.0.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:eventsource:eventsource-parser:3.0.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:eventsource:eventsource_parser:3.0.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:rexxars:eventsource-parser:3.0.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:rexxars:eventsource_parser:3.0.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/eventsource-parser/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/exit@0.1.2?package-id=8803d0f682f78ae8", + "type": "library", + "author": "\"Cowboy\" Ben Alman (http://benalman.com/)", + "name": "exit", + "version": "0.1.2", + "description": "A replacement for process.exit that ensures stdio are fully drained before exiting.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cowboy:exit:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/exit@0.1.2", + "externalReferences": [ + { + "url": "git://github.com/cowboy/node-exit.git", + "type": "distribution" + }, + { + "url": "https://github.com/cowboy/node-exit", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:exit:exit:0.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/exit/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/exit-x@0.2.2?package-id=d351e530d5e62171", + "type": "library", + "author": "Grunt Development Team (https://gruntjs.com/development-team)", + "name": "exit-x", + "version": "0.2.2", + "description": "A replacement for process.exit that ensures stdio are fully drained before exiting.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:gruntjs:exit-x:0.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/exit-x@0.2.2", + "externalReferences": [ + { + "url": "git://github.com/gruntjs/node-exit-x.git", + "type": "distribution" + }, + { + "url": "https://github.com/gruntjs/node-exit-x", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:gruntjs:exit_x:0.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:exit-x:exit-x:0.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:exit-x:exit_x:0.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:exit_x:exit-x:0.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:exit_x:exit_x:0.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:exit:exit-x:0.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:exit:exit_x:0.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/exit-x/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/expand-template@2.0.3?package-id=1308274036073bda", + "type": "library", + "author": "LM ", + "name": "expand-template", + "version": "2.0.3", + "description": "Expand placeholders in a template string", + "licenses": [ + { + "expression": "MIT OR WTFPL" + } + ], + "cpe": "cpe:2.3:a:expand-template:expand-template:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/expand-template@2.0.3", + "externalReferences": [ + { + "url": "https://github.com/ralphtheninja/expand-template.git", + "type": "distribution" + }, + { + "url": "https://github.com/ralphtheninja/expand-template", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:expand-template:expand_template:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:expand_template:expand-template:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:expand_template:expand_template:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ralphtheninja:expand-template:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ralphtheninja:expand_template:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:expand:expand-template:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:expand:expand_template:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/expand-template/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/expand-tilde@2.0.2?package-id=bbefedd1ec4b8ed7", + "type": "library", + "author": "Jon Schlinkert (https://github.com/jonschlinkert)", + "name": "expand-tilde", + "version": "2.0.2", + "description": "Bash-like tilde expansion for node.js. Expands a leading tilde in a file path to the user home directory, or `~+` to the cwd.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jonschlinkert:expand-tilde:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/expand-tilde@2.0.2", + "externalReferences": [ + { + "url": "https://github.com/jonschlinkert/expand-tilde", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jonschlinkert:expand_tilde:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:expand-tilde:expand-tilde:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:expand-tilde:expand_tilde:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:expand_tilde:expand-tilde:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:expand_tilde:expand_tilde:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:expand:expand-tilde:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:expand:expand_tilde:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/expand-tilde/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/exponential-backoff@3.1.3?package-id=88fb48899d371526", + "type": "library", + "author": "Sami Sayegh", + "name": "exponential-backoff", + "version": "3.1.3", + "description": "A utility that allows retrying a function with an exponential delay between attempts.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:exponential-backoff:exponential-backoff:3.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/exponential-backoff@3.1.3", + "externalReferences": [ + { + "url": "git+https://github.com/coveooss/exponential-backoff.git", + "type": "distribution" + }, + { + "url": "https://github.com/coveooss/exponential-backoff#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:exponential-backoff:exponential_backoff:3.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:exponential_backoff:exponential-backoff:3.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:exponential_backoff:exponential_backoff:3.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:exponential:exponential-backoff:3.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:exponential:exponential_backoff:3.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:coveooss:exponential-backoff:3.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:coveooss:exponential_backoff:3.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/exponential-backoff/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/express@4.22.2?package-id=99208581103e7228", + "type": "library", + "author": "TJ Holowaychuk , Aaron Heckmann , Ciaran Jessup , Douglas Christopher Wilson , Guillermo Rauch , Jonathan Ong , Roman Shtylman , Young Jae Sim ", + "name": "express", + "version": "4.22.2", + "description": "Fast, unopinionated, minimalist web framework", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:openjsf:express:4.22.2:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/express@4.22.2", + "externalReferences": [ + { + "url": "http://expressjs.com/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/express/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/express-ipfilter@1.4.0?package-id=7bce23118d035582", + "type": "library", + "author": "jetersen", + "name": "express-ipfilter", + "version": "1.4.0", + "description": "A light-weight IP address based filtering system", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:express-ipfilter:express-ipfilter:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/express-ipfilter@1.4.0", + "externalReferences": [ + { + "url": "https://github.com/jetersen/express-ipfilter", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:express-ipfilter:express_ipfilter:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:express_ipfilter:express-ipfilter:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:express_ipfilter:express_ipfilter:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jetersen:express-ipfilter:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jetersen:express_ipfilter:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:express:express-ipfilter:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:express:express_ipfilter:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/express-ipfilter/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/express-jwt@0.1.3?package-id=b057e452c5702954", + "type": "library", + "author": "Matias Woloski (https://www.auth0.com/)", + "name": "express-jwt", + "version": "0.1.3", + "description": "JWT authentication middleware.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:auth0:express-jwt:0.1.3:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/express-jwt@0.1.3", + "externalReferences": [ + { + "url": "git://github.com/auth0/express-jwt.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/express-jwt/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/express-rate-limit@7.5.1?package-id=7b3c60ae93ab123f", + "type": "library", + "author": "Nathan Friedly (http://nfriedly.com/)", + "name": "express-rate-limit", + "version": "7.5.1", + "description": "Basic IP rate-limiting middleware for Express. Use to limit repeated requests to public APIs and/or endpoints such as password reset.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:express-rate-limit:express-rate-limit:7.5.1:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/express-rate-limit@7.5.1", + "externalReferences": [ + { + "url": "git+https://github.com/express-rate-limit/express-rate-limit.git", + "type": "distribution" + }, + { + "url": "https://github.com/express-rate-limit/express-rate-limit", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/express-rate-limit/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/express-robots-txt@0.5.0?package-id=fc0608b65fd469f7", + "type": "library", + "author": "modosc (http://github.com/modosc), ashaffer (http://github.com/ashaffer), ", + "name": "express-robots-txt", + "version": "0.5.0", + "description": "Express middleware to serve and generate robots.txt", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:express-robots-txt:express-robots-txt:0.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/express-robots-txt@0.5.0", + "externalReferences": [ + { + "url": "https://github.com/modosc/express-robots-txt", + "type": "distribution" + }, + { + "url": "https://github.com/modosc/express-robots-txt", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:express-robots-txt:express_robots_txt:0.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:express_robots_txt:express-robots-txt:0.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:express_robots_txt:express_robots_txt:0.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:express-robots:express-robots-txt:0.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:express-robots:express_robots_txt:0.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:express_robots:express-robots-txt:0.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:express_robots:express_robots_txt:0.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:express:express-robots-txt:0.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:express:express_robots_txt:0.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:modosc:express-robots-txt:0.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:modosc:express_robots_txt:0.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/express-robots-txt/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/express-security.txt@2.0.0?package-id=a5e9507bd21efb6e", + "type": "library", + "name": "express-security.txt", + "version": "2.0.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:express-security.txt:express-security.txt:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/express-security.txt@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/gergelyke/express-security.txt.git", + "type": "distribution" + }, + { + "url": "https://github.com/gergelyke/express-security.txt#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:express-security.txt:express_security.txt:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:express_security.txt:express-security.txt:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:express_security.txt:express_security.txt:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:gergelyke:express-security.txt:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:gergelyke:express_security.txt:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:express:express-security.txt:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:express:express_security.txt:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/express-security.txt/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ext-list@2.2.2?package-id=42eb35c00aa55cff", + "type": "library", + "author": "Kevin Mårtensson (https://github.com/kevva)", + "name": "ext-list", + "version": "2.2.2", + "description": "List of known file extensions and their MIME types", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ext-list:ext-list:2.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/ext-list@2.2.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ext-list:ext_list:2.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ext_list:ext-list:2.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ext_list:ext_list:2.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ext:ext-list:2.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ext:ext_list:2.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/ext-list/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ext-name@5.0.0?package-id=738d43aeb5b7acf8", + "type": "library", + "author": "Kevin Mårtensson (https://github.com/kevva)", + "name": "ext-name", + "version": "5.0.0", + "description": "Get the file extension and MIME type from a file", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ext-name:ext-name:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ext-name@5.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ext-name:ext_name:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ext_name:ext-name:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ext_name:ext_name:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ext:ext-name:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ext:ext_name:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/ext-name/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/extend@3.0.2?package-id=68ec8b67c7986d90", + "type": "library", + "author": "Stefan Thomas (http://www.justmoon.net), Jordan Harband (https://github.com/ljharb)", + "name": "extend", + "version": "3.0.2", + "description": "Port of jQuery.extend for node.js and the browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:extend_project:extend:3.0.2:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/extend@3.0.2", + "externalReferences": [ + { + "url": "https://github.com/justmoon/node-extend.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/extend/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/false_main?package-id=3d00c14a77d4b177", + "type": "library", + "name": "false_main", + "version": "UNKNOWN", + "cpe": "cpe:2.3:a:false-main:false-main:*:*:*:*:*:*:*:*", + "purl": "pkg:npm/false_main", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:false-main:false_main:*:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:false_main:false-main:*:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:false_main:false_main:*:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:false:false-main:*:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:false:false_main:*:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/resolve/test/resolver/false_main/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/fast.js@0.1.1?package-id=097fffa0302024b5", + "type": "library", + "author": "Charles Pick ", + "name": "fast.js", + "version": "0.1.1", + "description": "Faster user-land reimplementations of native functions with extra helpers.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:codemix:fast.js:0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/fast.js@0.1.1", + "externalReferences": [ + { + "url": "http://github.com/codemix/fast.js", + "type": "distribution" + }, + { + "url": "https://github.com/codemix/fast.js", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fast.js:fast.js:0.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/fast.js/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/fd-slicer@1.1.0?package-id=b27ace599789b7aa", + "type": "library", + "author": "Andrew Kelley ", + "name": "fd-slicer", + "version": "1.1.0", + "description": "safely create multiple ReadStream or WriteStream objects from the same file descriptor", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fd-slicer:fd-slicer:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fd-slicer@1.1.0", + "externalReferences": [ + { + "url": "git://github.com/andrewrk/node-fd-slicer.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fd-slicer:fd_slicer:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fd_slicer:fd-slicer:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fd_slicer:fd_slicer:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:andrewrk:fd-slicer:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:andrewrk:fd_slicer:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fd:fd-slicer:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fd:fd_slicer:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/fd-slicer/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/fdir@6.5.0?package-id=153d959dba8cb29c", + "type": "library", + "author": "thecodrr ", + "name": "fdir", + "version": "6.5.0", + "description": "The fastest directory crawler & globbing alternative to glob, fast-glob, & tiny-glob. Crawls 1m files in < 1s", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:thecodrr:fdir:6.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fdir@6.5.0", + "externalReferences": [ + { + "url": "git+https://github.com/thecodrr/fdir.git", + "type": "distribution" + }, + { + "url": "https://github.com/thecodrr/fdir#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fdir:fdir:6.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/tinyglobby/node_modules/fdir/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/feature-policy@0.6.0?package-id=d157c8b5d6cc7dce", + "type": "library", + "author": "Evan Hahn (https://evanhahn.com)", + "name": "feature-policy", + "version": "0.6.0", + "description": "Middleware to set the Feature-Policy HTTP header", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:feature-policy:feature-policy:0.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/feature-policy@0.6.0", + "externalReferences": [ + { + "url": "git://github.com/helmetjs/feature-policy.git", + "type": "distribution" + }, + { + "url": "https://github.com/helmetjs/feature-policy", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:feature-policy:feature_policy:0.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:feature_policy:feature-policy:0.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:feature_policy:feature_policy:0.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:helmetjs:feature-policy:0.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:helmetjs:feature_policy:0.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:feature:feature-policy:0.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:feature:feature_policy:0.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/feature-policy/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/fecha@4.2.3?package-id=4c7f9896237220f1", + "type": "library", + "author": "Taylor Hakes", + "name": "fecha", + "version": "4.2.3", + "description": "Date formatting and parsing", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:taylorhakes:fecha:4.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/fecha@4.2.3", + "externalReferences": [ + { + "url": "https://taylorhakes@github.com/taylorhakes/fecha.git", + "type": "distribution" + }, + { + "url": "https://github.com/taylorhakes/fecha", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fecha:fecha:4.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/fecha/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/file-stream-rotator@1.0.0?package-id=15f34f70f0b92af7", + "type": "library", + "author": "Roger Castells", + "name": "file-stream-rotator", + "version": "1.0.0", + "description": "Automated stream rotation useful for log files", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:file-stream-rotator:file-stream-rotator:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/file-stream-rotator@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/rogerc/file-stream-rotator.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:file-stream-rotator:file_stream_rotator:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:file_stream_rotator:file-stream-rotator:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:file_stream_rotator:file_stream_rotator:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:file-stream:file-stream-rotator:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:file-stream:file_stream_rotator:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:file_stream:file-stream-rotator:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:file_stream:file_stream_rotator:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:rogerc:file-stream-rotator:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:rogerc:file_stream_rotator:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:file:file-stream-rotator:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:file:file_stream_rotator:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/file-stream-rotator/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/file-type@11.1.0?package-id=67d7e8ff46ed8cb6", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "file-type", + "version": "11.1.0", + "description": "Detect the file type of a Buffer/Uint8Array/ArrayBuffer", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:file-type:11.1.0:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/file-type@11.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/download/node_modules/file-type/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/file-type@16.5.4?package-id=e880d91c1999c011", + "type": "library", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "file-type", + "version": "16.5.4", + "description": "Detect the file type of a Buffer/Uint8Array/ArrayBuffer", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:file-type:16.5.4:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/file-type@16.5.4", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/file-type/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/file-type@3.9.0?package-id=2fb960c1da2a5460", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "file-type", + "version": "3.9.0", + "description": "Detect the file type of a Buffer/Uint8Array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:file-type:3.9.0:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/file-type@3.9.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/decompress-unzip/node_modules/file-type/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/file-type@4.4.0?package-id=e058a6a6b902e7b6", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "file-type", + "version": "4.4.0", + "description": "Detect the file type of a Buffer/Uint8Array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:file-type:4.4.0:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/file-type@4.4.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/archive-type/node_modules/file-type/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/file-type@5.2.0?package-id=fe078f258a41aa0a", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "file-type", + "version": "5.2.0", + "description": "Detect the file type of a Buffer/Uint8Array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:file-type:5.2.0:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/file-type@5.2.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/decompress-tar/node_modules/file-type/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/file-type@5.2.0?package-id=fe9dadf27623df81", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "file-type", + "version": "5.2.0", + "description": "Detect the file type of a Buffer/Uint8Array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:file-type:5.2.0:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/file-type@5.2.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/decompress-targz/node_modules/file-type/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/file-type@6.2.0?package-id=ac71d0dd845ff856", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "file-type", + "version": "6.2.0", + "description": "Detect the file type of a Buffer/Uint8Array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sindresorhus:file-type:6.2.0:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/file-type@6.2.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/decompress-tarbz2/node_modules/file-type/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/file-uri-to-path@1.0.0?package-id=8e20623301b2c459", + "type": "library", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "file-uri-to-path", + "version": "1.0.0", + "description": "Convert a file: URI to a file path", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:file-uri-to-path:file-uri-to-path:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/file-uri-to-path@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/file-uri-to-path.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/file-uri-to-path", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:file-uri-to-path:file_uri_to_path:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:file_uri_to_path:file-uri-to-path:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:file_uri_to_path:file_uri_to_path:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:TooTallNate:file-uri-to-path:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:TooTallNate:file_uri_to_path:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:file-uri-to:file-uri-to-path:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:file-uri-to:file_uri_to_path:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:file_uri_to:file-uri-to-path:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:file_uri_to:file_uri_to_path:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:file-uri:file-uri-to-path:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:file-uri:file_uri_to_path:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:file_uri:file-uri-to-path:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:file_uri:file_uri_to_path:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:file:file-uri-to-path:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:file:file_uri_to_path:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/file-uri-to-path/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/filename-reserved-regex@2.0.0?package-id=9f4d2bdf1bb829e5", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "filename-reserved-regex", + "version": "2.0.0", + "description": "Regular expression for matching reserved filename characters", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:filename-reserved-regex:filename-reserved-regex:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/filename-reserved-regex@2.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:filename-reserved-regex:filename_reserved_regex:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:filename_reserved_regex:filename-reserved-regex:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:filename_reserved_regex:filename_reserved_regex:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:filename-reserved:filename-reserved-regex:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:filename-reserved:filename_reserved_regex:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:filename_reserved:filename-reserved-regex:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:filename_reserved:filename_reserved_regex:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:filename:filename-reserved-regex:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:filename:filename_reserved_regex:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/filename-reserved-regex/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/filenamify@3.0.0?package-id=14ccb7336c2a219a", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "filenamify", + "version": "3.0.0", + "description": "Convert a string to a valid safe filename", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:filenamify:filenamify:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/filenamify@3.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/filenamify/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/fill-range@7.1.1?package-id=cc2dfc20694f22cb", + "type": "library", + "author": "Jon Schlinkert (https://github.com/jonschlinkert), Edo Rivai (edo.rivai.nl), Jon Schlinkert (http://twitter.com/jonschlinkert), Paul Miller (paulmillr.com), Rouven Weßling (www.rouvenwessling.de), ", + "name": "fill-range", + "version": "7.1.1", + "description": "Fill in a range of numbers or letters, optionally passing an increment or `step` to use, or create a regex-compatible range with `options.toRegex`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jonschlinkert:fill-range:7.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/fill-range@7.1.1", + "externalReferences": [ + { + "url": "https://github.com/jonschlinkert/fill-range", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jonschlinkert:fill_range:7.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fill-range:fill-range:7.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fill-range:fill_range:7.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fill_range:fill-range:7.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fill_range:fill_range:7.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fill:fill-range:7.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fill:fill_range:7.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/fill-range/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/finale-rest@1.2.2?package-id=0081831c03dd4ad6", + "type": "library", + "author": "Tom Juszczyk , Matt Broadstone , David Chester , Renzo Rozza Gonzalez ", + "name": "finale-rest", + "version": "1.2.2", + "description": "Create REST resources and controllers with Sequelize and Express or Restify", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tommybananas:finale-rest:1.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/finale-rest@1.2.2", + "externalReferences": [ + { + "url": "https://github.com/tommybananas/finale.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tommybananas:finale_rest:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:finale-rest:finale-rest:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:finale-rest:finale_rest:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:finale_rest:finale-rest:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:finale_rest:finale_rest:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:finale:finale-rest:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:finale:finale_rest:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/finale-rest/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/finalhandler@1.3.2?package-id=6905017da79206c8", + "type": "library", + "author": "Douglas Christopher Wilson ", + "name": "finalhandler", + "version": "1.3.2", + "description": "Node.js final http responder", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:finalhandler:finalhandler:1.3.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/finalhandler@1.3.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/finalhandler/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/find-up@4.1.0?package-id=3413282984ba957b", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "find-up", + "version": "4.1.0", + "description": "Find a file or directory by walking up parent directories", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:find-up:find-up:4.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/find-up@4.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:find-up:find_up:4.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:find_up:find-up:4.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:find_up:find_up:4.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:find:find-up:4.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:find:find_up:4.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/replace/node_modules/find-up/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/findup-sync@4.0.0?package-id=6a5e9cbc54d4e98e", + "type": "library", + "author": "Gulp Team (https://gulpjs.com/), Ben Alman , Tyler Kellen , Jon Schlinkert , Blaine Bublitz ", + "name": "findup-sync", + "version": "4.0.0", + "description": "Find the first file matching a given pattern in the current directory or the nearest ancestor directory.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:findup-sync:findup-sync:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/findup-sync@4.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:findup-sync:findup_sync:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:findup_sync:findup-sync:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:findup_sync:findup_sync:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:findup:findup-sync:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:findup:findup_sync:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/liftup/node_modules/findup-sync/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/findup-sync@5.0.0?package-id=0c79bed4d968f86a", + "type": "library", + "author": "Gulp Team (https://gulpjs.com/), Ben Alman , Tyler Kellen , Jon Schlinkert , Blaine Bublitz ", + "name": "findup-sync", + "version": "5.0.0", + "description": "Find the first file matching a given pattern in the current directory or the nearest ancestor directory.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:findup-sync:findup-sync:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/findup-sync@5.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:findup-sync:findup_sync:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:findup_sync:findup-sync:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:findup_sync:findup_sync:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:findup:findup-sync:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:findup:findup_sync:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/findup-sync/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/fined@1.2.0?package-id=d4103ef83c6d123b", + "type": "library", + "author": "Gulp Team (http://gulpjs.com/), Takayuki Sato , Blaine Bublitz ", + "name": "fined", + "version": "1.2.0", + "description": "Find a file given a declaration of locations.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fined:fined:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fined@1.2.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/fined/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/flagged-respawn@1.0.1?package-id=cb10ed4f13e99eda", + "type": "library", + "author": "Gulp Team (http://gulpjs.com/), Takayuki Sato , Bertrand Marron , Tyler Kellen , Blaine Bublitz ", + "name": "flagged-respawn", + "version": "1.0.1", + "description": "A tool for respawning node binaries when special flags are present.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:flagged-respawn:flagged-respawn:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/flagged-respawn@1.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:flagged-respawn:flagged_respawn:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:flagged_respawn:flagged-respawn:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:flagged_respawn:flagged_respawn:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:flagged:flagged-respawn:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:flagged:flagged_respawn:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/flagged-respawn/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/fn.name@1.1.0?package-id=b0ab3f38f00f9e67", + "type": "library", + "author": "Arnout Kazemier", + "name": "fn.name", + "version": "1.1.0", + "description": "Extract names from functions", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:3rd-Eden:fn.name:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fn.name@1.1.0", + "externalReferences": [ + { + "url": "https://github.com/3rd-Eden/fn.name", + "type": "distribution" + }, + { + "url": "https://github.com/3rd-Eden/fn.name", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fn.name:fn.name:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/fn.name/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/fontkit@1.9.0?package-id=4d71c5f55dc211a8", + "type": "library", + "author": "Devon Govett ", + "name": "fontkit", + "version": "1.9.0", + "description": "An advanced font engine for Node and the browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:foliojs:fontkit:1.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fontkit@1.9.0", + "externalReferences": [ + { + "url": "git://github.com/foliojs/fontkit.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fontkit:fontkit:1.9.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/fontkit/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/for-each@0.3.5?package-id=a555afc10b78c8e9", + "type": "library", + "author": "Raynos , Jake Verbaten, Jordan Harband (https://github.com/ljharb)", + "name": "for-each", + "version": "0.3.5", + "description": "A better forEach", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:for-each:for-each:0.3.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/for-each@0.3.5", + "externalReferences": [ + { + "url": "https://github.com/Raynos/for-each.git", + "type": "distribution" + }, + { + "url": "https://github.com/Raynos/for-each", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:for-each:for_each:0.3.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:for_each:for-each:0.3.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:for_each:for_each:0.3.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Raynos:for-each:0.3.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Raynos:for_each:0.3.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:for:for-each:0.3.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:for:for_each:0.3.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/for-each/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/for-in@1.0.2?package-id=967e44e4af521888", + "type": "library", + "author": "Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), Paul Irish (http://paulirish.com)", + "name": "for-in", + "version": "1.0.2", + "description": "Iterate over the own and inherited enumerable properties of an object, and return an object with properties that evaluate to true from the callback. Exit early by returning `false`. JavaScript/Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jonschlinkert:for-in:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/for-in@1.0.2", + "externalReferences": [ + { + "url": "https://github.com/jonschlinkert/for-in", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jonschlinkert:for_in:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:for-in:for-in:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:for-in:for_in:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:for_in:for-in:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:for_in:for_in:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:for:for-in:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:for:for_in:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/for-in/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/for-own@1.0.0?package-id=411a3440348fb71b", + "type": "library", + "author": "Jon Schlinkert (https://github.com/jonschlinkert), Javier Cejudo (https://www.javiercejudo.com), Jon Schlinkert (http://twitter.com/jonschlinkert)", + "name": "for-own", + "version": "1.0.0", + "description": "Iterate over the own enumerable properties of an object, and return an object with properties that evaluate to true from the callback. Exit early by returning `false`. JavaScript/Node.js.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jonschlinkert:for-own:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/for-own@1.0.0", + "externalReferences": [ + { + "url": "https://github.com/jonschlinkert/for-own", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jonschlinkert:for_own:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:for-own:for-own:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:for-own:for_own:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:for_own:for-own:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:for_own:for_own:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:for:for-own:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:for:for_own:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/for-own/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/foreachasync@3.0.0?package-id=386d38aff1a706fc", + "type": "library", + "author": "AJ ONeal (http://coolaj86.com/)", + "name": "foreachasync", + "version": "3.0.0", + "description": "A node- and browser-ready async counterpart of Array.prototype.forEach", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:foreachasync:foreachasync:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/foreachasync@3.0.0", + "externalReferences": [ + { + "url": "git://github.com/FuturesJS/forEachAsync.git", + "type": "distribution" + }, + { + "url": "https://github.com/FuturesJS/forEachAsync", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:FuturesJS:foreachasync:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/foreachasync/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/foreground-child@3.3.1?package-id=49b05c8a83bc898e", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "foreground-child", + "version": "3.3.1", + "description": "Run a child as if it's the foreground process. Give it stdio. Exit when it exits.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:foreground-child:foreground-child:3.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/foreground-child@3.3.1", + "externalReferences": [ + { + "url": "git+https://github.com/tapjs/foreground-child.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:foreground-child:foreground_child:3.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:foreground_child:foreground-child:3.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:foreground_child:foreground_child:3.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:foreground:foreground-child:3.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:foreground:foreground_child:3.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/foreground-child/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/forwarded@0.2.0?package-id=cf9f575adc30e843", + "type": "library", + "author": "Douglas Christopher Wilson ", + "name": "forwarded", + "version": "0.2.0", + "description": "Parse HTTP X-Forwarded-For header", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:forwarded_project:forwarded:0.2.0:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/forwarded@0.2.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/forwarded/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/fresh@0.5.2?package-id=c33f6af8ffbc3ffd", + "type": "library", + "author": "TJ Holowaychuk (http://tjholowaychuk.com), Douglas Christopher Wilson , Jonathan Ong (http://jongleberry.com)", + "name": "fresh", + "version": "0.5.2", + "description": "HTTP response freshness testing", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fresh_project:fresh:0.5.2:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/fresh@0.5.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/fresh/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/from2@2.3.0?package-id=f049b24706a2c914", + "type": "library", + "author": "Hugh Kennedy (http://hughsk.io/), Mathias Buus ", + "name": "from2", + "version": "2.3.0", + "description": "Convenience wrapper for ReadableStream, with an API lifted from \"from\" and \"through2\"", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:hughsk:from2:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/from2@2.3.0", + "externalReferences": [ + { + "url": "git://github.com/hughsk/from2", + "type": "distribution" + }, + { + "url": "https://github.com/hughsk/from2", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:from2:from2:2.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/from2/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/frontend@20.0.0?package-id=820ce7954665253b", + "type": "library", + "name": "frontend", + "version": "20.0.0", + "cpe": "cpe:2.3:a:frontend:frontend:20.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/frontend@20.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/frontend/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/fs-constants@1.0.0?package-id=702abc5d79be7e46", + "type": "library", + "author": "Mathias Buus (@mafintosh)", + "name": "fs-constants", + "version": "1.0.0", + "description": "Require constants across node and the browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:fs-constants:fs-constants:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs-constants@1.0.0", + "externalReferences": [ + { + "url": "https://github.com/mafintosh/fs-constants.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/fs-constants", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fs-constants:fs_constants:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fs_constants:fs-constants:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fs_constants:fs_constants:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mafintosh:fs-constants:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mafintosh:fs_constants:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fs:fs-constants:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fs:fs_constants:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/fs-constants/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/fs-extra@9.1.0?package-id=59256da7fb4a7586", + "type": "library", + "author": "JP Richardson ", + "name": "fs-extra", + "version": "9.1.0", + "description": "fs-extra contains methods that aren't included in the vanilla Node.js fs package. Such as recursive mkdir, copy, and remove.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jprichardson:fs-extra:9.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs-extra@9.1.0", + "externalReferences": [ + { + "url": "https://github.com/jprichardson/node-fs-extra", + "type": "distribution" + }, + { + "url": "https://github.com/jprichardson/node-fs-extra", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jprichardson:fs_extra:9.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fs-extra:fs-extra:9.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fs-extra:fs_extra:9.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fs_extra:fs-extra:9.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fs_extra:fs_extra:9.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fs:fs-extra:9.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fs:fs_extra:9.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/fs-extra/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/fs-minipass@1.2.7?package-id=d8cf35e6758fddb2", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "fs-minipass", + "version": "1.2.7", + "description": "fs read and write streams based on minipass", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs-minipass:fs-minipass:1.2.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs-minipass@1.2.7", + "externalReferences": [ + { + "url": "git+https://github.com/npm/fs-minipass.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/fs-minipass#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fs-minipass:fs_minipass:1.2.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fs_minipass:fs-minipass:1.2.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fs_minipass:fs_minipass:1.2.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:fs-minipass:1.2.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:fs_minipass:1.2.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fs:fs-minipass:1.2.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fs:fs_minipass:1.2.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/node-pre-gyp/node_modules/fs-minipass/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/fs-minipass@2.1.0?package-id=34b0337b00752017", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "fs-minipass", + "version": "2.1.0", + "description": "fs read and write streams based on minipass", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs-minipass:fs-minipass:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs-minipass@2.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/npm/fs-minipass.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/fs-minipass#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fs-minipass:fs_minipass:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fs_minipass:fs-minipass:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fs_minipass:fs_minipass:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:fs-minipass:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:fs_minipass:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fs:fs-minipass:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fs:fs_minipass:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/fs-minipass/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/fs-minipass@3.0.3?package-id=ddb32fc1590fd08c", + "type": "library", + "author": "GitHub Inc.", + "name": "fs-minipass", + "version": "3.0.3", + "description": "fs read and write streams based on minipass", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs-minipass:fs-minipass:3.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs-minipass@3.0.3", + "externalReferences": [ + { + "url": "https://github.com/npm/fs-minipass.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/fs-minipass#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fs-minipass:fs_minipass:3.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fs_minipass:fs-minipass:3.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fs_minipass:fs_minipass:3.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:fs-minipass:3.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:fs_minipass:3.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fs:fs-minipass:3.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fs:fs_minipass:3.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/fs-minipass/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/fs.realpath@1.0.0?package-id=5215a4272ae071b5", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "fs.realpath", + "version": "1.0.0", + "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fs.realpath:fs.realpath:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/fs.realpath@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/fs.realpath.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/fs.realpath/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/fstream@1.0.12?package-id=a2282a5fe21d6573", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "fstream", + "version": "1.0.12", + "description": "Advanced file system stream things", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:fstream:fstream:1.0.12:*:*:*:*:*:*:*", + "purl": "pkg:npm/fstream@1.0.12", + "externalReferences": [ + { + "url": "https://github.com/npm/fstream.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:fstream:1.0.12:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/fstream/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/function-bind@1.1.2?package-id=e034b9e16a017cc2", + "type": "library", + "author": "Raynos , Raynos, Jordan Harband (https://github.com/ljharb)", + "name": "function-bind", + "version": "1.1.2", + "description": "Implementation of Function.prototype.bind", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:function-bind:function-bind:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/function-bind@1.1.2", + "externalReferences": [ + { + "url": "https://github.com/Raynos/function-bind.git", + "type": "distribution" + }, + { + "url": "https://github.com/Raynos/function-bind", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:function-bind:function_bind:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:function_bind:function-bind:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:function_bind:function_bind:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:function:function-bind:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:function:function_bind:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Raynos:function-bind:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Raynos:function_bind:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/function-bind/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/functions-have-names@1.2.3?package-id=b2e38e0035342c0b", + "type": "library", + "author": "Jordan Harband ", + "name": "functions-have-names", + "version": "1.2.3", + "description": "Does this JS environment support the `name` property on functions?", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:functions-have-names:functions-have-names:1.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/functions-have-names@1.2.3", + "externalReferences": [ + { + "url": "git+https://github.com/inspect-js/functions-have-names.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/functions-have-names#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:functions-have-names:functions_have_names:1.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:functions_have_names:functions-have-names:1.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:functions_have_names:functions_have_names:1.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:functions-have:functions-have-names:1.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:functions-have:functions_have_names:1.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:functions_have:functions-have-names:1.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:functions_have:functions_have_names:1.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:functions-have-names:1.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:functions_have_names:1.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:functions:functions-have-names:1.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:functions:functions_have_names:1.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/functions-have-names/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/gauge@2.7.4?package-id=d33d667d43d843b2", + "type": "library", + "author": "Rebecca Turner ", + "name": "gauge", + "version": "2.7.4", + "description": "A terminal based horizontal guage", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:gauge:gauge:2.7.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/gauge@2.7.4", + "externalReferences": [ + { + "url": "https://github.com/iarna/gauge", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/gauge", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iarna:gauge:2.7.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/gauge/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/gauge@4.0.4?package-id=3ebce6a81a69f49f", + "type": "library", + "author": "GitHub Inc.", + "name": "gauge", + "version": "4.0.4", + "description": "A terminal based horizontal gauge", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:gauge:gauge:4.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/gauge@4.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/gauge.git", + "type": "distribution" + }, + { + "url": "https://github.com/npm/gauge", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:gauge:4.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/gauge/package.json" + } + ] + }, + { + "bom-ref": "pkg:deb/debian/gcc-14@14.2.0-19?distro=debian&package-id=0333b654992e387d", + "type": "library", + "name": "gcc-14", + "version": "14.2.0-19", + "cpe": "cpe:2.3:a:gcc-14:gcc-14:14.2.0-19:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gcc-14@14.2.0-19?distro=debian", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "elf-binary-package-cataloger" + }, + { + "name": "syft:package:type", + "value": "deb" + }, + { + "name": "syft:package:metadataType", + "value": "elf-binary-package-note-json-payload" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:gcc-14:gcc_14:14.2.0-19:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:gcc_14:gcc-14:14.2.0-19:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:gcc_14:gcc_14:14.2.0-19:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:gcc:gcc-14:14.2.0-19:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:gcc:gcc_14:14.2.0-19:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1f5d28bd51650f429293f7730ede274b81dc0744aa918bc887133c4ad610258c" + }, + { + "name": "syft:location:0:path", + "value": "/usr/lib/x86_64-linux-gnu/libgomp.so.1.0.0" + }, + { + "name": "syft:location:1:layerID", + "value": "sha256:6e18ad80f3d64a8cbbcd1ff2e8a0d5ce7282cf664e816b86183a59d30a618e8a" + }, + { + "name": "syft:location:1:path", + "value": "/usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.33" + }, + { + "name": "syft:location:2:layerID", + "value": "sha256:c16b2ec4b1493bad1b1de23d659c899e60abb166bda756d02792f0a03ba54a43" + }, + { + "name": "syft:location:2:path", + "value": "/usr/lib/x86_64-linux-gnu/libgcc_s.so.1" + } + ] + }, + { + "bom-ref": "pkg:deb/debian/gcc-14-base@14.2.0-19?arch=amd64&distro=debian-13&package-id=aeb0ddb21095ed8c&upstream=gcc-14", + "type": "library", + "publisher": "Debian GCC Maintainers ", + "name": "gcc-14-base", + "version": "14.2.0-19", + "licenses": [ + { + "license": { + "name": "sha256:20390f8a6f3b1e4d7cb45dd8652dabb259bbef688cbad839bcdb0b9ba7252f79" + } + } + ], + "cpe": "cpe:2.3:a:gcc-14-base:gcc-14-base:14.2.0-19:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/gcc-14-base@14.2.0-19?arch=amd64&distro=debian-13&upstream=gcc-14", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "dpkg-db-cataloger" + }, + { + "name": "syft:package:type", + "value": "deb" + }, + { + "name": "syft:package:metadataType", + "value": "dpkg-db-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:gcc-14-base:gcc_14_base:14.2.0-19:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:gcc_14_base:gcc-14-base:14.2.0-19:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:gcc_14_base:gcc_14_base:14.2.0-19:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:gcc-14:gcc-14-base:14.2.0-19:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:gcc-14:gcc_14_base:14.2.0-19:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:gcc_14:gcc-14-base:14.2.0-19:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:gcc_14:gcc_14_base:14.2.0-19:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:gcc:gcc-14-base:14.2.0-19:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:gcc:gcc_14_base:14.2.0-19:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7db505d90756626f425c6c5468eca565c82f589b144ecaa4f411ad9bbf79e614" + }, + { + "name": "syft:location:0:path", + "value": "/var/lib/dpkg/status.d/gcc-14-base" + }, + { + "name": "syft:location:1:layerID", + "value": "sha256:7db505d90756626f425c6c5468eca565c82f589b144ecaa4f411ad9bbf79e614" + }, + { + "name": "syft:location:1:path", + "value": "/usr/share/doc/gcc-14-base/copyright" + }, + { + "name": "syft:location:2:layerID", + "value": "sha256:7db505d90756626f425c6c5468eca565c82f589b144ecaa4f411ad9bbf79e614" + }, + { + "name": "syft:location:2:path", + "value": "/var/lib/dpkg/status.d/gcc-14-base.md5sums" + }, + { + "name": "syft:metadata:installedSize", + "value": "112" + }, + { + "name": "syft:metadata:source", + "value": "gcc-14" + } + ] + }, + { + "bom-ref": "pkg:npm/geojson-utils@1.1.0?package-id=ad6fe893f4863fc3", + "type": "library", + "author": "Max Ogden", + "name": "geojson-utils", + "version": "1.1.0", + "description": "GeoJSON Utilities for JavaScript", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:geojson-utils:geojson-utils:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/geojson-utils@1.1.0", + "externalReferences": [ + { + "url": "git://github.com/maxogden/geojson-js-utils.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:geojson-utils:geojson_utils:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:geojson_utils:geojson-utils:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:geojson_utils:geojson_utils:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:maxogden:geojson-utils:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:maxogden:geojson_utils:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:geojson:geojson-utils:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:geojson:geojson_utils:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/geojson-utils/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/get-caller-file@2.0.5?package-id=546d53bc24510f43", + "type": "library", + "author": "Stefan Penner", + "name": "get-caller-file", + "version": "2.0.5", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:get-caller-file:get-caller-file:2.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/get-caller-file@2.0.5", + "externalReferences": [ + { + "url": "git+https://github.com/stefanpenner/get-caller-file.git", + "type": "distribution" + }, + { + "url": "https://github.com/stefanpenner/get-caller-file#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get-caller-file:get_caller_file:2.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get_caller_file:get-caller-file:2.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get_caller_file:get_caller_file:2.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:stefanpenner:get-caller-file:2.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:stefanpenner:get_caller_file:2.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get-caller:get-caller-file:2.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get-caller:get_caller_file:2.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get_caller:get-caller-file:2.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get_caller:get_caller_file:2.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get:get-caller-file:2.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get:get_caller_file:2.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/get-caller-file/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/get-intrinsic@1.3.0?package-id=fd30384e3e731beb", + "type": "library", + "author": "Jordan Harband ", + "name": "get-intrinsic", + "version": "1.3.0", + "description": "Get and robustly cache all JS language-level intrinsics at first require time", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:get-intrinsic:get-intrinsic:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/get-intrinsic@1.3.0", + "externalReferences": [ + { + "url": "git+https://github.com/ljharb/get-intrinsic.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/get-intrinsic#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get-intrinsic:get_intrinsic:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get_intrinsic:get-intrinsic:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get_intrinsic:get_intrinsic:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:get-intrinsic:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:get_intrinsic:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get:get-intrinsic:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get:get_intrinsic:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/get-intrinsic/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/get-proto@1.0.1?package-id=f140446776201e12", + "type": "library", + "author": "Jordan Harband ", + "name": "get-proto", + "version": "1.0.1", + "description": "Robustly get the [[Prototype]] of an object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:get-proto:get-proto:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/get-proto@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/ljharb/get-proto.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/get-proto#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get-proto:get_proto:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get_proto:get-proto:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get_proto:get_proto:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:get-proto:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:get_proto:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get:get-proto:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get:get_proto:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/get-proto/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/get-stream@2.3.1?package-id=2cd76cc08fac13f8", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "get-stream", + "version": "2.3.1", + "description": "Get a stream as a string, buffer, or array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:get-stream:get-stream:2.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/get-stream@2.3.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get-stream:get_stream:2.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get_stream:get-stream:2.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get_stream:get_stream:2.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get:get-stream:2.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get:get_stream:2.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/decompress-unzip/node_modules/get-stream/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/get-stream@3.0.0?package-id=529f1c9fb766b433", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "get-stream", + "version": "3.0.0", + "description": "Get a stream as a string, buffer, or array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:get-stream:get-stream:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/get-stream@3.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get-stream:get_stream:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get_stream:get-stream:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get_stream:get_stream:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get:get-stream:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get:get_stream:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/cacheable-request/node_modules/get-stream/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/get-stream@3.0.0?package-id=a688b423aa001971", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "get-stream", + "version": "3.0.0", + "description": "Get a stream as a string, buffer, or array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:get-stream:get-stream:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/get-stream@3.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get-stream:get_stream:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get_stream:get-stream:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get_stream:get_stream:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get:get-stream:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get:get_stream:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/got/node_modules/get-stream/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/get-stream@4.1.0?package-id=09ae98551bcf5cd8", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "get-stream", + "version": "4.1.0", + "description": "Get a stream as a string, buffer, or array", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:get-stream:get-stream:4.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/get-stream@4.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get-stream:get_stream:4.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get_stream:get-stream:4.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get_stream:get_stream:4.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get:get-stream:4.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:get:get_stream:4.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/get-stream/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/getobject@1.0.2?package-id=206b7d3d675e4f94", + "type": "library", + "author": "\"Cowboy\" Ben Alman (http://benalman.com/)", + "name": "getobject", + "version": "1.0.2", + "description": "get.and.set.deep.objects.easily = true", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:getobject_project:getobject:1.0.2:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/getobject@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/cowboy/node-getobject.git", + "type": "distribution" + }, + { + "url": "https://github.com/cowboy/node-getobject", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/getobject/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/github-from-package@0.0.0?package-id=9021b88a5ab51ee3", + "type": "library", + "author": "James Halliday (http://substack.net)", + "name": "github-from-package", + "version": "0.0.0", + "description": "return the github url from a package.json file", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:github-from-package:github-from-package:0.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/github-from-package@0.0.0", + "externalReferences": [ + { + "url": "git://github.com/substack/github-from-package.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/github-from-package", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:github-from-package:github_from_package:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:github_from_package:github-from-package:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:github_from_package:github_from_package:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:github-from:github-from-package:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:github-from:github_from_package:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:github_from:github-from-package:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:github_from:github_from_package:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:substack:github-from-package:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:substack:github_from_package:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:github:github-from-package:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:github:github_from_package:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/github-from-package/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/glob@10.5.0?package-id=d3e87b073555ed11", + "type": "library", + "author": "Isaac Z. Schlueter (https://blog.izs.me/)", + "name": "glob", + "version": "10.5.0", + "description": "the most correct and second fastest glob implementation in JavaScript", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:glob:10.5.0:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/glob@10.5.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/glob/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/glob@7.1.7?package-id=0ff063b9149f88f9", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "glob", + "version": "7.1.7", + "description": "a little globber", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:glob:7.1.7:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/glob@7.1.7", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/grunt/node_modules/glob/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/glob@7.2.3?package-id=ffb7ca9150502f5a", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "glob", + "version": "7.2.3", + "description": "a little globber", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/glob@7.2.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@npmcli/move-file/node_modules/glob/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/glob@7.2.3?package-id=cb1579e0fac84290", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "glob", + "version": "7.2.3", + "description": "a little globber", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/glob@7.2.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/archiver-utils/node_modules/glob/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/glob@7.2.3?package-id=e2fd343720beab4f", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "glob", + "version": "7.2.3", + "description": "a little globber", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/glob@7.2.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/archiver/node_modules/glob/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/glob@7.2.3?package-id=acbfd4a89a1d4104", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "glob", + "version": "7.2.3", + "description": "a little globber", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/glob@7.2.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/rimraf/node_modules/glob/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/glob@7.2.3?package-id=48e2cd171ff40be3", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "glob", + "version": "7.2.3", + "description": "a little globber", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/glob@7.2.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-glob.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/glob/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/global-modules@1.0.0?package-id=e51c05cfa6a53954", + "type": "library", + "author": "Jon Schlinkert (https://github.com/jonschlinkert), JasonChang (https://packagist.org/packages/jason-chang), Jon Schlinkert (http://twitter.com/jonschlinkert), Kiko Beats (https://kikobeats.com)", + "name": "global-modules", + "version": "1.0.0", + "description": "The directory used by npm for globally installed npm modules.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:global-modules:global-modules:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/global-modules@1.0.0", + "externalReferences": [ + { + "url": "https://github.com/jonschlinkert/global-modules", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:global-modules:global_modules:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:global_modules:global-modules:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:global_modules:global_modules:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jonschlinkert:global-modules:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jonschlinkert:global_modules:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:global:global-modules:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:global:global_modules:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/global-modules/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/global-prefix@1.0.2?package-id=214a6e1e9476a5ef", + "type": "library", + "author": "Jon Schlinkert (https://github.com/jonschlinkert), Alexandr Bogachev (https://github.com/rmbaad), Brian Woodward (https://twitter.com/doowb), Charlike Mike Reagent (https://i.am.charlike.online), JasonChang (https://packagist.org/packages/jason-chang), Jon Schlinkert (http://twitter.com/jonschlinkert), Jorrit Schippers (https://www.ncode.nl), Mathias Rasmussen (chrome://dino), Ross Fenning (http://rossfenning.co.uk)", + "name": "global-prefix", + "version": "1.0.2", + "description": "Get the npm global path prefix.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:global-prefix:global-prefix:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/global-prefix@1.0.2", + "externalReferences": [ + { + "url": "https://github.com/jonschlinkert/global-prefix", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:global-prefix:global_prefix:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:global_prefix:global-prefix:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:global_prefix:global_prefix:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jonschlinkert:global-prefix:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jonschlinkert:global_prefix:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:global:global-prefix:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:global:global_prefix:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/global-prefix/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/gopd@1.2.0?package-id=83baf5c5b6922e77", + "type": "library", + "author": "Jordan Harband ", + "name": "gopd", + "version": "1.2.0", + "description": "`Object.getOwnPropertyDescriptor`, but accounts for IE's broken implementation.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ljharb:gopd:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/gopd@1.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/ljharb/gopd.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/gopd#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:gopd:gopd:1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/gopd/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/got@8.3.2?package-id=5bd1b0995776246c", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com), Vsevolod Strukchinsky (github.com/floatdrop), Alexander Tesfamichael (alextes.me)", + "name": "got", + "version": "8.3.2", + "description": "Simplified HTTP requests", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:got:got:8.3.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/got@8.3.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/got/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/graceful-fs@4.2.11?package-id=efbe6f20b1abe3a8", + "type": "library", + "name": "graceful-fs", + "version": "4.2.11", + "description": "A drop-in replacement for fs, making various improvements.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:graceful-fs:graceful-fs:4.2.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/graceful-fs@4.2.11", + "externalReferences": [ + { + "url": "https://github.com/isaacs/node-graceful-fs", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:graceful-fs:graceful_fs:4.2.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:graceful_fs:graceful-fs:4.2.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:graceful_fs:graceful_fs:4.2.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:graceful:graceful-fs:4.2.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:graceful:graceful_fs:4.2.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:graceful-fs:4.2.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:graceful_fs:4.2.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/graceful-fs/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/grunt@1.6.2?package-id=51e33e1c59426225", + "type": "library", + "author": "Grunt Development Team (https://gruntjs.com/development-team)", + "name": "grunt", + "version": "1.6.2", + "description": "The JavaScript Task Runner", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:gruntjs:grunt:1.6.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/grunt@1.6.2", + "externalReferences": [ + { + "url": "https://github.com/gruntjs/grunt.git", + "type": "distribution" + }, + { + "url": "https://gruntjs.com/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt:grunt:1.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/grunt/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/grunt-cli@1.5.0?package-id=97f188b93d04dfa6", + "type": "library", + "author": "Grunt Development Team (http://gruntjs.com/development-team)", + "name": "grunt-cli", + "version": "1.5.0", + "description": "The grunt command line interface", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:grunt-cli:grunt-cli:1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/grunt-cli@1.5.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt-cli:grunt_cli:1.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt_cli:grunt-cli:1.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt_cli:grunt_cli:1.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt:grunt-cli:1.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt:grunt_cli:1.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/grunt-cli/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/grunt-contrib-compress@1.6.0?package-id=96ee58510e0b9ecc", + "type": "library", + "author": "Grunt Team (http://gruntjs.com/)", + "name": "grunt-contrib-compress", + "version": "1.6.0", + "description": "Compress files and folders", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:grunt-contrib-compress:grunt-contrib-compress:1.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/grunt-contrib-compress@1.6.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt-contrib-compress:grunt_contrib_compress:1.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt_contrib_compress:grunt-contrib-compress:1.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt_contrib_compress:grunt_contrib_compress:1.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt-contrib:grunt-contrib-compress:1.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt-contrib:grunt_contrib_compress:1.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt_contrib:grunt-contrib-compress:1.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt_contrib:grunt_contrib_compress:1.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt:grunt-contrib-compress:1.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt:grunt_contrib_compress:1.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/grunt-contrib-compress/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/grunt-known-options@2.0.0?package-id=91f0ef5736e3a948", + "type": "library", + "author": "Grunt Development Team (http://gruntjs.com/development-team)", + "name": "grunt-known-options", + "version": "2.0.0", + "description": "The known options used in Grunt", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:grunt-known-options:grunt-known-options:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/grunt-known-options@2.0.0", + "externalReferences": [ + { + "url": "http://gruntjs.com/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt-known-options:grunt_known_options:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt_known_options:grunt-known-options:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt_known_options:grunt_known_options:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt-known:grunt-known-options:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt-known:grunt_known_options:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt_known:grunt-known-options:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt_known:grunt_known_options:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt:grunt-known-options:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt:grunt_known_options:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/grunt-known-options/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/grunt-legacy-log@3.0.1?package-id=9d59ea0b5bec4707", + "type": "library", + "author": "\"Cowboy\" Ben Alman (http://benalman.com/)", + "name": "grunt-legacy-log", + "version": "3.0.1", + "description": "The Grunt 0.4.x logger.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:grunt-legacy-log:grunt-legacy-log:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/grunt-legacy-log@3.0.1", + "externalReferences": [ + { + "url": "git://github.com/gruntjs/grunt-legacy-log.git", + "type": "distribution" + }, + { + "url": "http://gruntjs.com/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt-legacy-log:grunt_legacy_log:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt_legacy_log:grunt-legacy-log:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt_legacy_log:grunt_legacy_log:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt-legacy:grunt-legacy-log:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt-legacy:grunt_legacy_log:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt_legacy:grunt-legacy-log:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt_legacy:grunt_legacy_log:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:gruntjs:grunt-legacy-log:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:gruntjs:grunt_legacy_log:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt:grunt-legacy-log:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt:grunt_legacy_log:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/grunt-legacy-log/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/grunt-legacy-log-utils@2.1.3?package-id=df0bb8b3f95a0d4e", + "type": "library", + "author": "\"Cowboy\" Ben Alman (http://benalman.com/)", + "name": "grunt-legacy-log-utils", + "version": "2.1.3", + "description": "Static methods for the Grunt 0.4.x logger.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:grunt-legacy-log-utils:grunt-legacy-log-utils:2.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/grunt-legacy-log-utils@2.1.3", + "externalReferences": [ + { + "url": "git://github.com/gruntjs/grunt-legacy-log-utils.git", + "type": "distribution" + }, + { + "url": "http://gruntjs.com/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt-legacy-log-utils:grunt_legacy_log_utils:2.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt_legacy_log_utils:grunt-legacy-log-utils:2.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt_legacy_log_utils:grunt_legacy_log_utils:2.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt-legacy-log:grunt-legacy-log-utils:2.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt-legacy-log:grunt_legacy_log_utils:2.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt_legacy_log:grunt-legacy-log-utils:2.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt_legacy_log:grunt_legacy_log_utils:2.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt-legacy:grunt-legacy-log-utils:2.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt-legacy:grunt_legacy_log_utils:2.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt_legacy:grunt-legacy-log-utils:2.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt_legacy:grunt_legacy_log_utils:2.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:gruntjs:grunt-legacy-log-utils:2.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:gruntjs:grunt_legacy_log_utils:2.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt:grunt-legacy-log-utils:2.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt:grunt_legacy_log_utils:2.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/grunt-legacy-log-utils/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/grunt-legacy-util@2.0.2?package-id=953128f9ed466782", + "type": "library", + "author": "Grunt Development Team (https://gruntjs.com/development-team)", + "name": "grunt-legacy-util", + "version": "2.0.2", + "description": "Some old grunt utils provided for backwards compatibility.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:grunt-legacy-util:grunt-legacy-util:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/grunt-legacy-util@2.0.2", + "externalReferences": [ + { + "url": "git://github.com/gruntjs/grunt-legacy-util.git", + "type": "distribution" + }, + { + "url": "http://gruntjs.com/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt-legacy-util:grunt_legacy_util:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt_legacy_util:grunt-legacy-util:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt_legacy_util:grunt_legacy_util:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt-legacy:grunt-legacy-util:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt-legacy:grunt_legacy_util:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt_legacy:grunt-legacy-util:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt_legacy:grunt_legacy_util:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:gruntjs:grunt-legacy-util:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:gruntjs:grunt_legacy_util:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt:grunt-legacy-util:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt:grunt_legacy_util:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/grunt-legacy-util/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/grunt-replace-json@0.1.0?package-id=33dc445c60254c99", + "type": "library", + "author": "Agustin Croce ", + "name": "grunt-replace-json", + "version": "0.1.0", + "description": "Updates attributes of json files.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:grunt-replace-json:grunt-replace-json:0.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/grunt-replace-json@0.1.0", + "externalReferences": [ + { + "url": "https://github.com/exo-dev/grunt-replace-json.git", + "type": "distribution" + }, + { + "url": "https://github.com/exo-dev/grunt-replace-json", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt-replace-json:grunt_replace_json:0.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt_replace_json:grunt-replace-json:0.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt_replace_json:grunt_replace_json:0.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt-replace:grunt-replace-json:0.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt-replace:grunt_replace_json:0.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt_replace:grunt-replace-json:0.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt_replace:grunt_replace_json:0.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:exo-dev:grunt-replace-json:0.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:exo-dev:grunt_replace_json:0.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt:grunt-replace-json:0.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grunt:grunt_replace_json:0.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/grunt-replace-json/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/handlebars@4.7.9?package-id=f8594aa67de6f0a7", + "type": "library", + "author": "Yehuda Katz", + "name": "handlebars", + "version": "4.7.9", + "description": "Handlebars provides the power necessary to let you build semantic templates effectively with no frustration", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:handlebars.js_project:handlebars.js:4.7.9:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/handlebars@4.7.9", + "externalReferences": [ + { + "url": "https://github.com/handlebars-lang/handlebars.js.git", + "type": "distribution" + }, + { + "url": "https://handlebarsjs.com/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:handlebarsjs:handlebars:4.7.9:*:*:*:*:node.js:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/handlebars/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/has-ansi@2.0.0?package-id=e42b36bf3b02ccb2", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com), Sindre Sorhus (sindresorhus.com), Joshua Appelman (jbnicolai.com)", + "name": "has-ansi", + "version": "2.0.0", + "description": "Check if a string has ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-ansi:has-ansi:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-ansi@2.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has-ansi:has_ansi:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_ansi:has-ansi:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_ansi:has_ansi:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has:has-ansi:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has:has_ansi:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/has-ansi/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/has-bigints@1.1.0?package-id=71687501ff0fe52a", + "type": "library", + "author": "Jordan Harband ", + "name": "has-bigints", + "version": "1.1.0", + "description": "Determine if the JS environment has BigInt support.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-bigints:has-bigints:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-bigints@1.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/ljharb/has-bigints.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/has-bigints#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has-bigints:has_bigints:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_bigints:has-bigints:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_bigints:has_bigints:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:has-bigints:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:has_bigints:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has:has-bigints:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has:has_bigints:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/has-bigints/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/has-flag@3.0.0?package-id=3d7118b6bb8495c1", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "has-flag", + "version": "3.0.0", + "description": "Check if argv has a specific flag", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-flag:has-flag:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-flag@3.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has-flag:has_flag:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_flag:has-flag:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_flag:has_flag:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has:has-flag:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has:has_flag:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/has-flag/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/has-flag@4.0.0?package-id=886bedfa751a610e", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "has-flag", + "version": "4.0.0", + "description": "Check if argv has a specific flag", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-flag:has-flag:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-flag@4.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has-flag:has_flag:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_flag:has-flag:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_flag:has_flag:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has:has-flag:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has:has_flag:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/has-flag/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/has-property-descriptors@1.0.2?package-id=8da3543c9f5d677c", + "type": "library", + "author": "Jordan Harband ", + "name": "has-property-descriptors", + "version": "1.0.2", + "description": "Does the environment have full property descriptor support? Handles IE 8's broken defineProperty/gOPD.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-property-descriptors:has-property-descriptors:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-property-descriptors@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/inspect-js/has-property-descriptors.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/has-property-descriptors#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has-property-descriptors:has_property_descriptors:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_property_descriptors:has-property-descriptors:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_property_descriptors:has_property_descriptors:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has-property:has-property-descriptors:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has-property:has_property_descriptors:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_property:has-property-descriptors:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_property:has_property_descriptors:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:has-property-descriptors:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:has_property_descriptors:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has:has-property-descriptors:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has:has_property_descriptors:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/has-property-descriptors/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/has-symbol-support-x@1.4.2?package-id=9cdc3fbb4c69858e", + "type": "library", + "author": "Graham Fairweather ", + "name": "has-symbol-support-x", + "version": "1.4.2", + "description": "Tests if ES6 Symbol is supported.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-symbol-support-x:has-symbol-support-x:1.4.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-symbol-support-x@1.4.2", + "externalReferences": [ + { + "url": "https://github.com/Xotic750/has-symbol-support-x.git", + "type": "distribution" + }, + { + "url": "https://github.com/Xotic750/has-symbol-support-x", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has-symbol-support-x:has_symbol_support_x:1.4.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_symbol_support_x:has-symbol-support-x:1.4.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_symbol_support_x:has_symbol_support_x:1.4.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has-symbol-support:has-symbol-support-x:1.4.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has-symbol-support:has_symbol_support_x:1.4.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_symbol_support:has-symbol-support-x:1.4.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_symbol_support:has_symbol_support_x:1.4.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has-symbol:has-symbol-support-x:1.4.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has-symbol:has_symbol_support_x:1.4.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_symbol:has-symbol-support-x:1.4.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_symbol:has_symbol_support_x:1.4.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Xotic750:has-symbol-support-x:1.4.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Xotic750:has_symbol_support_x:1.4.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has:has-symbol-support-x:1.4.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has:has_symbol_support_x:1.4.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/has-symbol-support-x/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/has-symbols@1.1.0?package-id=d11db59abbaaff57", + "type": "library", + "author": "Jordan Harband (http://ljharb.codes), Jordan Harband (http://ljharb.codes)", + "name": "has-symbols", + "version": "1.1.0", + "description": "Determine if the JS environment has Symbol support. Supports spec, or shams.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-symbols:has-symbols:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-symbols@1.1.0", + "externalReferences": [ + { + "url": "git://github.com/inspect-js/has-symbols.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/has-symbols#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has-symbols:has_symbols:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_symbols:has-symbols:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_symbols:has_symbols:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:has-symbols:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:has_symbols:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:has-symbols:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:has_symbols:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has:has-symbols:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has:has_symbols:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/has-symbols/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/has-to-string-tag-x@1.4.1?package-id=57099c5b40b3237c", + "type": "library", + "author": "Graham Fairweather ", + "name": "has-to-string-tag-x", + "version": "1.4.1", + "description": "Tests if ES6 @@toStringTag is supported.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-to-string-tag-x:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-to-string-tag-x@1.4.1", + "externalReferences": [ + { + "url": "https://github.com/Xotic750/has-to-string-tag-x.git", + "type": "distribution" + }, + { + "url": "https://github.com/Xotic750/has-to-string-tag-x", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has-to-string-tag-x:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_to_string_tag_x:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_to_string_tag_x:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has-to-string-tag:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has-to-string-tag:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_to_string_tag:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_to_string_tag:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has-to-string:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has-to-string:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_to_string:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_to_string:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Xotic750:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Xotic750:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has-to:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has-to:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_to:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_to:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/has-to-string-tag-x/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/has-tostringtag@1.0.2?package-id=e022fba37335d6bc", + "type": "library", + "author": "Jordan Harband (http://ljharb.codes), Jordan Harband (http://ljharb.codes)", + "name": "has-tostringtag", + "version": "1.0.2", + "description": "Determine if the JS environment has `Symbol.toStringTag` support. Supports spec, or shams.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:has-tostringtag:has-tostringtag:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-tostringtag@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/inspect-js/has-tostringtag.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/has-tostringtag#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has-tostringtag:has_tostringtag:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_tostringtag:has-tostringtag:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_tostringtag:has_tostringtag:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:has-tostringtag:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:has_tostringtag:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has:has-tostringtag:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has:has_tostringtag:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/has-tostringtag/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/has-unicode@2.0.1?package-id=3e71117dc4558f9f", + "type": "library", + "author": "Rebecca Turner ", + "name": "has-unicode", + "version": "2.0.1", + "description": "Try to guess if your terminal supports unicode", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:has-unicode:has-unicode:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/has-unicode@2.0.1", + "externalReferences": [ + { + "url": "https://github.com/iarna/has-unicode", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/has-unicode", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has-unicode:has_unicode:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_unicode:has-unicode:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has_unicode:has_unicode:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iarna:has-unicode:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iarna:has_unicode:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has:has-unicode:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:has:has_unicode:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/has-unicode/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/hashids@2.3.0?package-id=89162caca8f9959a", + "type": "library", + "author": "hashids.org (https://github.com/hashids), Ivan Akimov (https://twitter.com/IvanAkimov), Bazyli Brzóska (https://twitter.com/niieani)", + "name": "hashids", + "version": "2.3.0", + "description": "Generate YouTube-like ids from numbers. Use Hashids when you do not want to expose your database ids to the user.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:hashids:hashids:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/hashids@2.3.0", + "externalReferences": [ + { + "url": "https://github.com/niieani/hashids.js.git", + "type": "distribution" + }, + { + "url": "http://hashids.org/javascript", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:niieani:hashids:2.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/hashids/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/hashids-esm?package-id=4d7ad7732dcf2924", + "type": "library", + "name": "hashids-esm", + "version": "UNKNOWN", + "cpe": "cpe:2.3:a:hashids-esm:hashids-esm:*:*:*:*:*:*:*:*", + "purl": "pkg:npm/hashids-esm", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashids-esm:hashids_esm:*:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashids_esm:hashids-esm:*:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashids_esm:hashids_esm:*:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashids:hashids-esm:*:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashids:hashids_esm:*:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/hashids/esm/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/hasown@2.0.3?package-id=789dc183e76e3e9f", + "type": "library", + "author": "Jordan Harband ", + "name": "hasown", + "version": "2.0.3", + "description": "A robust, ES3 compatible, \"has own property\" predicate.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:inspect-js:hasown:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/hasown@2.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/inspect-js/hasOwn.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/hasOwn#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hasown:hasown:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/hasown/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/hbs@4.2.1?package-id=2f82f49c0edfe08d", + "type": "library", + "author": "Don Park (http://blog.docuverse.com), Roman Shtylman ", + "name": "hbs", + "version": "4.2.1", + "description": "Express.js template engine plugin for Handlebars", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:hbs_project:hbs:4.2.1:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/hbs@4.2.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/hbs/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/he@0.4.1?package-id=c1acb688ae0eb8a3", + "type": "library", + "author": "Mathias Bynens (http://mathiasbynens.be/)", + "name": "he", + "version": "0.4.1", + "description": "A robust HTML entities encoder/decoder with full Unicode support.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mathiasbynens:he:0.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/he@0.4.1", + "externalReferences": [ + { + "url": "https://github.com/mathiasbynens/he.git", + "type": "distribution" + }, + { + "url": "http://mths.be/he", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:he:he:0.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sanitize-html/node_modules/he/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/helmet@4.6.0?package-id=78e8bd8351bc0a93", + "type": "library", + "author": "Adam Baldwin (https://evilpacket.net), Evan Hahn (https://evanhahn.com), Ameen Abdeen ", + "name": "helmet", + "version": "4.6.0", + "description": "help secure Express/Connect apps with various HTTP headers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:helmetjs:helmet:4.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/helmet@4.6.0", + "externalReferences": [ + { + "url": "git://github.com/helmetjs/helmet.git", + "type": "distribution" + }, + { + "url": "https://helmetjs.github.io/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:helmet:helmet:4.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/helmet/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/hoister@0.0.2?package-id=2a78cde116b73996", + "type": "library", + "author": "Matt McKegg", + "name": "hoister", + "version": "0.0.2", + "description": "Put all function and variable declarations at the top of the scope in an AST", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:hoister:hoister:0.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/hoister@0.0.2", + "externalReferences": [ + { + "url": "https://github.com/mmckegg/hoister.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mmckegg:hoister:0.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/hoister/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/homedir-polyfill@1.0.3?package-id=8fe8e9465b9662f0", + "type": "library", + "author": "Brian Woodward (https://github.com/doowb)", + "name": "homedir-polyfill", + "version": "1.0.3", + "description": "Node.js os.homedir polyfill for older versions of node.js.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:homedir-polyfill:homedir-polyfill:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/homedir-polyfill@1.0.3", + "externalReferences": [ + { + "url": "https://github.com/doowb/homedir-polyfill", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:homedir-polyfill:homedir_polyfill:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:homedir_polyfill:homedir-polyfill:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:homedir_polyfill:homedir_polyfill:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:homedir:homedir-polyfill:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:homedir:homedir_polyfill:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:doowb:homedir-polyfill:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:doowb:homedir_polyfill:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/homedir-polyfill/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/hooker@0.2.3?package-id=6e5642e695422045", + "type": "library", + "author": "\"Cowboy\" Ben Alman (http://benalman.com/)", + "name": "hooker", + "version": "0.2.3", + "description": "Monkey-patch (hook) functions for debugging and stuff.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cowboy:hooker:0.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/hooker@0.2.3", + "externalReferences": [ + { + "url": "git://github.com/cowboy/javascript-hooker.git", + "type": "distribution" + }, + { + "url": "http://github.com/cowboy/javascript-hooker", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hooker:hooker:0.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/hooker/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/html-entities@1.4.0?package-id=351099be57f5afec", + "type": "library", + "author": "Marat Dulin ", + "name": "html-entities", + "version": "1.4.0", + "description": "Faster HTML entities encode/decode library.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:html-entities:html-entities:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/html-entities@1.4.0", + "externalReferences": [ + { + "url": "https://github.com/mdevils/node-html-entities.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:html-entities:html_entities:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:html_entities:html-entities:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:html_entities:html_entities:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mdevils:html-entities:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mdevils:html_entities:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:html:html-entities:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:html:html_entities:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/html-entities/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/htmlparser2@3.3.0?package-id=00e058af6a435f1c", + "type": "library", + "author": "Felix Boehm , Chris Winberry ", + "name": "htmlparser2", + "version": "3.3.0", + "description": "Fast & forgiving HTML/XML/RSS parser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:htmlparser2:htmlparser2:3.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/htmlparser2@3.3.0", + "externalReferences": [ + { + "url": "git://github.com/fb55/htmlparser2.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:fb55:htmlparser2:3.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sanitize-html/node_modules/htmlparser2/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/http-cache-semantics@3.8.1?package-id=bd9e0a0c5346494e", + "type": "library", + "author": "Kornel Lesiński (https://kornel.ski/)", + "name": "http-cache-semantics", + "version": "3.8.1", + "description": "Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:http-cache-semantics_project:http-cache-semantics:3.8.1:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/http-cache-semantics@3.8.1", + "externalReferences": [ + { + "url": "https://github.com/pornel/http-cache-semantics.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/http-cache-semantics/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/http-cache-semantics@4.2.0?package-id=d0af3fbe4ae8a36c", + "type": "library", + "author": "Kornel Lesiński (https://kornel.ski/)", + "name": "http-cache-semantics", + "version": "4.2.0", + "description": "Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:http-cache-semantics_project:http-cache-semantics:4.2.0:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/http-cache-semantics@4.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/kornelski/http-cache-semantics.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/make-fetch-happen/node_modules/http-cache-semantics/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/http-cache-semantics@4.2.0?package-id=2a408450d3d46b54", + "type": "library", + "author": "Kornel Lesiński (https://kornel.ski/)", + "name": "http-cache-semantics", + "version": "4.2.0", + "description": "Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:http-cache-semantics_project:http-cache-semantics:4.2.0:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/http-cache-semantics@4.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/kornelski/http-cache-semantics.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/http-cache-semantics/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/http-errors@1.8.1?package-id=60acca32325951a0", + "type": "library", + "author": "Jonathan Ong (http://jongleberry.com), Alan Plum , Douglas Christopher Wilson ", + "name": "http-errors", + "version": "1.8.1", + "description": "Create HTTP error objects", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:http-errors:http-errors:1.8.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-errors@1.8.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http-errors:http_errors:1.8.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http_errors:http-errors:1.8.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http_errors:http_errors:1.8.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http:http-errors:1.8.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http:http_errors:1.8.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/serve-index/node_modules/http-errors/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/http-errors@2.0.1?package-id=de028e640c98e008", + "type": "library", + "author": "Jonathan Ong (http://jongleberry.com), Alan Plum , Douglas Christopher Wilson ", + "name": "http-errors", + "version": "2.0.1", + "description": "Create HTTP error objects", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:http-errors:http-errors:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-errors@2.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http-errors:http_errors:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http_errors:http-errors:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http_errors:http_errors:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http:http-errors:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http:http_errors:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/http-errors/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/http-proxy-agent@4.0.1?package-id=33dca7266e02ca13", + "type": "library", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "http-proxy-agent", + "version": "4.0.1", + "description": "An HTTP(s) proxy `http.Agent` implementation for HTTP", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:http-proxy-agent:http-proxy-agent:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-proxy-agent@4.0.1", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-http-proxy-agent.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http-proxy-agent:http_proxy_agent:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http_proxy_agent:http-proxy-agent:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http_proxy_agent:http_proxy_agent:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:TooTallNate:http-proxy-agent:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:TooTallNate:http_proxy_agent:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http-proxy:http-proxy-agent:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http-proxy:http_proxy_agent:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http_proxy:http-proxy-agent:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http_proxy:http_proxy_agent:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http:http-proxy-agent:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http:http_proxy_agent:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/http-proxy-agent/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/http-proxy-agent@7.0.2?package-id=11d816319f4dc947", + "type": "library", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "http-proxy-agent", + "version": "7.0.2", + "description": "An HTTP(s) proxy `http.Agent` implementation for HTTP", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:http-proxy-agent:http-proxy-agent:7.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/http-proxy-agent@7.0.2", + "externalReferences": [ + { + "url": "https://github.com/TooTallNate/proxy-agents.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http-proxy-agent:http_proxy_agent:7.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http_proxy_agent:http-proxy-agent:7.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http_proxy_agent:http_proxy_agent:7.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:TooTallNate:http-proxy-agent:7.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:TooTallNate:http_proxy_agent:7.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http-proxy:http-proxy-agent:7.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http-proxy:http_proxy_agent:7.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http_proxy:http-proxy-agent:7.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http_proxy:http_proxy_agent:7.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http:http-proxy-agent:7.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:http:http_proxy_agent:7.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/http-proxy-agent/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/https-proxy-agent@5.0.1?package-id=55bb2ef3daa202f8", + "type": "library", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "https-proxy-agent", + "version": "5.0.1", + "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:https-proxy-agent_project:https-proxy-agent:5.0.1:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/https-proxy-agent@5.0.1", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-https-proxy-agent.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/https-proxy-agent/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/https-proxy-agent@7.0.6?package-id=d2d5e71e930f6ec3", + "type": "library", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "https-proxy-agent", + "version": "7.0.6", + "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:https-proxy-agent_project:https-proxy-agent:7.0.6:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/https-proxy-agent@7.0.6", + "externalReferences": [ + { + "url": "https://github.com/TooTallNate/proxy-agents.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/https-proxy-agent/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/humanize-ms@1.2.1?package-id=47a025b2f115b17c", + "type": "library", + "author": "dead-horse (http://deadhorse.me)", + "name": "humanize-ms", + "version": "1.2.1", + "description": "transform humanize time to ms", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-modules:humanize-ms:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/humanize-ms@1.2.1", + "externalReferences": [ + { + "url": "https://github.com/node-modules/humanize-ms", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node-modules:humanize_ms:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:humanize-ms:humanize-ms:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:humanize-ms:humanize_ms:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:humanize_ms:humanize-ms:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:humanize_ms:humanize_ms:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:humanize:humanize-ms:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:humanize:humanize_ms:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/humanize-ms/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/i18n@0.11.1?package-id=ff8810fe24462f72", + "type": "library", + "author": "Marcus Spiegel ", + "name": "i18n", + "version": "0.11.1", + "description": "lightweight translation module with dynamic json storage", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:i18n_project:i18n:0.11.1:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/i18n@0.11.1", + "externalReferences": [ + { + "url": "http://github.com/mashpie/i18n-node.git", + "type": "distribution" + }, + { + "url": "http://github.com/mashpie/i18n-node", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/i18n/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/iconv-lite@0.4.24?package-id=ac38ce6689a29c62", + "type": "library", + "author": "Alexander Shtuchkin ", + "name": "iconv-lite", + "version": "0.4.24", + "description": "Convert character encodings in pure javascript.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ashtuchkin:iconv-lite:0.4.24:*:*:*:*:*:*:*", + "purl": "pkg:npm/iconv-lite@0.4.24", + "externalReferences": [ + { + "url": "git://github.com/ashtuchkin/iconv-lite.git", + "type": "distribution" + }, + { + "url": "https://github.com/ashtuchkin/iconv-lite", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ashtuchkin:iconv_lite:0.4.24:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iconv-lite:iconv-lite:0.4.24:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iconv-lite:iconv_lite:0.4.24:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iconv_lite:iconv-lite:0.4.24:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iconv_lite:iconv_lite:0.4.24:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iconv:iconv-lite:0.4.24:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iconv:iconv_lite:0.4.24:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/iconv-lite/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/iconv-lite@0.6.3?package-id=e1003a119853fa51", + "type": "library", + "author": "Alexander Shtuchkin ", + "name": "iconv-lite", + "version": "0.6.3", + "description": "Convert character encodings in pure javascript.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ashtuchkin:iconv-lite:0.6.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/iconv-lite@0.6.3", + "externalReferences": [ + { + "url": "git://github.com/ashtuchkin/iconv-lite.git", + "type": "distribution" + }, + { + "url": "https://github.com/ashtuchkin/iconv-lite", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ashtuchkin:iconv_lite:0.6.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iconv-lite:iconv-lite:0.6.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iconv-lite:iconv_lite:0.6.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iconv_lite:iconv-lite:0.6.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iconv_lite:iconv_lite:0.6.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iconv:iconv-lite:0.6.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iconv:iconv_lite:0.6.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/encoding/node_modules/iconv-lite/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/iconv-lite@0.6.3?package-id=8e503ff726974706", + "type": "library", + "author": "Alexander Shtuchkin ", + "name": "iconv-lite", + "version": "0.6.3", + "description": "Convert character encodings in pure javascript.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ashtuchkin:iconv-lite:0.6.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/iconv-lite@0.6.3", + "externalReferences": [ + { + "url": "git://github.com/ashtuchkin/iconv-lite.git", + "type": "distribution" + }, + { + "url": "https://github.com/ashtuchkin/iconv-lite", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ashtuchkin:iconv_lite:0.6.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iconv-lite:iconv-lite:0.6.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iconv-lite:iconv_lite:0.6.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iconv_lite:iconv-lite:0.6.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iconv_lite:iconv_lite:0.6.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iconv:iconv-lite:0.6.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iconv:iconv_lite:0.6.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/grunt/node_modules/iconv-lite/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ieee754@1.2.1?package-id=6310f32d7b232558", + "type": "library", + "author": "Feross Aboukhadijeh (https://feross.org), Romain Beauxis ", + "name": "ieee754", + "version": "1.2.1", + "description": "Read/write IEEE754 floating point numbers from/to a Buffer or array-like object", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:ieee754:ieee754:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ieee754@1.2.1", + "externalReferences": [ + { + "url": "git://github.com/feross/ieee754.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:feross:ieee754:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/ieee754/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ignore-walk@3.0.4?package-id=2e4b859fb5db53f0", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "ignore-walk", + "version": "3.0.4", + "description": "Nested/recursive `.gitignore`/`.npmignore` parsing and filtering.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ignore-walk:ignore-walk:3.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/ignore-walk@3.0.4", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/ignore-walk.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ignore-walk:ignore_walk:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ignore_walk:ignore-walk:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ignore_walk:ignore_walk:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ignore:ignore-walk:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ignore:ignore_walk:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/ignore-walk/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/iltorb@2.4.5?package-id=56389acc66e9bbcf", + "type": "library", + "author": "Nicolas Stepien , Hung Tran ", + "name": "iltorb", + "version": "2.4.5", + "description": "Brotli compression/decompression with native bindings", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:nstepien:iltorb:2.4.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/iltorb@2.4.5", + "externalReferences": [ + { + "url": "git://github.com/nstepien/iltorb.git", + "type": "distribution" + }, + { + "url": "https://github.com/nstepien/iltorb", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iltorb:iltorb:2.4.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/iltorb/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/imurmurhash@0.1.4?package-id=09572f0a0bc74ba7", + "type": "library", + "author": "Jens Taylor (https://github.com/homebrewing)", + "name": "imurmurhash", + "version": "0.1.4", + "description": "An incremental implementation of MurmurHash3", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:imurmurhash:imurmurhash:0.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/imurmurhash@0.1.4", + "externalReferences": [ + { + "url": "https://github.com/jensyt/imurmurhash-js", + "type": "distribution" + }, + { + "url": "https://github.com/jensyt/imurmurhash-js", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jensyt:imurmurhash:0.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/imurmurhash/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/indent-string@4.0.0?package-id=affc82d01eae8fae", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "indent-string", + "version": "4.0.0", + "description": "Indent each line in a string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:indent-string:indent-string:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/indent-string@4.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:indent-string:indent_string:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:indent_string:indent-string:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:indent_string:indent_string:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:indent:indent-string:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:indent:indent_string:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/indent-string/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/infer-owner@1.0.4?package-id=0ba5cda90a6ec74a", + "type": "library", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "infer-owner", + "version": "1.0.4", + "description": "Infer the owner of a path based on the owner of its nearest existing parent", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:infer-owner:infer-owner:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/infer-owner@1.0.4", + "externalReferences": [ + { + "url": "https://github.com/npm/infer-owner", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:infer-owner:infer_owner:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:infer_owner:infer-owner:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:infer_owner:infer_owner:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:infer:infer-owner:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:infer:infer_owner:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:infer-owner:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:infer_owner:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/infer-owner/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/inflection@1.13.4?package-id=6e2671dca7da065a", + "type": "library", + "author": "dreamerslab , Ryan Schuft , Ben Lin , Lance Pollard , Dane O'Connor , David Miró , brandondewitt, luk3thomas, Marcel Klehr, Raymond Feng, Kane Cohen , Gianni Chiappetta , Eric Brody, overlookmotel, Patrick Mowrer, Greger Olsson, Jason Crawford , Ray Myers , Dillon Shook , Patrick Kuen ", + "name": "inflection", + "version": "1.13.4", + "description": "A port of inflection-js to node.js module", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dreamerslab:inflection:1.13.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/inflection@1.13.4", + "externalReferences": [ + { + "url": "https://github.com/dreamerslab/node.inflection.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inflection:inflection:1.13.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/inflection/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/inflight@1.0.6?package-id=ddef02a8605a5e19", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "inflight", + "version": "1.0.6", + "description": "Add callbacks to requests in flight to avoid async duplication", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inflight:inflight:1.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/inflight@1.0.6", + "externalReferences": [ + { + "url": "https://github.com/npm/inflight.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/inflight", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:inflight:1.0.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:inflight:1.0.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/inflight/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/inherits@2.0.4?package-id=4446fbeb35a2fa36", + "type": "library", + "name": "inherits", + "version": "2.0.4", + "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:inherits:inherits:2.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/inherits@2.0.4", + "externalReferences": [ + { + "url": "git://github.com/isaacs/inherits", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:inherits:2.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/inherits/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ini@1.3.8?package-id=6ddd6811138876ea", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "ini", + "version": "1.3.8", + "description": "An ini encoder/decoder for node", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ini_project:ini:1.3.8:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/ini@1.3.8", + "externalReferences": [ + { + "url": "git://github.com/isaacs/ini.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/global-prefix/node_modules/ini/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ini@1.3.8?package-id=4df1b4c1b6e1b526", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "ini", + "version": "1.3.8", + "description": "An ini encoder/decoder for node", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ini_project:ini:1.3.8:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/ini@1.3.8", + "externalReferences": [ + { + "url": "git://github.com/isaacs/ini.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/rc/node_modules/ini/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/internal-slot@1.1.0?package-id=2cb332855f0978e4", + "type": "library", + "author": "Jordan Harband ", + "name": "internal-slot", + "version": "1.1.0", + "description": "ES spec-like internal slots", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:internal-slot:internal-slot:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/internal-slot@1.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/ljharb/internal-slot.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/internal-slot#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:internal-slot:internal_slot:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:internal_slot:internal-slot:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:internal_slot:internal_slot:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:internal:internal-slot:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:internal:internal_slot:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:internal-slot:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:internal_slot:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/internal-slot/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/interpret@1.1.0?package-id=ef0ffd4514fbc5b0", + "type": "library", + "author": "Tyler Kellen (http://goingslowly.com/)", + "name": "interpret", + "version": "1.1.0", + "description": "A dictionary of file extensions and associated module loaders.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:interpret:interpret:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/interpret@1.1.0", + "externalReferences": [ + { + "url": "git://github.com/tkellen/node-interpret.git", + "type": "distribution" + }, + { + "url": "https://github.com/tkellen/node-interpret", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tkellen:interpret:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/interpret/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/into-stream@3.1.0?package-id=fc003e7e8cee4468", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "into-stream", + "version": "3.1.0", + "description": "Convert a buffer/string/array/object/iterable/promise into a stream", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:into-stream:into-stream:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/into-stream@3.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:into-stream:into_stream:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:into_stream:into-stream:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:into_stream:into_stream:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:into:into-stream:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:into:into_stream:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/into-stream/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/invalid_main?package-id=2320fb69c45985de", + "type": "library", + "name": "invalid_main", + "version": "UNKNOWN", + "cpe": "cpe:2.3:a:invalid-main:invalid-main:*:*:*:*:*:*:*:*", + "purl": "pkg:npm/invalid_main", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:invalid-main:invalid_main:*:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:invalid_main:invalid-main:*:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:invalid_main:invalid_main:*:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:invalid:invalid-main:*:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:invalid:invalid_main:*:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/resolve/test/resolver/invalid_main/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/invariant@2.2.4?package-id=2b89e9158c0c13bf", + "type": "library", + "author": "Andres Suarez ", + "name": "invariant", + "version": "2.2.4", + "description": "invariant", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:invariant:invariant:2.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/invariant@2.2.4", + "externalReferences": [ + { + "url": "https://github.com/zertosh/invariant", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:zertosh:invariant:2.2.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/invariant/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ip-address@10.2.0?package-id=53d74670fdc23666", + "type": "library", + "author": "Beau Gunderson (https://beaugunderson.com/)", + "name": "ip-address", + "version": "10.2.0", + "description": "A library for parsing IPv4 and IPv6 IP addresses in node and the browser.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:beaugunderson:ip-address:10.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ip-address@10.2.0", + "externalReferences": [ + { + "url": "git://github.com/beaugunderson/ip-address.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:beaugunderson:ip_address:10.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ip-address:ip-address:10.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ip-address:ip_address:10.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ip_address:ip-address:10.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ip_address:ip_address:10.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ip:ip-address:10.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ip:ip_address:10.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/ip-address/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ip6@0.2.13?package-id=1e1e691421c815b4", + "type": "library", + "author": "Qian Chen", + "name": "ip6", + "version": "0.2.13", + "description": "IPv6 address helper utilities.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:elgs:ip6:0.2.13:*:*:*:*:*:*:*", + "purl": "pkg:npm/ip6@0.2.13", + "externalReferences": [ + { + "url": "git+https://github.com/elgs/ip6.git", + "type": "distribution" + }, + { + "url": "https://github.com/elgs/ip6#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ip6:ip6:0.2.13:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/ip6/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ipaddr.js@1.9.1?package-id=e0e0b515b51cb94b", + "type": "library", + "author": "whitequark ", + "name": "ipaddr.js", + "version": "1.9.1", + "description": "A library for manipulating IPv4 and IPv6 addresses in JavaScript.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:whitequark:ipaddr.js:1.9.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/ipaddr.js@1.9.1", + "externalReferences": [ + { + "url": "git://github.com/whitequark/ipaddr.js", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ipaddr.js:ipaddr.js:1.9.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/ipaddr.js/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-absolute@1.0.0?package-id=0512f66f9555653e", + "type": "library", + "author": "Jon Schlinkert (https://github.com/jonschlinkert), Elan Shanker (https://github.com/es128), Jon Schlinkert (http://twitter.com/jonschlinkert), Shinnosuke Watanabe (https://shinnn.github.io), ", + "name": "is-absolute", + "version": "1.0.0", + "description": "Returns true if a file path is absolute. Does not rely on the path module and can be used as a polyfill for node.js native `path.isAbolute`.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jonschlinkert:is-absolute:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-absolute@1.0.0", + "externalReferences": [ + { + "url": "https://github.com/jonschlinkert/is-absolute", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jonschlinkert:is_absolute:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-absolute:is-absolute:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-absolute:is_absolute:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_absolute:is-absolute:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_absolute:is_absolute:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-absolute:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_absolute:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-absolute/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-arguments@1.2.0?package-id=c249422b6e0036a2", + "type": "library", + "author": "Jordan Harband (http://ljharb.codes), Jordan Harband (http://ljharb.codes)", + "name": "is-arguments", + "version": "1.2.0", + "description": "Is this an arguments object? It's a harder question than you think.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-arguments:is-arguments:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-arguments@1.2.0", + "externalReferences": [ + { + "url": "git://github.com/inspect-js/is-arguments.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/is-arguments", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-arguments:is_arguments:1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_arguments:is-arguments:1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_arguments:is_arguments:1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:is-arguments:1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:is_arguments:1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-arguments:1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_arguments:1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-arguments/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-array-buffer@3.0.5?package-id=d9958b6373169d4d", + "type": "library", + "author": "Jordan Harband ", + "name": "is-array-buffer", + "version": "3.0.5", + "description": "Is this value a JS ArrayBuffer?", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-array-buffer:is-array-buffer:3.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-array-buffer@3.0.5", + "externalReferences": [ + { + "url": "git+https://github.com/inspect-js/is-array-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/is-array-buffer#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-array-buffer:is_array_buffer:3.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_array_buffer:is-array-buffer:3.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_array_buffer:is_array_buffer:3.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:is-array-buffer:3.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:is_array_buffer:3.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-array:is-array-buffer:3.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-array:is_array_buffer:3.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_array:is-array-buffer:3.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_array:is_array_buffer:3.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-array-buffer:3.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_array_buffer:3.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-array-buffer/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-bigint@1.1.0?package-id=70e6035521bca2e6", + "type": "library", + "author": "Jordan Harband ", + "name": "is-bigint", + "version": "1.1.0", + "description": "Is this value an ES BigInt?", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:inspect-js:is-bigint:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-bigint@1.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/inspect-js/is-bigint.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/is-bigint#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:is_bigint:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-bigint:is-bigint:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-bigint:is_bigint:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_bigint:is-bigint:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_bigint:is_bigint:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-bigint:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_bigint:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-bigint/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-boolean-object@1.2.2?package-id=4f4be33a0614ffc4", + "type": "library", + "author": "Jordan Harband ", + "name": "is-boolean-object", + "version": "1.2.2", + "description": "Is this value a JS Boolean? This module works cross-realm/iframe, and despite ES6 @@toStringTag.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-boolean-object:is-boolean-object:1.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-boolean-object@1.2.2", + "externalReferences": [ + { + "url": "git://github.com/inspect-js/is-boolean-object.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-boolean-object:is_boolean_object:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_boolean_object:is-boolean-object:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_boolean_object:is_boolean_object:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:is-boolean-object:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:is_boolean_object:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-boolean:is-boolean-object:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-boolean:is_boolean_object:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_boolean:is-boolean-object:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_boolean:is_boolean_object:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-boolean-object:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_boolean_object:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-boolean-object/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-callable@1.2.7?package-id=e47af72ad358fc5c", + "type": "library", + "author": "Jordan Harband (http://ljharb.codes), Jordan Harband (http://ljharb.codes)", + "name": "is-callable", + "version": "1.2.7", + "description": "Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-callable:is-callable:1.2.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-callable@1.2.7", + "externalReferences": [ + { + "url": "git://github.com/inspect-js/is-callable.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-callable:is_callable:1.2.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_callable:is-callable:1.2.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_callable:is_callable:1.2.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:is-callable:1.2.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:is_callable:1.2.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-callable:1.2.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_callable:1.2.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-callable/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-core-module@2.16.2?package-id=e5c7b25e51d0e4a0", + "type": "library", + "author": "Jordan Harband ", + "name": "is-core-module", + "version": "2.16.2", + "description": "Is this specifier a node.js core module?", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-core-module:is-core-module:2.16.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-core-module@2.16.2", + "externalReferences": [ + { + "url": "git+https://github.com/inspect-js/is-core-module.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/is-core-module", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-core-module:is_core_module:2.16.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_core_module:is-core-module:2.16.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_core_module:is_core_module:2.16.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:is-core-module:2.16.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:is_core_module:2.16.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-core:is-core-module:2.16.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-core:is_core_module:2.16.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_core:is-core-module:2.16.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_core:is_core_module:2.16.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-core-module:2.16.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_core_module:2.16.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-core-module/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-date-object@1.1.0?package-id=4d742be2d09ada71", + "type": "library", + "author": "Jordan Harband", + "name": "is-date-object", + "version": "1.1.0", + "description": "Is this value a JS Date object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-date-object:is-date-object:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-date-object@1.1.0", + "externalReferences": [ + { + "url": "git://github.com/inspect-js/is-date-object.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-date-object:is_date_object:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_date_object:is-date-object:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_date_object:is_date_object:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:is-date-object:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:is_date_object:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-date:is-date-object:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-date:is_date_object:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_date:is-date-object:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_date:is_date_object:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-date-object:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_date_object:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-date-object/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-expression@4.0.0?package-id=025b1622a77b0169", + "type": "library", + "author": "Timothy Gu ", + "name": "is-expression", + "version": "4.0.0", + "description": "Check if a string is a valid JavaScript expression", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-expression:is-expression:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-expression@4.0.0", + "externalReferences": [ + { + "url": "https://github.com/pugjs/is-expression.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-expression:is_expression:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_expression:is-expression:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_expression:is_expression:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pugjs:is-expression:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pugjs:is_expression:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-expression:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_expression:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-expression/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-extglob@2.1.1?package-id=7f72b5b8f89d7183", + "type": "library", + "author": "Jon Schlinkert (https://github.com/jonschlinkert)", + "name": "is-extglob", + "version": "2.1.1", + "description": "Returns true if a string has an extglob.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jonschlinkert:is-extglob:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-extglob@2.1.1", + "externalReferences": [ + { + "url": "https://github.com/jonschlinkert/is-extglob", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jonschlinkert:is_extglob:2.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-extglob:is-extglob:2.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-extglob:is_extglob:2.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_extglob:is-extglob:2.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_extglob:is_extglob:2.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-extglob:2.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_extglob:2.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-extglob/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-fullwidth-code-point@1.0.0?package-id=68fe94da8f6466e7", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-fullwidth-code-point", + "version": "1.0.0", + "description": "Check if the character represented by a given Unicode code point is fullwidth", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-fullwidth-code-point@1.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-fullwidth-code-point:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_fullwidth_code_point:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_fullwidth_code_point:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-fullwidth-code:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-fullwidth-code:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_fullwidth_code:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_fullwidth_code:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-fullwidth:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-fullwidth:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_fullwidth:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_fullwidth:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/gauge/node_modules/is-fullwidth-code-point/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-fullwidth-code-point@2.0.0?package-id=fac6f12e8720a1b3", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-fullwidth-code-point", + "version": "2.0.0", + "description": "Check if the character represented by a given Unicode code point is fullwidth", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-fullwidth-code-point@2.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-fullwidth-code-point:is_fullwidth_code_point:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_fullwidth_code_point:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_fullwidth_code_point:is_fullwidth_code_point:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-fullwidth-code:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-fullwidth-code:is_fullwidth_code_point:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_fullwidth_code:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_fullwidth_code:is_fullwidth_code_point:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-fullwidth:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-fullwidth:is_fullwidth_code_point:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_fullwidth:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_fullwidth:is_fullwidth_code_point:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_fullwidth_code_point:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/wide-align/node_modules/is-fullwidth-code-point/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-fullwidth-code-point@3.0.0?package-id=ceb97ce06d62ac60", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-fullwidth-code-point", + "version": "3.0.0", + "description": "Check if the character represented by a given Unicode code point is fullwidth", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-fullwidth-code-point@3.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-fullwidth-code-point:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_fullwidth_code_point:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_fullwidth_code_point:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-fullwidth-code:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-fullwidth-code:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_fullwidth_code:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_fullwidth_code:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-fullwidth:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-fullwidth:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_fullwidth:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_fullwidth:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-fullwidth-code-point/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-glob@4.0.3?package-id=c962a2f9025eb914", + "type": "library", + "author": "Jon Schlinkert (https://github.com/jonschlinkert), Brian Woodward (https://twitter.com/doowb), Daniel Perez (https://tuvistavie.com), Jon Schlinkert (http://twitter.com/jonschlinkert)", + "name": "is-glob", + "version": "4.0.3", + "description": "Returns `true` if the given string looks like a glob pattern or an extglob pattern. This makes it easy to create code that only uses external modules like node-glob when necessary, resulting in much faster code execution and initialization time, and a better user experience.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:micromatch:is-glob:4.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-glob@4.0.3", + "externalReferences": [ + { + "url": "https://github.com/micromatch/is-glob", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:micromatch:is_glob:4.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-glob:is-glob:4.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-glob:is_glob:4.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_glob:is-glob:4.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_glob:is_glob:4.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-glob:4.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_glob:4.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-glob/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-lambda@1.0.1?package-id=d9cbeeda741b13b2", + "type": "library", + "author": "Thomas Watson Steen (https://twitter.com/wa7son)", + "name": "is-lambda", + "version": "1.0.1", + "description": "Detect if your code is running on an AWS Lambda server", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-lambda:is-lambda:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-lambda@1.0.1", + "externalReferences": [ + { + "url": "https://github.com/watson/is-lambda.git", + "type": "distribution" + }, + { + "url": "https://github.com/watson/is-lambda", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-lambda:is_lambda:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_lambda:is-lambda:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_lambda:is_lambda:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:watson:is-lambda:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:watson:is_lambda:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-lambda:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_lambda:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-lambda/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-map@2.0.3?package-id=7aeb57cf02726c97", + "type": "library", + "author": "Jordan Harband ", + "name": "is-map", + "version": "2.0.3", + "description": "Is this value a JS Map? This module works cross-realm/iframe, and despite ES6 @@toStringTag.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:inspect-js:is-map:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-map@2.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/inspect-js/is-map.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/is-map#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:is_map:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-map:is-map:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-map:is_map:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_map:is-map:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_map:is_map:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-map:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_map:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-map/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-natural-number@4.0.1?package-id=5f3943fd8b1b46a9", + "type": "library", + "author": "Shinnosuke Watanabe (https://github.com/shinnn)", + "name": "is-natural-number", + "version": "4.0.1", + "description": "Check if a value is a natural number", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-natural-number:is-natural-number:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-natural-number@4.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-natural-number:is_natural_number:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_natural_number:is-natural-number:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_natural_number:is_natural_number:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-natural:is-natural-number:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-natural:is_natural_number:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_natural:is-natural-number:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_natural:is_natural_number:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-natural-number:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_natural_number:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-natural-number/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-number@7.0.0?package-id=ef651aa972136a02", + "type": "library", + "author": "Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), Olsten Larck (https://i.am.charlike.online), Rouven Weßling (www.rouvenwessling.de)", + "name": "is-number", + "version": "7.0.0", + "description": "Returns true if a number or string value is a finite number. Useful for regex matches, parsing, user input, etc.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jonschlinkert:is-number:7.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-number@7.0.0", + "externalReferences": [ + { + "url": "https://github.com/jonschlinkert/is-number", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jonschlinkert:is_number:7.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-number:is-number:7.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-number:is_number:7.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_number:is-number:7.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_number:is_number:7.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-number:7.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_number:7.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-number/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-number-like@1.0.8?package-id=045ed23701e3dcd7", + "type": "library", + "author": "Vigour.io , Jim De Beer , Shawn Inder ", + "name": "is-number-like", + "version": "1.0.8", + "description": "Checks whether provided parameter looks like a number", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:is-number-like:is-number-like:1.0.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-number-like@1.0.8", + "externalReferences": [ + { + "url": "git+https://github.com/vigour-io/is-number-like.git", + "type": "distribution" + }, + { + "url": "https://github.com/vigour-io/is-number-like#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-number-like:is_number_like:1.0.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_number_like:is-number-like:1.0.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_number_like:is_number_like:1.0.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-number:is-number-like:1.0.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-number:is_number_like:1.0.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_number:is-number-like:1.0.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_number:is_number_like:1.0.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:vigour-io:is-number-like:1.0.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:vigour-io:is_number_like:1.0.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-number-like:1.0.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_number_like:1.0.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-number-like/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-number-object@1.1.1?package-id=e69c6205dff000a1", + "type": "library", + "author": "Jordan Harband ", + "name": "is-number-object", + "version": "1.1.1", + "description": "Is this value a JS Number object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-number-object:is-number-object:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-number-object@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/inspect-js/is-number-object.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/is-number-object#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-number-object:is_number_object:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_number_object:is-number-object:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_number_object:is_number_object:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:is-number-object:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:is_number_object:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-number:is-number-object:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-number:is_number_object:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_number:is-number-object:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_number:is_number_object:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-number-object:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_number_object:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-number-object/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-object@1.0.2?package-id=080098421fa0b116", + "type": "library", + "author": "Raynos , Raynos, Jordan Harband (https://github.com/ljharb)", + "name": "is-object", + "version": "1.0.2", + "description": "Checks whether a value is an object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:inspect-js:is-object:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-object@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/inspect-js/is-object.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/is-object", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:is_object:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-object:is-object:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-object:is_object:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_object:is-object:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_object:is_object:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-object:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_object:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-object/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-plain-obj@1.1.0?package-id=85335907c023e35c", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-plain-obj", + "version": "1.1.0", + "description": "Check if a value is a plain object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-plain-obj:is-plain-obj:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-plain-obj@1.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-plain-obj:is_plain_obj:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_plain_obj:is-plain-obj:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_plain_obj:is_plain_obj:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-plain:is-plain-obj:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-plain:is_plain_obj:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_plain:is-plain-obj:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_plain:is_plain_obj:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-plain-obj:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_plain_obj:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-plain-obj/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-plain-object@2.0.4?package-id=0cdcb3b46bab4f76", + "type": "library", + "author": "Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), Osman Nuri Okumuş (http://onokumus.com), Steven Vachon (https://svachon.com), ", + "name": "is-plain-object", + "version": "2.0.4", + "description": "Returns true if an object was created by the `Object` constructor.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-plain-object:is-plain-object:2.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-plain-object@2.0.4", + "externalReferences": [ + { + "url": "https://github.com/jonschlinkert/is-plain-object", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-plain-object:is_plain_object:2.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_plain_object:is-plain-object:2.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_plain_object:is_plain_object:2.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jonschlinkert:is-plain-object:2.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jonschlinkert:is_plain_object:2.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-plain:is-plain-object:2.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-plain:is_plain_object:2.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_plain:is-plain-object:2.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_plain:is_plain_object:2.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-plain-object:2.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_plain_object:2.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-plain-object/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-promise@2.2.2?package-id=06d9e6f32c28a5f8", + "type": "library", + "author": "ForbesLindesay", + "name": "is-promise", + "version": "2.2.2", + "description": "Test whether an object looks like a promises-a+ promise", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-promise:is-promise:2.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-promise@2.2.2", + "externalReferences": [ + { + "url": "https://github.com/then/is-promise.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-promise:is_promise:2.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_promise:is-promise:2.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_promise:is_promise:2.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:then:is-promise:2.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:then:is_promise:2.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-promise:2.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_promise:2.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-promise/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-regex@1.2.1?package-id=eb42217c762c43fc", + "type": "library", + "author": "Jordan Harband ", + "name": "is-regex", + "version": "1.2.1", + "description": "Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:inspect-js:is-regex:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-regex@1.2.1", + "externalReferences": [ + { + "url": "git://github.com/inspect-js/is-regex.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/is-regex", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:is_regex:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-regex:is-regex:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-regex:is_regex:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_regex:is-regex:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_regex:is_regex:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-regex:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_regex:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-regex/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-relative@1.0.0?package-id=2efd093414ff4eab", + "type": "library", + "author": "Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), Shinnosuke Watanabe (https://shinnn.github.io)", + "name": "is-relative", + "version": "1.0.0", + "description": "Returns `true` if the path appears to be relative.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jonschlinkert:is-relative:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-relative@1.0.0", + "externalReferences": [ + { + "url": "https://github.com/jonschlinkert/is-relative", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jonschlinkert:is_relative:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-relative:is-relative:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-relative:is_relative:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_relative:is-relative:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_relative:is_relative:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-relative:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_relative:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-relative/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-retry-allowed@1.2.0?package-id=4be8fdb80ba2df5a", + "type": "library", + "author": "Vsevolod Strukchinsky (github.com/floatdrop)", + "name": "is-retry-allowed", + "version": "1.2.0", + "description": "Is retry allowed for Error?", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-retry-allowed:is-retry-allowed:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-retry-allowed@1.2.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-retry-allowed:is_retry_allowed:1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_retry_allowed:is-retry-allowed:1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_retry_allowed:is_retry_allowed:1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-retry:is-retry-allowed:1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-retry:is_retry_allowed:1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_retry:is-retry-allowed:1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_retry:is_retry_allowed:1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-retry-allowed:1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_retry_allowed:1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-retry-allowed/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-set@2.0.3?package-id=3636986997116379", + "type": "library", + "author": "Jordan Harband ", + "name": "is-set", + "version": "2.0.3", + "description": "Is this value a JS Set? This module works cross-realm/iframe, and despite ES6 @@toStringTag.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:inspect-js:is-set:2.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-set@2.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/inspect-js/is-set.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/is-set#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:is_set:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-set:is-set:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-set:is_set:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_set:is-set:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_set:is_set:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-set:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_set:2.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-set/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-shared-array-buffer@1.0.4?package-id=be5dd13ccee97384", + "type": "library", + "author": "Jordan Harband (http://ljharb.codes)", + "name": "is-shared-array-buffer", + "version": "1.0.4", + "description": "Is this value a JS SharedArrayBuffer?", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-shared-array-buffer:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-shared-array-buffer@1.0.4", + "externalReferences": [ + { + "url": "git+https://github.com/inspect-js/is-shared-array-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/is-shared-array-buffer#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-shared-array-buffer:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_shared_array_buffer:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_shared_array_buffer:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-shared-array:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-shared-array:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_shared_array:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_shared_array:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-shared:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-shared:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_shared:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_shared:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-shared-array-buffer/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-stream@1.1.0?package-id=ac3f97806ad63d60", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "is-stream", + "version": "1.1.0", + "description": "Check if something is a Node.js stream", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-stream:is-stream:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-stream@1.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-stream:is_stream:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_stream:is-stream:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_stream:is_stream:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-stream:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_stream:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-stream/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-stream@2.0.1?package-id=5b3d2863ea25c0ee", + "type": "library", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "is-stream", + "version": "2.0.1", + "description": "Check if something is a Node.js stream", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-stream:is-stream:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-stream@2.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-stream:is_stream:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_stream:is-stream:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_stream:is_stream:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-stream:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_stream:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/winston/node_modules/is-stream/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-string@1.1.1?package-id=f7b87c51d707a2b4", + "type": "library", + "author": "Jordan Harband ", + "name": "is-string", + "version": "1.1.1", + "description": "Is this value a JS String object or primitive? This module works cross-realm/iframe, and despite ES6 @@toStringTag.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:inspect-js:is-string:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-string@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/inspect-js/is-string.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:is_string:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-string:is-string:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-string:is_string:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_string:is-string:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_string:is_string:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-string:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_string:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-string/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-symbol@1.1.1?package-id=865696304cc6c89b", + "type": "library", + "author": "Jordan Harband ", + "name": "is-symbol", + "version": "1.1.1", + "description": "Determine if a value is an ES6 Symbol or not.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:inspect-js:is-symbol:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-symbol@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/inspect-js/is-symbol.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:is_symbol:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-symbol:is-symbol:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-symbol:is_symbol:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_symbol:is-symbol:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_symbol:is_symbol:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-symbol:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_symbol:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-symbol/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-typed-array@1.1.15?package-id=241515ad73bdd1d4", + "type": "library", + "author": "Jordan Harband (http://ljharb.codes), Jordan Harband (http://ljharb.codes)", + "name": "is-typed-array", + "version": "1.1.15", + "description": "Is this value a JS Typed Array? This module works cross-realm/iframe, does not depend on `instanceof` or mutable properties, and despite ES6 Symbol.toStringTag.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:is-typed-array:is-typed-array:1.1.15:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-typed-array@1.1.15", + "externalReferences": [ + { + "url": "git://github.com/inspect-js/is-typed-array.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-typed-array:is_typed_array:1.1.15:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_typed_array:is-typed-array:1.1.15:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_typed_array:is_typed_array:1.1.15:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:is-typed-array:1.1.15:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:is_typed_array:1.1.15:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-typed:is-typed-array:1.1.15:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-typed:is_typed_array:1.1.15:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_typed:is-typed-array:1.1.15:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_typed:is_typed_array:1.1.15:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-typed-array:1.1.15:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_typed_array:1.1.15:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-typed-array/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-unc-path@1.0.0?package-id=ce172a3a7c21705f", + "type": "library", + "author": "Jon Schlinkert (https://github.com/jonschlinkert)", + "name": "is-unc-path", + "version": "1.0.0", + "description": "Returns true if a filepath is a windows UNC file path.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jonschlinkert:is-unc-path:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-unc-path@1.0.0", + "externalReferences": [ + { + "url": "https://github.com/jonschlinkert/is-unc-path", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jonschlinkert:is_unc_path:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-unc-path:is-unc-path:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-unc-path:is_unc_path:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_unc_path:is-unc-path:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_unc_path:is_unc_path:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-unc:is-unc-path:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-unc:is_unc_path:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_unc:is-unc-path:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_unc:is_unc_path:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-unc-path:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_unc_path:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-unc-path/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-weakmap@2.0.2?package-id=e45ebd1d0caec949", + "type": "library", + "author": "Jordan Harband ", + "name": "is-weakmap", + "version": "2.0.2", + "description": "Is this value a JS WeakMap? This module works cross-realm/iframe, and despite ES6 @@toStringTag.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:inspect-js:is-weakmap:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-weakmap@2.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/inspect-js/is-weakmap.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/is-weakmap#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:is_weakmap:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-weakmap:is-weakmap:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-weakmap:is_weakmap:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_weakmap:is-weakmap:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_weakmap:is_weakmap:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-weakmap:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_weakmap:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-weakmap/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-weakset@2.0.4?package-id=5c11a4ead031e5d5", + "type": "library", + "author": "Jordan Harband ", + "name": "is-weakset", + "version": "2.0.4", + "description": "Is this value a JS WeakSet? This module works cross-realm/iframe, and despite ES6 @@toStringTag.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:inspect-js:is-weakset:2.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-weakset@2.0.4", + "externalReferences": [ + { + "url": "git+https://github.com/inspect-js/is-weakset.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/is-weakset#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:is_weakset:2.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-weakset:is-weakset:2.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-weakset:is_weakset:2.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_weakset:is-weakset:2.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_weakset:is_weakset:2.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-weakset:2.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_weakset:2.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-weakset/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/is-windows@1.0.2?package-id=c97557a2dcbdd3a0", + "type": "library", + "author": "Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), Simen Bekkhus (https://github.com/SimenB), 刘祺 (gucong.co.cc)", + "name": "is-windows", + "version": "1.0.2", + "description": "Returns true if the platform is windows. UMD module, works with node.js, commonjs, browser, AMD, electron, etc.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jonschlinkert:is-windows:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/is-windows@1.0.2", + "externalReferences": [ + { + "url": "https://github.com/jonschlinkert/is-windows", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jonschlinkert:is_windows:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-windows:is-windows:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is-windows:is_windows:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_windows:is-windows:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is_windows:is_windows:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is-windows:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:is:is_windows:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/is-windows/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/isarray@0.0.1?package-id=bc50e5d6cbc7eb36", + "type": "library", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "isarray", + "version": "0.0.1", + "description": "Array#isArray for older browsers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:juliangruber:isarray:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/isarray@0.0.1", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/isarray.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/isarray", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isarray:isarray:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sanitize-html/node_modules/isarray/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/isarray@1.0.0?package-id=034deefb6c4b8769", + "type": "library", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "isarray", + "version": "1.0.0", + "description": "Array#isArray for older browsers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:juliangruber:isarray:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/isarray@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/isarray.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/isarray", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isarray:isarray:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/readable-stream/node_modules/isarray/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/isarray@2.0.5?package-id=ed8d984bcbb93ff5", + "type": "library", + "author": "Julian Gruber (http://juliangruber.com)", + "name": "isarray", + "version": "2.0.5", + "description": "Array#isArray for older browsers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:juliangruber:isarray:2.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/isarray@2.0.5", + "externalReferences": [ + { + "url": "git://github.com/juliangruber/isarray.git", + "type": "distribution" + }, + { + "url": "https://github.com/juliangruber/isarray", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isarray:isarray:2.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/isarray/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/isexe@2.0.0?package-id=f016a5f09c60797b", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "isexe", + "version": "2.0.0", + "description": "Minimal module to check if a file is executable.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:isexe:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/isexe@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/isexe.git", + "type": "distribution" + }, + { + "url": "https://github.com/isaacs/isexe#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isexe:isexe:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/isexe/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/isexe@3.1.5?package-id=17fcea35d5a26f20", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "isexe", + "version": "3.1.5", + "description": "Minimal module to check if a file is executable.", + "licenses": [ + { + "license": { + "id": "BlueOak-1.0.0" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:isexe:3.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/isexe@3.1.5", + "externalReferences": [ + { + "url": "https://github.com/isaacs/isexe", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isexe:isexe:3.1.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/node-gyp/node_modules/isexe/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/isobject@3.0.1?package-id=71363469c72f98ea", + "type": "library", + "author": "Jon Schlinkert (https://github.com/jonschlinkert), , Brian Woodward (https://twitter.com/doowb), Jon Schlinkert (http://twitter.com/jonschlinkert), Magnús Dæhlen (https://github.com/magnudae), Tom MacWright (https://macwright.org)", + "name": "isobject", + "version": "3.0.1", + "description": "Returns true if the value is an object and not an array or null.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jonschlinkert:isobject:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/isobject@3.0.1", + "externalReferences": [ + { + "url": "https://github.com/jonschlinkert/isobject", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isobject:isobject:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/isobject/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/isurl@1.0.0?package-id=28254e996fa56b2a", + "type": "library", + "author": "Steven Vachon (https://www.svachon.com/)", + "name": "isurl", + "version": "1.0.0", + "description": "Checks whether a value is a WHATWG URL.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:isurl:isurl:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/isurl@1.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/isurl/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/jackspeak@3.4.3?package-id=e96a52decca51432", + "type": "library", + "author": "Isaac Z. Schlueter ", + "name": "jackspeak", + "version": "3.4.3", + "description": "A very strict and proper argument parser.", + "licenses": [ + { + "license": { + "id": "BlueOak-1.0.0" + } + } + ], + "cpe": "cpe:2.3:a:jackspeak:jackspeak:3.4.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/jackspeak@3.4.3", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/jackspeak.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/jackspeak/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/js-stringify@1.0.2?package-id=58ecb50896023cef", + "type": "library", + "author": "ForbesLindesay", + "name": "js-stringify", + "version": "1.0.2", + "description": "Stringify an object so it can be safely inlined in JavaScript code", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:js-stringify:js-stringify:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/js-stringify@1.0.2", + "externalReferences": [ + { + "url": "https://github.com/jadejs/js-stringify.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:js-stringify:js_stringify:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:js_stringify:js-stringify:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:js_stringify:js_stringify:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jadejs:js-stringify:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jadejs:js_stringify:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:js:js-stringify:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:js:js_stringify:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/js-stringify/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/js-tokens@4.0.0?package-id=3fc29f45ef8c9e41", + "type": "library", + "author": "Simon Lydell", + "name": "js-tokens", + "version": "4.0.0", + "description": "A regex that tokenizes JavaScript.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:js-tokens:js-tokens:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/js-tokens@4.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:js-tokens:js_tokens:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:js_tokens:js-tokens:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:js_tokens:js_tokens:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:js:js-tokens:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:js:js_tokens:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/js-tokens/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/js-yaml@3.14.2?package-id=f7f3579a635a8337", + "type": "library", + "author": "Vladimir Zapparov , Aleksey V Zapparov (http://www.ixti.net/), Vitaly Puzrin (https://github.com/puzrin), Martin Grenfell (http://got-ravings.blogspot.com)", + "name": "js-yaml", + "version": "3.14.2", + "description": "YAML 1.2 parser and serializer", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:nodeca:js-yaml:3.14.2:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/js-yaml@3.14.2", + "externalReferences": [ + { + "url": "https://github.com/nodeca/js-yaml", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/js-yaml/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/json-buffer@3.0.0?package-id=298ecde0ab662ada", + "type": "library", + "author": "Dominic Tarr (http://dominictarr.com)", + "name": "json-buffer", + "version": "3.0.0", + "description": "JSON parse & stringify that supports binary via bops & base64", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dominictarr:json-buffer:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-buffer@3.0.0", + "externalReferences": [ + { + "url": "git://github.com/dominictarr/json-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/dominictarr/json-buffer", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:dominictarr:json_buffer:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json-buffer:json-buffer:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json-buffer:json_buffer:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json_buffer:json-buffer:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json_buffer:json_buffer:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json:json-buffer:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json:json_buffer:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/cacheable-request/node_modules/json-buffer/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/json-schema@0.4.0?package-id=f593cbff106763e8", + "type": "library", + "author": "Kris Zyp, Kris Zyp ", + "name": "json-schema", + "version": "0.4.0", + "description": "JSON Schema validation and specifications", + "licenses": [ + { + "expression": "AFL-2.1 OR BSD-3-Clause" + } + ], + "cpe": "cpe:2.3:a:json-schema:json-schema:0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/json-schema@0.4.0", + "externalReferences": [ + { + "url": "http://github.com/kriszyp/json-schema", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json-schema:json_schema:0.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json_schema:json-schema:0.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json_schema:json_schema:0.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:kriszyp:json-schema:0.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:kriszyp:json_schema:0.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json:json-schema:0.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:json:json_schema:0.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/json-schema/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/json5@2.2.3?package-id=ff0081c9bee3a9f6", + "type": "library", + "author": "Aseem Kishore , Max Nanasy , Andrew Eisenberg , Jordan Tucker ", + "name": "json5", + "version": "2.2.3", + "description": "JSON for Humans", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:json5:json5:2.2.3:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/json5@2.2.3", + "externalReferences": [ + { + "url": "git+https://github.com/json5/json5.git", + "type": "distribution" + }, + { + "url": "http://json5.org/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/json5/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/jsonfile@6.2.1?package-id=203aa116ca1676f3", + "type": "library", + "author": "JP Richardson ", + "name": "jsonfile", + "version": "6.2.1", + "description": "Easily read/write JSON files.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jsonfile:jsonfile:6.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/jsonfile@6.2.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/jsonfile/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/jsonwebtoken@0.1.0?package-id=c29669d438fb9e38", + "type": "library", + "author": "auth0", + "name": "jsonwebtoken", + "version": "0.1.0", + "description": "JSON Web Token implementation (symmetric and asymmetric)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:auth0:jsonwebtoken:0.1.0:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/jsonwebtoken@0.1.0", + "externalReferences": [ + { + "url": "https://github.com/auth0/node-jsonwebtoken", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/express-jwt/node_modules/jsonwebtoken/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/jsonwebtoken@0.4.0?package-id=1e23bc54c16fbe6d", + "type": "library", + "author": "auth0", + "name": "jsonwebtoken", + "version": "0.4.0", + "description": "JSON Web Token implementation (symmetric and asymmetric)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:auth0:jsonwebtoken:0.4.0:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/jsonwebtoken@0.4.0", + "externalReferences": [ + { + "url": "https://github.com/auth0/node-jsonwebtoken", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/jsonwebtoken/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/jstransformer@1.0.0?package-id=cb3672db528c0205", + "type": "library", + "author": "ForbesLindesay", + "name": "jstransformer", + "version": "1.0.0", + "description": "Normalize the API of any jstransformer", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jstransformers:jstransformer:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/jstransformer@1.0.0", + "externalReferences": [ + { + "url": "https://github.com/jstransformers/jstransformer.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jstransformer:jstransformer:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/jstransformer/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/juice-shop@20.0.0?package-id=d93cffb187cc6ed6", + "type": "library", + "author": "Björn Kimminich (https://kimminich.de), Björn Kimminich, Jannik Hollenbach, Aashish683, greenkeeper[bot], MarcRler, agrawalarpit14, Scar26, JuiceShopBot, ShubhamPalriwala, CaptainFreak, Supratik Das, the-pro, Harsh Kumar, rishabhkeshan, Ziyang Li, ...", + "name": "juice-shop", + "version": "20.0.0", + "description": "Probably the most modern and sophisticated insecure web application", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:juice-shop:juice-shop:20.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/juice-shop@20.0.0", + "externalReferences": [ + { + "url": "https://github.com/juice-shop/juice-shop.git", + "type": "distribution" + }, + { + "url": "https://owasp-juice.shop", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:juice-shop:juice_shop:20.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:juice_shop:juice-shop:20.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:juice_shop:juice_shop:20.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:juice:juice-shop:20.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:juice:juice_shop:20.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/build/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/juice-shop@20.0.0?package-id=486affa68e36ab8d", + "type": "library", + "author": "Björn Kimminich (https://kimminich.de), Björn Kimminich, Jannik Hollenbach, Aashish683, greenkeeper[bot], MarcRler, agrawalarpit14, Scar26, JuiceShopBot, ShubhamPalriwala, CaptainFreak, Supratik Das, the-pro, Harsh Kumar, rishabhkeshan, Ziyang Li, ...", + "name": "juice-shop", + "version": "20.0.0", + "description": "Probably the most modern and sophisticated insecure web application", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:juice-shop:juice-shop:20.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/juice-shop@20.0.0", + "externalReferences": [ + { + "url": "https://github.com/juice-shop/juice-shop.git", + "type": "distribution" + }, + { + "url": "https://owasp-juice.shop", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:juice-shop:juice_shop:20.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:juice_shop:juice-shop:20.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:juice_shop:juice_shop:20.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:juice:juice-shop:20.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:juice:juice_shop:20.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/jwa@0.0.1?package-id=1fe4d16b42282bbe", + "type": "library", + "author": "Brian J. Brennan", + "name": "jwa", + "version": "0.0.1", + "description": "JWA implementation (supports all JWS algorithms)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brianloveswords:jwa:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/jwa@0.0.1", + "externalReferences": [ + { + "url": "git://github.com/brianloveswords/node-jwa.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jwa:jwa:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/jwa/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/jws@0.2.6?package-id=e3ae0c46d846c3b2", + "type": "library", + "author": "Brian J Brennan", + "name": "jws", + "version": "0.2.6", + "description": "Implementation of JSON Web Signatures", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:brianloveswords:jws:0.2.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/jws@0.2.6", + "externalReferences": [ + { + "url": "git://github.com/brianloveswords/node-jws.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jws:jws:0.2.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/jws/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/keyv@3.0.0?package-id=8594e21b80d1e888", + "type": "library", + "author": "Luke Childs (http://lukechilds.co.uk)", + "name": "keyv", + "version": "3.0.0", + "description": "Simple key-value storage with support for multiple backends", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lukechilds:keyv:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/keyv@3.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/lukechilds/keyv.git", + "type": "distribution" + }, + { + "url": "https://github.com/lukechilds/keyv", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:keyv:keyv:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/cacheable-request/node_modules/keyv/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/kind-of@6.0.3?package-id=c406772b04e5464c", + "type": "library", + "author": "Jon Schlinkert (https://github.com/jonschlinkert), David Fox-Powell (https://dtothefp.github.io/me), James (https://twitter.com/aretecode), Jon Schlinkert (http://twitter.com/jonschlinkert), Ken Sheedlo (kensheedlo.com), laggingreflex (https://github.com/laggingreflex), Miguel Mota (https://miguelmota.com), Peter deHaan (http://about.me/peterdehaan), tunnckoCore (https://i.am.charlike.online)", + "name": "kind-of", + "version": "6.0.3", + "description": "Get the native type of a value.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jonschlinkert:kind-of:6.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/kind-of@6.0.3", + "externalReferences": [ + { + "url": "https://github.com/jonschlinkert/kind-of", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jonschlinkert:kind_of:6.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:kind-of:kind-of:6.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:kind-of:kind_of:6.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:kind_of:kind-of:6.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:kind_of:kind_of:6.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:kind:kind-of:6.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:kind:kind_of:6.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/kind-of/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/kuler@2.0.0?package-id=ed79d2954c83dae0", + "type": "library", + "author": "Arnout Kazemier", + "name": "kuler", + "version": "2.0.0", + "description": "Color your terminal using CSS/hex color codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:3rd-Eden:kuler:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/kuler@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/3rd-Eden/kuler", + "type": "distribution" + }, + { + "url": "https://github.com/3rd-Eden/kuler", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:kuler:kuler:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/kuler/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/lazystream@1.0.1?package-id=181999b6186ce408", + "type": "library", + "author": "Jonas Pommerening (https://npmjs.org/~jpommerening), Mario Casciaro ", + "name": "lazystream", + "version": "1.0.1", + "description": "Open Node Streams on demand.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jpommerening:lazystream:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/lazystream@1.0.1", + "externalReferences": [ + { + "url": "https://github.com/jpommerening/node-lazystream.git", + "type": "distribution" + }, + { + "url": "https://github.com/jpommerening/node-lazystream", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:lazystream:lazystream:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/lazystream/package.json" + } + ] + }, + { + "bom-ref": "pkg:deb/debian/libc6@2.41-12%2Bdeb13u2?arch=amd64&distro=debian-13&package-id=089516409246f602&upstream=glibc", + "type": "library", + "publisher": "GNU Libc Maintainers ", + "name": "libc6", + "version": "2.41-12+deb13u2", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + }, + { + "license": { + "id": "BSL-1.0" + } + }, + { + "license": { + "id": "FSFAP" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "GPL-2.0-or-later" + } + }, + { + "license": { + "id": "GPL-3.0-only" + } + }, + { + "license": { + "id": "GPL-3.0-or-later" + } + }, + { + "license": { + "id": "ISC" + } + }, + { + "license": { + "id": "LGPL-2.0-only" + } + }, + { + "license": { + "id": "LGPL-2.0-or-later" + } + }, + { + "license": { + "id": "LGPL-2.1-only" + } + }, + { + "license": { + "id": "LGPL-2.1-or-later" + } + }, + { + "license": { + "id": "LGPL-3.0-only" + } + }, + { + "license": { + "id": "LGPL-3.0-or-later" + } + }, + { + "license": { + "id": "SunPro" + } + }, + { + "license": { + "id": "Unicode-DFS-2016" + } + }, + { + "license": { + "name": "BSD-3-clause-Berkeley" + } + }, + { + "license": { + "name": "BSD-3-clause-Carnegie" + } + }, + { + "license": { + "name": "BSD-3-clause-Oracle" + } + }, + { + "license": { + "name": "BSD-3-clause-WIDE" + } + }, + { + "license": { + "name": "BSD-like-Spencer" + } + }, + { + "license": { + "name": "CORE-MATH" + } + }, + { + "license": { + "name": "Carnegie" + } + }, + { + "license": { + "name": "DEC" + } + }, + { + "license": { + "name": "GPL-2+-with-link-exception" + } + }, + { + "license": { + "name": "IBM" + } + }, + { + "license": { + "name": "Inner-Net" + } + }, + { + "license": { + "name": "LGPL-2.1+-with-link-exception" + } + }, + { + "license": { + "name": "MIT-like-Lord" + } + }, + { + "license": { + "name": "PCRE" + } + }, + { + "license": { + "name": "Univ-Coimbra" + } + }, + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:libc6:libc6:2.41-12\\+deb13u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libc6@2.41-12%2Bdeb13u2?arch=amd64&distro=debian-13&upstream=glibc", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "dpkg-db-cataloger" + }, + { + "name": "syft:package:type", + "value": "deb" + }, + { + "name": "syft:package:metadataType", + "value": "dpkg-db-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:318bc252656ce5b3c77fc9a13e302bba683f813d4b19c21be6e0ad3acc7adaf1" + }, + { + "name": "syft:location:0:path", + "value": "/var/lib/dpkg/status.d/libc6" + }, + { + "name": "syft:location:1:layerID", + "value": "sha256:318bc252656ce5b3c77fc9a13e302bba683f813d4b19c21be6e0ad3acc7adaf1" + }, + { + "name": "syft:location:1:path", + "value": "/usr/share/doc/libc6/copyright" + }, + { + "name": "syft:location:2:layerID", + "value": "sha256:318bc252656ce5b3c77fc9a13e302bba683f813d4b19c21be6e0ad3acc7adaf1" + }, + { + "name": "syft:location:2:path", + "value": "/var/lib/dpkg/status.d/libc6.md5sums" + }, + { + "name": "syft:metadata:installedSize", + "value": "13225" + }, + { + "name": "syft:metadata:source", + "value": "glibc" + } + ] + }, + { + "bom-ref": "pkg:deb/debian/libgcc-s1@14.2.0-19?arch=amd64&distro=debian-13&package-id=3031df5904016f0f&upstream=gcc-14", + "type": "library", + "publisher": "Debian GCC Maintainers ", + "name": "libgcc-s1", + "version": "14.2.0-19", + "licenses": [ + { + "license": { + "name": "sha256:20390f8a6f3b1e4d7cb45dd8652dabb259bbef688cbad839bcdb0b9ba7252f79" + } + } + ], + "cpe": "cpe:2.3:a:libgcc-s1:libgcc-s1:14.2.0-19:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgcc-s1@14.2.0-19?arch=amd64&distro=debian-13&upstream=gcc-14", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "dpkg-db-cataloger" + }, + { + "name": "syft:package:type", + "value": "deb" + }, + { + "name": "syft:package:metadataType", + "value": "dpkg-db-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:libgcc-s1:libgcc_s1:14.2.0-19:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:libgcc_s1:libgcc-s1:14.2.0-19:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:libgcc_s1:libgcc_s1:14.2.0-19:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:libgcc:libgcc-s1:14.2.0-19:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:libgcc:libgcc_s1:14.2.0-19:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:c16b2ec4b1493bad1b1de23d659c899e60abb166bda756d02792f0a03ba54a43" + }, + { + "name": "syft:location:0:path", + "value": "/var/lib/dpkg/status.d/libgcc-s1" + }, + { + "name": "syft:location:1:layerID", + "value": "sha256:7db505d90756626f425c6c5468eca565c82f589b144ecaa4f411ad9bbf79e614" + }, + { + "name": "syft:location:1:path", + "value": "/usr/share/doc/gcc-14-base/copyright" + }, + { + "name": "syft:location:2:layerID", + "value": "sha256:c16b2ec4b1493bad1b1de23d659c899e60abb166bda756d02792f0a03ba54a43" + }, + { + "name": "syft:location:2:path", + "value": "/var/lib/dpkg/status.d/libgcc-s1.md5sums" + }, + { + "name": "syft:metadata:installedSize", + "value": "197" + }, + { + "name": "syft:metadata:source", + "value": "gcc-14" + } + ] + }, + { + "bom-ref": "pkg:deb/debian/libgomp1@14.2.0-19?arch=amd64&distro=debian-13&package-id=a3600d8be216b213&upstream=gcc-14", + "type": "library", + "publisher": "Debian GCC Maintainers ", + "name": "libgomp1", + "version": "14.2.0-19", + "licenses": [ + { + "license": { + "name": "sha256:20390f8a6f3b1e4d7cb45dd8652dabb259bbef688cbad839bcdb0b9ba7252f79" + } + } + ], + "cpe": "cpe:2.3:a:libgomp1:libgomp1:14.2.0-19:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libgomp1@14.2.0-19?arch=amd64&distro=debian-13&upstream=gcc-14", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "dpkg-db-cataloger" + }, + { + "name": "syft:package:type", + "value": "deb" + }, + { + "name": "syft:package:metadataType", + "value": "dpkg-db-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1f5d28bd51650f429293f7730ede274b81dc0744aa918bc887133c4ad610258c" + }, + { + "name": "syft:location:0:path", + "value": "/var/lib/dpkg/status.d/libgomp1" + }, + { + "name": "syft:location:1:layerID", + "value": "sha256:7db505d90756626f425c6c5468eca565c82f589b144ecaa4f411ad9bbf79e614" + }, + { + "name": "syft:location:1:path", + "value": "/usr/share/doc/gcc-14-base/copyright" + }, + { + "name": "syft:location:2:layerID", + "value": "sha256:1f5d28bd51650f429293f7730ede274b81dc0744aa918bc887133c4ad610258c" + }, + { + "name": "syft:location:2:path", + "value": "/var/lib/dpkg/status.d/libgomp1.md5sums" + }, + { + "name": "syft:metadata:installedSize", + "value": "368" + }, + { + "name": "syft:metadata:source", + "value": "gcc-14" + } + ] + }, + { + "bom-ref": "pkg:deb/debian/libssl3t64@3.5.5-1~deb13u2?arch=amd64&distro=debian-13&package-id=d839547e5a6a801d&upstream=openssl", + "type": "library", + "publisher": "Debian OpenSSL Team ", + "name": "libssl3t64", + "version": "3.5.5-1~deb13u2", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + }, + { + "license": { + "id": "GPL-1.0-only" + } + }, + { + "license": { + "id": "GPL-1.0-or-later" + } + }, + { + "license": { + "name": "Artistic" + } + } + ], + "cpe": "cpe:2.3:a:libssl3t64:libssl3t64:3.5.5-1\\~deb13u2:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libssl3t64@3.5.5-1~deb13u2?arch=amd64&distro=debian-13&upstream=openssl", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "dpkg-db-cataloger" + }, + { + "name": "syft:package:type", + "value": "deb" + }, + { + "name": "syft:package:metadataType", + "value": "dpkg-db-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:1a6e423bca2d12ae8428c7b3a06be964f6166ecd4d90d8d30bfcc99c40740dc7" + }, + { + "name": "syft:location:0:path", + "value": "/var/lib/dpkg/status.d/libssl3t64" + }, + { + "name": "syft:location:1:layerID", + "value": "sha256:1a6e423bca2d12ae8428c7b3a06be964f6166ecd4d90d8d30bfcc99c40740dc7" + }, + { + "name": "syft:location:1:path", + "value": "/usr/share/doc/libssl3t64/copyright" + }, + { + "name": "syft:location:2:layerID", + "value": "sha256:1a6e423bca2d12ae8428c7b3a06be964f6166ecd4d90d8d30bfcc99c40740dc7" + }, + { + "name": "syft:location:2:path", + "value": "/var/lib/dpkg/status.d/libssl3t64.md5sums" + }, + { + "name": "syft:metadata:installedSize", + "value": "8094" + }, + { + "name": "syft:metadata:source", + "value": "openssl" + } + ] + }, + { + "bom-ref": "pkg:deb/debian/libstdc%2B%2B6@14.2.0-19?arch=amd64&distro=debian-13&package-id=cf66ea0dff490b7a&upstream=gcc-14", + "type": "library", + "publisher": "Debian GCC Maintainers ", + "name": "libstdc++6", + "version": "14.2.0-19", + "licenses": [ + { + "license": { + "name": "sha256:20390f8a6f3b1e4d7cb45dd8652dabb259bbef688cbad839bcdb0b9ba7252f79" + } + } + ], + "cpe": "cpe:2.3:a:libstdc\\+\\+6:libstdc\\+\\+6:14.2.0-19:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libstdc%2B%2B6@14.2.0-19?arch=amd64&distro=debian-13&upstream=gcc-14", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "dpkg-db-cataloger" + }, + { + "name": "syft:package:type", + "value": "deb" + }, + { + "name": "syft:package:metadataType", + "value": "dpkg-db-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:6e18ad80f3d64a8cbbcd1ff2e8a0d5ce7282cf664e816b86183a59d30a618e8a" + }, + { + "name": "syft:location:0:path", + "value": "/var/lib/dpkg/status.d/libstdc++6" + }, + { + "name": "syft:location:1:layerID", + "value": "sha256:7db505d90756626f425c6c5468eca565c82f589b144ecaa4f411ad9bbf79e614" + }, + { + "name": "syft:location:1:path", + "value": "/usr/share/doc/gcc-14-base/copyright" + }, + { + "name": "syft:location:2:layerID", + "value": "sha256:6e18ad80f3d64a8cbbcd1ff2e8a0d5ce7282cf664e816b86183a59d30a618e8a" + }, + { + "name": "syft:location:2:path", + "value": "/var/lib/dpkg/status.d/libstdc++6.md5sums" + }, + { + "name": "syft:metadata:installedSize", + "value": "3019" + }, + { + "name": "syft:metadata:source", + "value": "gcc-14" + } + ] + }, + { + "bom-ref": "pkg:npm/libxmljs2@0.37.0?package-id=008b04af34471513", + "type": "library", + "author": "marudor, Jeff Smick, Marco Rogers", + "name": "libxmljs2", + "version": "0.37.0", + "description": "libxml bindings for v8 javascript engine", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:libxmljs2:libxmljs2:0.37.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/libxmljs2@0.37.0", + "externalReferences": [ + { + "url": "http://github.com/marudor/libxmljs2.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:marudor:libxmljs2:0.37.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/libxmljs2/package.json" + } + ] + }, + { + "bom-ref": "pkg:deb/debian/libzstd@1.5.7%2Bdfsg-1?distro=Debian&package-id=81799196ffdbbf0b", + "type": "library", + "name": "libzstd", + "version": "1.5.7+dfsg-1", + "cpe": "cpe:2.3:a:libzstd:libzstd:1.5.7\\+dfsg-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/Debian/libzstd@1.5.7%2Bdfsg-1?distro=Debian", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "elf-binary-package-cataloger" + }, + { + "name": "syft:package:type", + "value": "deb" + }, + { + "name": "syft:package:metadataType", + "value": "elf-binary-package-note-json-payload" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:c0e409312adc366898967307565f692bb33d43a439d3de48e27d14b742389725" + }, + { + "name": "syft:location:0:path", + "value": "/usr/lib/x86_64-linux-gnu/libzstd.so.1.5.7" + } + ] + }, + { + "bom-ref": "pkg:deb/debian/libzstd1@1.5.7%2Bdfsg-1?arch=amd64&distro=debian-13&package-id=5bd7e38ab1e29af4&upstream=libzstd", + "type": "library", + "publisher": "RPM packaging team ", + "name": "libzstd1", + "version": "1.5.7+dfsg-1", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + }, + { + "license": { + "id": "GPL-2.0-only" + } + }, + { + "license": { + "id": "Zlib" + } + }, + { + "license": { + "name": "Expat" + } + } + ], + "cpe": "cpe:2.3:a:libzstd1:libzstd1:1.5.7\\+dfsg-1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/libzstd1@1.5.7%2Bdfsg-1?arch=amd64&distro=debian-13&upstream=libzstd", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "dpkg-db-cataloger" + }, + { + "name": "syft:package:type", + "value": "deb" + }, + { + "name": "syft:package:metadataType", + "value": "dpkg-db-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:c0e409312adc366898967307565f692bb33d43a439d3de48e27d14b742389725" + }, + { + "name": "syft:location:0:path", + "value": "/var/lib/dpkg/status.d/libzstd1" + }, + { + "name": "syft:location:1:layerID", + "value": "sha256:c0e409312adc366898967307565f692bb33d43a439d3de48e27d14b742389725" + }, + { + "name": "syft:location:1:path", + "value": "/usr/share/doc/libzstd1/copyright" + }, + { + "name": "syft:location:2:layerID", + "value": "sha256:c0e409312adc366898967307565f692bb33d43a439d3de48e27d14b742389725" + }, + { + "name": "syft:location:2:path", + "value": "/var/lib/dpkg/status.d/libzstd1.md5sums" + }, + { + "name": "syft:metadata:installedSize", + "value": "847" + }, + { + "name": "syft:metadata:source", + "value": "libzstd" + } + ] + }, + { + "bom-ref": "pkg:npm/liftup@3.0.1?package-id=b4203f0dbd71dc51", + "type": "library", + "author": "Grunt Development Team (https://gruntjs.com/development-team)", + "name": "liftup", + "version": "3.0.1", + "description": "Launch your command line tool with ease.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:liftup:liftup:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/liftup@3.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/liftup/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/linebreak@1.1.0?package-id=b2ed0312398a883c", + "type": "library", + "author": "Devon Govett ", + "name": "linebreak", + "version": "1.1.0", + "description": "An implementation of the Unicode Line Breaking Algorithm (UAX #14)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:devongovett:linebreak:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/linebreak@1.1.0", + "externalReferences": [ + { + "url": "https://github.com/devongovett/linebreaker.git", + "type": "distribution" + }, + { + "url": "https://github.com/devongovett/linebreaker", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:linebreak:linebreak:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/linebreak/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/listenercount@1.0.1?package-id=8cf228f1cc8b3027", + "type": "library", + "author": "jden ", + "name": "listenercount", + "version": "1.0.1", + "description": "backwards compatible version of builtin events.listenercount", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:listenercount:listenercount:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/listenercount@1.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/listenercount/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ljharb-monorepo-symlink-test@0.0.0?package-id=b0673eac3bec27e8", + "type": "library", + "name": "ljharb-monorepo-symlink-test", + "version": "0.0.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ljharb-monorepo-symlink-test:ljharb-monorepo-symlink-test:0.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/ljharb-monorepo-symlink-test@0.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb-monorepo-symlink-test:ljharb_monorepo_symlink_test:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb_monorepo_symlink_test:ljharb-monorepo-symlink-test:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb_monorepo_symlink_test:ljharb_monorepo_symlink_test:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb-monorepo-symlink:ljharb-monorepo-symlink-test:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb-monorepo-symlink:ljharb_monorepo_symlink_test:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb_monorepo_symlink:ljharb-monorepo-symlink-test:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb_monorepo_symlink:ljharb_monorepo_symlink_test:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb-monorepo:ljharb-monorepo-symlink-test:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb-monorepo:ljharb_monorepo_symlink_test:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb_monorepo:ljharb-monorepo-symlink-test:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb_monorepo:ljharb_monorepo_symlink_test:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:ljharb-monorepo-symlink-test:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:ljharb_monorepo_symlink_test:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/resolve/test/resolver/multirepo/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/locate-path@5.0.0?package-id=91b02cf44711d543", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "locate-path", + "version": "5.0.0", + "description": "Get the first path that exists on disk of multiple paths", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:locate-path:locate-path:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/locate-path@5.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:locate-path:locate_path:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:locate_path:locate-path:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:locate_path:locate_path:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:locate:locate-path:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:locate:locate_path:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/replace/node_modules/locate-path/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/lodash@2.4.2?package-id=dbbb92a4d9c4d340", + "type": "library", + "author": "John-David Dalton (http://allyoucanleet.com/), John-David Dalton (http://allyoucanleet.com/), Blaine Bublitz (http://www.iceddev.com/), Kit Cambridge (http://kitcambridge.be/), Mathias Bynens (http://mathiasbynens.be/)", + "name": "lodash", + "version": "2.4.2", + "description": "A utility library delivering consistency, customization, performance, & extras.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash:lodash:2.4.2:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/lodash@2.4.2", + "externalReferences": [ + { + "url": "https://github.com/lodash/lodash.git", + "type": "distribution" + }, + { + "url": "http://lodash.com/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sanitize-html/node_modules/lodash/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/lodash@4.18.1?package-id=9a03ea155cc712e9", + "type": "library", + "author": "John-David Dalton , John-David Dalton , Mathias Bynens ", + "name": "lodash", + "version": "4.18.1", + "description": "Lodash modular utilities.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash:lodash:4.18.1:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/lodash@4.18.1", + "externalReferences": [ + { + "url": "https://lodash.com/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/lodash/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/lodash.isfinite@3.3.2?package-id=ec6d4a50251c782e", + "type": "library", + "author": "John-David Dalton (http://allyoucanleet.com/), John-David Dalton (http://allyoucanleet.com/), Blaine Bublitz (https://github.com/phated), Mathias Bynens (https://mathiasbynens.be/)", + "name": "lodash.isfinite", + "version": "3.3.2", + "description": "The lodash method `_.isFinite` exported as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.isfinite:lodash.isfinite:3.3.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.isfinite@3.3.2", + "externalReferences": [ + { + "url": "https://lodash.com/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/lodash.isfinite/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/lodash.set@4.3.2?package-id=be8f210a7cd0fab3", + "type": "library", + "author": "John-David Dalton (http://allyoucanleet.com/), John-David Dalton (http://allyoucanleet.com/), Blaine Bublitz (https://github.com/phated), Mathias Bynens (https://mathiasbynens.be/)", + "name": "lodash.set", + "version": "4.3.2", + "description": "The lodash method `_.set` exported as a module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lodash.set:lodash.set:4.3.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/lodash.set@4.3.2", + "externalReferences": [ + { + "url": "https://lodash.com/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/lodash.set/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/logform@2.7.0?package-id=de0c453fbecf2b01", + "type": "library", + "author": "Charlie Robbins ", + "name": "logform", + "version": "2.7.0", + "description": "An mutable object-based log format designed for chaining & objectMode streams.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:winstonjs:logform:2.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/logform@2.7.0", + "externalReferences": [ + { + "url": "git+https://github.com/winstonjs/logform.git", + "type": "distribution" + }, + { + "url": "https://github.com/winstonjs/logform#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:logform:logform:2.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/logform/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/loose-envify@1.4.0?package-id=360730ddc52a7620", + "type": "library", + "author": "Andres Suarez ", + "name": "loose-envify", + "version": "1.4.0", + "description": "Fast (and loose) selective `process.env` replacer using js-tokens instead of an AST", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:loose-envify:loose-envify:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/loose-envify@1.4.0", + "externalReferences": [ + { + "url": "git://github.com/zertosh/loose-envify.git", + "type": "distribution" + }, + { + "url": "https://github.com/zertosh/loose-envify", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:loose-envify:loose_envify:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:loose_envify:loose-envify:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:loose_envify:loose_envify:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:zertosh:loose-envify:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:zertosh:loose_envify:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:loose:loose-envify:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:loose:loose_envify:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/loose-envify/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/lowercase-keys@1.0.0?package-id=32832572ce4df07d", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "lowercase-keys", + "version": "1.0.0", + "description": "Lowercase the keys of an object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lowercase-keys:lowercase-keys:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/lowercase-keys@1.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:lowercase-keys:lowercase_keys:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:lowercase_keys:lowercase-keys:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:lowercase_keys:lowercase_keys:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:lowercase:lowercase-keys:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:lowercase:lowercase_keys:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/lowercase-keys/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/lru-cache@10.4.3?package-id=ceda3bc6e5ebcc1b", + "type": "library", + "author": "Isaac Z. Schlueter ", + "name": "lru-cache", + "version": "10.4.3", + "description": "A cache object that deletes the least-recently-used items.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:lru-cache:10.4.3:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/lru-cache@10.4.3", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-lru-cache.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/lru-cache/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/lru-cache@6.0.0?package-id=65977491543b90a8", + "type": "library", + "author": "Isaac Z. Schlueter ", + "name": "lru-cache", + "version": "6.0.0", + "description": "A cache object that deletes the least-recently-used items.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:lru-cache:6.0.0:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/lru-cache@6.0.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-lru-cache.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/lru-cache/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/make-dir@1.3.0?package-id=94cfb98bee7b443d", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "make-dir", + "version": "1.3.0", + "description": "Make a directory and its parents if needed - Think `mkdir -p`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:make-dir:make-dir:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/make-dir@1.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make-dir:make_dir:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make_dir:make-dir:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make_dir:make_dir:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make:make-dir:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make:make_dir:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/decompress/node_modules/make-dir/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/make-dir@2.1.0?package-id=4beba0ec739f4b97", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "make-dir", + "version": "2.1.0", + "description": "Make a directory and its parents if needed - Think `mkdir -p`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:make-dir:make-dir:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/make-dir@2.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make-dir:make_dir:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make_dir:make-dir:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make_dir:make_dir:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make:make-dir:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make:make_dir:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/make-dir/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/make-fetch-happen@14.0.3?package-id=cbd26296f86ea3b8", + "type": "library", + "author": "GitHub Inc.", + "name": "make-fetch-happen", + "version": "14.0.3", + "description": "Opinionated, caching, retrying fetch client", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:make-fetch-happen:make-fetch-happen:14.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/make-fetch-happen@14.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/npm/make-fetch-happen.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make-fetch-happen:make_fetch_happen:14.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make_fetch_happen:make-fetch-happen:14.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make_fetch_happen:make_fetch_happen:14.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make-fetch:make-fetch-happen:14.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make-fetch:make_fetch_happen:14.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make_fetch:make-fetch-happen:14.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make_fetch:make_fetch_happen:14.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make:make-fetch-happen:14.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make:make_fetch_happen:14.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/make-fetch-happen/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/make-fetch-happen@9.1.0?package-id=07e960a14667d805", + "type": "library", + "author": "Kat Marchán ", + "name": "make-fetch-happen", + "version": "9.1.0", + "description": "Opinionated, caching, retrying fetch client", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:make-fetch-happen:make-fetch-happen:9.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/make-fetch-happen@9.1.0", + "externalReferences": [ + { + "url": "https://github.com/npm/make-fetch-happen", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make-fetch-happen:make_fetch_happen:9.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make_fetch_happen:make-fetch-happen:9.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make_fetch_happen:make_fetch_happen:9.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make-fetch:make-fetch-happen:9.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make-fetch:make_fetch_happen:9.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make_fetch:make-fetch-happen:9.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make_fetch:make_fetch_happen:9.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make:make-fetch-happen:9.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make:make_fetch_happen:9.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:make-fetch-happen:9.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:make_fetch_happen:9.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/make-fetch-happen/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/make-iterator@1.0.1?package-id=2e70d0d98acb0009", + "type": "library", + "author": "Jon Schlinkert (https://github.com/jonschlinkert)", + "name": "make-iterator", + "version": "1.0.1", + "description": "Convert an argument into a valid iterator. Based on the `.makeIterator()` implementation in mout https://github.com/mout/mout.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jonschlinkert:make-iterator:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/make-iterator@1.0.1", + "externalReferences": [ + { + "url": "https://github.com/jonschlinkert/make-iterator", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jonschlinkert:make_iterator:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make-iterator:make-iterator:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make-iterator:make_iterator:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make_iterator:make-iterator:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make_iterator:make_iterator:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make:make-iterator:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make:make_iterator:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/make-iterator/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/make-plural@4.3.0?package-id=6f404b9eb22f1024", + "type": "library", + "author": "Eemeli Aro ", + "name": "make-plural", + "version": "4.3.0", + "description": "Translates Unicode CLDR pluralization rules to executable JavaScript", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:make-plural:make-plural:4.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/make-plural@4.3.0", + "externalReferences": [ + { + "url": "https://github.com/eemeli/make-plural#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make-plural:make_plural:4.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make_plural:make-plural:4.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make_plural:make_plural:4.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:eemeli:make-plural:4.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:eemeli:make_plural:4.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make:make-plural:4.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make:make_plural:4.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/messageformat/node_modules/make-plural/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/make-plural@6.2.2?package-id=7b87370db2b76e71", + "type": "library", + "author": "Eemeli Aro ", + "name": "make-plural", + "version": "6.2.2", + "description": "Unicode CLDR pluralization rules as JavaScript functions", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:make-plural:make-plural:6.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/make-plural@6.2.2", + "externalReferences": [ + { + "url": "https://github.com/eemeli/make-plural.git", + "type": "distribution" + }, + { + "url": "https://github.com/eemeli/make-plural#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make-plural:make_plural:6.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make_plural:make-plural:6.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make_plural:make_plural:6.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:eemeli:make-plural:6.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:eemeli:make_plural:6.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make:make-plural:6.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:make:make_plural:6.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/make-plural/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/map-cache@0.2.2?package-id=5f83b17e9f854ecc", + "type": "library", + "author": "Jon Schlinkert (https://github.com/jonschlinkert)", + "name": "map-cache", + "version": "0.2.2", + "description": "Basic cache object for storing key-value pairs.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jonschlinkert:map-cache:0.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/map-cache@0.2.2", + "externalReferences": [ + { + "url": "https://github.com/jonschlinkert/map-cache", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jonschlinkert:map_cache:0.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:map-cache:map-cache:0.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:map-cache:map_cache:0.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:map_cache:map-cache:0.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:map_cache:map_cache:0.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:map:map-cache:0.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:map:map_cache:0.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/map-cache/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/marsdb@0.6.11?package-id=92d5870e9d43058d", + "type": "library", + "author": "Artem Artemev , Artem Artemev", + "name": "marsdb", + "version": "0.6.11", + "description": "MarsDB is a lightweight client-side MongoDB-like database, Promise based, written in ES6", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:marsdb:marsdb:0.6.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/marsdb@0.6.11", + "externalReferences": [ + { + "url": "https://github.com/c58/marsdb", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:c58:marsdb:0.6.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/marsdb/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/material-dynamic-colors@1.1.4?package-id=fe5d0e75276cf249", + "type": "library", + "author": "Leonardo Rafal Wehrmeister", + "name": "material-dynamic-colors", + "version": "1.1.4", + "description": "This project is based on https://material-foundation.github.io/material-theme-builder and uses official color utilities from Material Design.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:material-dynamic-colors:material-dynamic-colors:1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/material-dynamic-colors@1.1.4", + "externalReferences": [ + { + "url": "git+https://github.com/leonardorafael/material-dynamic-colors.git", + "type": "distribution" + }, + { + "url": "https://github.com/leonardorafael/material-dynamic-colors", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:material-dynamic-colors:material_dynamic_colors:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:material_dynamic_colors:material-dynamic-colors:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:material_dynamic_colors:material_dynamic_colors:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:material-dynamic:material-dynamic-colors:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:material-dynamic:material_dynamic_colors:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:material_dynamic:material-dynamic-colors:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:material_dynamic:material_dynamic_colors:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:leonardorafael:material-dynamic-colors:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:leonardorafael:material_dynamic_colors:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:material:material-dynamic-colors:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:material:material_dynamic_colors:1.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/material-dynamic-colors/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/material-icons@1.13.14?package-id=1483a12cffbd67d7", + "type": "library", + "name": "material-icons", + "version": "1.13.14", + "description": "Latest icon fonts and CSS for self-hosting material design icons.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:material-icons:material-icons:1.13.14:*:*:*:*:*:*:*", + "purl": "pkg:npm/material-icons@1.13.14", + "externalReferences": [ + { + "url": "git+https://github.com/marella/material-icons.git", + "type": "distribution" + }, + { + "url": "https://marella.github.io/material-icons/demo/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:material-icons:material_icons:1.13.14:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:material_icons:material-icons:1.13.14:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:material_icons:material_icons:1.13.14:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:material:material-icons:1.13.14:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:material:material_icons:1.13.14:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/material-icons/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/math-interval-parser@2.0.1?package-id=c4cf81a86732a92f", + "type": "library", + "author": "Dmitry Semigradsky (https://github.com/Semigradsky)", + "name": "math-interval-parser", + "version": "2.0.1", + "description": "Parse math interval", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:math-interval-parser:math-interval-parser:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/math-interval-parser@2.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:math-interval-parser:math_interval_parser:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:math_interval_parser:math-interval-parser:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:math_interval_parser:math_interval_parser:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:math-interval:math-interval-parser:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:math-interval:math_interval_parser:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:math_interval:math-interval-parser:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:math_interval:math_interval_parser:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:math:math-interval-parser:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:math:math_interval_parser:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/math-interval-parser/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/math-intrinsics@1.1.0?package-id=aa8ac1643abd998a", + "type": "library", + "author": "Jordan Harband ", + "name": "math-intrinsics", + "version": "1.1.0", + "description": "ES Math-related intrinsics and helpers, robustly cached.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:math-intrinsics:math-intrinsics:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/math-intrinsics@1.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/es-shims/math-intrinsics.git", + "type": "distribution" + }, + { + "url": "https://github.com/es-shims/math-intrinsics#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:math-intrinsics:math_intrinsics:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:math_intrinsics:math-intrinsics:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:math_intrinsics:math_intrinsics:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es-shims:math-intrinsics:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es-shims:math_intrinsics:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:math:math-intrinsics:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:math:math_intrinsics:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/math-intrinsics/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/media-typer@0.3.0?package-id=761d39c4b96da905", + "type": "library", + "author": "Douglas Christopher Wilson ", + "name": "media-typer", + "version": "0.3.0", + "description": "Simple RFC 6838 media type parser and formatter", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:media-typer:media-typer:0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/media-typer@0.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:media-typer:media_typer:0.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:media_typer:media-typer:0.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:media_typer:media_typer:0.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:media:media-typer:0.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:media:media_typer:0.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/media-typer/package.json" + } + ] + }, + { + "bom-ref": "pkg:deb/debian/media-types@13.0.0?arch=all&distro=debian-13&package-id=38eec19e846d817c", + "type": "library", + "publisher": "Mime-Support Packagers ", + "name": "media-types", + "version": "13.0.0", + "licenses": [ + { + "license": { + "name": "ad-hoc" + } + } + ], + "cpe": "cpe:2.3:a:media-types:media-types:13.0.0:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/media-types@13.0.0?arch=all&distro=debian-13", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "dpkg-db-cataloger" + }, + { + "name": "syft:package:type", + "value": "deb" + }, + { + "name": "syft:package:metadataType", + "value": "dpkg-db-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:media-types:media_types:13.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:media_types:media-types:13.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:media_types:media_types:13.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:media:media-types:13.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:media:media_types:13.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:275a30dd8ce958b21daa9ad962c6fbc09f98306ee2f486b65c9075dc257b1412" + }, + { + "name": "syft:location:0:path", + "value": "/var/lib/dpkg/status.d/media-types" + }, + { + "name": "syft:location:1:layerID", + "value": "sha256:275a30dd8ce958b21daa9ad962c6fbc09f98306ee2f486b65c9075dc257b1412" + }, + { + "name": "syft:location:1:path", + "value": "/usr/share/doc/media-types/copyright" + }, + { + "name": "syft:location:2:layerID", + "value": "sha256:275a30dd8ce958b21daa9ad962c6fbc09f98306ee2f486b65c9075dc257b1412" + }, + { + "name": "syft:location:2:path", + "value": "/var/lib/dpkg/status.d/media-types.md5sums" + }, + { + "name": "syft:metadata:installedSize", + "value": "98" + } + ] + }, + { + "bom-ref": "pkg:npm/median@0.0.2?package-id=9d5d7412a9d2ef14", + "type": "library", + "author": "Khalid Lafi", + "name": "median", + "version": "0.0.2", + "description": "a small module for node and browser to calculate median", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:lafikl:median:0.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/median@0.0.2", + "externalReferences": [ + { + "url": "http://github.com/lafikl/median", + "type": "distribution" + }, + { + "url": "https://github.com/lafikl/median", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:median:median:0.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/median/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/merge-descriptors@1.0.3?package-id=d9e5a65c51115c3f", + "type": "library", + "author": "Jonathan Ong (http://jongleberry.com), Douglas Christopher Wilson , Mike Grabowski ", + "name": "merge-descriptors", + "version": "1.0.3", + "description": "Merge objects using descriptors", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:merge-descriptors:merge-descriptors:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/merge-descriptors@1.0.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:merge-descriptors:merge_descriptors:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:merge_descriptors:merge-descriptors:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:merge_descriptors:merge_descriptors:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:merge:merge-descriptors:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:merge:merge_descriptors:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/merge-descriptors/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/messageformat@2.3.0?package-id=f69b2994a9e9d9fe", + "type": "library", + "author": "Alex Sexton , Eemeli Aro ", + "name": "messageformat", + "version": "2.3.0", + "description": "PluralFormat and SelectFormat Message and i18n Tool - A JavaScript Implemenation of the ICU standards.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:messageformat:messageformat:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/messageformat@2.3.0", + "externalReferences": [ + { + "url": "https://messageformat.github.io/messageformat/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/messageformat/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/messageformat-formatters@2.0.1?package-id=2b6c534059aeab68", + "type": "library", + "author": "Eemeli Aro ", + "name": "messageformat-formatters", + "version": "2.0.1", + "description": "Formatters for messageformat", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:messageformat-formatters:messageformat-formatters:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/messageformat-formatters@2.0.1", + "externalReferences": [ + { + "url": "https://github.com/messageformat/messageformat.git", + "type": "distribution" + }, + { + "url": "https://messageformat.github.io/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:messageformat-formatters:messageformat_formatters:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:messageformat_formatters:messageformat-formatters:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:messageformat_formatters:messageformat_formatters:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:messageformat:messageformat-formatters:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:messageformat:messageformat_formatters:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/messageformat-formatters/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/messageformat-parser@4.1.3?package-id=e027aa677afa5141", + "type": "library", + "author": "Alex Sexton , Eemeli Aro , Nikola Kovacs , Adrian Vogelsgesang ", + "name": "messageformat-parser", + "version": "4.1.3", + "description": "A PEG.js parser for ICU MessageFormat strings", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:messageformat-parser:messageformat-parser:4.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/messageformat-parser@4.1.3", + "externalReferences": [ + { + "url": "https://github.com/messageformat/messageformat.git", + "type": "distribution" + }, + { + "url": "https://messageformat.github.io/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:messageformat-parser:messageformat_parser:4.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:messageformat_parser:messageformat-parser:4.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:messageformat_parser:messageformat_parser:4.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:messageformat:messageformat-parser:4.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:messageformat:messageformat_parser:4.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/messageformat-parser/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/methods@1.1.2?package-id=5f8a3e9c18de5014", + "type": "library", + "author": "Douglas Christopher Wilson , Jonathan Ong (http://jongleberry.com), TJ Holowaychuk (http://tjholowaychuk.com)", + "name": "methods", + "version": "1.1.2", + "description": "HTTP methods that node supports", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:methods:methods:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/methods@1.1.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/methods/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/micromatch@4.0.8?package-id=cd4baaca2f4fae81", + "type": "library", + "author": "Jon Schlinkert (https://github.com/jonschlinkert), , Amila Welihinda (amilajack.com), Bogdan Chadkin (https://github.com/TrySound), Brian Woodward (https://twitter.com/doowb), Devon Govett (http://badassjs.com), Elan Shanker (https://github.com/es128), Fabrício Matté (https://ultcombo.js.org), Jon Schlinkert (http://twitter.com/jonschlinkert), Martin Kolárik (https://kolarik.sk), Olsten Larck (https://i.am.charlike.online), Paul Miller (paulmillr.com), Tom Byrer (https://github.com/tomByrer), Tyler Akins (http://rumkin.com), Peter Bright (https://github.com/drpizza), Kuba Juszczyk (https://github.com/ku8ar)", + "name": "micromatch", + "version": "4.0.8", + "description": "Glob matching for javascript/node.js. A replacement and faster alternative to minimatch and multimatch.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jonschlinkert:micromatch:4.0.8:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/micromatch@4.0.8", + "externalReferences": [ + { + "url": "https://github.com/micromatch/micromatch", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/micromatch/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/mime@1.6.0?package-id=1ebb82e2ba25a844", + "type": "library", + "author": "Robert Kieffer (http://github.com/broofa), Benjamin Thomas (http://github.com/bentomas)", + "name": "mime", + "version": "1.6.0", + "description": "A comprehensive library for mime-type mapping", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mime_project:mime:1.6.0:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/mime@1.6.0", + "externalReferences": [ + { + "url": "https://github.com/broofa/node-mime", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/mime/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/mime-db@1.52.0?package-id=43c6f2fbd14f0eba", + "type": "library", + "author": "Douglas Christopher Wilson , Jonathan Ong (http://jongleberry.com), Robert Kieffer (http://github.com/broofa)", + "name": "mime-db", + "version": "1.52.0", + "description": "Media Type Database", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mime-db:mime-db:1.52.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mime-db@1.52.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mime-db:mime_db:1.52.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mime_db:mime-db:1.52.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mime_db:mime_db:1.52.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mime:mime-db:1.52.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mime:mime_db:1.52.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/mime-db/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/mime-types@2.1.35?package-id=33e05356d0dff6ad", + "type": "library", + "author": "Douglas Christopher Wilson , Jeremiah Senkpiel (https://searchbeam.jit.su), Jonathan Ong (http://jongleberry.com)", + "name": "mime-types", + "version": "2.1.35", + "description": "The ultimate javascript content-type utility.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mime-types:mime-types:2.1.35:*:*:*:*:*:*:*", + "purl": "pkg:npm/mime-types@2.1.35", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mime-types:mime_types:2.1.35:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mime_types:mime-types:2.1.35:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mime_types:mime_types:2.1.35:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mime:mime-types:2.1.35:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mime:mime_types:2.1.35:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/mime-types/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/mimic-response@1.0.1?package-id=02b892e02c7322ac", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "mimic-response", + "version": "1.0.1", + "description": "Mimic a Node.js HTTP response stream", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mimic-response:mimic-response:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/mimic-response@1.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mimic-response:mimic_response:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mimic_response:mimic-response:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mimic_response:mimic_response:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mimic:mimic-response:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mimic:mimic_response:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/mimic-response/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/mimic-response@2.1.0?package-id=0e93cdb85c89eacc", + "type": "library", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "mimic-response", + "version": "2.1.0", + "description": "Mimic a Node.js HTTP response stream", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mimic-response:mimic-response:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mimic-response@2.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mimic-response:mimic_response:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mimic_response:mimic-response:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mimic_response:mimic_response:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mimic:mimic-response:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mimic:mimic_response:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/simple-get/node_modules/mimic-response/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/mimic-response@3.1.0?package-id=845c5d602993a101", + "type": "library", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "mimic-response", + "version": "3.1.0", + "description": "Mimic a Node.js HTTP response stream", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mimic-response:mimic-response:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mimic-response@3.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mimic-response:mimic_response:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mimic_response:mimic-response:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mimic_response:mimic_response:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mimic:mimic-response:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mimic:mimic_response:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/libxmljs2/node_modules/mimic-response/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/mimic-response@3.1.0?package-id=2b67abea8a06a8db", + "type": "library", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "mimic-response", + "version": "3.1.0", + "description": "Mimic a Node.js HTTP response stream", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mimic-response:mimic-response:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mimic-response@3.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mimic-response:mimic_response:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mimic_response:mimic-response:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mimic_response:mimic_response:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mimic:mimic-response:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mimic:mimic_response:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/mimic-response/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/minimatch@3.0.5?package-id=a7d9f58fa9223af7", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "minimatch", + "version": "3.0.5", + "description": "a glob matcher in javascript", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minimatch_project:minimatch:3.0.5:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/minimatch@3.0.5", + "externalReferences": [ + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/replace/node_modules/minimatch/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/minimatch@3.1.5?package-id=4c40ff5e6c73fe10", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "minimatch", + "version": "3.1.5", + "description": "a glob matcher in javascript", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minimatch_project:minimatch:3.1.5:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/minimatch@3.1.5", + "externalReferences": [ + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/minimatch/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/minimatch@9.0.9?package-id=cdc77ee68011f408", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "minimatch", + "version": "9.0.9", + "description": "a glob matcher in javascript", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minimatch_project:minimatch:9.0.9:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/minimatch@9.0.9", + "externalReferences": [ + { + "url": "git://github.com/isaacs/minimatch.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/glob/node_modules/minimatch/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/minimist@1.2.8?package-id=9c7c73598a676732", + "type": "library", + "author": "James Halliday (http://substack.net)", + "name": "minimist", + "version": "1.2.8", + "description": "parse argument options", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minimistjs:minimist:1.2.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/minimist@1.2.8", + "externalReferences": [ + { + "url": "git://github.com/minimistjs/minimist.git", + "type": "distribution" + }, + { + "url": "https://github.com/minimistjs/minimist", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minimist:minimist:1.2.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/minimist/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/minipass@2.9.0?package-id=59462219a37abffd", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minipass", + "version": "2.9.0", + "description": "minimal implementation of a PassThrough stream", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass:minipass:2.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass@2.9.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/node-pre-gyp/node_modules/minipass/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/minipass@3.3.6?package-id=338b486a654e33cb", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minipass", + "version": "3.3.6", + "description": "minimal implementation of a PassThrough stream", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass:minipass:3.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass@3.3.6", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/minipass-flush/node_modules/minipass/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/minipass@3.3.6?package-id=7256b9dc3ee5141e", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minipass", + "version": "3.3.6", + "description": "minimal implementation of a PassThrough stream", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass:minipass:3.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass@3.3.6", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/minipass-pipeline/node_modules/minipass/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/minipass@3.3.6?package-id=b65044371c10aa40", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minipass", + "version": "3.3.6", + "description": "minimal implementation of a PassThrough stream", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass:minipass:3.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass@3.3.6", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/minipass-sized/node_modules/minipass/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/minipass@3.3.6?package-id=04660218c5e211d0", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minipass", + "version": "3.3.6", + "description": "minimal implementation of a PassThrough stream", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass:minipass:3.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass@3.3.6", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/minipass/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/minipass@5.0.0?package-id=e285aecf7d10679e", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minipass", + "version": "5.0.0", + "description": "minimal implementation of a PassThrough stream", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass:minipass:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass@5.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/tar/node_modules/minipass/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/minipass@7.1.3?package-id=192441890be7c4e4", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minipass", + "version": "7.1.3", + "description": "minimal implementation of a PassThrough stream", + "licenses": [ + { + "license": { + "id": "BlueOak-1.0.0" + } + } + ], + "cpe": "cpe:2.3:a:minipass:minipass:7.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass@7.1.3", + "externalReferences": [ + { + "url": "https://github.com/isaacs/minipass", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:minipass:7.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/minipass/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/minipass-collect@1.0.2?package-id=63efb267ac514e08", + "type": "library", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "minipass-collect", + "version": "1.0.2", + "description": "A Minipass stream that collects all the data into a single chunk", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass-collect:minipass-collect:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-collect@1.0.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass-collect:minipass_collect:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass_collect:minipass-collect:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass_collect:minipass_collect:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass:minipass-collect:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass:minipass_collect:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/minipass-collect/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/minipass-collect@2.0.1?package-id=8fecd15c1c48c3bb", + "type": "library", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "minipass-collect", + "version": "2.0.1", + "description": "A Minipass stream that collects all the data into a single chunk", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass-collect:minipass-collect:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-collect@2.0.1", + "externalReferences": [ + { + "url": "https://github.com/isaacs/minipass-collect", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass-collect:minipass_collect:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass_collect:minipass-collect:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass_collect:minipass_collect:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass:minipass-collect:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass:minipass_collect:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:minipass-collect:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:minipass_collect:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/minipass-collect/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/minipass-fetch@1.4.1?package-id=f1dcdfbdae2d40b2", + "type": "library", + "name": "minipass-fetch", + "version": "1.4.1", + "description": "An implementation of window.fetch in Node.js using Minipass streams", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minipass-fetch:minipass-fetch:1.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-fetch@1.4.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/minipass-fetch.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass-fetch:minipass_fetch:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass_fetch:minipass-fetch:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass_fetch:minipass_fetch:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass:minipass-fetch:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass:minipass_fetch:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/minipass-fetch/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/minipass-fetch@4.0.1?package-id=7894cdb8bcb4ca43", + "type": "library", + "author": "GitHub Inc.", + "name": "minipass-fetch", + "version": "4.0.1", + "description": "An implementation of window.fetch in Node.js using Minipass streams", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minipass-fetch:minipass-fetch:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-fetch@4.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/minipass-fetch.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass-fetch:minipass_fetch:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass_fetch:minipass-fetch:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass_fetch:minipass_fetch:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass:minipass-fetch:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass:minipass_fetch:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/minipass-fetch/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/minipass-flush@1.0.7?package-id=24aae4756b0bc5be", + "type": "library", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "minipass-flush", + "version": "1.0.7", + "description": "A Minipass stream that calls a flush function before emitting 'end'", + "licenses": [ + { + "license": { + "id": "BlueOak-1.0.0" + } + } + ], + "cpe": "cpe:2.3:a:minipass-flush:minipass-flush:1.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-flush@1.0.7", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass-flush.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass-flush:minipass_flush:1.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass_flush:minipass-flush:1.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass_flush:minipass_flush:1.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass:minipass-flush:1.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass:minipass_flush:1.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/minipass-flush/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/minipass-pipeline@1.2.4?package-id=8d7f8393e7e2d352", + "type": "library", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "minipass-pipeline", + "version": "1.2.4", + "description": "create a pipeline of streams using Minipass", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass-pipeline:minipass-pipeline:1.2.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-pipeline@1.2.4", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass-pipeline:minipass_pipeline:1.2.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass_pipeline:minipass-pipeline:1.2.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass_pipeline:minipass_pipeline:1.2.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass:minipass-pipeline:1.2.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass:minipass_pipeline:1.2.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/minipass-pipeline/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/minipass-sized@1.0.3?package-id=82b64febd11d5f17", + "type": "library", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "minipass-sized", + "version": "1.0.3", + "description": "A Minipass stream that raises an error if you get a different number of bytes than expected", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:minipass-sized:minipass-sized:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/minipass-sized@1.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minipass-sized.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass-sized:minipass_sized:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass_sized:minipass-sized:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass_sized:minipass_sized:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass:minipass-sized:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:minipass:minipass_sized:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/minipass-sized/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/minizlib@1.3.3?package-id=6cecd69a39d4a47e", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minizlib", + "version": "1.3.3", + "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minizlib:minizlib:1.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/minizlib@1.3.3", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minizlib.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/node-pre-gyp/node_modules/minizlib/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/minizlib@2.1.2?package-id=871e116128fa5e93", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minizlib", + "version": "2.1.2", + "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minizlib:minizlib:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/minizlib@2.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minizlib.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/minizlib/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/minizlib@3.1.0?package-id=eb188ffb845b006f", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "minizlib", + "version": "3.1.0", + "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:minizlib:minizlib:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/minizlib@3.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/minizlib.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/minizlib/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/mkdirp@0.5.6?package-id=c8db67c82a47b27a", + "type": "library", + "author": "James Halliday (http://substack.net)", + "name": "mkdirp", + "version": "0.5.6", + "description": "Recursively mkdir, like `mkdir -p`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:substack:mkdirp:0.5.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/mkdirp@0.5.6", + "externalReferences": [ + { + "url": "https://github.com/substack/node-mkdirp.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mkdirp:mkdirp:0.5.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/mkdirp/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/mkdirp@1.0.4?package-id=d3ea554779e8735f", + "type": "library", + "name": "mkdirp", + "version": "1.0.4", + "description": "Recursively mkdir, like `mkdir -p`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:mkdirp:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/mkdirp@1.0.4", + "externalReferences": [ + { + "url": "https://github.com/isaacs/node-mkdirp.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mkdirp:mkdirp:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@npmcli/move-file/node_modules/mkdirp/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/mkdirp@1.0.4?package-id=7ecfd98172b6768e", + "type": "library", + "name": "mkdirp", + "version": "1.0.4", + "description": "Recursively mkdir, like `mkdir -p`", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:mkdirp:1.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/mkdirp@1.0.4", + "externalReferences": [ + { + "url": "https://github.com/isaacs/node-mkdirp.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mkdirp:mkdirp:1.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/mkdirp/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/mkdirp-classic@0.5.3?package-id=fbd74b5142e9aacc", + "type": "library", + "author": "Mathias Buus (@mafintosh)", + "name": "mkdirp-classic", + "version": "0.5.3", + "description": "Mirror of mkdirp 0.5.2", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mkdirp-classic:mkdirp-classic:0.5.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/mkdirp-classic@0.5.3", + "externalReferences": [ + { + "url": "https://github.com/mafintosh/mkdirp-classic.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/mkdirp-classic", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mkdirp-classic:mkdirp_classic:0.5.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mkdirp_classic:mkdirp-classic:0.5.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mkdirp_classic:mkdirp_classic:0.5.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mafintosh:mkdirp-classic:0.5.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mafintosh:mkdirp_classic:0.5.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mkdirp:mkdirp-classic:0.5.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mkdirp:mkdirp_classic:0.5.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/mkdirp-classic/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/moment@2.0.0?package-id=fb07dad56d7726f5", + "type": "library", + "author": "Tim Wood (http://timwoodcreates.com/), Rocky Meza (http://rockymeza.com), Iskren Ivov Chernev (https://github.com/ichernev)", + "name": "moment", + "version": "2.0.0", + "description": "Parse, manipulate, and display dates.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:momentjs:moment:2.0.0:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/moment@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/timrwood/moment.git", + "type": "distribution" + }, + { + "url": "http://momentjs.com", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/express-jwt/node_modules/moment/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/moment@2.30.1?package-id=7f78544a103db020", + "type": "library", + "author": "Iskren Ivov Chernev (https://github.com/ichernev), Tim Wood (http://timwoodcreates.com/), Rocky Meza (http://rockymeza.com), Matt Johnson (http://codeofmatt.com), Isaac Cambron (http://isaaccambron.com), Andre Polykanine (https://github.com/oire)", + "name": "moment", + "version": "2.30.1", + "description": "Parse, validate, manipulate, and display dates", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:momentjs:moment:2.30.1:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/moment@2.30.1", + "externalReferences": [ + { + "url": "https://github.com/moment/moment.git", + "type": "distribution" + }, + { + "url": "https://momentjs.com", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/moment/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/moment-timezone@0.5.48?package-id=1d07c82a5521aa67", + "type": "library", + "author": "Tim Wood (http://timwoodcreates.com/)", + "name": "moment-timezone", + "version": "0.5.48", + "description": "Parse and display moments in any timezone.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:moment-timezone:moment-timezone:0.5.48:*:*:*:*:*:*:*", + "purl": "pkg:npm/moment-timezone@0.5.48", + "externalReferences": [ + { + "url": "https://github.com/moment/moment-timezone.git", + "type": "distribution" + }, + { + "url": "http://momentjs.com/timezone/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:moment-timezone:moment_timezone:0.5.48:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:moment_timezone:moment-timezone:0.5.48:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:moment_timezone:moment_timezone:0.5.48:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:moment:moment-timezone:0.5.48:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:moment:moment_timezone:0.5.48:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/moment-timezone/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/morgan@1.10.1?package-id=36a2e18413295dc3", + "type": "library", + "author": "Douglas Christopher Wilson , Jonathan Ong (http://jongleberry.com)", + "name": "morgan", + "version": "1.10.1", + "description": "HTTP request logger middleware for node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:morgan_project:morgan:1.10.1:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/morgan@1.10.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/morgan/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ms@2.0.0?package-id=581ded64725caf94", + "type": "library", + "name": "ms", + "version": "2.0.0", + "description": "Tiny milisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:vercel:ms:2.0.0:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/ms@2.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/ms/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ms@2.1.3?package-id=fa76bb477435fb7e", + "type": "library", + "name": "ms", + "version": "2.1.3", + "description": "Tiny millisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/ms@2.1.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/engine.io/node_modules/ms/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ms@2.1.3?package-id=6489b39df41cd879", + "type": "library", + "name": "ms", + "version": "2.1.3", + "description": "Tiny millisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/ms@2.1.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/http-proxy-agent/node_modules/ms/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ms@2.1.3?package-id=319a29eaa7507424", + "type": "library", + "name": "ms", + "version": "2.1.3", + "description": "Tiny millisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/ms@2.1.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/https-proxy-agent/node_modules/ms/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ms@2.1.3?package-id=e125437ccc162a77", + "type": "library", + "name": "ms", + "version": "2.1.3", + "description": "Tiny millisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/ms@2.1.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/logform/node_modules/ms/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ms@2.1.3?package-id=a9fd2cba9c8e1d2c", + "type": "library", + "name": "ms", + "version": "2.1.3", + "description": "Tiny millisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/ms@2.1.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/needle/node_modules/ms/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ms@2.1.3?package-id=ea5ff84bf95ffe96", + "type": "library", + "name": "ms", + "version": "2.1.3", + "description": "Tiny millisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/ms@2.1.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/send/node_modules/ms/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ms@2.1.3?package-id=6d03f34fc7d77eec", + "type": "library", + "name": "ms", + "version": "2.1.3", + "description": "Tiny millisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/ms@2.1.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sequelize/node_modules/ms/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ms@2.1.3?package-id=19d28c2a60db5e6f", + "type": "library", + "name": "ms", + "version": "2.1.3", + "description": "Tiny millisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/ms@2.1.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/socket.io-parser/node_modules/ms/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ms@2.1.3?package-id=8a79e4b90db520a0", + "type": "library", + "name": "ms", + "version": "2.1.3", + "description": "Tiny millisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/ms@2.1.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/socket.io/node_modules/ms/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ms@2.1.3?package-id=5cf696f159e61430", + "type": "library", + "name": "ms", + "version": "2.1.3", + "description": "Tiny millisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/ms@2.1.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/socks-proxy-agent/node_modules/ms/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ms@2.1.3?package-id=703b594b3e2459c7", + "type": "library", + "name": "ms", + "version": "2.1.3", + "description": "Tiny millisecond conversion utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/ms@2.1.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/ms/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/multer@1.4.5-lts.2?package-id=cce9b5dd2cb3fe54", + "type": "library", + "author": "Hage Yaapa (http://www.hacksparrow.com), Jaret Pfluger , Linus Unnebäck ", + "name": "multer", + "version": "1.4.5-lts.2", + "description": "Middleware for handling `multipart/form-data`.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:multer:multer:1.4.5-lts.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/multer@1.4.5-lts.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/multer/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/mustache@4.2.0?package-id=4b189aa85e6c312d", + "type": "library", + "author": "mustache.js Authors ", + "name": "mustache", + "version": "4.2.0", + "description": "Logic-less {{mustache}} templates with JavaScript", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mustache.js:mustache.js:4.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mustache@4.2.0", + "externalReferences": [ + { + "url": "https://github.com/janl/mustache.js.git", + "type": "distribution" + }, + { + "url": "https://github.com/janl/mustache.js", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mustache.js:mustache:4.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mustache:mustache.js:4.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mustache:mustache:4.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:janl:mustache.js:4.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:janl:mustache:4.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/mustache/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/mylib@0.0.0?package-id=ca93165f21ef1895", + "type": "library", + "name": "mylib", + "version": "0.0.0", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:mylib:mylib:0.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/mylib@0.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/nan@2.22.2?package-id=f98605c6f902c9b8", + "type": "library", + "author": "Rod Vagg (https://github.com/rvagg), Benjamin Byholm (https://github.com/kkoopa/), Trevor Norris (https://github.com/trevnorris), Nathan Rajlich (https://github.com/TooTallNate), Brett Lawson (https://github.com/brett19), Ben Noordhuis (https://github.com/bnoordhuis), David Siegel (https://github.com/agnat), Michael Ira Krufky (https://github.com/mkrufky)", + "name": "nan", + "version": "2.22.2", + "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 22 compatibility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:nodejs:nan:2.22.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/nan@2.22.2", + "externalReferences": [ + { + "url": "git://github.com/nodejs/nan.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nan:nan:2.22.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/nan/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/napi-build-utils@1.0.2?package-id=f9886324943b066f", + "type": "library", + "author": "Jim Schlight", + "name": "napi-build-utils", + "version": "1.0.2", + "description": "A set of utilities to assist developers of tools that build N-API native add-ons", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:napi-build-utils:napi-build-utils:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/napi-build-utils@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/inspiredware/napi-build-utils.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspiredware/napi-build-utils#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:napi-build-utils:napi_build_utils:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:napi_build_utils:napi-build-utils:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:napi_build_utils:napi_build_utils:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspiredware:napi-build-utils:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspiredware:napi_build_utils:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:napi-build:napi-build-utils:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:napi-build:napi_build_utils:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:napi_build:napi-build-utils:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:napi_build:napi_build_utils:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:napi:napi-build-utils:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:napi:napi_build_utils:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/napi-build-utils/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/napi-build-utils@2.0.0?package-id=a1b5ba5038b982fd", + "type": "library", + "author": "Jim Schlight", + "name": "napi-build-utils", + "version": "2.0.0", + "description": "A set of utilities to assist developers of tools that build N-API native add-ons", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:napi-build-utils:napi-build-utils:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/napi-build-utils@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/inspiredware/napi-build-utils.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspiredware/napi-build-utils#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:napi-build-utils:napi_build_utils:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:napi_build_utils:napi-build-utils:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:napi_build_utils:napi_build_utils:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspiredware:napi-build-utils:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspiredware:napi_build_utils:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:napi-build:napi-build-utils:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:napi-build:napi_build_utils:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:napi_build:napi-build-utils:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:napi_build:napi_build_utils:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:napi:napi-build-utils:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:napi:napi_build_utils:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/libxmljs2/node_modules/napi-build-utils/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/napi-build-utils@2.0.0?package-id=3a25fd995add959b", + "type": "library", + "author": "Jim Schlight", + "name": "napi-build-utils", + "version": "2.0.0", + "description": "A set of utilities to assist developers of tools that build N-API native add-ons", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:napi-build-utils:napi-build-utils:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/napi-build-utils@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/inspiredware/napi-build-utils.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspiredware/napi-build-utils#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:napi-build-utils:napi_build_utils:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:napi_build_utils:napi-build-utils:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:napi_build_utils:napi_build_utils:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspiredware:napi-build-utils:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspiredware:napi_build_utils:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:napi-build:napi-build-utils:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:napi-build:napi_build_utils:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:napi_build:napi-build-utils:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:napi_build:napi_build_utils:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:napi:napi-build-utils:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:napi:napi_build_utils:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/napi-build-utils/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/needle@2.9.1?package-id=02a44fe43834d9a1", + "type": "library", + "author": "Tomás Pollak ", + "name": "needle", + "version": "2.9.1", + "description": "The leanest and most handsome HTTP client in the Nodelands.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:needle:needle:2.9.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/needle@2.9.1", + "externalReferences": [ + { + "url": "https://github.com/tomas/needle.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tomas:needle:2.9.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/needle/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/negotiator@0.6.3?package-id=3124531c115a5cf0", + "type": "library", + "author": "Douglas Christopher Wilson , Federico Romero , Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "negotiator", + "version": "0.6.3", + "description": "HTTP content negotiation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:negotiator:negotiator:0.6.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/negotiator@0.6.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/accepts/node_modules/negotiator/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/negotiator@0.6.4?package-id=922044f9c518728f", + "type": "library", + "author": "Douglas Christopher Wilson , Federico Romero , Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "negotiator", + "version": "0.6.4", + "description": "HTTP content negotiation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:negotiator:negotiator:0.6.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/negotiator@0.6.4", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/negotiator/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/negotiator@1.0.0?package-id=c566eb58c86960c4", + "type": "library", + "author": "Douglas Christopher Wilson , Federico Romero , Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "negotiator", + "version": "1.0.0", + "description": "HTTP content negotiation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:negotiator:negotiator:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/negotiator@1.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/make-fetch-happen/node_modules/negotiator/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/neo-async@2.6.2?package-id=fa2e675cd8ba8607", + "type": "library", + "name": "neo-async", + "version": "2.6.2", + "description": "Neo-Async is a drop-in replacement for Async, it almost fully covers its functionality and runs faster ", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:neo-async:neo-async:2.6.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/neo-async@2.6.2", + "externalReferences": [ + { + "url": "https://github.com/suguru03/neo-async", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:neo-async:neo_async:2.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:neo_async:neo-async:2.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:neo_async:neo_async:2.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:suguru03:neo-async:2.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:suguru03:neo_async:2.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:neo:neo-async:2.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:neo:neo_async:2.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/neo-async/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/neoip@2.1.0?package-id=376d1a73b3eff3dd", + "type": "library", + "author": "Fedor Indutny , Mike Hall ", + "name": "neoip", + "version": "2.1.0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:zaptic:neoip:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/neoip@2.1.0", + "externalReferences": [ + { + "url": "https://github.com/zaptic/neoip.git", + "type": "distribution" + }, + { + "url": "https://github.com/zaptic/neoip", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:neoip:neoip:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/neoip/package.json" + } + ] + }, + { + "bom-ref": "pkg:deb/debian/netbase@6.5?arch=all&distro=debian-13&package-id=a078ea339c38efbe", + "type": "library", + "publisher": "Marco d'Itri ", + "name": "netbase", + "version": "6.5", + "licenses": [ + { + "license": { + "id": "GPL-2.0-only" + } + } + ], + "cpe": "cpe:2.3:a:netbase:netbase:6.5:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/netbase@6.5?arch=all&distro=debian-13", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "dpkg-db-cataloger" + }, + { + "name": "syft:package:type", + "value": "deb" + }, + { + "name": "syft:package:metadataType", + "value": "dpkg-db-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:621c35e751a51a9a9dc3e80aa0b7fe8be2a93402ea6ccd307d30852cd7776cda" + }, + { + "name": "syft:location:0:path", + "value": "/var/lib/dpkg/status.d/netbase" + }, + { + "name": "syft:location:1:layerID", + "value": "sha256:621c35e751a51a9a9dc3e80aa0b7fe8be2a93402ea6ccd307d30852cd7776cda" + }, + { + "name": "syft:location:1:path", + "value": "/usr/share/doc/netbase/copyright" + }, + { + "name": "syft:location:2:layerID", + "value": "sha256:621c35e751a51a9a9dc3e80aa0b7fe8be2a93402ea6ccd307d30852cd7776cda" + }, + { + "name": "syft:location:2:path", + "value": "/var/lib/dpkg/status.d/netbase.md5sums" + }, + { + "name": "syft:metadata:installedSize", + "value": "35" + } + ] + }, + { + "bom-ref": "pkg:generic/node@24.15.0?package-id=faf2054b9088fa1e", + "type": "application", + "name": "node", + "version": "24.15.0", + "cpe": "cpe:2.3:a:nodejs:node.js:24.15.0:*:*:*:*:*:*:*", + "purl": "pkg:generic/node@24.15.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "binary-classifier-cataloger" + }, + { + "name": "syft:package:type", + "value": "binary" + }, + { + "name": "syft:package:metadataType", + "value": "binary-signature" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:4132b571d763a067f04f6b40386fc72b4e315885abd5ef369b8156cef6cd57bd" + }, + { + "name": "syft:location:0:path", + "value": "/nodejs/bin/node" + } + ] + }, + { + "bom-ref": "pkg:npm/node-abi@2.30.1?package-id=56163144372dee3f", + "type": "library", + "author": "Lukas Geiger", + "name": "node-abi", + "version": "2.30.1", + "description": "Get the Node ABI for a given target and runtime, and vice versa.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-abi:node-abi:2.30.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-abi@2.30.1", + "externalReferences": [ + { + "url": "https://github.com/lgeiger/node-abi.git", + "type": "distribution" + }, + { + "url": "https://github.com/lgeiger/node-abi#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node-abi:node_abi:2.30.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node_abi:node-abi:2.30.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node_abi:node_abi:2.30.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:lgeiger:node-abi:2.30.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:lgeiger:node_abi:2.30.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node:node-abi:2.30.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node:node_abi:2.30.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/node-abi/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/node-abi@3.92.0?package-id=0203e2d57c19a37d", + "type": "library", + "author": "Lukas Geiger", + "name": "node-abi", + "version": "3.92.0", + "description": "Get the Node ABI for a given target and runtime, and vice versa.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:electron:node-abi:3.92.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-abi@3.92.0", + "externalReferences": [ + { + "url": "git+https://github.com/electron/node-abi.git", + "type": "distribution" + }, + { + "url": "https://github.com/electron/node-abi#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:electron:node_abi:3.92.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node-abi:node-abi:3.92.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node-abi:node_abi:3.92.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node_abi:node-abi:3.92.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node_abi:node_abi:3.92.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node:node-abi:3.92.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node:node_abi:3.92.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/libxmljs2/node_modules/node-abi/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/node-abi@3.92.0?package-id=49f015f169b02934", + "type": "library", + "author": "Lukas Geiger", + "name": "node-abi", + "version": "3.92.0", + "description": "Get the Node ABI for a given target and runtime, and vice versa.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:electron:node-abi:3.92.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-abi@3.92.0", + "externalReferences": [ + { + "url": "git+https://github.com/electron/node-abi.git", + "type": "distribution" + }, + { + "url": "https://github.com/electron/node-abi#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:electron:node_abi:3.92.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node-abi:node-abi:3.92.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node-abi:node_abi:3.92.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node_abi:node-abi:3.92.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node_abi:node_abi:3.92.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node:node-abi:3.92.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node:node_abi:3.92.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/node-abi/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/node-addon-api@7.1.1?package-id=3b2568607ceb74e4", + "type": "library", + "author": "Abhishek Kumar Singh (https://github.com/abhi11210646), Alba Mendez (https://github.com/jmendeth), Alexander Floh (https://github.com/alexanderfloh), Ammar Faizi (https://github.com/ammarfaizi2), András Timár, Dr (https://github.com/timarandras), Andrew Petersen (https://github.com/kirbysayshi), Anisha Rohra (https://github.com/anisha-rohra), Anna Henningsen (https://github.com/addaleax), Arnaud Botella (https://github.com/BotellaA), Arunesh Chandra (https://github.com/aruneshchandra), Azlan Mukhtar (https://github.com/azlan), Ben Berman (https://github.com/rivertam), Benjamin Byholm (https://github.com/kkoopa), Bill Gallafent (https://github.com/gallafent), blagoev (https://github.com/blagoev), Bruce A. MacNaughton (https://github.com/bmacnaughton), Cory Mickelson (https://github.com/corymickelson), Daniel Bevenius (https://github.com/danbev), Dante Calderón (https://github.com/dantehemerson), Darshan Sen (https://github.com/RaisinTen), David Halls (https://github.com/davedoesdev), Deepak Rajamohan (https://github.com/deepakrkris), Dmitry Ashkadov (https://github.com/dmitryash), Dongjin Na (https://github.com/nadongguri), Doni Rubiagatra (https://github.com/rubiagatra), Eric Bickle (https://github.com/ebickle), extremeheat (https://github.com/extremeheat), Feng Yu (https://github.com/F3n67u), Ferdinand Holzer (https://github.com/fholzer), Gabriel Schulhof (https://github.com/gabrielschulhof), Guenter Sandner (https://github.com/gms1), Gus Caplan (https://github.com/devsnek), Helio Frota (https://github.com/helio-frota), Hitesh Kanwathirtha (https://github.com/digitalinfinity), ikokostya (https://github.com/ikokostya), Jack Xia (https://github.com/JckXia), Jake Barnes (https://github.com/DuBistKomisch), Jake Yoon (https://github.com/yjaeseok), Jason Ginchereau (https://github.com/jasongin), Jenny (https://github.com/egg-bread), Jeroen Janssen (https://github.com/japj), Jim Schlight (https://github.com/jschlight), Jinho Bang (https://github.com/romandev), José Expósito (https://github.com/JoseExposito), joshgarde (https://github.com/joshgarde), Julian Mesa (https://github.com/julianmesa-gitkraken), Kasumi Hanazuki (https://github.com/hanazuki), Kelvin (https://github.com/kelvinhammond), Kevin Eady (https://github.com/KevinEady), Kévin VOYER (https://github.com/kecsou), kidneysolo (https://github.com/kidneysolo), Koki Nishihara (https://github.com/Nishikoh), Konstantin Tarkus (https://github.com/koistya), Kyle Farnung (https://github.com/kfarnung), Kyle Kovacs (https://github.com/nullromo), legendecas (https://github.com/legendecas), LongYinan (https://github.com/Brooooooklyn), Lovell Fuller (https://github.com/lovell), Luciano Martorella (https://github.com/lmartorella), mastergberry (https://github.com/mastergberry), Mathias Küsel (https://github.com/mathiask88), Mathias Stearn (https://github.com/RedBeard0531), Matteo Collina (https://github.com/mcollina), Michael Dawson (https://github.com/mhdawson), Michael Price (https://github.com/mikepricedev), Michele Campus (https://github.com/kYroL01), Mikhail Cheshkov (https://github.com/mcheshkov), nempoBu4 (https://github.com/nempoBu4), Nicola Del Gobbo (https://github.com/NickNaso), Nick Soggin (https://github.com/iSkore), Nikolai Vavilov (https://github.com/seishun), Nurbol Alpysbayev (https://github.com/anurbol), pacop (https://github.com/pacop), Peter Šándor (https://github.com/petersandor), Philipp Renoth (https://github.com/DaAitch), rgerd (https://github.com/rgerd), Richard Lau (https://github.com/richardlau), Rolf Timmermans (https://github.com/rolftimmermans), Ross Weir (https://github.com/ross-weir), Ryuichi Okumura (https://github.com/okuryu), Saint Gabriel (https://github.com/chineduG), Sampson Gao (https://github.com/sampsongao), Sam Roberts (https://github.com/sam-github), strager (https://github.com/strager), Taylor Woll (https://github.com/boingoing), Thomas Gentilhomme (https://github.com/fraxken), Tim Rach (https://github.com/timrach), Tobias Nießen (https://github.com/tniessen), todoroff (https://github.com/todoroff), Toyo Li (https://github.com/toyobayashi), Tux3 (https://github.com/tux3), Vlad Velmisov (https://github.com/Velmisov), Vladimir Morozov (https://github.com/vmoroz), WenheLI (https://github.com/WenheLI), Xuguang Mei (https://github.com/meixg), Yohei Kishimoto (https://github.com/morokosi), Yulong Wang (https://github.com/fs-eire), Ziqiu Zhao (https://github.com/ZzqiZQute), Feng Yu (https://github.com/F3n67u), wanlu wang (https://github.com/wanlu), Caleb Hearon (https://github.com/chearon), Marx (https://github.com/MarxJiao), Ömer AKGÜL (https://github.com/tuhalf)", + "name": "node-addon-api", + "version": "7.1.1", + "description": "Node.js API (Node-API)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-addon-api:node-addon-api:7.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-addon-api@7.1.1", + "externalReferences": [ + { + "url": "git://github.com/nodejs/node-addon-api.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/node-addon-api", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node-addon-api:node_addon_api:7.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node_addon_api:node-addon-api:7.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node_addon_api:node_addon_api:7.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node-addon:node-addon-api:7.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node-addon:node_addon_api:7.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node_addon:node-addon-api:7.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node_addon:node_addon_api:7.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nodejs:node-addon-api:7.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nodejs:node_addon_api:7.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node:node-addon-api:7.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node:node_addon_api:7.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/node-addon-api/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/node-gyp@11.5.0?package-id=81a9275b7bb13ed5", + "type": "library", + "author": "Nathan Rajlich (http://tootallnate.net)", + "name": "node-gyp", + "version": "11.5.0", + "description": "Node.js native addon build tool", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-gyp:node-gyp:11.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-gyp@11.5.0", + "externalReferences": [ + { + "url": "git://github.com/nodejs/node-gyp.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node-gyp:node_gyp:11.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node_gyp:node-gyp:11.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node_gyp:node_gyp:11.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nodejs:node-gyp:11.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nodejs:node_gyp:11.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node:node-gyp:11.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node:node_gyp:11.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/node-gyp/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/node-gyp@8.4.1?package-id=4c76218352127cf5", + "type": "library", + "author": "Nathan Rajlich (http://tootallnate.net)", + "name": "node-gyp", + "version": "8.4.1", + "description": "Node.js native addon build tool", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:node-gyp:node-gyp:8.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-gyp@8.4.1", + "externalReferences": [ + { + "url": "git://github.com/nodejs/node-gyp.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node-gyp:node_gyp:8.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node_gyp:node-gyp:8.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node_gyp:node_gyp:8.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nodejs:node-gyp:8.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nodejs:node_gyp:8.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node:node-gyp:8.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node:node_gyp:8.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/node-gyp/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/node-pre-gyp@0.15.0?package-id=f723ada374e828f8", + "type": "library", + "author": "Dane Springmeyer ", + "name": "node-pre-gyp", + "version": "0.15.0", + "description": "Node.js native addon binary install tool", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:node-pre-gyp:node-pre-gyp:0.15.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/node-pre-gyp@0.15.0", + "externalReferences": [ + { + "url": "git://github.com/mapbox/node-pre-gyp.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node-pre-gyp:node_pre_gyp:0.15.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node_pre_gyp:node-pre-gyp:0.15.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node_pre_gyp:node_pre_gyp:0.15.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node-pre:node-pre-gyp:0.15.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node-pre:node_pre_gyp:0.15.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node_pre:node-pre-gyp:0.15.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node_pre:node_pre_gyp:0.15.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mapbox:node-pre-gyp:0.15.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mapbox:node_pre_gyp:0.15.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node:node-pre-gyp:0.15.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:node:node_pre_gyp:0.15.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/node-pre-gyp/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/noop-logger@0.1.1?package-id=62097a3cbdf4d6ce", + "type": "library", + "name": "noop-logger", + "version": "0.1.1", + "description": "A logger that does exactly nothing.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:noop-logger:noop-logger:0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/noop-logger@0.1.1", + "externalReferences": [ + { + "url": "git://github.com/segmentio/noop-logger.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:noop-logger:noop_logger:0.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:noop_logger:noop-logger:0.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:noop_logger:noop_logger:0.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:segmentio:noop-logger:0.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:segmentio:noop_logger:0.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:noop:noop-logger:0.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:noop:noop_logger:0.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/noop-logger/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/nopt@4.0.3?package-id=17084a2a134171fb", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "nopt", + "version": "4.0.3", + "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:nopt:nopt:4.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/nopt@4.0.3", + "externalReferences": [ + { + "url": "https://github.com/npm/nopt.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:nopt:4.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/node-pre-gyp/node_modules/nopt/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/nopt@5.0.0?package-id=a292a6d3f8b86f6b", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "nopt", + "version": "5.0.0", + "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:nopt:nopt:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/nopt@5.0.0", + "externalReferences": [ + { + "url": "https://github.com/npm/nopt.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:nopt:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/nopt/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/nopt@8.1.0?package-id=e53437a448e9c126", + "type": "library", + "author": "GitHub Inc.", + "name": "nopt", + "version": "8.1.0", + "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:nopt:nopt:8.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/nopt@8.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/npm/nopt.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/node-gyp/node_modules/nopt/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/normalize-path@2.1.1?package-id=371b1b4791f29956", + "type": "library", + "author": "Jon Schlinkert (https://github.com/jonschlinkert), Blaine Bublitz (https://twitter.com/BlaineBublitz), Jon Schlinkert (http://twitter.com/jonschlinkert)", + "name": "normalize-path", + "version": "2.1.1", + "description": "Normalize file path slashes to be unix-like forward slashes. Also condenses repeat slashes to a single slash and removes and trailing slashes unless disabled.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:normalize-path:normalize-path:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/normalize-path@2.1.1", + "externalReferences": [ + { + "url": "https://github.com/jonschlinkert/normalize-path", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:normalize-path:normalize_path:2.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:normalize_path:normalize-path:2.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:normalize_path:normalize_path:2.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jonschlinkert:normalize-path:2.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jonschlinkert:normalize_path:2.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:normalize:normalize-path:2.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:normalize:normalize_path:2.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/normalize-path/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/normalize-url@2.0.1?package-id=19ee02344c33b376", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "normalize-url", + "version": "2.0.1", + "description": "Normalize a URL", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:normalize-url_project:normalize-url:2.0.1:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/normalize-url@2.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/normalize-url/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/notevil@1.3.3?package-id=06d4740823f7ae47", + "type": "library", + "author": "Matt McKegg", + "name": "notevil", + "version": "1.3.3", + "description": "Evalulate javascript like the built-in eval() method but safely", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:notevil_project:notevil:1.3.3:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/notevil@1.3.3", + "externalReferences": [ + { + "url": "https://github.com/mmckegg/notevil", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/notevil/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/npm-bundled@1.1.2?package-id=9514fb53235856ea", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "npm-bundled", + "version": "1.1.2", + "description": "list things in node_modules that are bundledDependencies, or transitive dependencies thereof", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-bundled:npm-bundled:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-bundled@1.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/npm/npm-bundled.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-bundled:npm_bundled:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_bundled:npm-bundled:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_bundled:npm_bundled:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm-bundled:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm_bundled:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/npm-bundled/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/npm-normalize-package-bin@1.0.1?package-id=a243c54124680107", + "type": "library", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "npm-normalize-package-bin", + "version": "1.0.1", + "description": "Turn any flavor of allowable package.json bin into a normalized object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-normalize-package-bin@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/npm/npm-normalize-package-bin", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-normalize-package-bin:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize_package_bin:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize_package_bin:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-normalize-package:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-normalize-package:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize_package:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize_package:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-normalize:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-normalize:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_normalize:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/npm-normalize-package-bin/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/npm-packlist@1.4.8?package-id=d146b73bd2488b35", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "npm-packlist", + "version": "1.4.8", + "description": "Get a list of the files to add from a folder into an npm package", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npm-packlist:npm-packlist:1.4.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/npm-packlist@1.4.8", + "externalReferences": [ + { + "url": "git+https://github.com/npm/npm-packlist.git", + "type": "distribution" + }, + { + "url": "https://www.npmjs.com/package/npm-packlist", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm-packlist:npm_packlist:1.4.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_packlist:npm-packlist:1.4.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm_packlist:npm_packlist:1.4.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm-packlist:1.4.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npm_packlist:1.4.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/npm-packlist/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/npmlog@4.1.2?package-id=f0ae369a8e8ec43c", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "npmlog", + "version": "4.1.2", + "description": "logger for npm", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npmlog:npmlog:4.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/npmlog@4.1.2", + "externalReferences": [ + { + "url": "https://github.com/npm/npmlog.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npmlog:4.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/npmlog/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/npmlog@6.0.2?package-id=0ceab194b80b773c", + "type": "library", + "author": "GitHub Inc.", + "name": "npmlog", + "version": "6.0.2", + "description": "logger for npm", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npmlog:npmlog:6.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/npmlog@6.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/npmlog.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:npmlog:6.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/npmlog/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/number-is-nan@1.0.1?package-id=d623ff908a3a9701", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "number-is-nan", + "version": "1.0.1", + "description": "ES2015 Number.isNaN() ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:number-is-nan:number-is-nan:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/number-is-nan@1.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:number-is-nan:number_is_nan:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:number_is_nan:number-is-nan:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:number_is_nan:number_is_nan:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:number-is:number-is-nan:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:number-is:number_is_nan:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:number_is:number-is-nan:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:number_is:number_is_nan:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:number:number-is-nan:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:number:number_is_nan:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/number-is-nan/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/nw-pre-gyp-module-test@0.0.1?package-id=c9c21893f035082b", + "type": "library", + "name": "nw-pre-gyp-module-test", + "version": "0.0.1", + "description": "Node-webkit-based module test.", + "cpe": "cpe:2.3:a:nw-pre-gyp-module-test:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/nw-pre-gyp-module-test@0.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nw-pre-gyp-module-test:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nw_pre_gyp_module_test:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nw_pre_gyp_module_test:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nw-pre-gyp-module:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nw-pre-gyp-module:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nw_pre_gyp_module:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nw_pre_gyp_module:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nw-pre-gyp:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nw-pre-gyp:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nw_pre_gyp:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nw_pre_gyp:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nw-pre:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nw-pre:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nw_pre:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nw_pre:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nw:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nw:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/node-pre-gyp/lib/util/nw-pre-gyp/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/object-assign@4.1.1?package-id=4c17ebf4ed7ff6f6", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "object-assign", + "version": "4.1.1", + "description": "ES2015 `Object.assign()` ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:object-assign:object-assign:4.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/object-assign@4.1.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:object-assign:object_assign:4.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:object_assign:object-assign:4.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:object_assign:object_assign:4.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:object:object-assign:4.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:object:object_assign:4.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/object-assign/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/object-inspect@1.13.4?package-id=9fa07124108ec4f5", + "type": "library", + "author": "James Halliday (http://substack.net)", + "name": "object-inspect", + "version": "1.13.4", + "description": "string representations of objects in node and the browser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:object-inspect:object-inspect:1.13.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/object-inspect@1.13.4", + "externalReferences": [ + { + "url": "git://github.com/inspect-js/object-inspect.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/object-inspect", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:object-inspect:object_inspect:1.13.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:object_inspect:object-inspect:1.13.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:object_inspect:object_inspect:1.13.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:object-inspect:1.13.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:object_inspect:1.13.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:object:object-inspect:1.13.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:object:object_inspect:1.13.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/object-inspect/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/object-is@1.1.6?package-id=84b496a3bc09adcb", + "type": "library", + "author": "Jordan Harband", + "name": "object-is", + "version": "1.1.6", + "description": "ES2015-compliant shim for Object.is - differentiates between -0 and +0", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:object-is:object-is:1.1.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/object-is@1.1.6", + "externalReferences": [ + { + "url": "git://github.com/es-shims/object-is.git", + "type": "distribution" + }, + { + "url": "https://github.com/es-shims/object-is", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:object-is:object_is:1.1.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:object_is:object-is:1.1.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:object_is:object_is:1.1.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es-shims:object-is:1.1.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es-shims:object_is:1.1.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:object:object-is:1.1.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:object:object_is:1.1.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/object-is/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/object-keys@1.1.1?package-id=f895e876218f5744", + "type": "library", + "author": "Jordan Harband (http://ljharb.codes), Jordan Harband (http://ljharb.codes), Raynos , Nathan Rajlich , Ivan Starkov , Gary Katsevman ", + "name": "object-keys", + "version": "1.1.1", + "description": "An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:object-keys:object-keys:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/object-keys@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/ljharb/object-keys.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:object-keys:object_keys:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:object_keys:object-keys:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:object_keys:object_keys:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:object-keys:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:object_keys:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:object:object-keys:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:object:object_keys:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/object-keys/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/object.assign@4.1.7?package-id=99e989384d4fde68", + "type": "library", + "author": "Jordan Harband", + "name": "object.assign", + "version": "4.1.7", + "description": "ES6 spec-compliant Object.assign shim. From https://github.com/es-shims/es6-shim", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:object.assign:object.assign:4.1.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/object.assign@4.1.7", + "externalReferences": [ + { + "url": "git://github.com/ljharb/object.assign.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:object.assign:4.1.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/object.assign/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/object.defaults@1.1.0?package-id=367f49b07eb9d797", + "type": "library", + "author": "Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), Sobolev Nikita (https://github.com/sobolevn)", + "name": "object.defaults", + "version": "1.1.0", + "description": "Like `extend` but only copies missing properties/values to the target object.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:object.defaults:object.defaults:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/object.defaults@1.1.0", + "externalReferences": [ + { + "url": "https://github.com/jonschlinkert/object.defaults", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jonschlinkert:object.defaults:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/object.defaults/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/object.map@1.0.1?package-id=929d9a3710694392", + "type": "library", + "author": "Jon Schlinkert (https://github.com/jonschlinkert), Blaine Bublitz (https://twitter.com/BlaineBublitz), Brian Woodward (https://twitter.com/doowb), Jon Schlinkert (http://twitter.com/jonschlinkert)", + "name": "object.map", + "version": "1.0.1", + "description": "Similar to map for arrays, this creates a new object by calling the callback on each property of the original object.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jonschlinkert:object.map:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/object.map@1.0.1", + "externalReferences": [ + { + "url": "https://github.com/jonschlinkert/object.map", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:object.map:object.map:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/object.map/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/object.pick@1.3.0?package-id=5e847d3bd979f56f", + "type": "library", + "author": "Jon Schlinkert (https://github.com/jonschlinkert)", + "name": "object.pick", + "version": "1.3.0", + "description": "Returns a filtered copy of an object with only the specified keys, similar to `_.pick` from lodash / underscore.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jonschlinkert:object.pick:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/object.pick@1.3.0", + "externalReferences": [ + { + "url": "https://github.com/jonschlinkert/object.pick", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:object.pick:object.pick:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/object.pick/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/on-finished@2.3.0?package-id=eba7c3545387287a", + "type": "library", + "author": "Douglas Christopher Wilson , Jonathan Ong (http://jongleberry.com)", + "name": "on-finished", + "version": "2.3.0", + "description": "Execute a callback when a request closes, finishes, or errors", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:on-finished:on-finished:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/on-finished@2.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:on-finished:on_finished:2.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:on_finished:on-finished:2.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:on_finished:on_finished:2.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:on:on-finished:2.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:on:on_finished:2.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/morgan/node_modules/on-finished/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/on-finished@2.4.1?package-id=f038e79e9d5d2966", + "type": "library", + "author": "Douglas Christopher Wilson , Jonathan Ong (http://jongleberry.com)", + "name": "on-finished", + "version": "2.4.1", + "description": "Execute a callback when a request closes, finishes, or errors", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:on-finished:on-finished:2.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/on-finished@2.4.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:on-finished:on_finished:2.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:on_finished:on-finished:2.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:on_finished:on_finished:2.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:on:on-finished:2.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:on:on_finished:2.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/on-finished/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/on-headers@1.1.0?package-id=4edf87114c9684eb", + "type": "library", + "author": "Douglas Christopher Wilson ", + "name": "on-headers", + "version": "1.1.0", + "description": "Execute a listener when a response is about to write headers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:on-headers:on-headers:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/on-headers@1.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:on-headers:on_headers:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:on_headers:on-headers:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:on_headers:on_headers:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:on:on-headers:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:on:on_headers:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/on-headers/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/once@1.4.0?package-id=710fa9c43bb773a8", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "once", + "version": "1.4.0", + "description": "Run a function exactly one time", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:once:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/once@1.4.0", + "externalReferences": [ + { + "url": "git://github.com/isaacs/once", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:once:once:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/once/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/one-time@1.0.0?package-id=c572449b4ab3e7a6", + "type": "library", + "author": "Arnout Kazemier", + "name": "one-time", + "version": "1.0.0", + "description": "Run the supplied function exactly one time (once)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:3rd-Eden:one-time:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/one-time@1.0.0", + "externalReferences": [ + { + "url": "https://github.com/3rd-Eden/one-time.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:3rd-Eden:one_time:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:one-time:one-time:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:one-time:one_time:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:one_time:one-time:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:one_time:one_time:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:one:one-time:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:one:one_time:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/one-time/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/opentype.js@0.7.3?package-id=0a5d0e299d0ca888", + "type": "library", + "author": "Frederik De Bleser ", + "name": "opentype.js", + "version": "0.7.3", + "description": "OpenType font parser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:opentype.js:opentype.js:0.7.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/opentype.js@0.7.3", + "externalReferences": [ + { + "url": "git://github.com/nodebox/opentype.js.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nodebox:opentype.js:0.7.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/opentype.js/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/os-homedir@1.0.2?package-id=52db215c8294fee6", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "os-homedir", + "version": "1.0.2", + "description": "Node.js 4 `os.homedir()` ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:os-homedir:os-homedir:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/os-homedir@1.0.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:os-homedir:os_homedir:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:os_homedir:os-homedir:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:os_homedir:os_homedir:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:os:os-homedir:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:os:os_homedir:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/os-homedir/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/os-tmpdir@1.0.2?package-id=4374998874b59022", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "os-tmpdir", + "version": "1.0.2", + "description": "Node.js os.tmpdir() ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:os-tmpdir:os-tmpdir:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/os-tmpdir@1.0.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:os-tmpdir:os_tmpdir:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:os_tmpdir:os-tmpdir:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:os_tmpdir:os_tmpdir:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:os:os-tmpdir:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:os:os_tmpdir:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/os-tmpdir/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/osenv@0.1.5?package-id=1369b3372e58f531", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "osenv", + "version": "0.1.5", + "description": "Look up environment settings specific to different operating systems", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:osenv:osenv:0.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/osenv@0.1.5", + "externalReferences": [ + { + "url": "https://github.com/npm/osenv", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:osenv:0.1.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/osenv/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/otplib@13.4.0?package-id=0044d1899783133a", + "type": "library", + "author": "Gerald Yeo ", + "name": "otplib", + "version": "13.4.0", + "description": "TypeScript-first library for TOTP and HOTP with multi-runtime and plugin support", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:otplib:otplib:13.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/otplib@13.4.0", + "externalReferences": [ + { + "url": "git+https://github.com/yeojz/otplib.git", + "type": "distribution" + }, + { + "url": "https://otplib.yeojz.dev", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/otplib/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/p-cancelable@0.4.1?package-id=0583de70fcdfc131", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "p-cancelable", + "version": "0.4.1", + "description": "Create a promise that can be canceled", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-cancelable:p-cancelable:0.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-cancelable@0.4.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p-cancelable:p_cancelable:0.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p_cancelable:p-cancelable:0.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p_cancelable:p_cancelable:0.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p:p-cancelable:0.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p:p_cancelable:0.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/p-cancelable/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/p-event@2.3.1?package-id=df4ea6677e364df8", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "p-event", + "version": "2.3.1", + "description": "Promisify an event by waiting for it to be emitted", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-event:p-event:2.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-event@2.3.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p-event:p_event:2.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p_event:p-event:2.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p_event:p_event:2.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p:p-event:2.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p:p_event:2.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/p-event/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/p-finally@1.0.0?package-id=6dc32e80fda079a9", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "p-finally", + "version": "1.0.0", + "description": "`Promise#finally()` ponyfill - Invoked when the promise is settled regardless of outcome", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-finally:p-finally:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-finally@1.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p-finally:p_finally:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p_finally:p-finally:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p_finally:p_finally:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p:p-finally:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p:p_finally:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/p-finally/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/p-is-promise@1.1.0?package-id=bf2a9cb36f7ff224", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "p-is-promise", + "version": "1.1.0", + "description": "Check if something is a promise", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-is-promise:p-is-promise:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-is-promise@1.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p-is-promise:p_is_promise:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p_is_promise:p-is-promise:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p_is_promise:p_is_promise:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p-is:p-is-promise:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p-is:p_is_promise:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p_is:p-is-promise:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p_is:p_is_promise:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p:p-is-promise:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p:p_is_promise:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/p-is-promise/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/p-limit@2.3.0?package-id=1e7a4b5a5a7aade9", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "p-limit", + "version": "2.3.0", + "description": "Run multiple promise-returning & async functions with limited concurrency", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-limit:p-limit:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-limit@2.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p-limit:p_limit:2.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p_limit:p-limit:2.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p_limit:p_limit:2.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p:p-limit:2.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p:p_limit:2.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/replace/node_modules/p-limit/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/p-locate@4.1.0?package-id=55f14ff67eedbaf2", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "p-locate", + "version": "4.1.0", + "description": "Get the first fulfilled promise that satisfies the provided testing function", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-locate:p-locate:4.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-locate@4.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p-locate:p_locate:4.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p_locate:p-locate:4.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p_locate:p_locate:4.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p:p-locate:4.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p:p_locate:4.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/replace/node_modules/p-locate/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/p-map@4.0.0?package-id=e8a38305d2594577", + "type": "library", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "p-map", + "version": "4.0.0", + "description": "Map over promises concurrently", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-map:p-map:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-map@4.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p-map:p_map:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p_map:p-map:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p_map:p_map:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p:p-map:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p:p_map:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/p-map/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/p-map@7.0.4?package-id=e932e8eb4b9575ca", + "type": "library", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "p-map", + "version": "7.0.4", + "description": "Map over promises concurrently", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-map:p-map:7.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-map@7.0.4", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p-map:p_map:7.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p_map:p-map:7.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p_map:p_map:7.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p:p-map:7.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p:p_map:7.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/cacache/node_modules/p-map/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/p-timeout@2.0.1?package-id=df05fe622aab59f4", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "p-timeout", + "version": "2.0.1", + "description": "Timeout a promise after a specified amount of time", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-timeout:p-timeout:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-timeout@2.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p-timeout:p_timeout:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p_timeout:p-timeout:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p_timeout:p_timeout:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p:p-timeout:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p:p_timeout:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/p-timeout/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/p-try@2.2.0?package-id=cc75054caddacf72", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "p-try", + "version": "2.2.0", + "description": "`Start a promise chain", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:p-try:p-try:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/p-try@2.2.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p-try:p_try:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p_try:p-try:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p_try:p_try:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p:p-try:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:p:p_try:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/p-try/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/package-json-from-dist@1.0.1?package-id=966e804e2cdc19c3", + "type": "library", + "author": "Isaac Z. Schlueter (https://izs.me)", + "name": "package-json-from-dist", + "version": "1.0.1", + "description": "Load the local package.json from either src or dist folder", + "licenses": [ + { + "license": { + "id": "BlueOak-1.0.0" + } + } + ], + "cpe": "cpe:2.3:a:package-json-from-dist:package-json-from-dist:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/package-json-from-dist@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/package-json-from-dist.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:package-json-from-dist:package_json_from_dist:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:package_json_from_dist:package-json-from-dist:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:package_json_from_dist:package_json_from_dist:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:package-json-from:package-json-from-dist:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:package-json-from:package_json_from_dist:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:package_json_from:package-json-from-dist:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:package_json_from:package_json_from_dist:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:package-json:package-json-from-dist:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:package-json:package_json_from_dist:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:package_json:package-json-from-dist:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:package_json:package_json_from_dist:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:package:package-json-from-dist:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:package:package_json_from_dist:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/package-json-from-dist/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/pako@0.2.9?package-id=25e56b2924cae615", + "type": "library", + "author": "Andrei Tuputcyn (https://github.com/andr83), Vitaly Puzrin (https://github.com/puzrin)", + "name": "pako", + "version": "0.2.9", + "description": "zlib port to javascript - fast, modularized, with browser support", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:nodeca:pako:0.2.9:*:*:*:*:*:*:*", + "purl": "pkg:npm/pako@0.2.9", + "externalReferences": [ + { + "url": "https://github.com/nodeca/pako", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pako:pako:0.2.9:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/unicode-trie/node_modules/pako/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/pako@1.0.11?package-id=0652478bc95e80f3", + "type": "library", + "author": "Andrei Tuputcyn (https://github.com/andr83), Vitaly Puzrin (https://github.com/puzrin), Friedel Ziegelmayer (https://github.com/dignifiedquire), Kirill Efimov (https://github.com/Kirill89), Jean-loup Gailly, Mark Adler", + "name": "pako", + "version": "1.0.11", + "description": "zlib port to javascript - fast, modularized, with browser support", + "licenses": [ + { + "expression": "MIT AND Zlib" + } + ], + "cpe": "cpe:2.3:a:nodeca:pako:1.0.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/pako@1.0.11", + "externalReferences": [ + { + "url": "https://github.com/nodeca/pako", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pako:pako:1.0.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/pako/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/parse-filepath@1.0.2?package-id=e056c65cb29d1cdc", + "type": "library", + "author": "Jon Schlinkert (https://github.com/jonschlinkert)", + "name": "parse-filepath", + "version": "1.0.2", + "description": "Pollyfill for node.js `path.parse`, parses a filepath into an object.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:parse-filepath:parse-filepath:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/parse-filepath@1.0.2", + "externalReferences": [ + { + "url": "https://github.com/jonschlinkert/parse-filepath", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:parse-filepath:parse_filepath:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:parse_filepath:parse-filepath:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:parse_filepath:parse_filepath:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jonschlinkert:parse-filepath:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jonschlinkert:parse_filepath:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:parse:parse-filepath:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:parse:parse_filepath:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/parse-filepath/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/parse-passwd@1.0.0?package-id=fb103d20d587efac", + "type": "library", + "author": "Brian Woodward (https://github.com/doowb)", + "name": "parse-passwd", + "version": "1.0.0", + "description": "Parse a passwd file into a list of users.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:parse-passwd:parse-passwd:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/parse-passwd@1.0.0", + "externalReferences": [ + { + "url": "https://github.com/doowb/parse-passwd", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:parse-passwd:parse_passwd:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:parse_passwd:parse-passwd:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:parse_passwd:parse_passwd:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:doowb:parse-passwd:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:doowb:parse_passwd:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:parse:parse-passwd:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:parse:parse_passwd:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/parse-passwd/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/parseurl@1.3.3?package-id=742ccf9d8e4af8dc", + "type": "library", + "author": "Douglas Christopher Wilson , Jonathan Ong (http://jongleberry.com)", + "name": "parseurl", + "version": "1.3.3", + "description": "parse a url with memoization", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:parseurl:parseurl:1.3.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/parseurl@1.3.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/parseurl/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/path-exists@4.0.0?package-id=e34ca3dd718a6918", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "path-exists", + "version": "4.0.0", + "description": "Check if a path exists", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-exists:path-exists:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-exists@4.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path-exists:path_exists:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path_exists:path-exists:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path_exists:path_exists:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path:path-exists:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path:path_exists:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/path-exists/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/path-is-absolute@1.0.1?package-id=8bf9ef21aa2f3e3c", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "path-is-absolute", + "version": "1.0.1", + "description": "Node.js 0.12 path.isAbsolute() ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-is-absolute:path-is-absolute:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-is-absolute@1.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path-is-absolute:path_is_absolute:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path_is_absolute:path-is-absolute:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path_is_absolute:path_is_absolute:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path-is:path-is-absolute:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path-is:path_is_absolute:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path_is:path-is-absolute:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path_is:path_is_absolute:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path:path-is-absolute:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path:path_is_absolute:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/path-is-absolute/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/path-key@3.1.1?package-id=0fdcd7cdef61a3e7", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "path-key", + "version": "3.1.1", + "description": "Get the PATH environment variable key cross-platform", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-key:path-key:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-key@3.1.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path-key:path_key:3.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path_key:path-key:3.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path_key:path_key:3.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path:path-key:3.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path:path_key:3.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/path-key/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/path-parse@1.0.7?package-id=5705871024a48530", + "type": "library", + "author": "Javier Blanco ", + "name": "path-parse", + "version": "1.0.7", + "description": "Node.js path.parse() ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-parse_project:path-parse:1.0.7:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/path-parse@1.0.7", + "externalReferences": [ + { + "url": "https://github.com/jbgutierrez/path-parse.git", + "type": "distribution" + }, + { + "url": "https://github.com/jbgutierrez/path-parse#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/path-parse/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/path-root@0.1.1?package-id=03046e5f9c1c7d1f", + "type": "library", + "author": "Jon Schlinkert (https://github.com/jonschlinkert)", + "name": "path-root", + "version": "0.1.1", + "description": "Get the root of a posix or windows filepath.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jonschlinkert:path-root:0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-root@0.1.1", + "externalReferences": [ + { + "url": "https://github.com/jonschlinkert/path-root", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jonschlinkert:path_root:0.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path-root:path-root:0.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path-root:path_root:0.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path_root:path-root:0.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path_root:path_root:0.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path:path-root:0.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path:path_root:0.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/path-root/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/path-root-regex@0.1.2?package-id=91e5c6fbec5920e7", + "type": "library", + "author": "Jon Schlinkert (https://github.com/jonschlinkert)", + "name": "path-root-regex", + "version": "0.1.2", + "description": "Regular expression for getting the root of a posix or windows filepath.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:path-root-regex:path-root-regex:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-root-regex@0.1.2", + "externalReferences": [ + { + "url": "https://github.com/regexhq/path-root-regex", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path-root-regex:path_root_regex:0.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path_root_regex:path-root-regex:0.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path_root_regex:path_root_regex:0.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path-root:path-root-regex:0.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path-root:path_root_regex:0.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path_root:path-root-regex:0.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path_root:path_root_regex:0.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:regexhq:path-root-regex:0.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:regexhq:path_root_regex:0.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path:path-root-regex:0.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path:path_root_regex:0.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/path-root-regex/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/path-scurry@1.11.1?package-id=ea725e26827e4925", + "type": "library", + "author": "Isaac Z. Schlueter (https://blog.izs.me)", + "name": "path-scurry", + "version": "1.11.1", + "description": "walk paths fast and efficiently", + "licenses": [ + { + "license": { + "id": "BlueOak-1.0.0" + } + } + ], + "cpe": "cpe:2.3:a:path-scurry:path-scurry:1.11.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/path-scurry@1.11.1", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/path-scurry", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path-scurry:path_scurry:1.11.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path_scurry:path-scurry:1.11.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path_scurry:path_scurry:1.11.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path:path-scurry:1.11.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:path:path_scurry:1.11.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/path-scurry/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/path-to-regexp@0.1.13?package-id=956f5aed1bcabe03", + "type": "library", + "name": "path-to-regexp", + "version": "0.1.13", + "description": "Express style path to RegExp utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pillarjs:path-to-regexp:0.1.13:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/path-to-regexp@0.1.13", + "externalReferences": [ + { + "url": "https://github.com/pillarjs/path-to-regexp.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/path-to-regexp/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/pdfkit@0.11.0?package-id=9db722276593f5ce", + "type": "library", + "author": "Devon Govett (http://badassjs.com/)", + "name": "pdfkit", + "version": "0.11.0", + "description": "A PDF generation library for Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:foliojs:pdfkit:0.11.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pdfkit@0.11.0", + "externalReferences": [ + { + "url": "https://github.com/foliojs/pdfkit.git", + "type": "distribution" + }, + { + "url": "http://pdfkit.org/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pdfkit:pdfkit:0.11.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/pdfkit/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/peek-readable@4.1.0?package-id=a8a35d958d903684", + "type": "library", + "author": "Borewit (https://github.com/Borewit)", + "name": "peek-readable", + "version": "4.1.0", + "description": "Read and peek from a readable stream", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:peek-readable:peek-readable:4.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/peek-readable@4.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/Borewit/peek-readable", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:peek-readable:peek_readable:4.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:peek_readable:peek-readable:4.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:peek_readable:peek_readable:4.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:peek:peek-readable:4.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:peek:peek_readable:4.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/peek-readable/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/pend@1.2.0?package-id=12701b802402fca7", + "type": "library", + "author": "Andrew Kelley ", + "name": "pend", + "version": "1.2.0", + "description": "dead-simple optimistic async helper", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:andrewrk:pend:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pend@1.2.0", + "externalReferences": [ + { + "url": "git://github.com/andrewrk/node-pend.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pend:pend:1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/pend/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/pg-connection-string@2.12.0?package-id=b511874505753174", + "type": "library", + "author": "Blaine Bublitz (http://iceddev.com/)", + "name": "pg-connection-string", + "version": "2.12.0", + "description": "Functions for dealing with a PostgresSQL connection string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pg-connection-string:pg-connection-string:2.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pg-connection-string@2.12.0", + "externalReferences": [ + { + "url": "git://github.com/brianc/node-postgres.git", + "type": "distribution" + }, + { + "url": "https://github.com/brianc/node-postgres/tree/master/packages/pg-connection-string", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pg-connection-string:pg_connection_string:2.12.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pg_connection_string:pg-connection-string:2.12.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pg_connection_string:pg_connection_string:2.12.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pg-connection:pg-connection-string:2.12.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pg-connection:pg_connection_string:2.12.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pg_connection:pg-connection-string:2.12.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pg_connection:pg_connection_string:2.12.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:brianc:pg-connection-string:2.12.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:brianc:pg_connection_string:2.12.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pg:pg-connection-string:2.12.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pg:pg_connection_string:2.12.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/pg-connection-string/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/picocolors@1.1.1?package-id=d02f32d91d4af8a0", + "type": "library", + "author": "Alexey Raspopov", + "name": "picocolors", + "version": "1.1.1", + "description": "The tiniest and the fastest library for terminal output formatting with ANSI colors", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:picocolors:picocolors:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/picocolors@1.1.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/picocolors/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/picomatch@2.3.2?package-id=b20eb66c8928f9be", + "type": "library", + "author": "Jon Schlinkert (https://github.com/jonschlinkert)", + "name": "picomatch", + "version": "2.3.2", + "description": "Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jonschlinkert:picomatch:2.3.2:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/picomatch@2.3.2", + "externalReferences": [ + { + "url": "https://github.com/micromatch/picomatch", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/picomatch/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/picomatch@4.0.4?package-id=2d7f8db766fc3be7", + "type": "library", + "author": "Jon Schlinkert (https://github.com/jonschlinkert)", + "name": "picomatch", + "version": "4.0.4", + "description": "Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jonschlinkert:picomatch:4.0.4:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/picomatch@4.0.4", + "externalReferences": [ + { + "url": "https://github.com/micromatch/picomatch", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/tinyglobby/node_modules/picomatch/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/pify@2.3.0?package-id=0dfe147bb8a24d6a", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "pify", + "version": "2.3.0", + "description": "Promisify a callback-style function", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pify:pify:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pify@2.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/decompress-unzip/node_modules/pify/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/pify@2.3.0?package-id=ddba1125c77293de", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "pify", + "version": "2.3.0", + "description": "Promisify a callback-style function", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pify:pify:2.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pify@2.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/decompress/node_modules/pify/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/pify@3.0.0?package-id=74f6afcb29e33215", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "pify", + "version": "3.0.0", + "description": "Promisify a callback-style function", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pify:pify:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pify@3.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/decompress/node_modules/make-dir/node_modules/pify/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/pify@3.0.0?package-id=94b4540c59ceda21", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "pify", + "version": "3.0.0", + "description": "Promisify a callback-style function", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pify:pify:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pify@3.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/got/node_modules/pify/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/pify@4.0.1?package-id=14675684a3b19742", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "pify", + "version": "4.0.1", + "description": "Promisify a callback-style function", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pify:pify:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/pify@4.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/pify/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/pinkie@2.0.4?package-id=d2cce100ab18f798", + "type": "library", + "author": "Vsevolod Strukchinsky (github.com/floatdrop)", + "name": "pinkie", + "version": "2.0.4", + "description": "Itty bitty little widdle twinkie pinkie ES2015 Promise implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pinkie:pinkie:2.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/pinkie@2.0.4", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/pinkie/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/pinkie-promise@2.0.1?package-id=cc6a968ba889b638", + "type": "library", + "author": "Vsevolod Strukchinsky (github.com/floatdrop)", + "name": "pinkie-promise", + "version": "2.0.1", + "description": "ES2015 Promise ponyfill", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pinkie-promise:pinkie-promise:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/pinkie-promise@2.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pinkie-promise:pinkie_promise:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pinkie_promise:pinkie-promise:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pinkie_promise:pinkie_promise:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pinkie:pinkie-promise:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pinkie:pinkie_promise:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/pinkie-promise/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/png-js@1.1.0?package-id=15ca37ad82f59e09", + "type": "library", + "author": "Devon Govett (http://badassjs.com/)", + "name": "png-js", + "version": "1.1.0", + "description": "A PNG decoder in JavaScript", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:devongovett:png-js:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/png-js@1.1.0", + "externalReferences": [ + { + "url": "https://github.com/devongovett/png.js.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:devongovett:png_js:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:png-js:png-js:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:png-js:png_js:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:png_js:png-js:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:png_js:png_js:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:png:png-js:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:png:png_js:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/png-js/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/possible-typed-array-names@1.1.0?package-id=fd2e1cd61be49f02", + "type": "library", + "author": "Jordan Harband ", + "name": "possible-typed-array-names", + "version": "1.1.0", + "description": "A simple list of possible Typed Array names.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:possible-typed-array-names:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/possible-typed-array-names@1.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/ljharb/possible-typed-array-names.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/possible-typed-array-names#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:possible-typed-array-names:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:possible_typed_array_names:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:possible_typed_array_names:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:possible-typed-array:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:possible-typed-array:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:possible_typed_array:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:possible_typed_array:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:possible-typed:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:possible-typed:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:possible_typed:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:possible_typed:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:possible:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:possible:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/possible-typed-array-names/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/prebuild-install@5.3.6?package-id=4dc75afb90a1e180", + "type": "library", + "author": "Mathias Buus (@mafintosh), Julian Gruber (https://github.com/juliangruber), Brett Lawson (https://github.com/brett19), Pieter Hintjens (https://github.com/hintjens), Lars-Magnus Skog (https://github.com/ralphtheninja), Jesús Leganés Combarro (https://github.com/piranna), Mathias Küsel (https://github.com/mathiask88), Lukas Geiger (https://github.com/lgeiger)", + "name": "prebuild-install", + "version": "5.3.6", + "description": "A command line tool to easily install prebuilt binaries for multiple version of node/iojs on a specific platform", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:prebuild-install:prebuild-install:5.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/prebuild-install@5.3.6", + "externalReferences": [ + { + "url": "https://github.com/prebuild/prebuild-install.git", + "type": "distribution" + }, + { + "url": "https://github.com/prebuild/prebuild-install", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:prebuild-install:prebuild_install:5.3.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:prebuild_install:prebuild-install:5.3.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:prebuild_install:prebuild_install:5.3.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:prebuild:prebuild-install:5.3.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:prebuild:prebuild_install:5.3.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/prebuild-install/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/prebuild-install@7.1.3?package-id=3b6455381633cdb0", + "type": "library", + "author": "Mathias Buus (@mafintosh), Julian Gruber (https://github.com/juliangruber), Brett Lawson (https://github.com/brett19), Pieter Hintjens (https://github.com/hintjens), Lars-Magnus Skog (https://github.com/ralphtheninja), Jesús Leganés Combarro (https://github.com/piranna), Mathias Küsel (https://github.com/mathiask88), Lukas Geiger (https://github.com/lgeiger)", + "name": "prebuild-install", + "version": "7.1.3", + "description": "A command line tool to easily install prebuilt binaries for multiple version of node/iojs on a specific platform", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:prebuild-install:prebuild-install:7.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/prebuild-install@7.1.3", + "externalReferences": [ + { + "url": "https://github.com/prebuild/prebuild-install.git", + "type": "distribution" + }, + { + "url": "https://github.com/prebuild/prebuild-install", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:prebuild-install:prebuild_install:7.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:prebuild_install:prebuild-install:7.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:prebuild_install:prebuild_install:7.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:prebuild:prebuild-install:7.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:prebuild:prebuild_install:7.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/libxmljs2/node_modules/prebuild-install/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/prebuild-install@7.1.3?package-id=008da708a93ab8fd", + "type": "library", + "author": "Mathias Buus (@mafintosh), Julian Gruber (https://github.com/juliangruber), Brett Lawson (https://github.com/brett19), Pieter Hintjens (https://github.com/hintjens), Lars-Magnus Skog (https://github.com/ralphtheninja), Jesús Leganés Combarro (https://github.com/piranna), Mathias Küsel (https://github.com/mathiask88), Lukas Geiger (https://github.com/lgeiger)", + "name": "prebuild-install", + "version": "7.1.3", + "description": "A command line tool to easily install prebuilt binaries for multiple version of node/iojs on a specific platform", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:prebuild-install:prebuild-install:7.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/prebuild-install@7.1.3", + "externalReferences": [ + { + "url": "https://github.com/prebuild/prebuild-install.git", + "type": "distribution" + }, + { + "url": "https://github.com/prebuild/prebuild-install", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:prebuild-install:prebuild_install:7.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:prebuild_install:prebuild-install:7.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:prebuild_install:prebuild_install:7.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:prebuild:prebuild-install:7.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:prebuild:prebuild_install:7.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/prebuild-install/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/prepend-http@2.0.0?package-id=b8fe3bfab62a882d", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "prepend-http", + "version": "2.0.0", + "description": "Prepend `http://` to humanized URLs like todomvc.com and localhost", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:prepend-http:prepend-http:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/prepend-http@2.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:prepend-http:prepend_http:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:prepend_http:prepend-http:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:prepend_http:prepend_http:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:prepend:prepend-http:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:prepend:prepend_http:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/prepend-http/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/pretty-bytes@4.0.2?package-id=4d91b0988d9fe55f", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "pretty-bytes", + "version": "4.0.2", + "description": "Convert bytes to a human readable string: 1337 → 1.34 kB", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pretty-bytes:pretty-bytes:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/pretty-bytes@4.0.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pretty-bytes:pretty_bytes:4.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pretty_bytes:pretty-bytes:4.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pretty_bytes:pretty_bytes:4.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pretty:pretty-bytes:4.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pretty:pretty_bytes:4.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/grunt-contrib-compress/node_modules/pretty-bytes/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/proc-log@5.0.0?package-id=b7e53f78a8e3b5aa", + "type": "library", + "author": "GitHub Inc.", + "name": "proc-log", + "version": "5.0.0", + "description": "just emit 'log' events on the process object", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:proc-log:proc-log:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/proc-log@5.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/npm/proc-log.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:proc-log:proc_log:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:proc_log:proc-log:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:proc_log:proc_log:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:proc:proc-log:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:proc:proc_log:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/proc-log/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/process@0.11.10?package-id=86b4e66d55ba762f", + "type": "library", + "author": "Roman Shtylman ", + "name": "process", + "version": "0.11.10", + "description": "process information for node.js and browsers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:shtylman:process:0.11.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/process@0.11.10", + "externalReferences": [ + { + "url": "git://github.com/shtylman/node-process.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:process:process:0.11.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/process/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/process-nextick-args@2.0.1?package-id=2736f58329e89e68", + "type": "library", + "name": "process-nextick-args", + "version": "2.0.1", + "description": "process.nextTick but always with args", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:process-nextick-args:process-nextick-args:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/process-nextick-args@2.0.1", + "externalReferences": [ + { + "url": "https://github.com/calvinmetcalf/process-nextick-args.git", + "type": "distribution" + }, + { + "url": "https://github.com/calvinmetcalf/process-nextick-args", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:process-nextick-args:process_nextick_args:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:process_nextick_args:process-nextick-args:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:process_nextick_args:process_nextick_args:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:process-nextick:process-nextick-args:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:process-nextick:process_nextick_args:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:process_nextick:process-nextick-args:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:process_nextick:process_nextick_args:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:calvinmetcalf:process-nextick-args:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:calvinmetcalf:process_nextick_args:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:process:process-nextick-args:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:process:process_nextick_args:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/process-nextick-args/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/prom-client@15.1.3?package-id=6ecaaf82659f7cf7", + "type": "library", + "author": "Simon Nyberg", + "name": "prom-client", + "version": "15.1.3", + "description": "Client for prometheus", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:prom-client:prom-client:15.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/prom-client@15.1.3", + "externalReferences": [ + { + "url": "https://github.com/siimon/prom-client", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:prom-client:prom_client:15.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:prom_client:prom-client:15.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:prom_client:prom_client:15.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:siimon:prom-client:15.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:siimon:prom_client:15.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:prom:prom-client:15.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:prom:prom_client:15.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/prom-client/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/promise@7.3.1?package-id=d0870412585e133d", + "type": "library", + "author": "ForbesLindesay", + "name": "promise", + "version": "7.3.1", + "description": "Bare bones Promises/A+ implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:promise:promise:7.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/promise@7.3.1", + "externalReferences": [ + { + "url": "https://github.com/then/promise.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:then:promise:7.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/promise/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/promise-inflight@1.0.1?package-id=cb2d8de0d226aacd", + "type": "library", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "promise-inflight", + "version": "1.0.1", + "description": "One promise for multiple requests in flight to avoid async duplication", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:promise-inflight:promise-inflight:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/promise-inflight@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/iarna/promise-inflight.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/promise-inflight#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise-inflight:promise_inflight:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise_inflight:promise-inflight:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise_inflight:promise_inflight:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise:promise-inflight:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise:promise_inflight:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iarna:promise-inflight:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iarna:promise_inflight:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/promise-inflight/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/promise-retry@2.0.1?package-id=14baa7b321b17fc4", + "type": "library", + "author": "IndigoUnited (http://indigounited.com)", + "name": "promise-retry", + "version": "2.0.1", + "description": "Retries a function that returns a promise, leveraging the power of the retry module.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:promise-retry:promise-retry:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/promise-retry@2.0.1", + "externalReferences": [ + { + "url": "git://github.com/IndigoUnited/node-promise-retry.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise-retry:promise_retry:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise_retry:promise-retry:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise_retry:promise_retry:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:IndigoUnited:promise-retry:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:IndigoUnited:promise_retry:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise:promise-retry:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:promise:promise_retry:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/promise-retry/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/proxy-addr@2.0.7?package-id=e9d03164ed043197", + "type": "library", + "author": "Douglas Christopher Wilson ", + "name": "proxy-addr", + "version": "2.0.7", + "description": "Determine address of proxied request", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:proxy-addr:proxy-addr:2.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/proxy-addr@2.0.7", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:proxy-addr:proxy_addr:2.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:proxy_addr:proxy-addr:2.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:proxy_addr:proxy_addr:2.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:proxy:proxy-addr:2.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:proxy:proxy_addr:2.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/proxy-addr/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/pug@3.0.4?package-id=173ce8303d0e236e", + "type": "library", + "author": "TJ Holowaychuk , Forbes Lindesay , Matthias Le Brun , Joshua Appelman , Jonathan Ong , Alex Kocharin , Hemanth , Timothy Gu , Andreas Lubbe ", + "name": "pug", + "version": "3.0.4", + "description": "A clean, whitespace-sensitive template language for writing HTML", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pugjs:pug:3.0.4:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/pug@3.0.4", + "externalReferences": [ + { + "url": "https://github.com/pugjs/pug/tree/master/packages/pug", + "type": "distribution" + }, + { + "url": "https://pugjs.org", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/pug/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/pug-attrs@3.0.0?package-id=8ccd7e8a2286d99c", + "type": "library", + "author": "Forbes Lindesay", + "name": "pug-attrs", + "version": "3.0.0", + "description": "Generate code for Pug attributes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pug-attrs:pug-attrs:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pug-attrs@3.0.0", + "externalReferences": [ + { + "url": "https://github.com/pugjs/pug/tree/master/packages/pug-attrs", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug-attrs:pug_attrs:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug_attrs:pug-attrs:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug_attrs:pug_attrs:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pugjs:pug-attrs:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pugjs:pug_attrs:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug:pug-attrs:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug:pug_attrs:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/pug-attrs/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/pug-code-gen@3.0.4?package-id=56b653fbff8f32dc", + "type": "library", + "author": "Forbes Lindesay", + "name": "pug-code-gen", + "version": "3.0.4", + "description": "Default code-generator for pug. It generates HTML via a JavaScript template function.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pugjs:pug-code-gen:3.0.4:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/pug-code-gen@3.0.4", + "externalReferences": [ + { + "url": "https://github.com/pugjs/pug/tree/master/packages/pug-code-gen", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/pug-code-gen/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/pug-error@2.1.0?package-id=06722d2c34c689cc", + "type": "library", + "author": "Forbes Lindesay", + "name": "pug-error", + "version": "2.1.0", + "description": "Standard error objects for pug", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pug-error:pug-error:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pug-error@2.1.0", + "externalReferences": [ + { + "url": "https://github.com/pugjs/pug/tree/master/packages/pug-error", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug-error:pug_error:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug_error:pug-error:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug_error:pug_error:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pugjs:pug-error:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pugjs:pug_error:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug:pug-error:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug:pug_error:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/pug-error/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/pug-filters@4.0.0?package-id=5d3376b6724b0ba5", + "type": "library", + "author": "Forbes Lindesay", + "name": "pug-filters", + "version": "4.0.0", + "description": "Code for processing filters in pug templates", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pug-filters:pug-filters:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pug-filters@4.0.0", + "externalReferences": [ + { + "url": "https://github.com/pugjs/pug/tree/master/packages/pug-filters", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug-filters:pug_filters:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug_filters:pug-filters:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug_filters:pug_filters:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pugjs:pug-filters:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pugjs:pug_filters:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug:pug-filters:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug:pug_filters:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/pug-filters/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/pug-lexer@5.0.1?package-id=5dc82d87668bae8e", + "type": "library", + "author": "ForbesLindesay", + "name": "pug-lexer", + "version": "5.0.1", + "description": "The pug lexer (takes a string and converts it to an array of tokens)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pug-lexer:pug-lexer:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/pug-lexer@5.0.1", + "externalReferences": [ + { + "url": "https://github.com/pugjs/pug/tree/master/packages/pug-lexer", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug-lexer:pug_lexer:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug_lexer:pug-lexer:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug_lexer:pug_lexer:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pugjs:pug-lexer:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pugjs:pug_lexer:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug:pug-lexer:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug:pug_lexer:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/pug-lexer/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/pug-linker@4.0.0?package-id=e949463e431e1776", + "type": "library", + "author": "Forbes Lindesay", + "name": "pug-linker", + "version": "4.0.0", + "description": "Link multiple pug ASTs together using include/extends", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pug-linker:pug-linker:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pug-linker@4.0.0", + "externalReferences": [ + { + "url": "https://github.com/pugjs/pug/tree/master/packages/pug-linker", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug-linker:pug_linker:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug_linker:pug-linker:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug_linker:pug_linker:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pugjs:pug-linker:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pugjs:pug_linker:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug:pug-linker:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug:pug_linker:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/pug-linker/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/pug-load@3.0.0?package-id=b831a94ec83ee646", + "type": "library", + "author": "ForbesLindesay", + "name": "pug-load", + "version": "3.0.0", + "description": "The Pug loader is responsible for loading the depenendencies of a given Pug file.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pug-load:pug-load:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pug-load@3.0.0", + "externalReferences": [ + { + "url": "https://github.com/pugjs/pug/tree/master/packages/pug-load", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug-load:pug_load:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug_load:pug-load:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug_load:pug_load:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pugjs:pug-load:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pugjs:pug_load:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug:pug-load:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug:pug_load:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/pug-load/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/pug-parser@6.0.0?package-id=ae3ce07497258f6e", + "type": "library", + "author": "ForbesLindesay", + "name": "pug-parser", + "version": "6.0.0", + "description": "The pug parser (takes an array of tokens and converts it to an abstract syntax tree)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pug-parser:pug-parser:6.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pug-parser@6.0.0", + "externalReferences": [ + { + "url": "https://github.com/pugjs/pug/tree/master/packages/pug-parser", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug-parser:pug_parser:6.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug_parser:pug-parser:6.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug_parser:pug_parser:6.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pugjs:pug-parser:6.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pugjs:pug_parser:6.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug:pug-parser:6.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug:pug_parser:6.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/pug-parser/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/pug-runtime@3.0.1?package-id=eff466aded883d14", + "type": "library", + "author": "ForbesLindesay", + "name": "pug-runtime", + "version": "3.0.1", + "description": "The runtime components for the pug templating language", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pug-runtime:pug-runtime:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/pug-runtime@3.0.1", + "externalReferences": [ + { + "url": "https://github.com/pugjs/pug/tree/master/packages/pug-runtime", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug-runtime:pug_runtime:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug_runtime:pug-runtime:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug_runtime:pug_runtime:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pugjs:pug-runtime:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pugjs:pug_runtime:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug:pug-runtime:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug:pug_runtime:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/pug-runtime/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/pug-strip-comments@2.0.0?package-id=678b3dbf2205543b", + "type": "library", + "author": "Timothy Gu ", + "name": "pug-strip-comments", + "version": "2.0.0", + "description": "Strip comments from a Pug token stream (from the lexer)", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pug-strip-comments:pug-strip-comments:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pug-strip-comments@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/pugjs/pug/tree/master/packages/pug-strip-comments", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug-strip-comments:pug_strip_comments:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug_strip_comments:pug-strip-comments:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug_strip_comments:pug_strip_comments:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug-strip:pug-strip-comments:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug-strip:pug_strip_comments:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug_strip:pug-strip-comments:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug_strip:pug_strip_comments:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pugjs:pug-strip-comments:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pugjs:pug_strip_comments:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug:pug-strip-comments:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug:pug_strip_comments:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/pug-strip-comments/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/pug-walk@2.0.0?package-id=8da935ca9924488f", + "type": "library", + "author": "ForbesLindesay", + "name": "pug-walk", + "version": "2.0.0", + "description": "Walk and transform a pug AST", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pug-walk:pug-walk:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/pug-walk@2.0.0", + "externalReferences": [ + { + "url": "https://github.com/pugjs/pug/tree/master/packages/pug-walk", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug-walk:pug_walk:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug_walk:pug-walk:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug_walk:pug_walk:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pugjs:pug-walk:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pugjs:pug_walk:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug:pug-walk:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pug:pug_walk:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/pug-walk/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/pump@3.0.4?package-id=6a087f9980559301", + "type": "library", + "author": "Mathias Buus Madsen ", + "name": "pump", + "version": "3.0.4", + "description": "pipe streams together and close all of them if one of them closes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mafintosh:pump:3.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/pump@3.0.4", + "externalReferences": [ + { + "url": "git://github.com/mafintosh/pump.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pump:pump:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/pump/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/qs@6.15.1?package-id=0d0b4cfd63c59995", + "type": "library", + "author": "Jordan Harband (http://ljharb.codes)", + "name": "qs", + "version": "6.15.1", + "description": "A querystring parser that supports nesting and arrays, with a depth limit", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:qs_project:qs:6.15.1:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/qs@6.15.1", + "externalReferences": [ + { + "url": "https://github.com/ljharb/qs.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/qs", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/qs/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/query-string@5.1.1?package-id=853a5626da6a5619", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "query-string", + "version": "5.1.1", + "description": "Parse and stringify URL query strings", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:query-string:query-string:5.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/query-string@5.1.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:query-string:query_string:5.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:query_string:query-string:5.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:query_string:query_string:5.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:query:query-string:5.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:query:query_string:5.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/query-string/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/range-parser@1.2.1?package-id=044253d4d9efad62", + "type": "library", + "author": "TJ Holowaychuk (http://tjholowaychuk.com), Douglas Christopher Wilson , James Wyatt Cready , Jonathan Ong (http://jongleberry.com)", + "name": "range-parser", + "version": "1.2.1", + "description": "Range header field string parser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:range-parser:range-parser:1.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/range-parser@1.2.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:range-parser:range_parser:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:range_parser:range-parser:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:range_parser:range_parser:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:range:range-parser:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:range:range_parser:1.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/range-parser/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/range_check@2.0.4?package-id=af0ebff91edbc1f3", + "type": "library", + "author": "Kevin Whitman (https://github.com/keverw)", + "name": "range_check", + "version": "2.0.4", + "description": "This is a simple module to validate IP address, check ip address version, check if ip is within a range.", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:range-check:range-check:2.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/range_check@2.0.4", + "externalReferences": [ + { + "url": "https://github.com/keverw/range_check", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:range-check:range_check:2.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:range_check:range-check:2.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:range_check:range_check:2.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:keverw:range-check:2.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:keverw:range_check:2.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:range:range-check:2.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:range:range_check:2.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/range_check/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/raw-body@2.5.3?package-id=41029ea60f8d5a8e", + "type": "library", + "author": "Jonathan Ong (http://jongleberry.com), Douglas Christopher Wilson , Raynos ", + "name": "raw-body", + "version": "2.5.3", + "description": "Get and validate the raw body of a readable stream.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:raw-body:raw-body:2.5.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/raw-body@2.5.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:raw-body:raw_body:2.5.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:raw_body:raw-body:2.5.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:raw_body:raw_body:2.5.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:raw:raw-body:2.5.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:raw:raw_body:2.5.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/raw-body/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/rc@1.2.8?package-id=2d76d88e8720a8a1", + "type": "library", + "author": "Dominic Tarr (dominictarr.com)", + "name": "rc", + "version": "1.2.8", + "description": "hardwired configuration loader", + "licenses": [ + { + "expression": "BSD-2-Clause OR MIT OR Apache-2.0" + } + ], + "cpe": "cpe:2.3:a:dominictarr:rc:1.2.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/rc@1.2.8", + "externalReferences": [ + { + "url": "https://github.com/dominictarr/rc.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:rc:rc:1.2.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/rc/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/readable-stream@1.0.34?package-id=8348cfc6c7b64606", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "readable-stream", + "version": "1.0.34", + "description": "Streams2, a user-land copy of the stream library from Node.js v0.10.x", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:1.0.34:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@1.0.34", + "externalReferences": [ + { + "url": "git://github.com/isaacs/readable-stream", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable-stream:readable_stream:1.0.34:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable_stream:readable-stream:1.0.34:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable_stream:readable_stream:1.0.34:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable:readable-stream:1.0.34:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable:readable_stream:1.0.34:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:readable-stream:1.0.34:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:readable_stream:1.0.34:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sanitize-html/node_modules/readable-stream/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/readable-stream@2.3.8?package-id=e45800b68fe2e352", + "type": "library", + "name": "readable-stream", + "version": "2.3.8", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:2.3.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@2.3.8", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable-stream:readable_stream:2.3.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable_stream:readable-stream:2.3.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable_stream:readable_stream:2.3.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable:readable-stream:2.3.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable:readable_stream:2.3.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nodejs:readable-stream:2.3.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nodejs:readable_stream:2.3.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/readable-stream/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/readable-stream@3.6.2?package-id=b2a0b92f8db52b84", + "type": "library", + "name": "readable-stream", + "version": "3.6.2", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:3.6.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@3.6.2", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable-stream:readable_stream:3.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable_stream:readable-stream:3.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable_stream:readable_stream:3.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable:readable-stream:3.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable:readable_stream:3.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nodejs:readable-stream:3.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nodejs:readable_stream:3.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/readable-stream/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/readable-stream@3.6.2?package-id=3b2c974f056cc985", + "type": "library", + "name": "readable-stream", + "version": "3.6.2", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:3.6.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@3.6.2", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable-stream:readable_stream:3.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable_stream:readable-stream:3.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable_stream:readable_stream:3.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable:readable-stream:3.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable:readable_stream:3.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nodejs:readable-stream:3.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nodejs:readable_stream:3.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/tar-fs/node_modules/readable-stream/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/readable-stream@3.6.2?package-id=187f639f1f03fced", + "type": "library", + "name": "readable-stream", + "version": "3.6.2", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:3.6.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@3.6.2", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable-stream:readable_stream:3.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable_stream:readable-stream:3.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable_stream:readable_stream:3.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable:readable-stream:3.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable:readable_stream:3.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nodejs:readable-stream:3.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nodejs:readable_stream:3.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/winston-transport/node_modules/readable-stream/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/readable-stream@3.6.2?package-id=885d0609cac9e686", + "type": "library", + "name": "readable-stream", + "version": "3.6.2", + "description": "Streams3, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:3.6.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@3.6.2", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable-stream:readable_stream:3.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable_stream:readable-stream:3.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable_stream:readable_stream:3.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable:readable-stream:3.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable:readable_stream:3.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nodejs:readable-stream:3.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nodejs:readable_stream:3.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/winston/node_modules/readable-stream/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/readable-stream@4.7.0?package-id=2735fe3b5acbeffc", + "type": "library", + "name": "readable-stream", + "version": "4.7.0", + "description": "Node.js Streams, a user-land copy of the stream library from Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-stream:readable-stream:4.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-stream@4.7.0", + "externalReferences": [ + { + "url": "git://github.com/nodejs/readable-stream", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/readable-stream", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable-stream:readable_stream:4.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable_stream:readable-stream:4.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable_stream:readable_stream:4.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable:readable-stream:4.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable:readable_stream:4.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nodejs:readable-stream:4.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nodejs:readable_stream:4.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/readable-web-to-node-stream/node_modules/readable-stream/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/readable-web-to-node-stream@3.0.4?package-id=09082485e53cd98e", + "type": "library", + "author": "Borewit (https://github.com/Borewit)", + "name": "readable-web-to-node-stream", + "version": "3.0.4", + "description": "Converts a Web-API readable-stream into a Node readable-stream.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:readable-web-to-node-stream:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/readable-web-to-node-stream@3.0.4", + "externalReferences": [ + { + "url": "https://github.com/Borewit/readable-web-to-node-stream.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable-web-to-node-stream:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable_web_to_node_stream:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable_web_to_node_stream:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable-web-to-node:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable-web-to-node:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable_web_to_node:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable_web_to_node:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable-web-to:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable-web-to:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable_web_to:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable_web_to:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable-web:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable-web:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable_web:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable_web:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:readable:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Borewit:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Borewit:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/readable-web-to-node-stream/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/rechoir@0.7.1?package-id=2518eea3acdbfbf5", + "type": "library", + "author": "Gulp Team (http://gulpjs.com/), Blaine Bublitz , Tyler Kellen (http://goingslowly.com/)", + "name": "rechoir", + "version": "0.7.1", + "description": "Prepare a node environment to require files with different extensions.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:rechoir:rechoir:0.7.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/rechoir@0.7.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/rechoir/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/recursedir-comparisons@0.0.0?package-id=d87f050eb47957d6", + "type": "library", + "author": "Ryan Day ", + "name": "recursedir-comparisons", + "version": "0.0.0", + "cpe": "cpe:2.3:a:recursedir-comparisons:recursedir-comparisons:0.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/recursedir-comparisons@0.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:recursedir-comparisons:recursedir_comparisons:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:recursedir_comparisons:recursedir-comparisons:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:recursedir_comparisons:recursedir_comparisons:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:recursedir:recursedir-comparisons:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:recursedir:recursedir_comparisons:0.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/walkdir/test/comparison/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/regexp.prototype.flags@1.5.4?package-id=6817e470495335ca", + "type": "library", + "author": "Jordan Harband ", + "name": "regexp.prototype.flags", + "version": "1.5.4", + "description": "ES6 spec-compliant RegExp.prototype.flags shim.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:regexp.prototype.flags:regexp.prototype.flags:1.5.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/regexp.prototype.flags@1.5.4", + "externalReferences": [ + { + "url": "git://github.com/es-shims/RegExp.prototype.flags.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:es-shims:regexp.prototype.flags:1.5.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/regexp.prototype.flags/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/remove-trailing-separator@1.1.0?package-id=2861850f21cfc870", + "type": "library", + "author": "darsain", + "name": "remove-trailing-separator", + "version": "1.1.0", + "description": "Removes separators from the end of the string.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:remove-trailing-separator:remove-trailing-separator:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/remove-trailing-separator@1.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/darsain/remove-trailing-separator.git", + "type": "distribution" + }, + { + "url": "https://github.com/darsain/remove-trailing-separator#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:remove-trailing-separator:remove_trailing_separator:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:remove_trailing_separator:remove-trailing-separator:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:remove_trailing_separator:remove_trailing_separator:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:remove-trailing:remove-trailing-separator:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:remove-trailing:remove_trailing_separator:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:remove_trailing:remove-trailing-separator:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:remove_trailing:remove_trailing_separator:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:darsain:remove-trailing-separator:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:darsain:remove_trailing_separator:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:remove:remove-trailing-separator:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:remove:remove_trailing_separator:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/remove-trailing-separator/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/replace@1.2.2?package-id=ca8eb97223e41afa", + "type": "library", + "author": "Alessandro Maclaine ", + "name": "replace", + "version": "1.2.2", + "description": "Command line search and replace utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ALMaclaine:replace:1.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/replace@1.2.2", + "externalReferences": [ + { + "url": "https://github.com/ALMaclaine/replace", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:replace:replace:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/replace/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/require-directory@2.1.1?package-id=9e446f6c303bc48a", + "type": "library", + "author": "Troy Goode (http://github.com/troygoode/), Troy Goode ", + "name": "require-directory", + "version": "2.1.1", + "description": "Recursively iterates over specified directory, require()'ing each file, and returning a nested hash structure containing those modules.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:require-directory:require-directory:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/require-directory@2.1.1", + "externalReferences": [ + { + "url": "git://github.com/troygoode/node-require-directory.git", + "type": "distribution" + }, + { + "url": "https://github.com/troygoode/node-require-directory/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:require-directory:require_directory:2.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:require_directory:require-directory:2.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:require_directory:require_directory:2.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:troygoode:require-directory:2.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:troygoode:require_directory:2.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:require:require-directory:2.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:require:require_directory:2.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/require-directory/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/require-main-filename@2.0.0?package-id=b1e08cf266302e36", + "type": "library", + "author": "Ben Coe ", + "name": "require-main-filename", + "version": "2.0.0", + "description": "shim for require.main.filename() that works in as many environments as possible", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:require-main-filename:require-main-filename:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/require-main-filename@2.0.0", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/yargs/require-main-filename.git", + "type": "distribution" + }, + { + "url": "https://github.com/yargs/require-main-filename#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:require-main-filename:require_main_filename:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:require_main_filename:require-main-filename:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:require_main_filename:require_main_filename:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:require-main:require-main-filename:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:require-main:require_main_filename:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:require_main:require-main-filename:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:require_main:require_main_filename:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:require:require-main-filename:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:require:require_main_filename:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:yargs:require-main-filename:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:yargs:require_main_filename:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/require-main-filename/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/resolve@1.22.12?package-id=94b6a37008593cc8", + "type": "library", + "author": "James Halliday (http://substack.net)", + "name": "resolve", + "version": "1.22.12", + "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:resolve:resolve:1.22.12:*:*:*:*:*:*:*", + "purl": "pkg:npm/resolve@1.22.12", + "externalReferences": [ + { + "url": "ssh://github.com/browserify/resolve.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/resolve/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/resolve-dir@1.0.1?package-id=9f75a3edbb3cad1f", + "type": "library", + "author": "Jon Schlinkert (https://github.com/jonschlinkert)", + "name": "resolve-dir", + "version": "1.0.1", + "description": "Resolve a directory that is either local, global or in the user's home directory.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jonschlinkert:resolve-dir:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/resolve-dir@1.0.1", + "externalReferences": [ + { + "url": "https://github.com/jonschlinkert/resolve-dir", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jonschlinkert:resolve_dir:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:resolve-dir:resolve-dir:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:resolve-dir:resolve_dir:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:resolve_dir:resolve-dir:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:resolve_dir:resolve_dir:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:resolve:resolve-dir:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:resolve:resolve_dir:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/resolve-dir/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/responselike@1.0.2?package-id=ed930aa2536ba676", + "type": "library", + "author": "lukechilds", + "name": "responselike", + "version": "1.0.2", + "description": "A response-like object for mocking a Node.js HTTP response stream", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:responselike:responselike:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/responselike@1.0.2", + "externalReferences": [ + { + "url": "https://github.com/lukechilds/responselike.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:lukechilds:responselike:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/responselike/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/restructure@2.0.1?package-id=72439ad06e2b3313", + "type": "library", + "author": "Devon Govett ", + "name": "restructure", + "version": "2.0.1", + "description": "Declaratively encode and decode binary data", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:devongovett:restructure:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/restructure@2.0.1", + "externalReferences": [ + { + "url": "git://github.com/devongovett/restructure.git", + "type": "distribution" + }, + { + "url": "https://github.com/devongovett/restructure", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:restructure:restructure:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/restructure/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/retry@0.12.0?package-id=94d18c1fed85159e", + "type": "library", + "author": "Tim Koschützki (http://debuggable.com/)", + "name": "retry", + "version": "0.12.0", + "description": "Abstraction for exponential and custom retry strategies for failed operations.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tim-kos:retry:0.12.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/retry@0.12.0", + "externalReferences": [ + { + "url": "git://github.com/tim-kos/node-retry.git", + "type": "distribution" + }, + { + "url": "https://github.com/tim-kos/node-retry", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:retry:retry:0.12.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/retry/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/retry-as-promised@7.1.1?package-id=de1666362d2f9e71", + "type": "library", + "author": "Mick Hansen ", + "name": "retry-as-promised", + "version": "7.1.1", + "description": "Retry a failed promise", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:retry-as-promised:retry-as-promised:7.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/retry-as-promised@7.1.1", + "externalReferences": [ + { + "url": "https://github.com/mickhansen/retry-as-promised.git", + "type": "distribution" + }, + { + "url": "https://github.com/mickhansen/retry-as-promised", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:retry-as-promised:retry_as_promised:7.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:retry_as_promised:retry-as-promised:7.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:retry_as_promised:retry_as_promised:7.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mickhansen:retry-as-promised:7.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mickhansen:retry_as_promised:7.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:retry-as:retry-as-promised:7.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:retry-as:retry_as_promised:7.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:retry_as:retry-as-promised:7.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:retry_as:retry_as_promised:7.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:retry:retry-as-promised:7.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:retry:retry_as_promised:7.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/retry-as-promised/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/rimraf@2.7.1?package-id=fa27392938c188d1", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "rimraf", + "version": "2.7.1", + "description": "A deep deletion module for node (like `rm -rf`)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:rimraf:2.7.1:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/rimraf@2.7.1", + "externalReferences": [ + { + "url": "git://github.com/isaacs/rimraf.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/rimraf/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/rimraf@3.0.2?package-id=e119954f59e90c15", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "rimraf", + "version": "3.0.2", + "description": "A deep deletion module for node (like `rm -rf`)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:rimraf:3.0.2:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/rimraf@3.0.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/rimraf.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@npmcli/move-file/node_modules/rimraf/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/rimraf@3.0.2?package-id=6698d750e2cc2430", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "rimraf", + "version": "3.0.2", + "description": "A deep deletion module for node (like `rm -rf`)", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:rimraf:3.0.2:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/rimraf@3.0.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/rimraf.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/rimraf/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=3e1c131315fc7e3a", + "type": "library", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.1.2", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe-buffer:safe_buffer:5.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe_buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe_buffer:safe_buffer:5.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:feross:safe-buffer:5.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:feross:safe_buffer:5.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe:safe-buffer:5.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe:safe_buffer:5.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/basic-auth/node_modules/safe-buffer/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=73c00d57a0c43943", + "type": "library", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.1.2", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe-buffer:safe_buffer:5.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe_buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe_buffer:safe_buffer:5.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:feross:safe-buffer:5.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:feross:safe_buffer:5.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe:safe-buffer:5.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe:safe_buffer:5.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/readable-stream/node_modules/safe-buffer/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=82e1e95a5f60492f", + "type": "library", + "author": "Feross Aboukhadijeh (http://feross.org)", + "name": "safe-buffer", + "version": "5.1.2", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.1.2", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe-buffer:safe_buffer:5.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe_buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe_buffer:safe_buffer:5.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:feross:safe-buffer:5.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:feross:safe_buffer:5.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe:safe-buffer:5.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe:safe_buffer:5.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/string_decoder/node_modules/safe-buffer/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/safe-buffer@5.2.1?package-id=f430730abde414bf", + "type": "library", + "author": "Feross Aboukhadijeh (https://feross.org)", + "name": "safe-buffer", + "version": "5.2.1", + "description": "Safer Node.js Buffer API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-buffer@5.2.1", + "externalReferences": [ + { + "url": "git://github.com/feross/safe-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/safe-buffer", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe-buffer:safe_buffer:5.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe_buffer:safe-buffer:5.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe_buffer:safe_buffer:5.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:feross:safe-buffer:5.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:feross:safe_buffer:5.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe:safe-buffer:5.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe:safe_buffer:5.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/safe-buffer/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/safe-regex-test@1.1.0?package-id=5b11c5020ef5c373", + "type": "library", + "author": "Jordan Harband ", + "name": "safe-regex-test", + "version": "1.1.0", + "description": "Give a regex, get a robust predicate function that tests it against a string.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-regex-test:safe-regex-test:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-regex-test@1.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/ljharb/safe-regex-test.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/safe-regex-test#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe-regex-test:safe_regex_test:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe_regex_test:safe-regex-test:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe_regex_test:safe_regex_test:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe-regex:safe-regex-test:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe-regex:safe_regex_test:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe_regex:safe-regex-test:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe_regex:safe_regex_test:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:safe-regex-test:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:safe_regex_test:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe:safe-regex-test:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe:safe_regex_test:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/safe-regex-test/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/safe-stable-stringify@2.5.0?package-id=e703782eb7d38cbf", + "type": "library", + "author": "Ruben Bridgewater", + "name": "safe-stable-stringify", + "version": "2.5.0", + "description": "Deterministic and safely JSON.stringify to quickly serialize JavaScript objects", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safe-stable-stringify:safe-stable-stringify:2.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/safe-stable-stringify@2.5.0", + "externalReferences": [ + { + "url": "git+https://github.com/BridgeAR/safe-stable-stringify.git", + "type": "distribution" + }, + { + "url": "https://github.com/BridgeAR/safe-stable-stringify#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe-stable-stringify:safe_stable_stringify:2.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe_stable_stringify:safe-stable-stringify:2.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe_stable_stringify:safe_stable_stringify:2.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe-stable:safe-stable-stringify:2.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe-stable:safe_stable_stringify:2.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe_stable:safe-stable-stringify:2.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe_stable:safe_stable_stringify:2.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:BridgeAR:safe-stable-stringify:2.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:BridgeAR:safe_stable_stringify:2.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe:safe-stable-stringify:2.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safe:safe_stable_stringify:2.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/safe-stable-stringify/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/safer-buffer@2.1.2?package-id=f5a29320fdbea1eb", + "type": "library", + "author": "Nikita Skovoroda (https://github.com/ChALkeR)", + "name": "safer-buffer", + "version": "2.1.2", + "description": "Modern Buffer API polyfill without footguns", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:safer-buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/safer-buffer@2.1.2", + "externalReferences": [ + { + "url": "git+https://github.com/ChALkeR/safer-buffer.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safer-buffer:safer_buffer:2.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safer_buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safer_buffer:safer_buffer:2.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safer:safer-buffer:2.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:safer:safer_buffer:2.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/safer-buffer/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/sanitize-filename@1.6.4?package-id=8f7189e9ea8b019c", + "type": "library", + "author": "Parsha Pourkhomami", + "name": "sanitize-filename", + "version": "1.6.4", + "description": "Sanitize a string for use as a filename", + "licenses": [ + { + "expression": "WTFPL OR ISC" + } + ], + "cpe": "cpe:2.3:a:sanitize-filename:sanitize-filename:1.6.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/sanitize-filename@1.6.4", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sanitize-filename:sanitize_filename:1.6.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sanitize_filename:sanitize-filename:1.6.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sanitize_filename:sanitize_filename:1.6.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sanitize:sanitize-filename:1.6.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sanitize:sanitize_filename:1.6.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sanitize-filename/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/sanitize-html@1.4.2?package-id=5de04e7baabe2ecd", + "type": "library", + "author": "P'unk Avenue LLC", + "name": "sanitize-html", + "version": "1.4.2", + "description": "Clean up user-submitted HTML, preserving whitelisted elements and whitelisted attributes on a per-element basis", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:apostrophecms:sanitize-html:1.4.2:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/sanitize-html@1.4.2", + "externalReferences": [ + { + "url": "https://github.com/punkave/sanitize-html.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:punkave:sanitize-html:1.4.2:*:*:*:*:node.js:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sanitize-html/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/sax@1.6.0?package-id=7cfb92a0ae05c66c", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "sax", + "version": "1.6.0", + "description": "An evented streaming XML parser in JavaScript", + "licenses": [ + { + "license": { + "id": "BlueOak-1.0.0" + } + } + ], + "cpe": "cpe:2.3:a:sax:sax:1.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/sax@1.6.0", + "externalReferences": [ + { + "url": "git+ssh://git@github.com/isaacs/sax-js.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sax/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/seek-bzip@1.0.6?package-id=f8fdf612dd1ad055", + "type": "library", + "author": "C. Scott Ananian (http://cscott.net), Eli Skeggs, Kevin Kwok, Rob Landley (http://landley.net)", + "name": "seek-bzip", + "version": "1.0.6", + "description": "a pure-JavaScript Node.JS module for random-access decoding bzip2 data", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:seek-bzip:seek-bzip:1.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/seek-bzip@1.0.6", + "externalReferences": [ + { + "url": "https://github.com/cscott/seek-bzip.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:seek-bzip:seek_bzip:1.0.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:seek_bzip:seek-bzip:1.0.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:seek_bzip:seek_bzip:1.0.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cscott:seek-bzip:1.0.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:cscott:seek_bzip:1.0.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:seek:seek-bzip:1.0.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:seek:seek_bzip:1.0.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/seek-bzip/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/semver@5.7.2?package-id=f25d9bd3bec76c56", + "type": "library", + "author": "GitHub Inc.", + "name": "semver", + "version": "5.7.2", + "description": "The semantic version parser used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npmjs:semver:5.7.2:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/semver@5.7.2", + "externalReferences": [ + { + "url": "https://github.com/npm/node-semver.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/make-dir/node_modules/semver/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/semver@5.7.2?package-id=4d834fe9188f916e", + "type": "library", + "author": "GitHub Inc.", + "name": "semver", + "version": "5.7.2", + "description": "The semantic version parser used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npmjs:semver:5.7.2:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/semver@5.7.2", + "externalReferences": [ + { + "url": "https://github.com/npm/node-semver.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/node-abi/node_modules/semver/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/semver@5.7.2?package-id=27467d214748b540", + "type": "library", + "author": "GitHub Inc.", + "name": "semver", + "version": "5.7.2", + "description": "The semantic version parser used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npmjs:semver:5.7.2:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/semver@5.7.2", + "externalReferences": [ + { + "url": "https://github.com/npm/node-semver.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/node-pre-gyp/node_modules/semver/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/semver@7.8.0?package-id=30727ed13c96ffb8", + "type": "library", + "author": "GitHub Inc.", + "name": "semver", + "version": "7.8.0", + "description": "The semantic version parser used by npm.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:npmjs:semver:7.8.0:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/semver@7.8.0", + "externalReferences": [ + { + "url": "git+https://github.com/npm/node-semver.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/semver/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/send@0.19.2?package-id=aa9850506e52a313", + "type": "library", + "author": "TJ Holowaychuk , Douglas Christopher Wilson , James Wyatt Cready , Jesús Leganés Combarro ", + "name": "send", + "version": "0.19.2", + "description": "Better streaming static file server with Range and conditional-GET support", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:send_project:send:0.19.2:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/send@0.19.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/send/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/sequelize@6.37.8?package-id=bb72ef8e57680a9d", + "type": "library", + "name": "sequelize", + "version": "6.37.8", + "description": "Sequelize is a promise-based Node.js ORM tool for Postgres, MySQL, MariaDB, SQLite, Microsoft SQL Server, Amazon Redshift and Snowflake’s Data Cloud. It features solid transaction support, relations, eager and lazy loading, read replication and more.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sequelizejs:sequelize:6.37.8:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/sequelize@6.37.8", + "externalReferences": [ + { + "url": "https://github.com/sequelize/sequelize.git", + "type": "distribution" + }, + { + "url": "https://sequelize.org/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sequelize/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/sequelize-pool@7.1.0?package-id=02439a31995a1856", + "type": "library", + "author": "Sushant ", + "name": "sequelize-pool", + "version": "7.1.0", + "description": "Resource pooling for Node.JS", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sequelize-pool:sequelize-pool:7.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/sequelize-pool@7.1.0", + "externalReferences": [ + { + "url": "http://github.com/sushantdhiman/sequelize-pool.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sequelize-pool:sequelize_pool:7.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sequelize_pool:sequelize-pool:7.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sequelize_pool:sequelize_pool:7.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sushantdhiman:sequelize-pool:7.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sushantdhiman:sequelize_pool:7.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sequelize:sequelize-pool:7.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sequelize:sequelize_pool:7.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sequelize-pool/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/serve-index@1.9.2?package-id=f4af9e8d984cc854", + "type": "library", + "author": "Douglas Christopher Wilson ", + "name": "serve-index", + "version": "1.9.2", + "description": "Serve directory listings", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:serve-index:serve-index:1.9.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/serve-index@1.9.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:serve-index:serve_index:1.9.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:serve_index:serve-index:1.9.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:serve_index:serve_index:1.9.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:serve:serve-index:1.9.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:serve:serve_index:1.9.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/serve-index/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/serve-static@1.16.3?package-id=8f932da3bf38c77d", + "type": "library", + "author": "Douglas Christopher Wilson ", + "name": "serve-static", + "version": "1.16.3", + "description": "Serve static files", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:serve-static:serve-static:1.16.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/serve-static@1.16.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:serve-static:serve_static:1.16.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:serve_static:serve-static:1.16.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:serve_static:serve_static:1.16.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:serve:serve-static:1.16.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:serve:serve_static:1.16.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/serve-static/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/set-blocking@2.0.0?package-id=ed8a734f12c4bdef", + "type": "library", + "author": "Ben Coe ", + "name": "set-blocking", + "version": "2.0.0", + "description": "set blocking stdio and stderr ensuring that terminal output does not truncate", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:set-blocking:set-blocking:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/set-blocking@2.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/yargs/set-blocking.git", + "type": "distribution" + }, + { + "url": "https://github.com/yargs/set-blocking#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:set-blocking:set_blocking:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:set_blocking:set-blocking:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:set_blocking:set_blocking:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:yargs:set-blocking:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:yargs:set_blocking:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:set:set-blocking:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:set:set_blocking:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/set-blocking/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/set-function-length@1.2.2?package-id=3b436f83ca3e3766", + "type": "library", + "author": "Jordan Harband ", + "name": "set-function-length", + "version": "1.2.2", + "description": "Set a function's length property", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:set-function-length:set-function-length:1.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/set-function-length@1.2.2", + "externalReferences": [ + { + "url": "git+https://github.com/ljharb/set-function-length.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/set-function-length#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:set-function-length:set_function_length:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:set_function_length:set-function-length:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:set_function_length:set_function_length:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:set-function:set-function-length:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:set-function:set_function_length:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:set_function:set-function-length:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:set_function:set_function_length:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:set-function-length:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:set_function_length:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:set:set-function-length:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:set:set_function_length:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/set-function-length/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/set-function-name@2.0.2?package-id=f58313a577d972b0", + "type": "library", + "author": "Jordan Harband ", + "name": "set-function-name", + "version": "2.0.2", + "description": "Set a function's name property", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:set-function-name:set-function-name:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/set-function-name@2.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/ljharb/set-function-name.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/set-function-name#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:set-function-name:set_function_name:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:set_function_name:set-function-name:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:set_function_name:set_function_name:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:set-function:set-function-name:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:set-function:set_function_name:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:set_function:set-function-name:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:set_function:set_function_name:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:set-function-name:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:set_function_name:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:set:set-function-name:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:set:set_function_name:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/set-function-name/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/setimmediate@1.0.5?package-id=ec3a9ad5b1e8d26c", + "type": "library", + "author": "YuzuJS, Domenic Denicola (https://domenic.me), Donavon West (http://donavon.com), Yaffle", + "name": "setimmediate", + "version": "1.0.5", + "description": "A shim for the setImmediate efficient script yielding API", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:setimmediate:setimmediate:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/setimmediate@1.0.5", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/setimmediate/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/setprototypeof@1.2.0?package-id=8282dcab8a58f243", + "type": "library", + "author": "Wes Todd", + "name": "setprototypeof", + "version": "1.2.0", + "description": "A small polyfill for Object.setprototypeof", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:setprototypeof:setprototypeof:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/setprototypeof@1.2.0", + "externalReferences": [ + { + "url": "https://github.com/wesleytodd/setprototypeof.git", + "type": "distribution" + }, + { + "url": "https://github.com/wesleytodd/setprototypeof", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wesleytodd:setprototypeof:1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/setprototypeof/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/shebang-command@2.0.0?package-id=1625df5bb6d67d3b", + "type": "library", + "author": "Kevin Mårtensson (github.com/kevva)", + "name": "shebang-command", + "version": "2.0.0", + "description": "Get the command from a shebang", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:shebang-command:shebang-command:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/shebang-command@2.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:shebang-command:shebang_command:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:shebang_command:shebang-command:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:shebang_command:shebang_command:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:shebang:shebang-command:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:shebang:shebang_command:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/shebang-command/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/shebang-regex@3.0.0?package-id=4afda12e39d13082", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "shebang-regex", + "version": "3.0.0", + "description": "Regular expression for matching a shebang line", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:shebang-regex:shebang-regex:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/shebang-regex@3.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:shebang-regex:shebang_regex:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:shebang_regex:shebang-regex:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:shebang_regex:shebang_regex:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:shebang:shebang-regex:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:shebang:shebang_regex:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/shebang-regex/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/side-channel@1.1.0?package-id=b33fdebcaaec79ca", + "type": "library", + "author": "Jordan Harband ", + "name": "side-channel", + "version": "1.1.0", + "description": "Store information about any JS value in a side channel. Uses WeakMap if available.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:side-channel:side-channel:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/side-channel@1.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/ljharb/side-channel.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/side-channel#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:side-channel:side_channel:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:side_channel:side-channel:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:side_channel:side_channel:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:side-channel:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:side_channel:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:side:side-channel:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:side:side_channel:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/side-channel/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/side-channel-list@1.0.1?package-id=3a95570939e06e56", + "type": "library", + "author": "Jordan Harband ", + "name": "side-channel-list", + "version": "1.0.1", + "description": "Store information about any JS value in a side channel, using a linked list", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:side-channel-list:side-channel-list:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/side-channel-list@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/ljharb/side-channel-list.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/side-channel-list#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:side-channel-list:side_channel_list:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:side_channel_list:side-channel-list:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:side_channel_list:side_channel_list:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:side-channel:side-channel-list:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:side-channel:side_channel_list:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:side_channel:side-channel-list:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:side_channel:side_channel_list:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:side-channel-list:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:side_channel_list:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:side:side-channel-list:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:side:side_channel_list:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/side-channel-list/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/side-channel-map@1.0.1?package-id=8a935a259e64ccfc", + "type": "library", + "author": "Jordan Harband ", + "name": "side-channel-map", + "version": "1.0.1", + "description": "Store information about any JS value in a side channel, using a Map", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:side-channel-map:side-channel-map:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/side-channel-map@1.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/ljharb/side-channel-map.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/side-channel-map#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:side-channel-map:side_channel_map:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:side_channel_map:side-channel-map:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:side_channel_map:side_channel_map:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:side-channel:side-channel-map:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:side-channel:side_channel_map:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:side_channel:side-channel-map:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:side_channel:side_channel_map:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:side-channel-map:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:side_channel_map:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:side:side-channel-map:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:side:side_channel_map:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/side-channel-map/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/side-channel-weakmap@1.0.2?package-id=13aa929d93fe8b96", + "type": "library", + "author": "Jordan Harband ", + "name": "side-channel-weakmap", + "version": "1.0.2", + "description": "Store information about any JS value in a side channel. Uses WeakMap if available.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:side-channel-weakmap:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/side-channel-weakmap@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/ljharb/side-channel-weakmap.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/side-channel-weakmap#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:side-channel-weakmap:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:side_channel_weakmap:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:side_channel_weakmap:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:side-channel:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:side-channel:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:side_channel:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:side_channel:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:side:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:side:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/side-channel-weakmap/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/signal-exit@3.0.7?package-id=4235b1d4cc91c7c5", + "type": "library", + "author": "Ben Coe ", + "name": "signal-exit", + "version": "3.0.7", + "description": "when you want to fire an event no matter how a process exits.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:signal-exit:signal-exit:3.0.7:*:*:*:*:*:*:*", + "purl": "pkg:npm/signal-exit@3.0.7", + "externalReferences": [ + { + "url": "https://github.com/tapjs/signal-exit.git", + "type": "distribution" + }, + { + "url": "https://github.com/tapjs/signal-exit", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:signal-exit:signal_exit:3.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:signal_exit:signal-exit:3.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:signal_exit:signal_exit:3.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:signal:signal-exit:3.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:signal:signal_exit:3.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tapjs:signal-exit:3.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tapjs:signal_exit:3.0.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/signal-exit/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/signal-exit@4.1.0?package-id=b6edaee708ce8837", + "type": "library", + "author": "Ben Coe ", + "name": "signal-exit", + "version": "4.1.0", + "description": "when you want to fire an event no matter how a process exits.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:signal-exit:signal-exit:4.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/signal-exit@4.1.0", + "externalReferences": [ + { + "url": "https://github.com/tapjs/signal-exit.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:signal-exit:signal_exit:4.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:signal_exit:signal-exit:4.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:signal_exit:signal_exit:4.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:signal:signal-exit:4.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:signal:signal_exit:4.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tapjs:signal-exit:4.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tapjs:signal_exit:4.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/foreground-child/node_modules/signal-exit/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/simple-concat@1.0.1?package-id=624063d4723a4b13", + "type": "library", + "author": "Feross Aboukhadijeh (https://feross.org)", + "name": "simple-concat", + "version": "1.0.1", + "description": "Super-minimalist version of `concat-stream`. Less than 15 lines!", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:simple-concat:simple-concat:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/simple-concat@1.0.1", + "externalReferences": [ + { + "url": "git://github.com/feross/simple-concat.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/simple-concat", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:simple-concat:simple_concat:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:simple_concat:simple-concat:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:simple_concat:simple_concat:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:feross:simple-concat:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:feross:simple_concat:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:simple:simple-concat:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:simple:simple_concat:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/simple-concat/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/simple-get@3.1.1?package-id=9f219d07ad41b5a4", + "type": "library", + "author": "Feross Aboukhadijeh (http://feross.org/)", + "name": "simple-get", + "version": "3.1.1", + "description": "Simplest way to make http get requests. Supports HTTPS, redirects, gzip/deflate, streams in < 100 lines.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:simple-get_project:simple-get:3.1.1:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/simple-get@3.1.1", + "externalReferences": [ + { + "url": "git://github.com/feross/simple-get.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/simple-get", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/simple-get/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/simple-get@4.0.1?package-id=cd263772050b70e4", + "type": "library", + "author": "Feross Aboukhadijeh (https://feross.org)", + "name": "simple-get", + "version": "4.0.1", + "description": "Simplest way to make http get requests. Supports HTTPS, redirects, gzip/deflate, streams in < 100 lines.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:simple-get_project:simple-get:4.0.1:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/simple-get@4.0.1", + "externalReferences": [ + { + "url": "git://github.com/feross/simple-get.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/simple-get", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/libxmljs2/node_modules/simple-get/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/simple-get@4.0.1?package-id=cb8ca3d0298b8a6e", + "type": "library", + "author": "Feross Aboukhadijeh (https://feross.org)", + "name": "simple-get", + "version": "4.0.1", + "description": "Simplest way to make http get requests. Supports HTTPS, redirects, gzip/deflate, streams in < 100 lines.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:simple-get_project:simple-get:4.0.1:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/simple-get@4.0.1", + "externalReferences": [ + { + "url": "git://github.com/feross/simple-get.git", + "type": "distribution" + }, + { + "url": "https://github.com/feross/simple-get", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/simple-get/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/smart-buffer@4.2.0?package-id=cc002822c0639ab4", + "type": "library", + "author": "Josh Glazebrook, syvita", + "name": "smart-buffer", + "version": "4.2.0", + "description": "smart-buffer is a Buffer wrapper that adds automatic read & write offset tracking, string operations, data insertions, and more.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:JoshGlazebrook:smart-buffer:4.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/smart-buffer@4.2.0", + "externalReferences": [ + { + "url": "https://github.com/JoshGlazebrook/smart-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/JoshGlazebrook/smart-buffer/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:JoshGlazebrook:smart_buffer:4.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:smart-buffer:smart-buffer:4.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:smart-buffer:smart_buffer:4.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:smart_buffer:smart-buffer:4.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:smart_buffer:smart_buffer:4.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:smart:smart-buffer:4.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:smart:smart_buffer:4.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/smart-buffer/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/socket.io@3.1.2?package-id=a59f241f8d484687", + "type": "library", + "author": "Guillermo Rauch , Arnout Kazemier , Vladimir Dronnikov , Einar Otto Stangvik ", + "name": "socket.io", + "version": "3.1.2", + "description": "node.js realtime framework server", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:socket:socket.io:3.1.2:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/socket.io@3.1.2", + "externalReferences": [ + { + "url": "git://github.com/socketio/socket.io", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/socket.io/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/socket.io-adapter@2.1.0?package-id=22a992bc812c1a27", + "type": "library", + "name": "socket.io-adapter", + "version": "2.1.0", + "description": "default socket.io in-memory adapter", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:socket.io-adapter:socket.io-adapter:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/socket.io-adapter@2.1.0", + "externalReferences": [ + { + "url": "git://github.com/socketio/socket.io-adapter.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socket.io-adapter:socket.io_adapter:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socket.io_adapter:socket.io-adapter:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socket.io_adapter:socket.io_adapter:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socket.io:socket.io-adapter:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socket.io:socket.io_adapter:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socketio:socket.io-adapter:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socketio:socket.io_adapter:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/socket.io-adapter/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/socket.io-parser@4.0.5?package-id=dd154d7bfbaea09c", + "type": "library", + "name": "socket.io-parser", + "version": "4.0.5", + "description": "socket.io protocol parser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:socket:socket.io-parser:4.0.5:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/socket.io-parser@4.0.5", + "externalReferences": [ + { + "url": "https://github.com/socketio/socket.io-parser.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/socket.io-parser/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/socks@2.8.9?package-id=95be61d6a7e8c888", + "type": "library", + "author": "Josh Glazebrook, castorw", + "name": "socks", + "version": "2.8.9", + "description": "Fully featured SOCKS proxy client supporting SOCKSv4, SOCKSv4a, and SOCKSv5. Includes Bind and Associate functionality.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:JoshGlazebrook:socks:2.8.9:*:*:*:*:*:*:*", + "purl": "pkg:npm/socks@2.8.9", + "externalReferences": [ + { + "url": "git+https://github.com/JoshGlazebrook/socks.git", + "type": "distribution" + }, + { + "url": "https://github.com/JoshGlazebrook/socks/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socks:socks:2.8.9:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/socks/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/socks-proxy-agent@6.2.1?package-id=98b91bbcbff567ab", + "type": "library", + "author": "Nathan Rajlich (http://n8.io/), Kiko Beats , Josh Glazebrook , talmobi , Indospace.io , Kilian von Pflugk , Kyle , Matheus Fernandes , Ricky Miller , Shantanu Sharma , Tim Perry , Vadim Baryshev , jigu , Alba Mendez , Дмитрий Гуденков , Andrei Bitca <63638922+andrei-bitca-dc@users.noreply.github.com>, Andrew Casey , Brandon Ros , Dang Duy Thanh , Dimitar Nestorov <8790386+dimitarnestorov@users.noreply.github.com>", + "name": "socks-proxy-agent", + "version": "6.2.1", + "description": "A SOCKS proxy `http.Agent` implementation for HTTP and HTTPS", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:socks-proxy-agent:socks-proxy-agent:6.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/socks-proxy-agent@6.2.1", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/node-socks-proxy-agent.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/node-socks-proxy-agent#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socks-proxy-agent:socks_proxy_agent:6.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socks_proxy_agent:socks-proxy-agent:6.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socks_proxy_agent:socks_proxy_agent:6.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:TooTallNate:socks-proxy-agent:6.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:TooTallNate:socks_proxy_agent:6.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socks-proxy:socks-proxy-agent:6.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socks-proxy:socks_proxy_agent:6.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socks_proxy:socks-proxy-agent:6.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socks_proxy:socks_proxy_agent:6.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socks:socks-proxy-agent:6.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socks:socks_proxy_agent:6.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/socks-proxy-agent/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/socks-proxy-agent@8.0.5?package-id=9ee05fc4d21b00fc", + "type": "library", + "author": "Nathan Rajlich (http://n8.io/), Kiko Beats , Josh Glazebrook , talmobi , Indospace.io , Kilian von Pflugk , Kyle , Matheus Fernandes , Ricky Miller , Shantanu Sharma , Tim Perry , Vadim Baryshev , jigu , Alba Mendez , Дмитрий Гуденков , Andrei Bitca <63638922+andrei-bitca-dc@users.noreply.github.com>, Andrew Casey , Brandon Ros , Dang Duy Thanh , Dimitar Nestorov <8790386+dimitarnestorov@users.noreply.github.com>", + "name": "socks-proxy-agent", + "version": "8.0.5", + "description": "A SOCKS proxy `http.Agent` implementation for HTTP and HTTPS", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:socks-proxy-agent:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/socks-proxy-agent@8.0.5", + "externalReferences": [ + { + "url": "https://github.com/TooTallNate/proxy-agents.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socks-proxy-agent:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socks_proxy_agent:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socks_proxy_agent:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:TooTallNate:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:TooTallNate:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socks-proxy:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socks-proxy:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socks_proxy:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socks_proxy:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socks:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:socks:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/socks-proxy-agent/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/sort-keys@1.1.2?package-id=7e91429fd26a7768", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "sort-keys", + "version": "1.1.2", + "description": "Sort the keys of an object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sort-keys:sort-keys:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/sort-keys@1.1.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sort-keys:sort_keys:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sort_keys:sort-keys:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sort_keys:sort_keys:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sort:sort-keys:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sort:sort_keys:1.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sort-keys-length/node_modules/sort-keys/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/sort-keys@2.0.0?package-id=b56ffa404313992b", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "sort-keys", + "version": "2.0.0", + "description": "Sort the keys of an object", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sort-keys:sort-keys:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/sort-keys@2.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sort-keys:sort_keys:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sort_keys:sort-keys:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sort_keys:sort_keys:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sort:sort-keys:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sort:sort_keys:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sort-keys/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/sort-keys-length@1.0.1?package-id=aa05cbb52d62e94f", + "type": "library", + "author": "Kevin Mårtensson (https://github.com/kevva)", + "name": "sort-keys-length", + "version": "1.0.1", + "description": "Sort objecy keys by length", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:sort-keys-length:sort-keys-length:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/sort-keys-length@1.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sort-keys-length:sort_keys_length:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sort_keys_length:sort-keys-length:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sort_keys_length:sort_keys_length:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sort-keys:sort-keys-length:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sort-keys:sort_keys_length:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sort_keys:sort-keys-length:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sort_keys:sort_keys_length:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sort:sort-keys-length:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sort:sort_keys_length:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sort-keys-length/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/source-map@0.6.1?package-id=a22583dd96c04327", + "type": "library", + "author": "Nick Fitzgerald , Tobias Koppers , Duncan Beevers , Stephen Crane , Ryan Seddon , Miles Elam , Mihai Bazon , Michael Ficarra , Todd Wolfson , Alexander Solovyov , Felix Gnass , Conrad Irwin , usrbincc , David Glasser , Chase Douglas , Evan Wallace , Heather Arthur , Hugh Kennedy , David Glasser , Simon Lydell , Jmeas Smith , Michael Z Goddard , azu , John Gozde , Adam Kirkton , Chris Montgomery , J. Ryan Stinnett , Jack Herrington , Chris Truter , Daniel Espeset , Jamie Wong , Eddy Bruël , Hawken Rives , Gilad Peleg , djchie , Gary Ye , Nicolas Lalevée ", + "name": "source-map", + "version": "0.6.1", + "description": "Generates and consumes source maps", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:source-map:source-map:0.6.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/source-map@0.6.1", + "externalReferences": [ + { + "url": "http://github.com/mozilla/source-map.git", + "type": "distribution" + }, + { + "url": "https://github.com/mozilla/source-map", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:source-map:source_map:0.6.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:source_map:source-map:0.6.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:source_map:source_map:0.6.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mozilla:source-map:0.6.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mozilla:source_map:0.6.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:source:source-map:0.6.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:source:source_map:0.6.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/source-map/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/sprintf-js@1.0.3?package-id=acaf709db1d54fbd", + "type": "library", + "author": "Alexandru Marasteanu (http://alexei.ro/)", + "name": "sprintf-js", + "version": "1.0.3", + "description": "JavaScript sprintf implementation", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:sprintf-js:sprintf-js:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/sprintf-js@1.0.3", + "externalReferences": [ + { + "url": "https://github.com/alexei/sprintf.js.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sprintf-js:sprintf_js:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sprintf_js:sprintf-js:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sprintf_js:sprintf_js:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sprintf:sprintf-js:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sprintf:sprintf_js:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:alexei:sprintf-js:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:alexei:sprintf_js:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/argparse/node_modules/sprintf-js/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/sprintf-js@1.1.3?package-id=5b70795e4e884b57", + "type": "library", + "author": "Alexandru Mărășteanu ", + "name": "sprintf-js", + "version": "1.1.3", + "description": "JavaScript sprintf implementation", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:sprintf-js:sprintf-js:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/sprintf-js@1.1.3", + "externalReferences": [ + { + "url": "https://github.com/alexei/sprintf.js.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sprintf-js:sprintf_js:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sprintf_js:sprintf-js:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sprintf_js:sprintf_js:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sprintf:sprintf-js:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:sprintf:sprintf_js:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:alexei:sprintf-js:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:alexei:sprintf_js:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sprintf-js/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/sqlite3@5.1.7?package-id=2f561aa54725d063", + "type": "library", + "author": "Mapbox (https://mapbox.com/), Daniel Lockyer , Konstantin Käfer , Dane Springmeyer , Will White , Orlando Vazquez , Artem Kustikov , Eric Fredricksen , John Wright , Ryan Dahl , Tom MacWright , Carter Thaxton , Audrius Kažukauskas , Johannes Schauer , Nathan Rajlich , AJ ONeal , Mithgol, Ben Noordhuis ", + "name": "sqlite3", + "version": "5.1.7", + "description": "Asynchronous, non-blocking SQLite3 bindings", + "licenses": [ + { + "license": { + "id": "BSD-3-Clause" + } + } + ], + "cpe": "cpe:2.3:a:ghost:sqlite3:5.1.7:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/sqlite3@5.1.7", + "externalReferences": [ + { + "url": "https://github.com/TryGhost/node-sqlite3.git", + "type": "distribution" + }, + { + "url": "https://github.com/TryGhost/node-sqlite3", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ssri@12.0.0?package-id=64aa6df27671ee44", + "type": "library", + "author": "GitHub Inc.", + "name": "ssri", + "version": "12.0.0", + "description": "Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ssri_project:ssri:12.0.0:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/ssri@12.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/npm/ssri.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/ssri/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ssri@8.0.1?package-id=fbd6a143588415b6", + "type": "library", + "author": "Kat Marchán ", + "name": "ssri", + "version": "8.0.1", + "description": "Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:ssri_project:ssri:8.0.1:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/ssri@8.0.1", + "externalReferences": [ + { + "url": "https://github.com/npm/ssri", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/ssri/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/stack-trace@0.0.10?package-id=fce264c6e73c9eee", + "type": "library", + "author": "Felix Geisendörfer (http://debuggable.com/)", + "name": "stack-trace", + "version": "0.0.10", + "description": "Get v8 stack traces as an array of CallSite objects.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stack-trace:stack-trace:0.0.10:*:*:*:*:*:*:*", + "purl": "pkg:npm/stack-trace@0.0.10", + "externalReferences": [ + { + "url": "git://github.com/felixge/node-stack-trace.git", + "type": "distribution" + }, + { + "url": "https://github.com/felixge/node-stack-trace", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:stack-trace:stack_trace:0.0.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:stack_trace:stack-trace:0.0.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:stack_trace:stack_trace:0.0.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:felixge:stack-trace:0.0.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:felixge:stack_trace:0.0.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:stack:stack-trace:0.0.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:stack:stack_trace:0.0.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/stack-trace/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/statuses@1.5.0?package-id=b4d4d67376e5fdaa", + "type": "library", + "author": "Douglas Christopher Wilson , Jonathan Ong (http://jongleberry.com)", + "name": "statuses", + "version": "1.5.0", + "description": "HTTP status utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:statuses:statuses:1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/statuses@1.5.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/serve-index/node_modules/statuses/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/statuses@2.0.2?package-id=8d4d2ca32d3f538f", + "type": "library", + "author": "Douglas Christopher Wilson , Jonathan Ong (http://jongleberry.com)", + "name": "statuses", + "version": "2.0.2", + "description": "HTTP status utility", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:statuses:statuses:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/statuses@2.0.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/statuses/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/stop-iteration-iterator@1.1.0?package-id=061c21bad20f372c", + "type": "library", + "author": "Jordan Harband ", + "name": "stop-iteration-iterator", + "version": "1.1.0", + "description": "Firefox 17-26 iterators throw a StopIteration object to indicate \"done\". This normalizes it.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:stop-iteration-iterator:stop-iteration-iterator:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/stop-iteration-iterator@1.1.0", + "externalReferences": [ + { + "url": "git+https://github.com/ljharb/stop-iteration-iterator.git", + "type": "distribution" + }, + { + "url": "https://github.com/ljharb/stop-iteration-iterator#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:stop-iteration-iterator:stop_iteration_iterator:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:stop_iteration_iterator:stop-iteration-iterator:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:stop_iteration_iterator:stop_iteration_iterator:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:stop-iteration:stop-iteration-iterator:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:stop-iteration:stop_iteration_iterator:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:stop_iteration:stop-iteration-iterator:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:stop_iteration:stop_iteration_iterator:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:stop-iteration-iterator:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ljharb:stop_iteration_iterator:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:stop:stop-iteration-iterator:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:stop:stop_iteration_iterator:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/stop-iteration-iterator/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/stream-buffers@2.2.0?package-id=f849555d7c5b59d6", + "type": "library", + "author": "Sam Day ", + "name": "stream-buffers", + "version": "2.2.0", + "description": "Buffer-backed Streams for reading and writing.", + "licenses": [ + { + "license": { + "id": "Unlicense" + } + } + ], + "cpe": "cpe:2.3:a:stream-buffers:stream-buffers:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/stream-buffers@2.2.0", + "externalReferences": [ + { + "url": "https://github.com/samcday/node-stream-buffer.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:stream-buffers:stream_buffers:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:stream_buffers:stream-buffers:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:stream_buffers:stream_buffers:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:samcday:stream-buffers:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:samcday:stream_buffers:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:stream:stream-buffers:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:stream:stream_buffers:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/stream-buffers/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/streamsearch@1.1.0?package-id=28156c8426d889b2", + "type": "library", + "author": "Brian White ", + "name": "streamsearch", + "version": "1.1.0", + "description": "Streaming Boyer-Moore-Horspool searching for node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:streamsearch:streamsearch:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/streamsearch@1.1.0", + "externalReferences": [ + { + "url": "http://github.com/mscdex/streamsearch.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mscdex:streamsearch:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/streamsearch/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/strict-uri-encode@1.1.0?package-id=bfd4ac772360c13b", + "type": "library", + "author": "Kevin Mårtensson (github.com/kevva)", + "name": "strict-uri-encode", + "version": "1.1.0", + "description": "A stricter URI encode adhering to RFC 3986", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strict-uri-encode:strict-uri-encode:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/strict-uri-encode@1.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strict-uri-encode:strict_uri_encode:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strict_uri_encode:strict-uri-encode:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strict_uri_encode:strict_uri_encode:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strict-uri:strict-uri-encode:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strict-uri:strict_uri_encode:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strict_uri:strict-uri-encode:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strict_uri:strict_uri_encode:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strict:strict-uri-encode:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strict:strict_uri_encode:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/strict-uri-encode/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/string-width@1.0.2?package-id=09f44aae6ef25a0d", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "string-width", + "version": "1.0.2", + "description": "Get the visual width of a string - the number of columns required to display it", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-width:string-width:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/string-width@1.0.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string-width:string_width:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string_width:string-width:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string_width:string_width:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string:string-width:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string:string_width:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/gauge/node_modules/string-width/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/string-width@2.1.1?package-id=beec204c676c8c6e", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "string-width", + "version": "2.1.1", + "description": "Get the visual width of a string - the number of columns required to display it", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-width:string-width:2.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/string-width@2.1.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string-width:string_width:2.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string_width:string-width:2.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string_width:string_width:2.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string:string-width:2.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string:string_width:2.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/wide-align/node_modules/string-width/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/string-width@4.2.3?package-id=24ea7bc5fffd0612", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "string-width", + "version": "4.2.3", + "description": "Get the visual width of a string - the number of columns required to display it", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-width:string-width:4.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/string-width@4.2.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string-width:string_width:4.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string_width:string-width:4.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string_width:string_width:4.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string:string-width:4.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string:string_width:4.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/string-width-cjs/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/string-width@4.2.3?package-id=e0a74a03ae38698c", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "string-width", + "version": "4.2.3", + "description": "Get the visual width of a string - the number of columns required to display it", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-width:string-width:4.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/string-width@4.2.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string-width:string_width:4.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string_width:string-width:4.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string_width:string_width:4.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string:string-width:4.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string:string_width:4.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/string-width/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/string-width@5.1.2?package-id=8d5950086fa52115", + "type": "library", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "string-width", + "version": "5.1.2", + "description": "Get the visual width of a string - the number of columns required to display it", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-width:string-width:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/string-width@5.1.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string-width:string_width:5.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string_width:string-width:5.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string_width:string_width:5.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string:string-width:5.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string:string_width:5.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@isaacs/cliui/node_modules/string-width/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/string-width@5.1.2?package-id=6762f33de5ae377a", + "type": "library", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "string-width", + "version": "5.1.2", + "description": "Get the visual width of a string - the number of columns required to display it", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-width:string-width:5.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/string-width@5.1.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string-width:string_width:5.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string_width:string-width:5.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string_width:string_width:5.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string:string-width:5.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string:string_width:5.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/wrap-ansi/node_modules/string-width/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/string_decoder@0.10.31?package-id=be69fa4a2025b786", + "type": "library", + "name": "string_decoder", + "version": "0.10.31", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:0.10.31:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@0.10.31", + "externalReferences": [ + { + "url": "git://github.com/rvagg/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/rvagg/string_decoder", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string-decoder:string_decoder:0.10.31:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string_decoder:string-decoder:0.10.31:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string_decoder:string_decoder:0.10.31:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string:string-decoder:0.10.31:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string:string_decoder:0.10.31:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:rvagg:string-decoder:0.10.31:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:rvagg:string_decoder:0.10.31:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sanitize-html/node_modules/string_decoder/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/string_decoder@1.1.1?package-id=248eaf9a5e34fe07", + "type": "library", + "name": "string_decoder", + "version": "1.1.1", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.1.1", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string-decoder:string_decoder:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string_decoder:string-decoder:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string_decoder:string_decoder:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nodejs:string-decoder:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nodejs:string_decoder:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string:string-decoder:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string:string_decoder:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/string_decoder/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/string_decoder@1.3.0?package-id=17cc9cb9f2e4a5f7", + "type": "library", + "name": "string_decoder", + "version": "1.3.0", + "description": "The string_decoder module from Node core", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/string_decoder@1.3.0", + "externalReferences": [ + { + "url": "git://github.com/nodejs/string_decoder.git", + "type": "distribution" + }, + { + "url": "https://github.com/nodejs/string_decoder", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string-decoder:string_decoder:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string_decoder:string-decoder:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string_decoder:string_decoder:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nodejs:string-decoder:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nodejs:string_decoder:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string:string-decoder:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:string:string_decoder:1.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/readable-web-to-node-stream/node_modules/string_decoder/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/strip-ansi@3.0.1?package-id=e8cc4c7f389e7e46", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com), Sindre Sorhus (sindresorhus.com), Joshua Boy Nicolai Appelman (jbna.nl), JD Ballard (github.com/qix-)", + "name": "strip-ansi", + "version": "3.0.1", + "description": "Strip ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-ansi@3.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip-ansi:strip_ansi:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip_ansi:strip-ansi:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip_ansi:strip_ansi:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip:strip-ansi:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip:strip_ansi:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/gauge/node_modules/strip-ansi/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/strip-ansi@3.0.1?package-id=c99f26ed95d84d11", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com), Sindre Sorhus (sindresorhus.com), Joshua Boy Nicolai Appelman (jbna.nl), JD Ballard (github.com/qix-)", + "name": "strip-ansi", + "version": "3.0.1", + "description": "Strip ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-ansi@3.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip-ansi:strip_ansi:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip_ansi:strip-ansi:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip_ansi:strip_ansi:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip:strip-ansi:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip:strip_ansi:3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/grunt-contrib-compress/node_modules/strip-ansi/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/strip-ansi@4.0.0?package-id=0db8e8830d694c97", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "strip-ansi", + "version": "4.0.0", + "description": "Strip ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-ansi@4.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip-ansi:strip_ansi:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip_ansi:strip-ansi:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip_ansi:strip_ansi:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip:strip-ansi:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip:strip_ansi:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/wide-align/node_modules/strip-ansi/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/strip-ansi@6.0.1?package-id=896f6ac46d9def2e", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "strip-ansi", + "version": "6.0.1", + "description": "Strip ANSI escape codes from a string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-ansi@6.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip-ansi:strip_ansi:6.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip_ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip_ansi:strip_ansi:6.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip:strip-ansi:6.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip:strip_ansi:6.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/strip-ansi-cjs/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/strip-ansi@6.0.1?package-id=e831e8124e9a00e0", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "strip-ansi", + "version": "6.0.1", + "description": "Strip ANSI escape codes from a string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-ansi@6.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip-ansi:strip_ansi:6.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip_ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip_ansi:strip_ansi:6.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip:strip-ansi:6.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip:strip_ansi:6.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/strip-ansi/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/strip-ansi@7.2.0?package-id=bb988586409773ff", + "type": "library", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "strip-ansi", + "version": "7.2.0", + "description": "Strip ANSI escape codes from a string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:7.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-ansi@7.2.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip-ansi:strip_ansi:7.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip_ansi:strip-ansi:7.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip_ansi:strip_ansi:7.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip:strip-ansi:7.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip:strip_ansi:7.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/@isaacs/cliui/node_modules/strip-ansi/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/strip-ansi@7.2.0?package-id=e98758605fc01f28", + "type": "library", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "strip-ansi", + "version": "7.2.0", + "description": "Strip ANSI escape codes from a string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:7.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-ansi@7.2.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip-ansi:strip_ansi:7.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip_ansi:strip-ansi:7.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip_ansi:strip_ansi:7.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip:strip-ansi:7.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip:strip_ansi:7.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/wrap-ansi/node_modules/strip-ansi/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/strip-dirs@2.1.0?package-id=5785975b198f29c2", + "type": "library", + "author": "Shinnosuke Watanabe (https://github.com/shinnn)", + "name": "strip-dirs", + "version": "2.1.0", + "description": "Remove leading directory components from a path, like tar's --strip-components option", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-dirs:strip-dirs:2.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-dirs@2.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip-dirs:strip_dirs:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip_dirs:strip-dirs:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip_dirs:strip_dirs:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip:strip-dirs:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip:strip_dirs:2.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/strip-dirs/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/strip-json-comments@2.0.1?package-id=31c6a53852db87ef", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "strip-json-comments", + "version": "2.0.1", + "description": "Strip comments from JSON. Lets you use comments in your JSON files!", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-json-comments:strip-json-comments:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-json-comments@2.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip-json-comments:strip_json_comments:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip_json_comments:strip-json-comments:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip_json_comments:strip_json_comments:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip-json:strip-json-comments:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip-json:strip_json_comments:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip_json:strip-json-comments:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip_json:strip_json_comments:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip:strip-json-comments:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip:strip_json_comments:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/rc/node_modules/strip-json-comments/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/strip-outer@1.0.1?package-id=0701c91ca3e3ef97", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "strip-outer", + "version": "1.0.1", + "description": "Strip a substring from the start/end of a string", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:strip-outer:strip-outer:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/strip-outer@1.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip-outer:strip_outer:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip_outer:strip-outer:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip_outer:strip_outer:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip:strip-outer:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strip:strip_outer:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/strip-outer/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/strtok3@6.3.0?package-id=9ac4af59fde6dd22", + "type": "library", + "author": "Borewit (https://github.com/Borewit)", + "name": "strtok3", + "version": "6.3.0", + "description": "A promise based streaming tokenizer", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:Borewit:strtok3:6.3.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/strtok3@6.3.0", + "externalReferences": [ + { + "url": "https://github.com/Borewit/strtok3.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:strtok3:strtok3:6.3.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/strtok3/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/supports-color@2.0.0?package-id=c66316949c16138d", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com), Sindre Sorhus (sindresorhus.com), Joshua Appelman (jbnicolai.com)", + "name": "supports-color", + "version": "2.0.0", + "description": "Detect whether a terminal supports color", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:supports-color:supports-color:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/supports-color@2.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports-color:supports_color:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports_color:supports-color:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports_color:supports_color:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports:supports-color:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports:supports_color:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/grunt-contrib-compress/node_modules/supports-color/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/supports-color@5.5.0?package-id=28a6f20e2aed3314", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "supports-color", + "version": "5.5.0", + "description": "Detect whether a terminal supports color", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:supports-color:supports-color:5.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/supports-color@5.5.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports-color:supports_color:5.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports_color:supports-color:5.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports_color:supports_color:5.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports:supports-color:5.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports:supports_color:5.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/chalk/node_modules/supports-color/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/supports-color@7.2.0?package-id=24cdad729d3395c4", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "supports-color", + "version": "7.2.0", + "description": "Detect whether a terminal supports color", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:supports-color:supports-color:7.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/supports-color@7.2.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports-color:supports_color:7.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports_color:supports-color:7.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports_color:supports_color:7.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports:supports-color:7.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports:supports_color:7.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/supports-color/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/supports-preserve-symlinks-flag@1.0.0?package-id=d91ba967be33db59", + "type": "library", + "author": "Jordan Harband ", + "name": "supports-preserve-symlinks-flag", + "version": "1.0.0", + "description": "Determine if the current node version supports the `--preserve-symlinks` flag.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:supports-preserve-symlinks-flag:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/supports-preserve-symlinks-flag@1.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/inspect-js/node-supports-preserve-symlinks-flag.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/node-supports-preserve-symlinks-flag#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports-preserve-symlinks-flag:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports_preserve_symlinks_flag:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports_preserve_symlinks_flag:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports-preserve-symlinks:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports-preserve-symlinks:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports_preserve_symlinks:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports_preserve_symlinks:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports-preserve:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports-preserve:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports_preserve:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports_preserve:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:supports:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/supports-preserve-symlinks-flag/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/svg-captcha@1.4.0?package-id=6baae9ff00daeb07", + "type": "library", + "author": "Weilin Shi <934587911@qq.com>", + "name": "svg-captcha", + "version": "1.4.0", + "description": "generate svg captcha in node.js or express.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:svg-captcha:svg-captcha:1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/svg-captcha@1.4.0", + "externalReferences": [ + { + "url": "git+https://github.com/steambap/svg-captcha.git", + "type": "distribution" + }, + { + "url": "https://github.com/steambap/svg-captcha#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:svg-captcha:svg_captcha:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:svg_captcha:svg-captcha:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:svg_captcha:svg_captcha:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:steambap:svg-captcha:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:steambap:svg_captcha:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:svg:svg-captcha:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:svg:svg_captcha:1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/svg-captcha/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/swagger-ui-dist@5.32.6?package-id=d6abe07e25de9930", + "type": "library", + "author": ", Anna Bodnia , Buu Nguyen , Josh Ponelat , Kyle Shockey , Robert Barnwell , Sahar Jafari ", + "name": "swagger-ui-dist", + "version": "5.32.6", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:smartbear:swagger-ui-dist:5.32.6:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/swagger-ui-dist@5.32.6", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/swagger-ui-dist/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/swagger-ui-express@5.0.1?package-id=daeaf740a273c980", + "type": "library", + "author": "Stephen Scott ", + "name": "swagger-ui-express", + "version": "5.0.1", + "description": "Swagger UI Express", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:swagger-ui-express:swagger-ui-express:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/swagger-ui-express@5.0.1", + "externalReferences": [ + { + "url": "https://github.com/scottie1984/swagger-ui-express", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:swagger-ui-express:swagger_ui_express:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:swagger_ui_express:swagger-ui-express:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:swagger_ui_express:swagger_ui_express:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:scottie1984:swagger-ui-express:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:scottie1984:swagger_ui_express:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:swagger-ui:swagger-ui-express:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:swagger-ui:swagger_ui_express:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:swagger_ui:swagger-ui-express:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:swagger_ui:swagger_ui_express:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:swagger:swagger-ui-express:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:swagger:swagger_ui_express:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/swagger-ui-express/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/tar@4.4.19?package-id=f42c59d94c10b95d", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "tar", + "version": "4.4.19", + "description": "tar for node", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:tar_project:tar:4.4.19:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/tar@4.4.19", + "externalReferences": [ + { + "url": "https://github.com/npm/node-tar.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:tar:4.4.19:*:*:*:*:node.js:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/node-pre-gyp/node_modules/tar/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/tar@6.2.1?package-id=09de397807f7641f", + "type": "library", + "author": "GitHub Inc.", + "name": "tar", + "version": "6.2.1", + "description": "tar for node", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:tar_project:tar:6.2.1:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/tar@6.2.1", + "externalReferences": [ + { + "url": "https://github.com/isaacs/node-tar.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:tar:6.2.1:*:*:*:*:node.js:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/tar/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/tar@7.5.15?package-id=c1e644e32c96e7f7", + "type": "library", + "author": "Isaac Z. Schlueter", + "name": "tar", + "version": "7.5.15", + "description": "tar for node", + "licenses": [ + { + "license": { + "id": "BlueOak-1.0.0" + } + } + ], + "cpe": "cpe:2.3:a:tar_project:tar:7.5.15:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/tar@7.5.15", + "externalReferences": [ + { + "url": "https://github.com/isaacs/node-tar.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:isaacs:tar:7.5.15:*:*:*:*:node.js:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/tar/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/tar-fs@2.1.4?package-id=67bb886fa3adbf45", + "type": "library", + "author": "Mathias Buus", + "name": "tar-fs", + "version": "2.1.4", + "description": "filesystem bindings for tar-stream", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:mafintosh:tar-fs:2.1.4:*:*:*:*:*:*:*", + "purl": "pkg:npm/tar-fs@2.1.4", + "externalReferences": [ + { + "url": "https://github.com/mafintosh/tar-fs.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/tar-fs", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mafintosh:tar_fs:2.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tar-fs:tar-fs:2.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tar-fs:tar_fs:2.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tar_fs:tar-fs:2.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tar_fs:tar_fs:2.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tar:tar-fs:2.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tar:tar_fs:2.1.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/tar-fs/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/tar-stream@1.6.2?package-id=d4b09eea4b25031e", + "type": "library", + "author": "Mathias Buus ", + "name": "tar-stream", + "version": "1.6.2", + "description": "tar-stream is a streaming tar parser and generator and nothing else. It is streams2 and operates purely using streams which means you can easily extract/parse tarballs without ever hitting the file system.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tar-stream:tar-stream:1.6.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/tar-stream@1.6.2", + "externalReferences": [ + { + "url": "git+https://github.com/mafintosh/tar-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/tar-stream", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tar-stream:tar_stream:1.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tar_stream:tar-stream:1.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tar_stream:tar_stream:1.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mafintosh:tar-stream:1.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mafintosh:tar_stream:1.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tar:tar-stream:1.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tar:tar_stream:1.6.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/tar-stream/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/tar-stream@2.2.0?package-id=61ca2e5df0334a0d", + "type": "library", + "author": "Mathias Buus ", + "name": "tar-stream", + "version": "2.2.0", + "description": "tar-stream is a streaming tar parser and generator and nothing else. It is streams2 and operates purely using streams which means you can easily extract/parse tarballs without ever hitting the file system.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tar-stream:tar-stream:2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tar-stream@2.2.0", + "externalReferences": [ + { + "url": "git+https://github.com/mafintosh/tar-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/mafintosh/tar-stream", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tar-stream:tar_stream:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tar_stream:tar-stream:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tar_stream:tar_stream:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mafintosh:tar-stream:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mafintosh:tar_stream:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tar:tar-stream:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tar:tar_stream:2.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/tar-fs/node_modules/tar-stream/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/tdigest@0.1.2?package-id=035edc02e62ab7f9", + "type": "library", + "author": "Will Welch (http://quietplease.com/)", + "name": "tdigest", + "version": "0.1.2", + "description": "javascript implementation of Dunning's T-Digest for streaming quantile approximation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tdigest:tdigest:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/tdigest@0.1.2", + "externalReferences": [ + { + "url": "https://github.com/welch/tdigest.git", + "type": "distribution" + }, + { + "url": "https://github.com/welch/tdigest", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:welch:tdigest:0.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/tdigest/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/text-hex@1.0.0?package-id=5085c28e4a76cc5a", + "type": "library", + "author": "Arnout Kazemier", + "name": "text-hex", + "version": "1.0.0", + "description": "Generate a hex color from the given text", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:3rd-Eden:text-hex:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/text-hex@1.0.0", + "externalReferences": [ + { + "url": "https://github.com/3rd-Eden/text-hex", + "type": "distribution" + }, + { + "url": "https://github.com/3rd-Eden/text-hex", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:3rd-Eden:text_hex:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:text-hex:text-hex:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:text-hex:text_hex:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:text_hex:text-hex:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:text_hex:text_hex:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:text:text-hex:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:text:text_hex:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/text-hex/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/through@2.3.8?package-id=2584a06da5c0bd83", + "type": "library", + "author": "Dominic Tarr (dominictarr.com)", + "name": "through", + "version": "2.3.8", + "description": "simplified stream construction", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:dominictarr:through:2.3.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/through@2.3.8", + "externalReferences": [ + { + "url": "https://github.com/dominictarr/through.git", + "type": "distribution" + }, + { + "url": "https://github.com/dominictarr/through", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:through:through:2.3.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/through/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/timed-out@4.0.1?package-id=d2308518418e1e08", + "type": "library", + "author": "Vsevolod Strukchinsky ", + "name": "timed-out", + "version": "4.0.1", + "description": "Emit `ETIMEDOUT` or `ESOCKETTIMEDOUT` when ClientRequest is hanged", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:timed-out:timed-out:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/timed-out@4.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:timed-out:timed_out:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:timed_out:timed-out:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:timed_out:timed_out:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:timed:timed-out:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:timed:timed_out:4.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/timed-out/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/tiny-inflate@1.0.3?package-id=5831e10cf4d02fa2", + "type": "library", + "author": "Devon Govett ", + "name": "tiny-inflate", + "version": "1.0.3", + "description": "A tiny inflate implementation", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tiny-inflate:tiny-inflate:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/tiny-inflate@1.0.3", + "externalReferences": [ + { + "url": "git://github.com/devongovett/tiny-inflate.git", + "type": "distribution" + }, + { + "url": "https://github.com/devongovett/tiny-inflate", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tiny-inflate:tiny_inflate:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tiny_inflate:tiny-inflate:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tiny_inflate:tiny_inflate:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:devongovett:tiny-inflate:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:devongovett:tiny_inflate:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tiny:tiny-inflate:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tiny:tiny_inflate:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/tiny-inflate/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/tinyglobby@0.2.16?package-id=3820bd963eb672f1", + "type": "library", + "author": "Superchupu", + "name": "tinyglobby", + "version": "0.2.16", + "description": "A fast and minimal alternative to globby and fast-glob", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:tinyglobby:tinyglobby:0.2.16:*:*:*:*:*:*:*", + "purl": "pkg:npm/tinyglobby@0.2.16", + "externalReferences": [ + { + "url": "git+https://github.com/SuperchupuDev/tinyglobby.git", + "type": "distribution" + }, + { + "url": "https://superchupu.dev/tinyglobby", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/tinyglobby/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/to-buffer@1.2.2?package-id=0110d2ecb3a45afa", + "type": "library", + "author": "Mathias Buus (@mafintosh)", + "name": "to-buffer", + "version": "1.2.2", + "description": "Pass in a string, array, Buffer, Data View, or Uint8Array, and get a Buffer back.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:browserify:to-buffer:1.2.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/to-buffer@1.2.2", + "externalReferences": [ + { + "url": "https://github.com/browserify/to-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/browserify/to-buffer", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:browserify:to_buffer:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:to-buffer:to-buffer:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:to-buffer:to_buffer:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:to_buffer:to-buffer:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:to_buffer:to_buffer:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:to:to-buffer:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:to:to_buffer:1.2.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/to-buffer/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/to-regex-range@5.0.1?package-id=71fde64046fd6197", + "type": "library", + "author": "Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), Rouven Weßling (www.rouvenwessling.de)", + "name": "to-regex-range", + "version": "5.0.1", + "description": "Pass two numbers, get a regex-compatible source string for matching ranges. Validated against more than 2.78 million test assertions.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:to-regex-range:to-regex-range:5.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/to-regex-range@5.0.1", + "externalReferences": [ + { + "url": "https://github.com/micromatch/to-regex-range", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:to-regex-range:to_regex_range:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:to_regex_range:to-regex-range:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:to_regex_range:to_regex_range:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:micromatch:to-regex-range:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:micromatch:to_regex_range:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:to-regex:to-regex-range:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:to-regex:to_regex_range:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:to_regex:to-regex-range:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:to_regex:to_regex_range:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:to:to-regex-range:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:to:to_regex_range:5.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/to-regex-range/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/toidentifier@1.0.1?package-id=4909a76552946483", + "type": "library", + "author": "Douglas Christopher Wilson , Douglas Christopher Wilson , Nick Baugh (http://niftylettuce.com/)", + "name": "toidentifier", + "version": "1.0.1", + "description": "Convert a string of words to a JavaScript identifier", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:toidentifier:toidentifier:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/toidentifier@1.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/toidentifier/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/token-stream@1.0.0?package-id=1121d220e3619b09", + "type": "library", + "author": "ForbesLindesay", + "name": "token-stream", + "version": "1.0.0", + "description": "Take an array of token and produce a more useful API to give to a parser", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:token-stream:token-stream:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/token-stream@1.0.0", + "externalReferences": [ + { + "url": "https://github.com/pugjs/token-stream.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:token-stream:token_stream:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:token_stream:token-stream:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:token_stream:token_stream:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pugjs:token-stream:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:pugjs:token_stream:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:token:token-stream:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:token:token_stream:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/token-stream/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/token-types@4.2.1?package-id=171e72fe36f2e133", + "type": "library", + "author": "Borewit (https://github.com/Borewit)", + "name": "token-types", + "version": "4.2.1", + "description": "Common token types for decoding and encoding numeric and string values", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:token-types:token-types:4.2.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/token-types@4.2.1", + "externalReferences": [ + { + "url": "https://github.com/Borewit/token-types", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:token-types:token_types:4.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:token_types:token-types:4.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:token_types:token_types:4.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Borewit:token-types:4.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Borewit:token_types:4.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:token:token-types:4.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:token:token_types:4.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/token-types/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/traverse@0.3.9?package-id=8b1a05e62fb7f42a", + "type": "library", + "author": "James Halliday", + "name": "traverse", + "version": "0.3.9", + "description": "Traverse and transform objects by visiting every node on a recursive walk", + "licenses": [ + { + "license": { + "name": "MIT/X11" + } + } + ], + "cpe": "cpe:2.3:a:substack:traverse:0.3.9:*:*:*:*:*:*:*", + "purl": "pkg:npm/traverse@0.3.9", + "externalReferences": [ + { + "url": "http://github.com/substack/js-traverse.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:traverse:traverse:0.3.9:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/traverse/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/trim-repeated@1.0.0?package-id=4707f97b4eb6a83b", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "trim-repeated", + "version": "1.0.0", + "description": "Trim a consecutively repeated substring: foo--bar---baz → foo-bar-baz", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:trim-repeated:trim-repeated:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/trim-repeated@1.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:trim-repeated:trim_repeated:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:trim_repeated:trim-repeated:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:trim_repeated:trim_repeated:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:trim:trim-repeated:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:trim:trim_repeated:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/trim-repeated/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/triple-beam@1.4.1?package-id=867ca1c3d07cb072", + "type": "library", + "author": "Charlie Robbins ", + "name": "triple-beam", + "version": "1.4.1", + "description": "Definitions of levels for logging purposes & shareable Symbol constants.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:triple-beam:triple-beam:1.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/triple-beam@1.4.1", + "externalReferences": [ + { + "url": "git+https://github.com/winstonjs/triple-beam.git", + "type": "distribution" + }, + { + "url": "https://github.com/winstonjs/triple-beam#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:triple-beam:triple_beam:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:triple_beam:triple-beam:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:triple_beam:triple_beam:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:winstonjs:triple-beam:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:winstonjs:triple_beam:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:triple:triple-beam:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:triple:triple_beam:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/triple-beam/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/truncate-utf8-bytes@1.0.2?package-id=a4cd60ed4d28ed9d", + "type": "library", + "author": "Carl Xiong ", + "name": "truncate-utf8-bytes", + "version": "1.0.2", + "description": "Truncate string to given length in bytes", + "licenses": [ + { + "license": { + "id": "WTFPL" + } + } + ], + "cpe": "cpe:2.3:a:truncate-utf8-bytes:truncate-utf8-bytes:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/truncate-utf8-bytes@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/parshap/truncate-utf8-bytes.git", + "type": "distribution" + }, + { + "url": "https://github.com/parshap/truncate-utf8-bytes#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:truncate-utf8-bytes:truncate_utf8_bytes:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:truncate_utf8_bytes:truncate-utf8-bytes:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:truncate_utf8_bytes:truncate_utf8_bytes:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:truncate-utf8:truncate-utf8-bytes:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:truncate-utf8:truncate_utf8_bytes:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:truncate_utf8:truncate-utf8-bytes:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:truncate_utf8:truncate_utf8_bytes:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:truncate:truncate-utf8-bytes:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:truncate:truncate_utf8_bytes:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:parshap:truncate-utf8-bytes:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:parshap:truncate_utf8_bytes:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/truncate-utf8-bytes/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/tslib@2.7.0?package-id=d3f6878231388b72", + "type": "library", + "author": "Microsoft Corp.", + "name": "tslib", + "version": "2.7.0", + "description": "Runtime library for TypeScript helper functions", + "licenses": [ + { + "license": { + "id": "0BSD" + } + } + ], + "cpe": "cpe:2.3:a:Microsoft:tslib:2.7.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tslib@2.7.0", + "externalReferences": [ + { + "url": "https://github.com/Microsoft/tslib.git", + "type": "distribution" + }, + { + "url": "https://www.typescriptlang.org/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tslib:tslib:2.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/tslib/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/tunnel-agent@0.6.0?package-id=fdd564bd2943f5f4", + "type": "library", + "author": "Mikeal Rogers (http://www.futurealoof.com)", + "name": "tunnel-agent", + "version": "0.6.0", + "description": "HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone module.", + "licenses": [ + { + "license": { + "id": "Apache-2.0" + } + } + ], + "cpe": "cpe:2.3:a:tunnel-agent:tunnel-agent:0.6.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/tunnel-agent@0.6.0", + "externalReferences": [ + { + "url": "https://github.com/mikeal/tunnel-agent", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tunnel-agent:tunnel_agent:0.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tunnel_agent:tunnel-agent:0.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tunnel_agent:tunnel_agent:0.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mikeal:tunnel-agent:0.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mikeal:tunnel_agent:0.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tunnel:tunnel-agent:0.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tunnel:tunnel_agent:0.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/tunnel-agent/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/type-is@1.6.18?package-id=26b4bd4c5c1a13bb", + "type": "library", + "author": "Douglas Christopher Wilson , Jonathan Ong (http://jongleberry.com)", + "name": "type-is", + "version": "1.6.18", + "description": "Infer the content-type of a request.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:type-is:type-is:1.6.18:*:*:*:*:*:*:*", + "purl": "pkg:npm/type-is@1.6.18", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:type-is:type_is:1.6.18:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:type_is:type-is:1.6.18:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:type_is:type_is:1.6.18:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:type:type-is:1.6.18:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:type:type_is:1.6.18:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/type-is/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/typecast@0.0.1?package-id=89d78b6ec74b159e", + "type": "library", + "name": "typecast", + "version": "0.0.1", + "description": "Simple typecasting", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:eivindfjeldstad:typecast:0.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/typecast@0.0.1", + "externalReferences": [ + { + "url": "https://github.com/eivindfjeldstad/typecast.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:typecast:typecast:0.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/typecast/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/typed-array-buffer@1.0.3?package-id=131dc3292e117210", + "type": "library", + "author": "Jordan Harband ", + "name": "typed-array-buffer", + "version": "1.0.3", + "description": "Get the ArrayBuffer out of a TypedArray, robustly.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:typed-array-buffer:typed-array-buffer:1.0.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/typed-array-buffer@1.0.3", + "externalReferences": [ + { + "url": "git+https://github.com/inspect-js/typed-array-buffer.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/typed-array-buffer#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:typed-array-buffer:typed_array_buffer:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:typed_array_buffer:typed-array-buffer:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:typed_array_buffer:typed_array_buffer:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:typed-array:typed-array-buffer:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:typed-array:typed_array_buffer:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:typed_array:typed-array-buffer:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:typed_array:typed_array_buffer:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:typed-array-buffer:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:typed_array_buffer:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:typed:typed-array-buffer:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:typed:typed_array_buffer:1.0.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/typed-array-buffer/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/typedarray@0.0.6?package-id=34381d15eae55598", + "type": "library", + "author": "James Halliday (http://substack.net)", + "name": "typedarray", + "version": "0.0.6", + "description": "TypedArray polyfill for old browsers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:typedarray:typedarray:0.0.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/typedarray@0.0.6", + "externalReferences": [ + { + "url": "git://github.com/substack/typedarray.git", + "type": "distribution" + }, + { + "url": "https://github.com/substack/typedarray", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:substack:typedarray:0.0.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/typedarray/package.json" + } + ] + }, + { + "bom-ref": "pkg:deb/debian/tzdata@2026a-0%2Bdeb13u1?arch=all&distro=debian-13&package-id=882dfe0230a0d58f", + "type": "library", + "publisher": "GNU Libc Maintainers ", + "name": "tzdata", + "version": "2026a-0+deb13u1", + "licenses": [ + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:tzdata:tzdata:2026a-0\\+deb13u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/tzdata@2026a-0%2Bdeb13u1?arch=all&distro=debian-13", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "dpkg-db-cataloger" + }, + { + "name": "syft:package:type", + "value": "deb" + }, + { + "name": "syft:package:metadataType", + "value": "dpkg-db-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:ac2a91ec876dfaf2145e14b0b43ce6b3ea3d4edb28a0df9d91c52f2efbb8e1a7" + }, + { + "name": "syft:location:0:path", + "value": "/var/lib/dpkg/status.d/tzdata" + }, + { + "name": "syft:location:1:layerID", + "value": "sha256:ac2a91ec876dfaf2145e14b0b43ce6b3ea3d4edb28a0df9d91c52f2efbb8e1a7" + }, + { + "name": "syft:location:1:path", + "value": "/usr/share/doc/tzdata/copyright" + }, + { + "name": "syft:location:2:layerID", + "value": "sha256:ac2a91ec876dfaf2145e14b0b43ce6b3ea3d4edb28a0df9d91c52f2efbb8e1a7" + }, + { + "name": "syft:location:2:path", + "value": "/var/lib/dpkg/status.d/tzdata.md5sums" + }, + { + "name": "syft:metadata:installedSize", + "value": "1361" + } + ] + }, + { + "bom-ref": "pkg:deb/debian/tzdata-legacy@2026a-0%2Bdeb13u1?arch=all&distro=debian-13&package-id=577ba637f36cc46d&upstream=tzdata", + "type": "library", + "publisher": "GNU Libc Maintainers ", + "name": "tzdata-legacy", + "version": "2026a-0+deb13u1", + "licenses": [ + { + "license": { + "name": "public-domain" + } + } + ], + "cpe": "cpe:2.3:a:tzdata-legacy:tzdata-legacy:2026a-0\\+deb13u1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/tzdata-legacy@2026a-0%2Bdeb13u1?arch=all&distro=debian-13&upstream=tzdata", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "dpkg-db-cataloger" + }, + { + "name": "syft:package:type", + "value": "deb" + }, + { + "name": "syft:package:metadataType", + "value": "dpkg-db-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tzdata-legacy:tzdata_legacy:2026a-0\\+deb13u1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tzdata_legacy:tzdata-legacy:2026a-0\\+deb13u1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tzdata_legacy:tzdata_legacy:2026a-0\\+deb13u1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tzdata:tzdata-legacy:2026a-0\\+deb13u1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:tzdata:tzdata_legacy:2026a-0\\+deb13u1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f15316efa9979a44eee43172e640630f60407180eff3d985274befd600bb227d" + }, + { + "name": "syft:location:0:path", + "value": "/var/lib/dpkg/status.d/tzdata-legacy" + }, + { + "name": "syft:location:1:layerID", + "value": "sha256:f15316efa9979a44eee43172e640630f60407180eff3d985274befd600bb227d" + }, + { + "name": "syft:location:1:path", + "value": "/usr/share/doc/tzdata-legacy/copyright" + }, + { + "name": "syft:location:2:layerID", + "value": "sha256:f15316efa9979a44eee43172e640630f60407180eff3d985274befd600bb227d" + }, + { + "name": "syft:location:2:path", + "value": "/var/lib/dpkg/status.d/tzdata-legacy.md5sums" + }, + { + "name": "syft:metadata:installedSize", + "value": "1251" + }, + { + "name": "syft:metadata:source", + "value": "tzdata" + } + ] + }, + { + "bom-ref": "pkg:npm/uglify-js@3.19.3?package-id=929f7bc81a430f59", + "type": "library", + "author": "Mihai Bazon (http://lisperator.net/), Alex Lam , Mihai Bazon (http://lisperator.net/)", + "name": "uglify-js", + "version": "3.19.3", + "description": "JavaScript parser, mangler/compressor and beautifier toolkit", + "licenses": [ + { + "license": { + "id": "BSD-2-Clause" + } + } + ], + "cpe": "cpe:2.3:a:uglifyjs_project:uglifyjs:3.19.3:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/uglify-js@3.19.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/uglify-js/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/unbzip2-stream@1.4.3?package-id=d5a42b3035bdd365", + "type": "library", + "author": "Jan Bölsche ", + "name": "unbzip2-stream", + "version": "1.4.3", + "description": "streaming unbzip2 implementation in pure javascript for node and browsers", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:unbzip2-stream:unbzip2-stream:1.4.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/unbzip2-stream@1.4.3", + "externalReferences": [ + { + "url": "https://github.com/regular/unbzip2-stream.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unbzip2-stream:unbzip2_stream:1.4.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unbzip2_stream:unbzip2-stream:1.4.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unbzip2_stream:unbzip2_stream:1.4.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:regular:unbzip2-stream:1.4.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:regular:unbzip2_stream:1.4.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unbzip2:unbzip2-stream:1.4.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unbzip2:unbzip2_stream:1.4.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/unbzip2-stream/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/unc-path-regex@0.1.2?package-id=ac9aba0a81d8073c", + "type": "library", + "author": "Jon Schlinkert (https://github.com/jonschlinkert)", + "name": "unc-path-regex", + "version": "0.1.2", + "description": "Regular expression for testing if a file path is a windows UNC file path. Can also be used as a component of another regexp via the `.source` property.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:unc-path-regex:unc-path-regex:0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/unc-path-regex@0.1.2", + "externalReferences": [ + { + "url": "https://github.com/regexhq/unc-path-regex.git", + "type": "distribution" + }, + { + "url": "https://github.com/regexhq/unc-path-regex", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unc-path-regex:unc_path_regex:0.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unc_path_regex:unc-path-regex:0.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unc_path_regex:unc_path_regex:0.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unc-path:unc-path-regex:0.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unc-path:unc_path_regex:0.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unc_path:unc-path-regex:0.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unc_path:unc_path_regex:0.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:regexhq:unc-path-regex:0.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:regexhq:unc_path_regex:0.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unc:unc-path-regex:0.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unc:unc_path_regex:0.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/unc-path-regex/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/underscore.string@3.3.6?package-id=719cbb15880d33d1", + "type": "library", + "author": "Esa-Matti Suuronen (http://esa-matti.suuronen.org/), Edward Tsech , Pavel Pravosud (), Sasha Koss (http://koss.nocorp.me/), Vladimir Dronnikov , Pete Kruckenberg (), Paul Chavard (), Ed Finkler (), Christoph Hermann ()", + "name": "underscore.string", + "version": "3.3.6", + "description": "String manipulation extensions for Underscore.js javascript library.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:underscore.string:underscore.string:3.3.6:*:*:*:*:*:*:*", + "purl": "pkg:npm/underscore.string@3.3.6", + "externalReferences": [ + { + "url": "https://github.com/epeli/underscore.string.git", + "type": "distribution" + }, + { + "url": "http://epeli.github.com/underscore.string/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:epeli:underscore.string:3.3.6:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/underscore.string/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/undici-types@6.19.8?package-id=c0ec3464366df4cf", + "type": "library", + "author": "Daniele Belardi (https://github.com/dnlup), Ethan Arrowood (https://github.com/ethan-arrowood), Matteo Collina (https://github.com/mcollina), Matthew Aitken (https://github.com/KhafraDev), Robert Nagy (https://github.com/ronag), Szymon Marczak (https://github.com/szmarczak), Tomas Della Vedova (https://github.com/delvedor)", + "name": "undici-types", + "version": "6.19.8", + "description": "A stand-alone types package for Undici", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:undici-types:undici-types:6.19.8:*:*:*:*:*:*:*", + "purl": "pkg:npm/undici-types@6.19.8", + "externalReferences": [ + { + "url": "git+https://github.com/nodejs/undici.git", + "type": "distribution" + }, + { + "url": "https://undici.nodejs.org", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:undici-types:undici_types:6.19.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:undici_types:undici-types:6.19.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:undici_types:undici_types:6.19.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:undici:undici-types:6.19.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:undici:undici_types:6.19.8:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/ethers/node_modules/undici-types/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/undici-types@6.21.0?package-id=2ec7a147b1861e7e", + "type": "library", + "author": "Daniele Belardi (https://github.com/dnlup), Ethan Arrowood (https://github.com/ethan-arrowood), Matteo Collina (https://github.com/mcollina), Matthew Aitken (https://github.com/KhafraDev), Robert Nagy (https://github.com/ronag), Szymon Marczak (https://github.com/szmarczak), Tomas Della Vedova (https://github.com/delvedor)", + "name": "undici-types", + "version": "6.21.0", + "description": "A stand-alone types package for Undici", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:undici-types:undici-types:6.21.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/undici-types@6.21.0", + "externalReferences": [ + { + "url": "git+https://github.com/nodejs/undici.git", + "type": "distribution" + }, + { + "url": "https://undici.nodejs.org", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:undici-types:undici_types:6.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:undici_types:undici-types:6.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:undici_types:undici_types:6.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:undici:undici-types:6.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:undici:undici_types:6.21.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/undici-types/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/unicode-properties@1.4.1?package-id=77f2f0a8f7df086b", + "type": "library", + "author": "Devon Govett ", + "name": "unicode-properties", + "version": "1.4.1", + "description": "Provides fast access to unicode character properties", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:unicode-properties:unicode-properties:1.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/unicode-properties@1.4.1", + "externalReferences": [ + { + "url": "git://github.com/devongovett/unicode-properties.git", + "type": "distribution" + }, + { + "url": "https://github.com/devongovett/unicode-properties", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unicode-properties:unicode_properties:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unicode_properties:unicode-properties:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unicode_properties:unicode_properties:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:devongovett:unicode-properties:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:devongovett:unicode_properties:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unicode:unicode-properties:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unicode:unicode_properties:1.4.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/unicode-properties/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/unicode-trie@2.0.0?package-id=c0712c33eff88472", + "type": "library", + "author": "Devon Govett ", + "name": "unicode-trie", + "version": "2.0.0", + "description": "Unicode Trie data structure for fast character metadata lookup, ported from ICU", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:unicode-trie:unicode-trie:2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/unicode-trie@2.0.0", + "externalReferences": [ + { + "url": "git://github.com/devongovett/unicode-trie.git", + "type": "distribution" + }, + { + "url": "https://github.com/devongovett/unicode-trie", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unicode-trie:unicode_trie:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unicode_trie:unicode-trie:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unicode_trie:unicode_trie:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:devongovett:unicode-trie:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:devongovett:unicode_trie:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unicode:unicode-trie:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unicode:unicode_trie:2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/unicode-trie/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/unique-filename@1.1.1?package-id=cb6e79fb065b0164", + "type": "library", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "unique-filename", + "version": "1.1.1", + "description": "Generate a unique filename for use in temporary directories or caches.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:unique-filename:unique-filename:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/unique-filename@1.1.1", + "externalReferences": [ + { + "url": "https://github.com/iarna/unique-filename.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/unique-filename", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unique-filename:unique_filename:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unique_filename:unique-filename:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unique_filename:unique_filename:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unique:unique-filename:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unique:unique_filename:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iarna:unique-filename:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iarna:unique_filename:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/unique-filename/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/unique-filename@4.0.0?package-id=deaed92dd166ac8d", + "type": "library", + "author": "GitHub Inc.", + "name": "unique-filename", + "version": "4.0.0", + "description": "Generate a unique filename for use in temporary directories or caches.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:unique-filename:unique-filename:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/unique-filename@4.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/npm/unique-filename.git", + "type": "distribution" + }, + { + "url": "https://github.com/iarna/unique-filename", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unique-filename:unique_filename:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unique_filename:unique-filename:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unique_filename:unique_filename:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unique:unique-filename:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unique:unique_filename:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iarna:unique-filename:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iarna:unique_filename:4.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/unique-filename/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/unique-slug@2.0.2?package-id=930467346c7209f9", + "type": "library", + "author": "Rebecca Turner (http://re-becca.org)", + "name": "unique-slug", + "version": "2.0.2", + "description": "Generate a unique character string suitible for use in files and URLs.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:unique-slug:unique-slug:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/unique-slug@2.0.2", + "externalReferences": [ + { + "url": "git://github.com/iarna/unique-slug.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unique-slug:unique_slug:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unique_slug:unique-slug:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unique_slug:unique_slug:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unique:unique-slug:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unique:unique_slug:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iarna:unique-slug:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iarna:unique_slug:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/unique-slug/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/unique-slug@5.0.0?package-id=b1297fb43211d6e6", + "type": "library", + "author": "GitHub Inc.", + "name": "unique-slug", + "version": "5.0.0", + "description": "Generate a unique character string suitible for use in files and URLs.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:unique-slug:unique-slug:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/unique-slug@5.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/npm/unique-slug.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unique-slug:unique_slug:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unique_slug:unique-slug:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unique_slug:unique_slug:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unique:unique-slug:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:unique:unique_slug:5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/unique-slug/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/universalify@2.0.1?package-id=478e17a8d9d9e24d", + "type": "library", + "author": "Ryan Zimmerman ", + "name": "universalify", + "version": "2.0.1", + "description": "Make a callback- or promise-based function support both promises and callbacks.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:universalify:universalify:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/universalify@2.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/RyanZim/universalify.git", + "type": "distribution" + }, + { + "url": "https://github.com/RyanZim/universalify#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:RyanZim:universalify:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/universalify/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/unpipe@1.0.0?package-id=7bdc8da7ff6ad05b", + "type": "library", + "author": "Douglas Christopher Wilson ", + "name": "unpipe", + "version": "1.0.0", + "description": "Unpipe a stream from all destinations", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:unpipe:unpipe:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/unpipe@1.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/unpipe/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/unzipper@0.9.15?package-id=96d1f3567742fbab", + "type": "library", + "author": "Evan Oxfeld , Ziggy Jonsson , Evan Oxfeld , Joe Ferner ", + "name": "unzipper", + "version": "0.9.15", + "description": "Unzip cross-platform streaming API ", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:unzipper_project:unzipper:0.9.15:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/unzipper@0.9.15", + "externalReferences": [ + { + "url": "https://github.com/ZJONSSON/node-unzipper.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/unzipper/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/url-parse-lax@3.0.0?package-id=fe44fa8ce8ee75af", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "url-parse-lax", + "version": "3.0.0", + "description": "Lax url.parse() with support for protocol-less URLs & IPs", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:url-parse-lax:url-parse-lax:3.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/url-parse-lax@3.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:url-parse-lax:url_parse_lax:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:url_parse_lax:url-parse-lax:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:url_parse_lax:url_parse_lax:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:url-parse:url-parse-lax:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:url-parse:url_parse_lax:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:url_parse:url-parse-lax:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:url_parse:url_parse_lax:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:url:url-parse-lax:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:url:url_parse_lax:3.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/url-parse-lax/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/url-to-options@1.0.1?package-id=e31e5498dbb100a3", + "type": "library", + "author": "Steven Vachon (https://www.svachon.com/)", + "name": "url-to-options", + "version": "1.0.1", + "description": "Convert a WHATWG URL to an http(s).request options object.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:url-to-options:url-to-options:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/url-to-options@1.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:url-to-options:url_to_options:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:url_to_options:url-to-options:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:url_to_options:url_to_options:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:url-to:url-to-options:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:url-to:url_to_options:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:url_to:url-to-options:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:url_to:url_to_options:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:url:url-to-options:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:url:url_to_options:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/url-to-options/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/utf8-byte-length@1.0.5?package-id=91d2330fa076a0de", + "type": "library", + "author": "Carl Xiong ", + "name": "utf8-byte-length", + "version": "1.0.5", + "description": "Get utf8 byte length of string", + "licenses": [ + { + "expression": "WTFPL OR MIT" + } + ], + "cpe": "cpe:2.3:a:utf8-byte-length:utf8-byte-length:1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/utf8-byte-length@1.0.5", + "externalReferences": [ + { + "url": "git+https://github.com/parshap/utf8-byte-length.git", + "type": "distribution" + }, + { + "url": "https://github.com/parshap/utf8-byte-length#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:utf8-byte-length:utf8_byte_length:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:utf8_byte_length:utf8-byte-length:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:utf8_byte_length:utf8_byte_length:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:utf8-byte:utf8-byte-length:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:utf8-byte:utf8_byte_length:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:utf8_byte:utf8-byte-length:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:utf8_byte:utf8_byte_length:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:parshap:utf8-byte-length:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:parshap:utf8_byte_length:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:utf8:utf8-byte-length:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:utf8:utf8_byte_length:1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/utf8-byte-length/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/util-deprecate@1.0.2?package-id=5aa8474b38ae743a", + "type": "library", + "author": "Nathan Rajlich (http://n8.io/)", + "name": "util-deprecate", + "version": "1.0.2", + "description": "The Node.js `util.deprecate()` function with browser support", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:util-deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/util-deprecate@1.0.2", + "externalReferences": [ + { + "url": "git://github.com/TooTallNate/util-deprecate.git", + "type": "distribution" + }, + { + "url": "https://github.com/TooTallNate/util-deprecate", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:util-deprecate:util_deprecate:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:util_deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:util_deprecate:util_deprecate:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:TooTallNate:util-deprecate:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:TooTallNate:util_deprecate:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:util:util-deprecate:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:util:util_deprecate:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/util-deprecate/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/utils-merge@1.0.1?package-id=6f20808d27c78dba", + "type": "library", + "author": "Jared Hanson (http://www.jaredhanson.net/)", + "name": "utils-merge", + "version": "1.0.1", + "description": "merge() utility function", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:jaredhanson:utils-merge:1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/utils-merge@1.0.1", + "externalReferences": [ + { + "url": "git://github.com/jaredhanson/utils-merge.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jaredhanson:utils_merge:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:utils-merge:utils-merge:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:utils-merge:utils_merge:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:utils_merge:utils-merge:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:utils_merge:utils_merge:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:utils:utils-merge:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:utils:utils_merge:1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/utils-merge/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/uuid@8.3.2?package-id=75276f930d3cfafc", + "type": "library", + "name": "uuid", + "version": "8.3.2", + "description": "RFC4122 (v1, v4, and v5) UUIDs", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:uuidjs:uuid:8.3.2:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/uuid@8.3.2", + "externalReferences": [ + { + "url": "https://github.com/uuidjs/uuid.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/uuid/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/v8flags@4.0.1?package-id=60ade9588799c895", + "type": "library", + "author": "Gulp Team (https://gulpjs.com/), Tyler Kellen , Blaine Bublitz , Nicolò Ribaudo , Selwyn , Leo Zhang ", + "name": "v8flags", + "version": "4.0.1", + "description": "Get available v8 and Node.js flags.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:v8flags:v8flags:4.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/v8flags@4.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/v8flags/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/validate@4.5.1?package-id=ccebf638e9fd3787", + "type": "library", + "author": "Eivind Fjeldstad", + "name": "validate", + "version": "4.5.1", + "description": "Validate object properties in javascript.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:validate:validate:4.5.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/validate@4.5.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/validate/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/validator@13.15.35?package-id=d86489c4bc1d875a", + "type": "library", + "author": "Chris O'Hara , Anthony Nandaa (https://github.com/profnandaa)", + "name": "validator", + "version": "13.15.35", + "description": "String validation and sanitization", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:validator_project:validator:13.15.35:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/validator@13.15.35", + "externalReferences": [ + { + "url": "git+https://github.com/validatorjs/validator.js.git", + "type": "distribution" + }, + { + "url": "https://github.com/validatorjs/validator.js", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/validator/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/vary@1.1.2?package-id=ef1054337f6d6829", + "type": "library", + "author": "Douglas Christopher Wilson ", + "name": "vary", + "version": "1.1.2", + "description": "Manipulate the HTTP Vary header", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:vary:vary:1.1.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/vary@1.1.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/vary/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/void-elements@3.1.0?package-id=c20f7d8a863db46e", + "type": "library", + "author": "hemanth.hm", + "name": "void-elements", + "version": "3.1.0", + "description": "Array of \"void elements\" defined by the HTML specification.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:void-elements:void-elements:3.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/void-elements@3.1.0", + "externalReferences": [ + { + "url": "https://github.com/jadejs/void-elements", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:void-elements:void_elements:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:void_elements:void-elements:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:void_elements:void_elements:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jadejs:void-elements:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jadejs:void_elements:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:void:void-elements:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:void:void_elements:3.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/void-elements/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/walk@2.3.15?package-id=01da09009ec4151e", + "type": "library", + "author": "AJ ONeal ", + "name": "walk", + "version": "2.3.15", + "description": "A node port of python's os.walk", + "licenses": [ + { + "expression": "MIT OR Apache-2.0" + } + ], + "cpe": "cpe:2.3:a:walk:walk:2.3.15:*:*:*:*:*:*:*", + "purl": "pkg:npm/walk@2.3.15", + "externalReferences": [ + { + "url": "https://git.coolaj86.com/coolaj86/fs-walk.js.git", + "type": "distribution" + }, + { + "url": "https://git.coolaj86.com/coolaj86/fs-walk.js", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/walk/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/walkdir@0.0.11?package-id=f1205193f13f39ea", + "type": "library", + "author": "Ryan Day , tjfontaine", + "name": "walkdir", + "version": "0.0.11", + "description": "Find files simply. Walks a directory tree emitting events based on what it finds. Presents a familiar callback/emitter/a+sync interface. Walk a tree of any depth.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:soldair:walkdir:0.0.11:*:*:*:*:*:*:*", + "purl": "pkg:npm/walkdir@0.0.11", + "externalReferences": [ + { + "url": "git://github.com/soldair/node-walkdir.git", + "type": "distribution" + }, + { + "url": "http://github.com/soldair/node-walkdir", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:walkdir:walkdir:0.0.11:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/walkdir/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/which@1.3.1?package-id=41ea0ec5c3df6504", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "which", + "version": "1.3.1", + "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:which:1.3.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/which@1.3.1", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-which.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which:which:1.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/global-prefix/node_modules/which/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/which@2.0.2?package-id=1222522e2e485736", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me)", + "name": "which", + "version": "2.0.2", + "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:isaacs:which:2.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/which@2.0.2", + "externalReferences": [ + { + "url": "git://github.com/isaacs/node-which.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which:which:2.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/which/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/which@5.0.0?package-id=35565647196cbf3c", + "type": "library", + "author": "GitHub Inc.", + "name": "which", + "version": "5.0.0", + "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:which:which:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/which@5.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/npm/node-which.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/node-gyp/node_modules/which/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/which-boxed-primitive@1.1.1?package-id=1c5150f5622ba818", + "type": "library", + "author": "Jordan Harband ", + "name": "which-boxed-primitive", + "version": "1.1.1", + "description": "Which kind of boxed JS primitive is this?", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:which-boxed-primitive:which-boxed-primitive:1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/which-boxed-primitive@1.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/inspect-js/which-boxed-primitive.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/which-boxed-primitive#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which-boxed-primitive:which_boxed_primitive:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which_boxed_primitive:which-boxed-primitive:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which_boxed_primitive:which_boxed_primitive:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which-boxed:which-boxed-primitive:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which-boxed:which_boxed_primitive:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which_boxed:which-boxed-primitive:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which_boxed:which_boxed_primitive:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:which-boxed-primitive:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:which_boxed_primitive:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which:which-boxed-primitive:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which:which_boxed_primitive:1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/which-boxed-primitive/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/which-collection@1.0.2?package-id=15815161b3b5c910", + "type": "library", + "author": "Jordan Harband ", + "name": "which-collection", + "version": "1.0.2", + "description": "Which kind of Collection (Map, Set, WeakMap, WeakSet) is this JavaScript value? Works cross-realm, without `instanceof`, and despite Symbol.toStringTag.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:which-collection:which-collection:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/which-collection@1.0.2", + "externalReferences": [ + { + "url": "git+https://github.com/inspect-js/which-collection.git", + "type": "distribution" + }, + { + "url": "https://github.com/inspect-js/which-collection#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which-collection:which_collection:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which_collection:which-collection:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which_collection:which_collection:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:which-collection:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:which_collection:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which:which-collection:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which:which_collection:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/which-collection/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/which-module@2.0.1?package-id=17fef2e739c99bd0", + "type": "library", + "author": "nexdrew", + "name": "which-module", + "version": "2.0.1", + "description": "Find the module object for something that was require()d", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:which-module:which-module:2.0.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/which-module@2.0.1", + "externalReferences": [ + { + "url": "git+https://github.com/nexdrew/which-module.git", + "type": "distribution" + }, + { + "url": "https://github.com/nexdrew/which-module#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which-module:which_module:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which_module:which-module:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which_module:which_module:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nexdrew:which-module:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:nexdrew:which_module:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which:which-module:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which:which_module:2.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/which-module/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/which-pm-runs@1.1.0?package-id=511b12aae9b5f098", + "type": "library", + "author": "Zoltan Kochan", + "name": "which-pm-runs", + "version": "1.1.0", + "description": "Detects what package manager executes the process", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:which-pm-runs:which-pm-runs:1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/which-pm-runs@1.1.0", + "externalReferences": [ + { + "url": "https://github.com/zkochan/packages/tree/main/which-pm-runs", + "type": "distribution" + }, + { + "url": "https://github.com/zkochan/packages/tree/main/which-pm-runs#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which-pm-runs:which_pm_runs:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which_pm_runs:which-pm-runs:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which_pm_runs:which_pm_runs:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which-pm:which-pm-runs:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which-pm:which_pm_runs:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which_pm:which-pm-runs:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which_pm:which_pm_runs:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:zkochan:which-pm-runs:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:zkochan:which_pm_runs:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which:which-pm-runs:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which:which_pm_runs:1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/which-pm-runs/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/which-typed-array@1.1.20?package-id=fcae901f7f234cb1", + "type": "library", + "author": "Jordan Harband (http://ljharb.codes), Jordan Harband (http://ljharb.codes)", + "name": "which-typed-array", + "version": "1.1.20", + "description": "Which kind of Typed Array is this JavaScript value? Works cross-realm, without `instanceof`, and despite Symbol.toStringTag.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:which-typed-array:which-typed-array:1.1.20:*:*:*:*:*:*:*", + "purl": "pkg:npm/which-typed-array@1.1.20", + "externalReferences": [ + { + "url": "git://github.com/inspect-js/which-typed-array.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which-typed-array:which_typed_array:1.1.20:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which_typed_array:which-typed-array:1.1.20:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which_typed_array:which_typed_array:1.1.20:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which-typed:which-typed-array:1.1.20:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which-typed:which_typed_array:1.1.20:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which_typed:which-typed-array:1.1.20:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which_typed:which_typed_array:1.1.20:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:which-typed-array:1.1.20:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:inspect-js:which_typed_array:1.1.20:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which:which-typed-array:1.1.20:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:which:which_typed_array:1.1.20:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/which-typed-array/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/wide-align@1.1.3?package-id=5c7edf2206958f5d", + "type": "library", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "wide-align", + "version": "1.1.3", + "description": "A wide-character aware text alignment function for use on the console or with fixed width fonts.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:wide-align:wide-align:1.1.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/wide-align@1.1.3", + "externalReferences": [ + { + "url": "https://github.com/iarna/wide-align", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wide-align:wide_align:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wide_align:wide-align:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wide_align:wide_align:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iarna:wide-align:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iarna:wide_align:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wide:wide-align:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wide:wide_align:1.1.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/wide-align/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/wide-align@1.1.5?package-id=2f5deab669904e50", + "type": "library", + "author": "Rebecca Turner (http://re-becca.org/)", + "name": "wide-align", + "version": "1.1.5", + "description": "A wide-character aware text alignment function for use on the console or with fixed width fonts.", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:wide-align:wide-align:1.1.5:*:*:*:*:*:*:*", + "purl": "pkg:npm/wide-align@1.1.5", + "externalReferences": [ + { + "url": "https://github.com/iarna/wide-align", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wide-align:wide_align:1.1.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wide_align:wide-align:1.1.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wide_align:wide_align:1.1.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iarna:wide-align:1.1.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:iarna:wide_align:1.1.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wide:wide-align:1.1.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wide:wide_align:1.1.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/wide-align/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/winston@3.19.0?package-id=af1d6f4cfc747231", + "type": "library", + "author": "Charlie Robbins , David Hyde ", + "name": "winston", + "version": "3.19.0", + "description": "A logger for just about everything.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:winstonjs:winston:3.19.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/winston@3.19.0", + "externalReferences": [ + { + "url": "https://github.com/winstonjs/winston.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:winston:winston:3.19.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/winston/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/winston-transport@4.9.0?package-id=365414d23adfc5d2", + "type": "library", + "author": "Charlie Robbins ", + "name": "winston-transport", + "version": "4.9.0", + "description": "Base stream implementations for winston@3 and up.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:winston-transport:winston-transport:4.9.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/winston-transport@4.9.0", + "externalReferences": [ + { + "url": "https://github.com/winstonjs/winston-transport#readme", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:winston-transport:winston_transport:4.9.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:winston_transport:winston-transport:4.9.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:winston_transport:winston_transport:4.9.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:winstonjs:winston-transport:4.9.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:winstonjs:winston_transport:4.9.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:winston:winston-transport:4.9.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:winston:winston_transport:4.9.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/winston-transport/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/with@7.0.2?package-id=f241c9ed4f41ff10", + "type": "library", + "author": "ForbesLindesay", + "name": "with", + "version": "7.0.2", + "description": "Compile time `with` for strict mode JavaScript", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:pugjs:with:7.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/with@7.0.2", + "externalReferences": [ + { + "url": "https://github.com/pugjs/with.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:with:with:7.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/with/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/wkx@0.5.0?package-id=842b66eb903e3244", + "type": "library", + "author": "Christian Schwarz", + "name": "wkx", + "version": "0.5.0", + "description": "A WKT/WKB/EWKT/EWKB/TWKB/GeoJSON parser and serializer", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:cschwarz:wkx:0.5.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/wkx@0.5.0", + "externalReferences": [ + { + "url": "http://github.com/cschwarz/wkx.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wkx:wkx:0.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/wkx/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/wordwrap@1.0.0?package-id=b911c29de2bf7ea1", + "type": "library", + "author": "James Halliday (http://substack.net)", + "name": "wordwrap", + "version": "1.0.0", + "description": "Wrap those words. Show them at what columns to start and stop.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:substack:wordwrap:1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/wordwrap@1.0.0", + "externalReferences": [ + { + "url": "git://github.com/substack/node-wordwrap.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wordwrap:wordwrap:1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/wordwrap/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/wrap-ansi@6.2.0?package-id=cbfbb7822072903f", + "type": "library", + "author": "Sindre Sorhus (sindresorhus.com)", + "name": "wrap-ansi", + "version": "6.2.0", + "description": "Wordwrap a string with ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:wrap-ansi:wrap-ansi:6.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/wrap-ansi@6.2.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wrap-ansi:wrap_ansi:6.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wrap_ansi:wrap-ansi:6.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wrap_ansi:wrap_ansi:6.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wrap:wrap-ansi:6.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wrap:wrap_ansi:6.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/replace/node_modules/wrap-ansi/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/wrap-ansi@7.0.0?package-id=b15a62ebd4d4ca1c", + "type": "library", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "wrap-ansi", + "version": "7.0.0", + "description": "Wordwrap a string with ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:wrap-ansi:wrap-ansi:7.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/wrap-ansi@7.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wrap-ansi:wrap_ansi:7.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wrap_ansi:wrap-ansi:7.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wrap_ansi:wrap_ansi:7.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wrap:wrap-ansi:7.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wrap:wrap_ansi:7.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/wrap-ansi-cjs/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/wrap-ansi@8.1.0?package-id=3e75b684ded1ef93", + "type": "library", + "author": "Sindre Sorhus (https://sindresorhus.com)", + "name": "wrap-ansi", + "version": "8.1.0", + "description": "Wordwrap a string with ANSI escape codes", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:wrap-ansi:wrap-ansi:8.1.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/wrap-ansi@8.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wrap-ansi:wrap_ansi:8.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wrap_ansi:wrap-ansi:8.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wrap_ansi:wrap_ansi:8.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wrap:wrap-ansi:8.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:wrap:wrap_ansi:8.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/wrap-ansi/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/wrappy@1.0.2?package-id=9e7700cc01592b12", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "wrappy", + "version": "1.0.2", + "description": "Callback wrapping utility", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:wrappy:wrappy:1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/wrappy@1.0.2", + "externalReferences": [ + { + "url": "https://github.com/npm/wrappy", + "type": "distribution" + }, + { + "url": "https://github.com/npm/wrappy", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:npm:wrappy:1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/wrappy/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ws@7.4.6?package-id=670482146c83d660", + "type": "library", + "author": "Einar Otto Stangvik (http://2x.io)", + "name": "ws", + "version": "7.4.6", + "description": "Simple to use, blazing fast and thoroughly tested websocket client and server for Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ws_project:ws:7.4.6:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/ws@7.4.6", + "externalReferences": [ + { + "url": "https://github.com/websockets/ws", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/engine.io/node_modules/ws/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/ws@8.17.1?package-id=c740f277708480a9", + "type": "library", + "author": "Einar Otto Stangvik (http://2x.io)", + "name": "ws", + "version": "8.17.1", + "description": "Simple to use, blazing fast and thoroughly tested websocket client and server for Node.js", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:ws_project:ws:8.17.1:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/ws@8.17.1", + "externalReferences": [ + { + "url": "git+https://github.com/websockets/ws.git", + "type": "distribution" + }, + { + "url": "https://github.com/websockets/ws", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/ws/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/xtend@4.0.2?package-id=961b704b394b9dda", + "type": "library", + "author": "Raynos , Jake Verbaten, Matt Esch", + "name": "xtend", + "version": "4.0.2", + "description": "extend like a boss", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:Raynos:xtend:4.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/xtend@4.0.2", + "externalReferences": [ + { + "url": "git://github.com/Raynos/xtend.git", + "type": "distribution" + }, + { + "url": "https://github.com/Raynos/xtend", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:xtend:xtend:4.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/xtend/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/y18n@4.0.3?package-id=cb7009f90513c997", + "type": "library", + "author": "Ben Coe ", + "name": "y18n", + "version": "4.0.3", + "description": "the bare-bones internationalization library used by yargs", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:y18n_project:y18n:4.0.3:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/y18n@4.0.3", + "externalReferences": [ + { + "url": "https://github.com/yargs/y18n", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/y18n/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/yallist@3.1.1?package-id=91c0363893b76787", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "yallist", + "version": "3.1.1", + "description": "Yet Another Linked List", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:yallist:yallist:3.1.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/yallist@3.1.1", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/yallist.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/node-pre-gyp/node_modules/yallist/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/yallist@4.0.0?package-id=6ff65ae32fc308b3", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "yallist", + "version": "4.0.0", + "description": "Yet Another Linked List", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/yallist@4.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/yallist.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/minipass-flush/node_modules/yallist/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/yallist@4.0.0?package-id=ebf539c8f0cfa1bf", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "yallist", + "version": "4.0.0", + "description": "Yet Another Linked List", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/yallist@4.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/yallist.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/minipass-pipeline/node_modules/yallist/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/yallist@4.0.0?package-id=88bb3e58ef355edf", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "yallist", + "version": "4.0.0", + "description": "Yet Another Linked List", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/yallist@4.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/yallist.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/minipass-sized/node_modules/yallist/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/yallist@4.0.0?package-id=d66798877c986375", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "yallist", + "version": "4.0.0", + "description": "Yet Another Linked List", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/yallist@4.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/yallist.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/sqlite3/node_modules/yallist/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/yallist@5.0.0?package-id=0b515ba55614743d", + "type": "library", + "author": "Isaac Z. Schlueter (http://blog.izs.me/)", + "name": "yallist", + "version": "5.0.0", + "description": "Yet Another Linked List", + "licenses": [ + { + "license": { + "id": "BlueOak-1.0.0" + } + } + ], + "cpe": "cpe:2.3:a:yallist:yallist:5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/yallist@5.0.0", + "externalReferences": [ + { + "url": "git+https://github.com/isaacs/yallist.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/yallist/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/yaml-schema-validator@1.2.3?package-id=aaef2ad8ce881f0a", + "type": "library", + "author": "Ketan Saxena", + "name": "yaml-schema-validator", + "version": "1.2.3", + "description": "Schema validator for yaml files", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:yaml-schema-validator:yaml-schema-validator:1.2.3:*:*:*:*:*:*:*", + "purl": "pkg:npm/yaml-schema-validator@1.2.3", + "externalReferences": [ + { + "url": "https://github.com/ketanTechracers/schema-validator", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:yaml-schema-validator:yaml_schema_validator:1.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:yaml_schema_validator:yaml-schema-validator:1.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:yaml_schema_validator:yaml_schema_validator:1.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ketanTechracers:yaml-schema-validator:1.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ketanTechracers:yaml_schema_validator:1.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:yaml-schema:yaml-schema-validator:1.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:yaml-schema:yaml_schema_validator:1.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:yaml_schema:yaml-schema-validator:1.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:yaml_schema:yaml_schema_validator:1.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:yaml:yaml-schema-validator:1.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:yaml:yaml_schema_validator:1.2.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/yaml-schema-validator/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/yargs@15.4.1?package-id=2f0e67180312e9e4", + "type": "library", + "author": "Yargs Contributors (https://github.com/yargs/yargs/graphs/contributors)", + "name": "yargs", + "version": "15.4.1", + "description": "yargs the modern, pirate-themed, successor to optimist.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:yargs:yargs:15.4.1:*:*:*:*:*:*:*", + "purl": "pkg:npm/yargs@15.4.1", + "externalReferences": [ + { + "url": "https://github.com/yargs/yargs.git", + "type": "distribution" + }, + { + "url": "https://yargs.js.org/", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/replace/node_modules/yargs/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/yargs-parser@18.1.3?package-id=827c460c5ebe0ff3", + "type": "library", + "author": "Ben Coe ", + "name": "yargs-parser", + "version": "18.1.3", + "description": "the mighty option parser used by yargs", + "licenses": [ + { + "license": { + "id": "ISC" + } + } + ], + "cpe": "cpe:2.3:a:yargs:yargs-parser:18.1.3:*:*:*:*:node.js:*:*", + "purl": "pkg:npm/yargs-parser@18.1.3", + "externalReferences": [ + { + "url": "https://github.com/yargs/yargs-parser.git", + "type": "distribution" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/replace/node_modules/yargs-parser/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/yauzl@2.10.0?package-id=7c6e4166ba89d3cf", + "type": "library", + "author": "Josh Wolfe ", + "name": "yauzl", + "version": "2.10.0", + "description": "yet another unzip library for node", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:thejoshwolfe:yauzl:2.10.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/yauzl@2.10.0", + "externalReferences": [ + { + "url": "https://github.com/thejoshwolfe/yauzl.git", + "type": "distribution" + }, + { + "url": "https://github.com/thejoshwolfe/yauzl", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:yauzl:yauzl:2.10.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/yauzl/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/z85@0.0.2?package-id=866e9bab4ee23af1", + "type": "library", + "author": "Michael Sealand ", + "name": "z85", + "version": "0.0.2", + "description": "ZeroMQ Base-85 Encoding", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:msealand:z85:0.0.2:*:*:*:*:*:*:*", + "purl": "pkg:npm/z85@0.0.2", + "externalReferences": [ + { + "url": "https://github.com/msealand/z85.node.git", + "type": "distribution" + }, + { + "url": "https://github.com/msealand/z85.node", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:z85:z85:0.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/z85/package.json" + } + ] + }, + { + "bom-ref": "pkg:npm/zip-stream@1.2.0?package-id=0180651c6d08c060", + "type": "library", + "author": "Chris Talkington (http://christalkington.com/)", + "name": "zip-stream", + "version": "1.2.0", + "description": "a streaming zip archive generator.", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:archiverjs:zip-stream:1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:npm/zip-stream@1.2.0", + "externalReferences": [ + { + "url": "https://github.com/archiverjs/node-zip-stream.git", + "type": "distribution" + }, + { + "url": "https://github.com/archiverjs/node-zip-stream", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:archiverjs:zip_stream:1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:zip-stream:zip-stream:1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:zip-stream:zip_stream:1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:zip_stream:zip-stream:1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:zip_stream:zip_stream:1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:zip:zip-stream:1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:zip:zip_stream:1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/zip-stream/package.json" + } + ] + }, + { + "bom-ref": "pkg:deb/debian/zlib1g@1%3A1.3.dfsg%2Breally1.3.1-1%2Bb1?arch=amd64&distro=debian-13&package-id=7bfd545dc64f4e5a&upstream=zlib%401%3A1.3.dfsg%2Breally1.3.1-1", + "type": "library", + "publisher": "Mark Brown ", + "name": "zlib1g", + "version": "1:1.3.dfsg+really1.3.1-1+b1", + "licenses": [ + { + "license": { + "id": "Zlib" + } + } + ], + "cpe": "cpe:2.3:a:zlib1g:zlib1g:1\\:1.3.dfsg\\+really1.3.1-1\\+b1:*:*:*:*:*:*:*", + "purl": "pkg:deb/debian/zlib1g@1%3A1.3.dfsg%2Breally1.3.1-1%2Bb1?arch=amd64&distro=debian-13&upstream=zlib%401%3A1.3.dfsg%2Breally1.3.1-1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "dpkg-db-cataloger" + }, + { + "name": "syft:package:type", + "value": "deb" + }, + { + "name": "syft:package:metadataType", + "value": "dpkg-db-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:e4ba966d7f0527dfe0fcb559e4e18d4da42c4e6beae924719255e0dedb554ed0" + }, + { + "name": "syft:location:0:path", + "value": "/var/lib/dpkg/status.d/zlib1g" + }, + { + "name": "syft:location:1:layerID", + "value": "sha256:e4ba966d7f0527dfe0fcb559e4e18d4da42c4e6beae924719255e0dedb554ed0" + }, + { + "name": "syft:location:1:path", + "value": "/usr/share/doc/zlib1g/copyright" + }, + { + "name": "syft:location:2:layerID", + "value": "sha256:e4ba966d7f0527dfe0fcb559e4e18d4da42c4e6beae924719255e0dedb554ed0" + }, + { + "name": "syft:location:2:path", + "value": "/var/lib/dpkg/status.d/zlib1g.md5sums" + }, + { + "name": "syft:metadata:installedSize", + "value": "173" + }, + { + "name": "syft:metadata:source", + "value": "zlib" + }, + { + "name": "syft:metadata:sourceVersion", + "value": "1:1.3.dfsg+really1.3.1-1" + } + ] + }, + { + "bom-ref": "pkg:npm/zod@3.25.76?package-id=ea8efe4fe69bdf44", + "type": "library", + "author": "Colin McDonnell ", + "name": "zod", + "version": "3.25.76", + "description": "TypeScript-first schema declaration and validation library with static type inference", + "licenses": [ + { + "license": { + "id": "MIT" + } + } + ], + "cpe": "cpe:2.3:a:zod:zod:3.25.76:*:*:*:*:*:*:*", + "purl": "pkg:npm/zod@3.25.76", + "externalReferences": [ + { + "url": "git+https://github.com/colinhacks/zod.git", + "type": "distribution" + }, + { + "url": "https://zod.dev", + "type": "website" + } + ], + "properties": [ + { + "name": "syft:package:foundBy", + "value": "javascript-package-cataloger" + }, + { + "name": "syft:package:language", + "value": "javascript" + }, + { + "name": "syft:package:type", + "value": "npm" + }, + { + "name": "syft:package:metadataType", + "value": "javascript-npm-package" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:f4bb7ec73c07ef3ba9e341c378fc380442a5e7d2dcc7cab9ff556e2bbca7b5ed" + }, + { + "name": "syft:location:0:path", + "value": "/juice-shop/node_modules/zod/package.json" + } + ] + }, + { + "bom-ref": "os:debian@13", + "type": "operating-system", + "name": "debian", + "version": "13", + "description": "Distroless", + "swid": { + "tagId": "debian", + "name": "debian", + "version": "13" + }, + "externalReferences": [ + { + "url": "https://github.com/GoogleContainerTools/distroless/issues/new", + "type": "issue-tracker" + }, + { + "url": "https://github.com/GoogleContainerTools/distroless", + "type": "website" + }, + { + "url": "https://github.com/GoogleContainerTools/distroless/blob/master/README.md", + "comment": "support", + "type": "other" + } + ], + "properties": [ + { + "name": "syft:distro:extendedSupport", + "value": "false" + }, + { + "name": "syft:distro:id", + "value": "debian" + }, + { + "name": "syft:distro:prettyName", + "value": "Distroless" + }, + { + "name": "syft:distro:versionID", + "value": "13" + } + ] + }, + { + "bom-ref": "a122c1a449e5693a", + "type": "file", + "name": "/usr/share/doc/base-files/copyright", + "hashes": [ + { + "alg": "SHA-1", + "content": "48a964e14ee8c52aa1529efc1040d358e384ecec" + }, + { + "alg": "SHA-256", + "content": "576859a65409c99cb1632c8b3de4b3deb26910800832beda76aca33d00720134" + } + ] + }, + { + "bom-ref": "4a9f85a5755913bd", + "type": "file", + "name": "/var/lib/dpkg/status.d/base-files", + "hashes": [ + { + "alg": "SHA-1", + "content": "33a3bf4df4089fdd8ab4adfe1fba9bde73913526" + }, + { + "alg": "SHA-256", + "content": "86fff969d10dd3734ca3d32186f9fb4ba76109b089f5c5d314d5032dd6c8ee1c" + } + ] + }, + { + "bom-ref": "cf10b1953f27b8af", + "type": "file", + "name": "/var/lib/dpkg/status.d/base-files.md5sums", + "hashes": [ + { + "alg": "SHA-1", + "content": "65e556a0d358e2f85fbd00a488580125367dc2fc" + }, + { + "alg": "SHA-256", + "content": "604c0593fe8573f900f603521224d55b0e4b99978f0197892eede80334fd16d1" + } + ] + }, + { + "bom-ref": "fc8ad845573d9aa9", + "type": "file", + "name": "/usr/share/doc/netbase/copyright", + "hashes": [ + { + "alg": "SHA-1", + "content": "ed888a1f31b753739cde9435ff17fbab81aef830" + }, + { + "alg": "SHA-256", + "content": "795b66147ea5ad692991caa7008ece551fb0fa88b9c53656223bd1518dc58ab2" + } + ] + }, + { + "bom-ref": "eda4d4cf0900f9a5", + "type": "file", + "name": "/var/lib/dpkg/status.d/netbase", + "hashes": [ + { + "alg": "SHA-1", + "content": "225bb01a2cd2e4237ade61611d7a41abdde5911f" + }, + { + "alg": "SHA-256", + "content": "1b44f4feb536c195a150c6b83001dfa016cb40f35ed1a5972248eddd8677a254" + } + ] + }, + { + "bom-ref": "feeedbf2bec912ff", + "type": "file", + "name": "/var/lib/dpkg/status.d/netbase.md5sums", + "hashes": [ + { + "alg": "SHA-1", + "content": "2dda7038760c2debb3e769a27d26dfd7f8ef8a14" + }, + { + "alg": "SHA-256", + "content": "ef0276ef8c499705809b3f72480078d8065ba28da0fb99e5c12bfedbe1e2f4cc" + } + ] + }, + { + "bom-ref": "000d7c34ed64f1f8", + "type": "file", + "name": "/usr/share/doc/tzdata/copyright", + "hashes": [ + { + "alg": "SHA-1", + "content": "aea2b97caa943cd88b5c1e03d1ac7055425f9aec" + }, + { + "alg": "SHA-256", + "content": "cb61132bc0fc7b26ef5a82ee18b2fb644a1362f4f286ed980ff22e408471f59a" + } + ] + }, + { + "bom-ref": "b21bde815981b92d", + "type": "file", + "name": "/var/lib/dpkg/status.d/tzdata", + "hashes": [ + { + "alg": "SHA-1", + "content": "8ce6f1e3bf98323680d9f3a27b7238232232e6bf" + }, + { + "alg": "SHA-256", + "content": "cceef28384ff713ff583a9d17059d61ff420e43974a10cbba58cd6cd4b2a029b" + } + ] + }, + { + "bom-ref": "894b2b668952a6a7", + "type": "file", + "name": "/var/lib/dpkg/status.d/tzdata.md5sums", + "hashes": [ + { + "alg": "SHA-1", + "content": "483ed8b2d22843feda239c3edd710554de9c92fe" + }, + { + "alg": "SHA-256", + "content": "8229a7a88ff9d1e759461f114e9637d72623e9880fc539edfc16e7a51ee4260b" + } + ] + }, + { + "bom-ref": "12141f13a70d55ba", + "type": "file", + "name": "/usr/share/doc/tzdata-legacy/copyright", + "hashes": [ + { + "alg": "SHA-1", + "content": "aea2b97caa943cd88b5c1e03d1ac7055425f9aec" + }, + { + "alg": "SHA-256", + "content": "cb61132bc0fc7b26ef5a82ee18b2fb644a1362f4f286ed980ff22e408471f59a" + } + ] + }, + { + "bom-ref": "f703666eb77bbee9", + "type": "file", + "name": "/var/lib/dpkg/status.d/tzdata-legacy", + "hashes": [ + { + "alg": "SHA-1", + "content": "2bb10e6f90eaf83440bf7969fb478e41619e1786" + }, + { + "alg": "SHA-256", + "content": "c6d0fa582ce59b9aba43d34e627386b1d45c902d26adcf6a34129cbdc3c57af4" + } + ] + }, + { + "bom-ref": "d840c92f91fdcf6d", + "type": "file", + "name": "/var/lib/dpkg/status.d/tzdata-legacy.md5sums", + "hashes": [ + { + "alg": "SHA-1", + "content": "87d6ccdd545a6f91b2be310a564914efa5009068" + }, + { + "alg": "SHA-256", + "content": "75c6e12ce59cd6933320bdc9bfb864324e84a9a7bea100a2c313684385e945c2" + } + ] + }, + { + "bom-ref": "e6bea96639250827", + "type": "file", + "name": "/usr/share/doc/media-types/copyright", + "hashes": [ + { + "alg": "SHA-1", + "content": "122ec71bc0ee27107fe8c40b8f5b4976dcd558d3" + }, + { + "alg": "SHA-256", + "content": "5ded7c53199b6a1d089b0b7e231d77e5c84081c7156b372b3f11ad9c1c2c5cc7" + } + ] + }, + { + "bom-ref": "35aa49848f728b23", + "type": "file", + "name": "/var/lib/dpkg/status.d/media-types", + "hashes": [ + { + "alg": "SHA-1", + "content": "4ea0de54e94f111e8c83b11dbf38e3357335cd3e" + }, + { + "alg": "SHA-256", + "content": "60e871d56cfcc834fe0a8d0436f98996e1bb196d3ddf8f2109d0f05266a816ce" + } + ] + }, + { + "bom-ref": "fcdb10b698161097", + "type": "file", + "name": "/var/lib/dpkg/status.d/media-types.md5sums", + "hashes": [ + { + "alg": "SHA-1", + "content": "04f4398950c17592d0315fbf3f6f633782e7d43d" + }, + { + "alg": "SHA-256", + "content": "fb4ec9a3445a2b4800f35f816844f3c03b5501a83431fea326bfdf46c09a77ec" + } + ] + }, + { + "bom-ref": "d682e15b229832b1", + "type": "file", + "name": "/usr/share/doc/libc6/copyright", + "hashes": [ + { + "alg": "SHA-1", + "content": "5db687e636814b9460f1a0cb1e52d41d4003af7d" + }, + { + "alg": "SHA-256", + "content": "f5788886720a2605a946e81d571e6c8162b09f58d2e2ceb8d36e5768fccd850d" + } + ] + }, + { + "bom-ref": "959e4721b6a2b8c5", + "type": "file", + "name": "/var/lib/dpkg/status.d/libc6", + "hashes": [ + { + "alg": "SHA-1", + "content": "19264c76cf8fe764a25333ab6d92535ff5aa5ce7" + }, + { + "alg": "SHA-256", + "content": "84172f2403b463f1949eed3280a6eff9e8ff20e820d44eceef8722bb99040837" + } + ] + }, + { + "bom-ref": "83c346d06f13e135", + "type": "file", + "name": "/var/lib/dpkg/status.d/libc6.md5sums", + "hashes": [ + { + "alg": "SHA-1", + "content": "29e5226715537c786d8a7cf5c02f5d6b65c653a7" + }, + { + "alg": "SHA-256", + "content": "429b6b2e611cf5fc8b0c74a44b7feaf36dc0e0d1f90cf6114c4b21fc1e24a75f" + } + ] + }, + { + "bom-ref": "138003b786286cbb", + "type": "file", + "name": "/usr/share/doc/libssl3t64/copyright", + "hashes": [ + { + "alg": "SHA-1", + "content": "b936c38070ff5b477030a02e903cc7cbc1f1f11e" + }, + { + "alg": "SHA-256", + "content": "6a7da622fe0637a334d2a8fc470852d2ffb77d9a2b2f930f854e32a41ad6ef35" + } + ] + }, + { + "bom-ref": "6d794a67b38dbedf", + "type": "file", + "name": "/var/lib/dpkg/status.d/libssl3t64", + "hashes": [ + { + "alg": "SHA-1", + "content": "c01b86a7c1e126a370a5438bde91e811dbc01bce" + }, + { + "alg": "SHA-256", + "content": "bb2c492d1a6956a57bcacd9c9193970d3ff69f36bea9b26fe96c70d485606c8c" + } + ] + }, + { + "bom-ref": "ec3657565ec3c464", + "type": "file", + "name": "/var/lib/dpkg/status.d/libssl3t64.md5sums", + "hashes": [ + { + "alg": "SHA-1", + "content": "4cb618f3de40ca32b1d95f382b8d2e6fb59da626" + }, + { + "alg": "SHA-256", + "content": "b248709870ee10d7506ea27873cc48df10642aaaf9bce2527be2d4f92aa0807e" + } + ] + }, + { + "bom-ref": "5b03f10f79cdaabb", + "type": "file", + "name": "/usr/lib/x86_64-linux-gnu/libzstd.so.1.5.7", + "hashes": [ + { + "alg": "SHA-1", + "content": "30bb4545c80061e58dd4c32609deaf9b78795a18" + }, + { + "alg": "SHA-256", + "content": "27f07c9a49c2c956bcfb64cd4712976586a66facbf15fc7f09bc37413b5f2b21" + } + ] + }, + { + "bom-ref": "c4cb0224a9599fff", + "type": "file", + "name": "/usr/share/doc/libzstd1/copyright", + "hashes": [ + { + "alg": "SHA-1", + "content": "30af3496fe86a55c6df5011d609261cc1029432c" + }, + { + "alg": "SHA-256", + "content": "5cec9fef4d3fa7e0371fbef4ec3fc416e0105dc2a9922117f84e825cb11f50f8" + } + ] + }, + { + "bom-ref": "3244d79e1a901da6", + "type": "file", + "name": "/var/lib/dpkg/status.d/libzstd1", + "hashes": [ + { + "alg": "SHA-1", + "content": "b036c1f37d56599cb90f454429b92d37322ce887" + }, + { + "alg": "SHA-256", + "content": "8a963d286e933559193528d86006b777d03e26973c38f7d74d733e832f914636" + } + ] + }, + { + "bom-ref": "a5a1dab39771a050", + "type": "file", + "name": "/var/lib/dpkg/status.d/libzstd1.md5sums", + "hashes": [ + { + "alg": "SHA-1", + "content": "f70e83fe7eda5fcdf41f94ded857d560094d664b" + }, + { + "alg": "SHA-256", + "content": "efb1f21c7ceb49b436c319336551395135fa01e8a65eed096721d74c35647d52" + } + ] + }, + { + "bom-ref": "99a5e436209b17ec", + "type": "file", + "name": "/usr/share/doc/zlib1g/copyright", + "hashes": [ + { + "alg": "SHA-1", + "content": "27c676ac10db9b80a5287200d6810e34edbfa201" + }, + { + "alg": "SHA-256", + "content": "9e5b96d63773a5d177ba264254390f792be07e41748ebd94730981c6cac31cc6" + } + ] + }, + { + "bom-ref": "678aff371f30fdd8", + "type": "file", + "name": "/var/lib/dpkg/status.d/zlib1g", + "hashes": [ + { + "alg": "SHA-1", + "content": "6121202dccad87d8f1268292ec3d7472707d707b" + }, + { + "alg": "SHA-256", + "content": "34e862c1ccb0bac6c37bc7a6d165e8c9dd60d32f43daeffb9b1bd29377ca65ba" + } + ] + }, + { + "bom-ref": "ea2e99f1fe63e8c2", + "type": "file", + "name": "/var/lib/dpkg/status.d/zlib1g.md5sums", + "hashes": [ + { + "alg": "SHA-1", + "content": "c7936a6071f1e55c7dad50dcfa0ab18119d829ba" + }, + { + "alg": "SHA-256", + "content": "380574028272433bb50ec25b2423674113a5a9171a46dc7f81555add4f5d2d4b" + } + ] + }, + { + "bom-ref": "d01e94193726fb35", + "type": "file", + "name": "/usr/lib/x86_64-linux-gnu/libgomp.so.1.0.0", + "hashes": [ + { + "alg": "SHA-1", + "content": "cecf8ef94a46d6c04cb30af433d0119656222473" + }, + { + "alg": "SHA-256", + "content": "6456b504ac347bd50c419667440b691f6966ad8aff5309d2f06c977fe2f9debe" + } + ] + }, + { + "bom-ref": "4f14662d148b0c6b", + "type": "file", + "name": "/var/lib/dpkg/status.d/libgomp1", + "hashes": [ + { + "alg": "SHA-1", + "content": "110879031119e55850c88601f74015d25aad7daa" + }, + { + "alg": "SHA-256", + "content": "106b14a05701bf88cadc607287ec1f3bcac81c2b2cc9ac018379dcfef4e288a4" + } + ] + }, + { + "bom-ref": "bf9a08c972628e1a", + "type": "file", + "name": "/var/lib/dpkg/status.d/libgomp1.md5sums", + "hashes": [ + { + "alg": "SHA-1", + "content": "99c918472652999a4a1c966d0e16de7d89978101" + }, + { + "alg": "SHA-256", + "content": "6a995c9f3c31ecdcc34e20bb867099b534a625da5c04ceb3a4c640bdf4ad09af" + } + ] + }, + { + "bom-ref": "7053847ecd312129", + "type": "file", + "name": "/usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.33", + "hashes": [ + { + "alg": "SHA-1", + "content": "7105a264731273c2221e7aa9aa437a8d5a8f7a7f" + }, + { + "alg": "SHA-256", + "content": "972bb2a18b71140dab0240f8a1f68ab3fb1d56bcd4c4f824a91b70888faf5a00" + } + ] + }, + { + "bom-ref": "7304cb9a8d4ac304", + "type": "file", + "name": "/var/lib/dpkg/status.d/libstdc++6", + "hashes": [ + { + "alg": "SHA-1", + "content": "d3fa305bf17ac2983c96aa96abd5ce5cdb3ebef7" + }, + { + "alg": "SHA-256", + "content": "b11c92c5307bf79ac50b489ee7bff067417b6e8b33d6d0c99da897d37e004c19" + } + ] + }, + { + "bom-ref": "e40051bc4e7f31c5", + "type": "file", + "name": "/var/lib/dpkg/status.d/libstdc++6.md5sums", + "hashes": [ + { + "alg": "SHA-1", + "content": "463a2306ff488ff106ff3e9c68860166384df4e0" + }, + { + "alg": "SHA-256", + "content": "c7c45c299bb7518e497f1ffa86e69f61ca3e720768388efcd59815fc73517814" + } + ] + }, + { + "bom-ref": "b51bdb4b2bc8d0d9", + "type": "file", + "name": "/usr/lib/x86_64-linux-gnu/libgcc_s.so.1", + "hashes": [ + { + "alg": "SHA-1", + "content": "2b604334e077ad5724cc372ece9aeee9c13cfdb2" + }, + { + "alg": "SHA-256", + "content": "30c61ab012a4241bed033725a09b61f5fdd3bb7df95ee852d0b096520524c7af" + } + ] + }, + { + "bom-ref": "7fa74609fb7d8a7c", + "type": "file", + "name": "/var/lib/dpkg/status.d/libgcc-s1", + "hashes": [ + { + "alg": "SHA-1", + "content": "d3879154761422ba26ab37a43933c8386e1455fd" + }, + { + "alg": "SHA-256", + "content": "4ba5fe45998229ab1aefccdec602b925977e53cc97bbb28fc12412ac165459fc" + } + ] + }, + { + "bom-ref": "da9946901a80793f", + "type": "file", + "name": "/var/lib/dpkg/status.d/libgcc-s1.md5sums", + "hashes": [ + { + "alg": "SHA-1", + "content": "637fac4e775011a1cc7763e8a1d5b44e7e9e9d04" + }, + { + "alg": "SHA-256", + "content": "fb30b61e483f6708ac4dcde252199d6def7a5a51424fa7696ec58bc3bc0e6f50" + } + ] + }, + { + "bom-ref": "5eae69a10bd92b68", + "type": "file", + "name": "/usr/share/doc/gcc-14-base/copyright", + "hashes": [ + { + "alg": "SHA-1", + "content": "2891df267ea14e7723fb2bdd705858679660fd97" + }, + { + "alg": "SHA-256", + "content": "20390f8a6f3b1e4d7cb45dd8652dabb259bbef688cbad839bcdb0b9ba7252f79" + } + ] + }, + { + "bom-ref": "8743c8be682d83bd", + "type": "file", + "name": "/var/lib/dpkg/status.d/gcc-14-base", + "hashes": [ + { + "alg": "SHA-1", + "content": "f91f40373f269dcafed64fe57e4c7f10d2161bd5" + }, + { + "alg": "SHA-256", + "content": "3ab3a11930c188172cc07ca122c7646b8d2c832e1403e37f993c53ceb838df28" + } + ] + }, + { + "bom-ref": "246400381c825fcd", + "type": "file", + "name": "/var/lib/dpkg/status.d/gcc-14-base.md5sums", + "hashes": [ + { + "alg": "SHA-1", + "content": "0362a35c654f8502dd0e9cdd59095322d7230a8a" + }, + { + "alg": "SHA-256", + "content": "c5e0ca9bd308598e3cd36a9f8993c2e81f1771a00af7a9e914fdde7d306d53ba" + } + ] + }, + { + "bom-ref": "aba5daa4ae9573d1", + "type": "file", + "name": "/nodejs/bin/node", + "hashes": [ + { + "alg": "SHA-1", + "content": "7f063e4c804cf7e7f027a3bbc2d70d3410a6fec2" + }, + { + "alg": "SHA-256", + "content": "d1de76d8edf2fededf6f8b30d244e2c0529ac607923a018283b77e9c74bd932c" + } + ] + }, + { + "bom-ref": "39aeeff6a91c490e", + "type": "file", + "name": "/juice-shop/build/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "9ad576c8901f4b6894aa994f4db0015fc845ff22" + }, + { + "alg": "SHA-256", + "content": "2c19a523f81507522144bdebe6ddaf6165812e6c4a657efd48f64320ae8367c0" + } + ] + }, + { + "bom-ref": "b5b4b69c989343b2", + "type": "file", + "name": "/juice-shop/frontend/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "272f84f582f7ee72700a9ceac4094bc22fc681f4" + }, + { + "alg": "SHA-256", + "content": "94f162f916c9329de4e002d7bcad8e53694c92ec3e97a6c7286c7f0c3dfc37da" + } + ] + }, + { + "bom-ref": "4a1515ddabab7a5f", + "type": "file", + "name": "/juice-shop/node_modules/@adraffy/ens-normalize/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b4b51cee01a8bfd426a63712cf29e2c60ca79c71" + }, + { + "alg": "SHA-256", + "content": "9cdfe2227ce61c1a701da4e62ca73f6fdce1fce6f076015c18d420efb8c7c833" + } + ] + }, + { + "bom-ref": "a84f121cb5c4012e", + "type": "file", + "name": "/juice-shop/node_modules/@ai-sdk/gateway/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "879925e27cf9cbdf8e408d63df9d1043d1c90d6f" + }, + { + "alg": "SHA-256", + "content": "74a5fafcf0d6cdbab041f12727214b50f7860f303fb6b44829b36053aa3a699c" + } + ] + }, + { + "bom-ref": "dcf7f2594f6b3876", + "type": "file", + "name": "/juice-shop/node_modules/@ai-sdk/openai-compatible/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "1677d0330028fff0c5c1f622080360f1aa4eefc1" + }, + { + "alg": "SHA-256", + "content": "04fc0d170834025d8bb1a1e7ae915b740644301700c1ba37e3de9042426ff066" + } + ] + }, + { + "bom-ref": "fcad281705b0d10d", + "type": "file", + "name": "/juice-shop/node_modules/@ai-sdk/provider-utils/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "6eef84e1a97bf27c284928bfd1335dba7f5fc2dd" + }, + { + "alg": "SHA-256", + "content": "7a36dab5baf983cfc9b8c73bd8f38f484c70847a3878356e06910981703d65e4" + } + ] + }, + { + "bom-ref": "3a4be711259e151e", + "type": "file", + "name": "/juice-shop/node_modules/@ai-sdk/provider/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ddf7ff73e95991c3745f512dbeadf9660653e207" + }, + { + "alg": "SHA-256", + "content": "b68e8fcbec4e0d780607b0ad5a2baefafcaa41416ab5056b7d1b829a5e58c503" + } + ] + }, + { + "bom-ref": "5207524af79da9db", + "type": "file", + "name": "/juice-shop/node_modules/@babel/helper-string-parser/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f02c656ee72f28316f9cb9641fc95fbdab02a2c4" + }, + { + "alg": "SHA-256", + "content": "2ed21f6ba1c3ad4b49e247fc9b6bc3274ac7160613879f4fd6e770a53d976d8f" + } + ] + }, + { + "bom-ref": "47157afcfc92b3f5", + "type": "file", + "name": "/juice-shop/node_modules/@babel/helper-validator-identifier/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "fd051f4e7b0ff3b42f8e109da06e98bfd66a0bdf" + }, + { + "alg": "SHA-256", + "content": "716eb3e9a849686b727f4c6fefb8aa48c2740ce18685cc8c73922be0e08b11df" + } + ] + }, + { + "bom-ref": "d70a3097de0eb890", + "type": "file", + "name": "/juice-shop/node_modules/@babel/parser/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "d5838c6a5931d227997296dd2b918066488a464e" + }, + { + "alg": "SHA-256", + "content": "989bf032e3fd9714dcbc85bfcb012314ba674f789cf5aa2fd6ac3bd46401df91" + } + ] + }, + { + "bom-ref": "8d57d6da79fa00f1", + "type": "file", + "name": "/juice-shop/node_modules/@babel/types/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "453aef876044b751d304e1d39199679dead5f8c4" + }, + { + "alg": "SHA-256", + "content": "3c3c04e2170a1015f2108af564b5602f0962a437a03dd3bc19782bcf77476b20" + } + ] + }, + { + "bom-ref": "7e0d585cd3df7422", + "type": "file", + "name": "/juice-shop/node_modules/@dabh/diagnostics/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "d1c351ca94e65e029133dc4a45c98b008896f355" + }, + { + "alg": "SHA-256", + "content": "407f69c7a7f98cd50fb9fab358706493c5c07e6c56cb90cc0825fef280e04ab6" + } + ] + }, + { + "bom-ref": "1d5837d1be6e3426", + "type": "file", + "name": "/juice-shop/node_modules/@fontsource/roboto/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "9aff3b16e32119d59106920948bb2c103930fe0d" + }, + { + "alg": "SHA-256", + "content": "225f588d35e158c34229edbb25c0f3829315cbd80ff8e7f21520cdb9f731c754" + } + ] + }, + { + "bom-ref": "b93a8e89af318456", + "type": "file", + "name": "/juice-shop/node_modules/@gar/promisify/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "02e977a876bd7e3217381e7ba9d2cb07f379d274" + }, + { + "alg": "SHA-256", + "content": "dca651c9d8bb01b3691f5c6e2ad4be9ead2b031c27fd9d545c8d4f546917c6d5" + } + ] + }, + { + "bom-ref": "9c06318f50f5d217", + "type": "file", + "name": "/juice-shop/node_modules/@isaacs/cliui/node_modules/ansi-regex/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ce200865f7a4839de6213072c7986484139c50b1" + }, + { + "alg": "SHA-256", + "content": "a58f1d6dbaca116f4aaa83906a0a992da2303a07ca920b2ce877573988eae352" + } + ] + }, + { + "bom-ref": "b0b18a182ca864fd", + "type": "file", + "name": "/juice-shop/node_modules/@isaacs/cliui/node_modules/emoji-regex/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "238c48183550d02ab5c0dd37e13d57006dce640a" + }, + { + "alg": "SHA-256", + "content": "181fa046bdbb7d8958c57dcef2e63aea9af667036e218c7222479a8618375f1a" + } + ] + }, + { + "bom-ref": "e5e9770c9038ca5b", + "type": "file", + "name": "/juice-shop/node_modules/@isaacs/cliui/node_modules/string-width/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "53ae7a1b3953e86624927fec8421d453d9c88e41" + }, + { + "alg": "SHA-256", + "content": "adbcb3b95ea29c1f2a91a0af600fd9136ce408a38622332848ba4630dc473659" + } + ] + }, + { + "bom-ref": "510a0c794c2a890b", + "type": "file", + "name": "/juice-shop/node_modules/@isaacs/cliui/node_modules/strip-ansi/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "6c109cf2dd51ea9d89ed05e64161782df7559477" + }, + { + "alg": "SHA-256", + "content": "228b214dd06ca80ab3c36e2b890a8696a39cea65585f6d61498c922c615e18a0" + } + ] + }, + { + "bom-ref": "ef53dbb0c9def008", + "type": "file", + "name": "/juice-shop/node_modules/@isaacs/cliui/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "5f8f4c1e3bf1144f3a52c51bf040d843bb2a8b90" + }, + { + "alg": "SHA-256", + "content": "b4f9cc8d09602a487dea1c227ce24777cda87e2ad8a29ab9f741214ab78dc065" + } + ] + }, + { + "bom-ref": "0acf227f270f29e3", + "type": "file", + "name": "/juice-shop/node_modules/@isaacs/fs-minipass/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "504edba0a95630e08edf150335c2fe914825fc5a" + }, + { + "alg": "SHA-256", + "content": "ab8c1c2bce664e4c76b1937fa1a28f00ca5231a70cf0c1f78dd473101a9d2a88" + } + ] + }, + { + "bom-ref": "44da01d140df692a", + "type": "file", + "name": "/juice-shop/node_modules/@material/material-color-utilities/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "1a6e7aa5519862989bf58eb3a85aef278dd677f7" + }, + { + "alg": "SHA-256", + "content": "bc6d0c72745cef5488b2eaecb191eb5b8b91036d21e5c35985fe9f5069c683a4" + } + ] + }, + { + "bom-ref": "6f56e86551c74fbc", + "type": "file", + "name": "/juice-shop/node_modules/@noble/curves/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "0fd9f24eefe764a426a907c1f677dd70068dfcc3" + }, + { + "alg": "SHA-256", + "content": "bf61194229da9a7fd331fcf44cc24f746b5cbaefe941a312215376584c269bd5" + } + ] + }, + { + "bom-ref": "3d793649b98d69ef", + "type": "file", + "name": "/juice-shop/node_modules/@noble/hashes/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "696457a8c87f5f6da7f2844a140e72f84b782b8c" + }, + { + "alg": "SHA-256", + "content": "8d8203c66e91a9e6ee510facf378a2c7420b27139360132a257010c2e5f091bc" + } + ] + }, + { + "bom-ref": "1d1bea411c1fba3e", + "type": "file", + "name": "/juice-shop/node_modules/@npmcli/agent/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ca472993ec88d2b98a488f843d480575f24092f7" + }, + { + "alg": "SHA-256", + "content": "d67f4edf03680423c43434e3b28902feec2a136da2e85355034b174ba286828b" + } + ] + }, + { + "bom-ref": "e896ceff64fa95ed", + "type": "file", + "name": "/juice-shop/node_modules/@npmcli/fs/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "cf0302511d637d6a1f8b5e49b3d9b42210c7b8f0" + }, + { + "alg": "SHA-256", + "content": "028cce261f1b1840efa893492a88911e0f4832e29b46ae0dd38eb6ba5ae85856" + } + ] + }, + { + "bom-ref": "f0de383c897e6ab7", + "type": "file", + "name": "/juice-shop/node_modules/@npmcli/move-file/node_modules/glob/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ec0700462dfce89024e67c0437eabca858407176" + }, + { + "alg": "SHA-256", + "content": "b00b6d35eda6d4aa6893baf19e53b7d005019ed840e4fa116c926a532ec577cf" + } + ] + }, + { + "bom-ref": "90803fe8e95040f4", + "type": "file", + "name": "/juice-shop/node_modules/@npmcli/move-file/node_modules/mkdirp/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "46da394a85c88f3288e19ccd89c03174e1360c52" + }, + { + "alg": "SHA-256", + "content": "a7357d86be1fd6cd9ac7bc78c4d49155ce08c6087a2378fae5b15ce2eb34b9a2" + } + ] + }, + { + "bom-ref": "217d3896528b10b5", + "type": "file", + "name": "/juice-shop/node_modules/@npmcli/move-file/node_modules/rimraf/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ed8ec0789d4558ea2492b653fd0be9f16b90020d" + }, + { + "alg": "SHA-256", + "content": "fea6f9125ca35f3d20946205be39fb3758b21b5af44f75910799573bd1230d4c" + } + ] + }, + { + "bom-ref": "d81e8f5326f14acb", + "type": "file", + "name": "/juice-shop/node_modules/@npmcli/move-file/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "5d957f7d5bfb7d98d91c207e0d0a2471fbdef3a4" + }, + { + "alg": "SHA-256", + "content": "8fe75d037af2bfe77e1e675a77015f3522a2fdaf0a638907c9a925ee507e9e90" + } + ] + }, + { + "bom-ref": "5ea0d05aea271e5e", + "type": "file", + "name": "/juice-shop/node_modules/@opentelemetry/api/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "757db9254518b8ae5b5d6c5492c524410ff00196" + }, + { + "alg": "SHA-256", + "content": "c0d7c72331bc8cd456dd791f2f429ddafa1d0b5b8abeb4104e6deb12f18b4a86" + } + ] + }, + { + "bom-ref": "43a0188f28e21d60", + "type": "file", + "name": "/juice-shop/node_modules/@otplib/core/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "2b604ed4b65e5f82e69aa436ff70a119eed8cb75" + }, + { + "alg": "SHA-256", + "content": "3e5dead41ab9ac095b3be44ae6e0c37f5ae831636cfce1abdb56ce0c57e41a8b" + } + ] + }, + { + "bom-ref": "5d0d9b64322a512d", + "type": "file", + "name": "/juice-shop/node_modules/@otplib/hotp/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "501e485e1d0a89be763043557f4083b3f72c3d5a" + }, + { + "alg": "SHA-256", + "content": "7b477349c8cc2bf83f5f593e15c26f48e9d12a4490d42994db5acacf8abb3acc" + } + ] + }, + { + "bom-ref": "26cec7c99fc8c1d0", + "type": "file", + "name": "/juice-shop/node_modules/@otplib/plugin-base32-scure/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "82855112525f4ab2b940e2281a9fbb6e9b96febd" + }, + { + "alg": "SHA-256", + "content": "e6205d670f1a1210ad004c915ab689536179ddfd667d93fb5d304087aef96564" + } + ] + }, + { + "bom-ref": "2a93304985fc4a31", + "type": "file", + "name": "/juice-shop/node_modules/@otplib/plugin-crypto-noble/node_modules/@noble/hashes/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "0186cd2ad6472c0d911913d93c60f35fd62d6e0b" + }, + { + "alg": "SHA-256", + "content": "df2580ed1896b0deffc07437c6a8d83fcf233e4c4c1e77c12e491563222c4719" + } + ] + }, + { + "bom-ref": "ff798420356813b3", + "type": "file", + "name": "/juice-shop/node_modules/@otplib/plugin-crypto-noble/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "0f9c4699286df76536177a6ca6967cd92456c68e" + }, + { + "alg": "SHA-256", + "content": "5baca1740e78d476073ff1731b99e35b0611c12c494c06dfff1d4278e3c5d90c" + } + ] + }, + { + "bom-ref": "f1046259076557a6", + "type": "file", + "name": "/juice-shop/node_modules/@otplib/totp/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "658b331371efdd4be9c8012ed7441575a7236abb" + }, + { + "alg": "SHA-256", + "content": "10892f195500ea44311121979ac424f38d31972ec1a69ab762980eb1a0a13050" + } + ] + }, + { + "bom-ref": "9cffaf5025aad17e", + "type": "file", + "name": "/juice-shop/node_modules/@otplib/uri/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "70638d409ca6d13f8cd6adda67a4661446741dbf" + }, + { + "alg": "SHA-256", + "content": "f66b3957f6e0fc8c5a04fd52262416d778696cce44df144a90f6ae19216850ec" + } + ] + }, + { + "bom-ref": "d620568a16f30074", + "type": "file", + "name": "/juice-shop/node_modules/@pkgjs/parseargs/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "0dd3949ab9157869b8d3387f50a149bca2638d73" + }, + { + "alg": "SHA-256", + "content": "c52af8cea1efc18fc306336d6ade5a1d8d9ccd8916a5d2246bc585a92635901e" + } + ] + }, + { + "bom-ref": "ce259de1537fee5e", + "type": "file", + "name": "/juice-shop/node_modules/@scarf/scarf/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "1d33fb93dace20b12286fb4b7f1682646af3f82b" + }, + { + "alg": "SHA-256", + "content": "f19876be1dc7b05cb55fb3ab06c20cc0ac87769287b3aad6cca50660a4b314fd" + } + ] + }, + { + "bom-ref": "aeccf4b8025de767", + "type": "file", + "name": "/juice-shop/node_modules/@scure/base/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "9fc2af29fd8cc0d1358820a4fa5a88d1626c9037" + }, + { + "alg": "SHA-256", + "content": "cfdeaaeafd8ebfb6b380e39348d755654363980b42903de26a5d70e5c5f68498" + } + ] + }, + { + "bom-ref": "d60d30ac0cf3870d", + "type": "file", + "name": "/juice-shop/node_modules/@sindresorhus/is/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "8ea4d75fb2542edc23ac23515566932977d948a5" + }, + { + "alg": "SHA-256", + "content": "55307d8c3e660374d48940083df93fd8f3a865eaff6bc34b5e5e455be718d439" + } + ] + }, + { + "bom-ref": "d47caa683246639b", + "type": "file", + "name": "/juice-shop/node_modules/@so-ric/colorspace/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "bf076b63871ce44c3a145305715ab0a0c4278bc7" + }, + { + "alg": "SHA-256", + "content": "86b3cce52cb2f3418fb1bd20578fd194de861d9e5ad7d9348bc577a71bf03100" + } + ] + }, + { + "bom-ref": "0c362f8551aebbba", + "type": "file", + "name": "/juice-shop/node_modules/@standard-schema/spec/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ef122360f134701af5258c890c303eb6f487f92f" + }, + { + "alg": "SHA-256", + "content": "58e5bd75ddd0684c88b07cd799585cc72a37fd6efb8ab0c936d49e230d5164fb" + } + ] + }, + { + "bom-ref": "7d839163680633fb", + "type": "file", + "name": "/juice-shop/node_modules/@swc/helpers/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "05c138187e3e03162e3013e7f2f13fc18c0c2fff" + }, + { + "alg": "SHA-256", + "content": "135140ae9edbdeafd3bd5e9c369a6828820f74ab2ce66c78a54743814da12282" + } + ] + }, + { + "bom-ref": "5573c6b91be689c9", + "type": "file", + "name": "/juice-shop/node_modules/@tokenizer/token/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "1a93635fac9b224d4d9cec1fadb28b3086d283ee" + }, + { + "alg": "SHA-256", + "content": "a677763aaed22462b4f9df2526b1038cef3a90bc6cf80be27b4e65d0f14472a9" + } + ] + }, + { + "bom-ref": "0d06963c8bdeebc6", + "type": "file", + "name": "/juice-shop/node_modules/@tootallnate/once/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ae912343fcf0eccd8a5f754a72bf2e9eea63a176" + }, + { + "alg": "SHA-256", + "content": "91391dee2904a0bb0de498cc0a41e020338d671a4c85f5bcafa15dde73eb26fe" + } + ] + }, + { + "bom-ref": "223212ab6190b51e", + "type": "file", + "name": "/juice-shop/node_modules/@types/component-emitter/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ccdbee7ccc3f57a596e334aadea037c5c1447b36" + }, + { + "alg": "SHA-256", + "content": "ad6d8f6ce55d30e47af416a460b07e27d39c8d953356dd708f8333984328ac24" + } + ] + }, + { + "bom-ref": "917da616e977c31c", + "type": "file", + "name": "/juice-shop/node_modules/@types/cookie/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "9a6923a33ab098b02ad284c092970aeb6b4e0f91" + }, + { + "alg": "SHA-256", + "content": "e71f9bef0642169c02de9e503e801f58aa259c58bbe51451a6ed618424f4048f" + } + ] + }, + { + "bom-ref": "a18c57598c8a1067", + "type": "file", + "name": "/juice-shop/node_modules/@types/cors/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "e40b9fa3d6c69bb63b0f8c946c073b445acf32b0" + }, + { + "alg": "SHA-256", + "content": "668eaf9685f07c43881b376ddf4fccf6d1896c0e46e528b0a32c383e15237271" + } + ] + }, + { + "bom-ref": "cad24ea019761249", + "type": "file", + "name": "/juice-shop/node_modules/@types/debug/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "e327bb983e50e3857d539486a379ad0d6a8a3967" + }, + { + "alg": "SHA-256", + "content": "3593dbd35512e263c1a4ed9e30545e7f8ffb2f7efabc4e536dddc0868be4e872" + } + ] + }, + { + "bom-ref": "ba96d4a460ec715e", + "type": "file", + "name": "/juice-shop/node_modules/@types/ms/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "2c98c18c958411b8b7fe5b181770ff00346947af" + }, + { + "alg": "SHA-256", + "content": "bbd8f5322ea82216e826e522a6a4ec2ed3086b57a25234d0044673eb374b8e2d" + } + ] + }, + { + "bom-ref": "2151188aff2d1404", + "type": "file", + "name": "/juice-shop/node_modules/@types/node/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "7787cbe72d49a1174ccabc243e7859843a2aa817" + }, + { + "alg": "SHA-256", + "content": "e6b573ab97177c4d783cc85bd1c369d374ef242f461e8c0264c58327ef1653ca" + } + ] + }, + { + "bom-ref": "74d352b5ddd2176f", + "type": "file", + "name": "/juice-shop/node_modules/@types/triple-beam/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c8ff7e60bf9d5507804b6906a5e020081e5f68f4" + }, + { + "alg": "SHA-256", + "content": "c8ed1c5130fb111dfad72c99a414eeb10a3171be8076aca86307b4d80c9ca079" + } + ] + }, + { + "bom-ref": "8f122d0191253146", + "type": "file", + "name": "/juice-shop/node_modules/@types/validator/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "36a07478450a7244efc8318bcdd5c3363dbcebdd" + }, + { + "alg": "SHA-256", + "content": "40e18e86a1328233729a4b46b2d636ff9ce4a0144123e27dee851d5ef9f4e460" + } + ] + }, + { + "bom-ref": "cc0a111392a5fef6", + "type": "file", + "name": "/juice-shop/node_modules/@vercel/oidc/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "3994d0ee8f9579a315dfe2198e4e5563cd5cdb8b" + }, + { + "alg": "SHA-256", + "content": "989edf56a27f7fc414d6718aad5d5d69e83f14ef14eaacd2b3e59b47a67a51b5" + } + ] + }, + { + "bom-ref": "930ae8d97e75b5a4", + "type": "file", + "name": "/juice-shop/node_modules/abbrev/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "bfc3606e605421f81936c77f156694df03ea1f55" + }, + { + "alg": "SHA-256", + "content": "5bcbdff71c063d5177f25fd3a5c7a6c2a9d565d968765ee3a1e73449dc0bc671" + } + ] + }, + { + "bom-ref": "b2de6ec3af47e65f", + "type": "file", + "name": "/juice-shop/node_modules/abort-controller/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "1919f0e7e241c60fff52bdd87df08ceee790ba05" + }, + { + "alg": "SHA-256", + "content": "3d64dcdcf9d0a1d045eb6bcaa5013d486f15527a3668e64b1155839a797da164" + } + ] + }, + { + "bom-ref": "e238ff4eba565f71", + "type": "file", + "name": "/juice-shop/node_modules/accepts/node_modules/negotiator/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "3c1b22e6ecae04b514912326957e6a205b015098" + }, + { + "alg": "SHA-256", + "content": "8672e91f7395ce51ec789d883d7f7d872a40847bb83a6a3f89c3d1ded39e55d9" + } + ] + }, + { + "bom-ref": "d4307ab9e7efcbfd", + "type": "file", + "name": "/juice-shop/node_modules/accepts/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "131ba4d63747e6663a9c19409e43ac034bd532cf" + }, + { + "alg": "SHA-256", + "content": "e5716d5d939db08c5c28ec6ae86ed67be5320f91089e2673fca1c5b876e57aa3" + } + ] + }, + { + "bom-ref": "759df13d9ac3a3c6", + "type": "file", + "name": "/juice-shop/node_modules/aes-js/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "02af0ae260ec880f2595635440d69184dd3ae979" + }, + { + "alg": "SHA-256", + "content": "60fc352466697ba86743b36101b2157cf413ac0e7d317788548993600f10cd7d" + } + ] + }, + { + "bom-ref": "3bf777678744dfe5", + "type": "file", + "name": "/juice-shop/node_modules/agent-base/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "126adbedcff6faa6826eca63c75e9193237ab10b" + }, + { + "alg": "SHA-256", + "content": "7a08cb2fe1d2b788e0a7bf6a9b7597dbeeeae804698c2fbd15de786d284d327c" + } + ] + }, + { + "bom-ref": "44ea374fe4c01a87", + "type": "file", + "name": "/juice-shop/node_modules/agentkeepalive/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "56d77987880ed3be6c5c0a6370f7fcfa1dc2cb58" + }, + { + "alg": "SHA-256", + "content": "8bdeeb4c6f66678c3a97b2fbc3a0c93b9e03dc021e85145859e1c72be7526822" + } + ] + }, + { + "bom-ref": "4be50eae94c8b3e0", + "type": "file", + "name": "/juice-shop/node_modules/aggregate-error/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "1a2aa44c34e2912cc96c75d0f1c2865a23a5e6f8" + }, + { + "alg": "SHA-256", + "content": "903137f787b80f82cdd11659b386966fa716be537e81fe9d474ef04ea0918f26" + } + ] + }, + { + "bom-ref": "b59800fa7d477b4a", + "type": "file", + "name": "/juice-shop/node_modules/ai/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "aaa4507d92144a156d8c6c97c5e91e45913d8350" + }, + { + "alg": "SHA-256", + "content": "d0a1d23f6547b777a0fdabce6c92bcaff7fb5db463235d8b2b814da7bb389d99" + } + ] + }, + { + "bom-ref": "f87199543edb9ee0", + "type": "file", + "name": "/juice-shop/node_modules/ansi-regex/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f1b78e043012e1ab5689d57377093e88f1400677" + }, + { + "alg": "SHA-256", + "content": "8b2dc166f2b74d5098bad38bdd3dd2f4d4775c626199872f5e36dbb48c40931d" + } + ] + }, + { + "bom-ref": "e93c2d229a6e3c67", + "type": "file", + "name": "/juice-shop/node_modules/ansi-styles/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "2abbe25af4f77cdc6986e0a6b14e9088aa6d3d93" + }, + { + "alg": "SHA-256", + "content": "8a015c815240c949222d5f474721b5888dd9413fccbbd91ab552bac134317f76" + } + ] + }, + { + "bom-ref": "eaa718541bcdba88", + "type": "file", + "name": "/juice-shop/node_modules/append-field/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "0c83d1d2369a3dac3edce107c0e7ca22f5d853c3" + }, + { + "alg": "SHA-256", + "content": "e8af240292f03363891c9fbb252d78dfcba4a4cba574d30aace32341d2fe7a22" + } + ] + }, + { + "bom-ref": "2d6fecccfc582618", + "type": "file", + "name": "/juice-shop/node_modules/aproba/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a705c382734b6694d6c98a8825d7b38d905cad58" + }, + { + "alg": "SHA-256", + "content": "6dcea0602535f88458b2e93b4dcad98451fdf1ee5dd5cbe8538cad12c3379068" + } + ] + }, + { + "bom-ref": "b5ba1fd487549034", + "type": "file", + "name": "/juice-shop/node_modules/archive-type/node_modules/file-type/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "3e30390a94384a39e4b46e8d55ea92f4a68f19c5" + }, + { + "alg": "SHA-256", + "content": "731f325f6221bea8b2168c6f207296f9bcfc88f4f3189f38ac126ad663feb671" + } + ] + }, + { + "bom-ref": "f121a487136ae2ce", + "type": "file", + "name": "/juice-shop/node_modules/archive-type/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "4ba4289c5ce1187cbb36a9debbea25356b9bc864" + }, + { + "alg": "SHA-256", + "content": "0f1d1cab9005aad5785c5544a117accf97bd896243131ebe6eb74b0a5600fe1a" + } + ] + }, + { + "bom-ref": "477054ab4f566ff1", + "type": "file", + "name": "/juice-shop/node_modules/archiver-utils/node_modules/glob/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ec0700462dfce89024e67c0437eabca858407176" + }, + { + "alg": "SHA-256", + "content": "b00b6d35eda6d4aa6893baf19e53b7d005019ed840e4fa116c926a532ec577cf" + } + ] + }, + { + "bom-ref": "fb25505643a9c018", + "type": "file", + "name": "/juice-shop/node_modules/archiver-utils/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b87a5196d43a0b967228fe8975640cf4eb50970e" + }, + { + "alg": "SHA-256", + "content": "dcf66f1fe9ce29bdcaf6b866e878365b8b1ebe76cab20149511529679c847ca1" + } + ] + }, + { + "bom-ref": "da4713cac35553a6", + "type": "file", + "name": "/juice-shop/node_modules/archiver/node_modules/async/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "5da55b9a896c8eed5f30013777ffbc8181bdfa67" + }, + { + "alg": "SHA-256", + "content": "180dfef0fd278a5225cdd10d1f352041129c337a961fb32ee53437fa85de76c1" + } + ] + }, + { + "bom-ref": "de458689ce90fe88", + "type": "file", + "name": "/juice-shop/node_modules/archiver/node_modules/glob/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ec0700462dfce89024e67c0437eabca858407176" + }, + { + "alg": "SHA-256", + "content": "b00b6d35eda6d4aa6893baf19e53b7d005019ed840e4fa116c926a532ec577cf" + } + ] + }, + { + "bom-ref": "778daee8938b46e5", + "type": "file", + "name": "/juice-shop/node_modules/archiver/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "66e8510aed54598ae1c823c8fee5f5a328374dee" + }, + { + "alg": "SHA-256", + "content": "b64c234b963198bceb01078344022ed411c86b1239d58aa84ef93a2f143b5289" + } + ] + }, + { + "bom-ref": "1117d000762e7e8a", + "type": "file", + "name": "/juice-shop/node_modules/are-we-there-yet/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "03e43bddeaf901ecbd2f1d09ee3f1efdfdd7da61" + }, + { + "alg": "SHA-256", + "content": "a68108794c8c3b8c1806785cbaa94dd8a338907bd4676d2b54a4216edfa73b56" + } + ] + }, + { + "bom-ref": "da98f2c1d41fc78f", + "type": "file", + "name": "/juice-shop/node_modules/argparse/node_modules/sprintf-js/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "dee1e26f14c8468e2e42814a439315ce89ee517a" + }, + { + "alg": "SHA-256", + "content": "f7ed5a0dc9b4c939e92be6acdf3bd83abc3d7e5def9c1307f3c9f53bd7cb2f8c" + } + ] + }, + { + "bom-ref": "ee6a3f402c454ae0", + "type": "file", + "name": "/juice-shop/node_modules/argparse/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "98f9959fac3c999adf8991e2a4ac3c874c93f00f" + }, + { + "alg": "SHA-256", + "content": "48b848e56c31eda738f76fb8573ae1fe0012c4b1ec9d9cfe8783517a142e9531" + } + ] + }, + { + "bom-ref": "dfe6056536fe3f12", + "type": "file", + "name": "/juice-shop/node_modules/array-buffer-byte-length/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "79c934e5f793f408bf9e7d6cdae3b00479c8f882" + }, + { + "alg": "SHA-256", + "content": "477d1c0349dfbe051b3bc99b289a8360570264a1731f73e3c594ed8b9a3b6252" + } + ] + }, + { + "bom-ref": "bce0b3db15671351", + "type": "file", + "name": "/juice-shop/node_modules/array-each/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ee5fd48cb545b4345405c98bbfa05dbbc9ae1623" + }, + { + "alg": "SHA-256", + "content": "55d0a75c82606adf64ec0f98d93db3920a4f3c882a253c10ec58b519c336e72e" + } + ] + }, + { + "bom-ref": "bce05826ca4fcd5f", + "type": "file", + "name": "/juice-shop/node_modules/array-flatten/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "fc51b89d0fb7cc640a0495baa4005364e83718c3" + }, + { + "alg": "SHA-256", + "content": "5c5e0e10cfa23f163d1fe68aa57a881d09cac39d720e1361c697b86c4d33e0f5" + } + ] + }, + { + "bom-ref": "6af7c07b94bd05ce", + "type": "file", + "name": "/juice-shop/node_modules/array-slice/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "498e1b0981039be5c67000ecb466f0b4ba520bd9" + }, + { + "alg": "SHA-256", + "content": "456b16091f29b8d2343819f68f2dc4f890bd234cd9a2e27b30e28990663b076f" + } + ] + }, + { + "bom-ref": "fa5e9278f3fe5942", + "type": "file", + "name": "/juice-shop/node_modules/asap/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c768bb58495d19e1d5d195d3f212204714c7378d" + }, + { + "alg": "SHA-256", + "content": "f69d11cfb6add01ac63fce2a47e0b4596d667d8f43d89853ac27aab06a9fcf28" + } + ] + }, + { + "bom-ref": "86e2d57a35b0ad8c", + "type": "file", + "name": "/juice-shop/node_modules/assert-never/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a38c1ee73c79bb5548e0119f2df68a26b6839439" + }, + { + "alg": "SHA-256", + "content": "ab906b2a34e8f397a6006e587f5d716d24ebb58cd82eec36cb4e3476c500f78b" + } + ] + }, + { + "bom-ref": "25e48c2fe3f06608", + "type": "file", + "name": "/juice-shop/node_modules/async/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "edef722d2ef943350b398c9c11b1fc4e2e4928f5" + }, + { + "alg": "SHA-256", + "content": "e010fe63aa861e8a60fb8b9d3e7fb5205e3b8d6001ebe3ff95985996abe581a9" + } + ] + }, + { + "bom-ref": "d4314cd28d4eaead", + "type": "file", + "name": "/juice-shop/node_modules/at-least-node/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "9271d65ae400dff5e800ae6f031d1bf6f58252c6" + }, + { + "alg": "SHA-256", + "content": "cf26ac7a79b89eed8c70f7ee8b5195ed925f535b7c52577b9034702e7117fbc5" + } + ] + }, + { + "bom-ref": "c5fc8b143c57ac65", + "type": "file", + "name": "/juice-shop/node_modules/available-typed-arrays/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "13e400badea570dca072b1116d9dbc627c94c4f8" + }, + { + "alg": "SHA-256", + "content": "ffce2bbb0b85b9a20bcc674e4c78307ead42af0299e1d28a9dfb249566e0a319" + } + ] + }, + { + "bom-ref": "c5fd68d27e37a073", + "type": "file", + "name": "/juice-shop/node_modules/babel-walk/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f10c8c76a7c340e00bc91168a1ff049dbad7d173" + }, + { + "alg": "SHA-256", + "content": "1549b64069d6ae24d7d91a466204624ab1509f12abb7924b6e0b603323d34d87" + } + ] + }, + { + "bom-ref": "20c384ad29655812", + "type": "file", + "name": "/juice-shop/node_modules/balanced-match/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ef0a0d2fd68c3396309ab54ab08c5f8d362436ea" + }, + { + "alg": "SHA-256", + "content": "b30c328501dead1870b894ad604405b2284b571c1f12664cdc61d92a2e3397c2" + } + ] + }, + { + "bom-ref": "e11f5149d01ba383", + "type": "file", + "name": "/juice-shop/node_modules/base64-arraybuffer/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "1853ae06931a67b3eb8bb76c801ac258966ff74e" + }, + { + "alg": "SHA-256", + "content": "c137a784510ece7d3b9b1d4de59c55a0594b1ed51b30c9581e8279cb705b0286" + } + ] + }, + { + "bom-ref": "31b16f42841c1087", + "type": "file", + "name": "/juice-shop/node_modules/base64-js/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "e17d74f1f7f0fa4bca8ba3a2cff79b34f64718ea" + }, + { + "alg": "SHA-256", + "content": "9758f3ab8c45e07bb9a368e32f9a8b3729623bbf47cbbb205b32d674ab2a91f0" + } + ] + }, + { + "bom-ref": "5642b3a815419a1b", + "type": "file", + "name": "/juice-shop/node_modules/base64id/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "25c444de022a4b4bb9e98d09bb0e8fe5a66d1b9b" + }, + { + "alg": "SHA-256", + "content": "26250fc512e912fc8dcdd1728025c79e85cc4727ba7e662d0ec0700f843efae4" + } + ] + }, + { + "bom-ref": "ebe3a70d06812837", + "type": "file", + "name": "/juice-shop/node_modules/base64url/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "30611c9388765dd6c0c1291183460b5b99ae40a6" + }, + { + "alg": "SHA-256", + "content": "5d243a76cc698b4dbf9eeea3f62dd96719753b7d369860b6c8722146f7b83c7c" + } + ] + }, + { + "bom-ref": "43772eba87822594", + "type": "file", + "name": "/juice-shop/node_modules/basic-auth/node_modules/safe-buffer/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "bf9a046dba09dcce1bd474ff0f84c39cb57dc5b4" + }, + { + "alg": "SHA-256", + "content": "3d8b6d944be9e931a178914afbb3d6b79bfa199c032872b687bed41ed996c747" + } + ] + }, + { + "bom-ref": "cd52057dbb485ec8", + "type": "file", + "name": "/juice-shop/node_modules/basic-auth/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b2df92eda0861bfdf03b3689d8e6a53bbd607901" + }, + { + "alg": "SHA-256", + "content": "eacbd5624f044dbbdd9daf971ee004012e835368f7002f2dee742275e463eeea" + } + ] + }, + { + "bom-ref": "30d7f7eecf45ff03", + "type": "file", + "name": "/juice-shop/node_modules/batch/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b5ed756847feb09f819111e18a8b51b6683ce916" + }, + { + "alg": "SHA-256", + "content": "8b7595e8387929390fa5432f184e98059e32323a9ae3757fc0d251f44da22f36" + } + ] + }, + { + "bom-ref": "4fbced41b152e058", + "type": "file", + "name": "/juice-shop/node_modules/beercss/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c4b84c6c4761bcd00ec2f252b16b0f1b90a864c9" + }, + { + "alg": "SHA-256", + "content": "02bd416d4df9c80e93838afc594798391bfa396fbb87eaacf4ce30908ae2ce9f" + } + ] + }, + { + "bom-ref": "c073faa5aefd76d2", + "type": "file", + "name": "/juice-shop/node_modules/big-integer/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c504e3cd069e16c72065b57157c1a923ec93ed7b" + }, + { + "alg": "SHA-256", + "content": "720c9966ac00b6e579aed1c8927f9d9a98dcd4a0cf738276e83899e023595266" + } + ] + }, + { + "bom-ref": "255866d061d7b383", + "type": "file", + "name": "/juice-shop/node_modules/binary/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "8cb90d0e380085f35eabe6b378749d8402f9db2d" + }, + { + "alg": "SHA-256", + "content": "355ec61b56448e3d9ad74b286fa07e1b18bcbf153f45223b1a4f68d86bec891f" + } + ] + }, + { + "bom-ref": "b24bac4d2def52b6", + "type": "file", + "name": "/juice-shop/node_modules/bindings/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "14bbbadeb1307b1f711ee10093d5b46a7889677c" + }, + { + "alg": "SHA-256", + "content": "a87721fe406e1f1798fef44d697b46ea1efe346fda118010334713346ee4207c" + } + ] + }, + { + "bom-ref": "692598884d38432c", + "type": "file", + "name": "/juice-shop/node_modules/bintrees/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "0541c9772153e0380217e17b877f3865ffa176ed" + }, + { + "alg": "SHA-256", + "content": "b1428f5f1084ec992b386903254420e8bbbd3cc9b3482dd8a8a031c749b1c5f9" + } + ] + }, + { + "bom-ref": "9f04fac9c2a68dda", + "type": "file", + "name": "/juice-shop/node_modules/bl/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "95c3eee39930a1a112884e039aa18eef6440528d" + }, + { + "alg": "SHA-256", + "content": "cac689c32b3053d3f3ad5fb36209c9a6300eecac11e258daf9098cc9974460d6" + } + ] + }, + { + "bom-ref": "c84cc893b25ed231", + "type": "file", + "name": "/juice-shop/node_modules/bluebird/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "3bff8f918f77c01976fa2bff8bb461bf23783e55" + }, + { + "alg": "SHA-256", + "content": "06b909dc60508422d664b7734fb45f5466bfcbccff796db5413fcd1afb194712" + } + ] + }, + { + "bom-ref": "cb292ff9ee9c0ee5", + "type": "file", + "name": "/juice-shop/node_modules/body-parser/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "50351230f348a07c5f98fb390f78bb32d23ff589" + }, + { + "alg": "SHA-256", + "content": "387e86820743b803cea33ff5ccefe0f9b7dfe7f561a5b2df5b98312c68d27e79" + } + ] + }, + { + "bom-ref": "33aee4a742ffe183", + "type": "file", + "name": "/juice-shop/node_modules/brace-expansion/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "494bd77ffaa1fc9d904a930b9e6adf6a12fed472" + }, + { + "alg": "SHA-256", + "content": "14798eb9b63a84e9243a616a0bd25829e766a4311e19603b1b6df2dd8c551862" + } + ] + }, + { + "bom-ref": "3bf75fc2b94f5fd9", + "type": "file", + "name": "/juice-shop/node_modules/braces/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "124d44a7e3c5fd1b2370ff51929158c7c39c46c2" + }, + { + "alg": "SHA-256", + "content": "56f08b888a4f30dc7cf8a7dbb36ffe92b737912ba36abe9d069d32167c957ac7" + } + ] + }, + { + "bom-ref": "790a13eb17fbbb52", + "type": "file", + "name": "/juice-shop/node_modules/brotli/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "1f95a73a0930da325211f5d256c3210e33f3c715" + }, + { + "alg": "SHA-256", + "content": "387b47d00ea96cab9b4c521629fbcdc7621053ac061812526f3c69700924cef5" + } + ] + }, + { + "bom-ref": "b4d106c31951c358", + "type": "file", + "name": "/juice-shop/node_modules/browserify-zlib/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b76ac0de775f96ff1cf65c9a7f2892a5a6bc3f0f" + }, + { + "alg": "SHA-256", + "content": "85034e889a63cb57e947d2ed81a87ffcb32831f7854a2e2648eb96ff56b10b91" + } + ] + }, + { + "bom-ref": "6dcdae9bb1896bf8", + "type": "file", + "name": "/juice-shop/node_modules/buffer-alloc-unsafe/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "eac3922d78d7c767750da439f58b88df8966ddca" + }, + { + "alg": "SHA-256", + "content": "abd77cd9f8e32a213714c6a188c62a59d97bb9359824022db89f57da4949a549" + } + ] + }, + { + "bom-ref": "8d838bdff4233219", + "type": "file", + "name": "/juice-shop/node_modules/buffer-alloc/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "6acc40da3b381363e82c3d32b8b64510d6627ba8" + }, + { + "alg": "SHA-256", + "content": "d607efec5e54b94b612bd7065186e00f1591fade12aaf41a170606d02f6ac670" + } + ] + }, + { + "bom-ref": "e1a5bca1e6171d8e", + "type": "file", + "name": "/juice-shop/node_modules/buffer-crc32/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "1ec2ea09d6d0b9bf7e3ed6e75af3d50bfe578902" + }, + { + "alg": "SHA-256", + "content": "f94d0f0c1be8f8714670c5fee03899bdb6485d430236d81726e24012a3696e6e" + } + ] + }, + { + "bom-ref": "4ae47c729fe6219a", + "type": "file", + "name": "/juice-shop/node_modules/buffer-fill/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a57438f89e767aca1edc938a71bbe480917ee65f" + }, + { + "alg": "SHA-256", + "content": "602a10e946f2f5eff5b19781d13fb3b589babe12815a1a9be4c7a673eb0fdd4f" + } + ] + }, + { + "bom-ref": "776771ca0c7c7bad", + "type": "file", + "name": "/juice-shop/node_modules/buffer-from/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "49b8d27c728855d92e2609b2c67e82b89f57cee5" + }, + { + "alg": "SHA-256", + "content": "f7cde31d1db3e71738045206397d472e1f12513643ba4b9fd60ea337f22b1e3f" + } + ] + }, + { + "bom-ref": "82ec3d6474532c4c", + "type": "file", + "name": "/juice-shop/node_modules/buffer-indexof-polyfill/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "981d326c4f01015129658b464df7d98938100cd9" + }, + { + "alg": "SHA-256", + "content": "cd2622bc8900ccc51417ed40ae01922030eaba84760b5aa6f820b4c431e7ac65" + } + ] + }, + { + "bom-ref": "16e67022da490ff2", + "type": "file", + "name": "/juice-shop/node_modules/buffer/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "2b48c222660295ee0110538cfdd70b220aedf800" + }, + { + "alg": "SHA-256", + "content": "5af7b62dbf5575a301cd13e8616f1d7d9cff3c90f9fab7bc3d6a1f4fbfee94eb" + } + ] + }, + { + "bom-ref": "4579449fde6a3fc2", + "type": "file", + "name": "/juice-shop/node_modules/buffers/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "8324a9b6635486c55bdc9921641dcc039b2f9528" + }, + { + "alg": "SHA-256", + "content": "7091616d3b687b0de9dfbc6a1f8ab61e01742a3ec87f977bef64d1f299e231b9" + } + ] + }, + { + "bom-ref": "85b6372b5dc7db57", + "type": "file", + "name": "/juice-shop/node_modules/busboy/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b1d7ef4a9a615c7a947a39139af8edf1972546ab" + }, + { + "alg": "SHA-256", + "content": "4faefdc1fc73a2c8a87dfa0cc6ca3dc3d9e518abf9b92d84aa495c59b3e20c92" + } + ] + }, + { + "bom-ref": "388b36bff69e8f55", + "type": "file", + "name": "/juice-shop/node_modules/bytes/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "d8fe3e70eb4ecf4bf58385e4b27f89b7ce656a28" + }, + { + "alg": "SHA-256", + "content": "99b21c09ce812dc76a06cd87c4753247cb9615c6a8501c5a5a9d9caa22ea2d12" + } + ] + }, + { + "bom-ref": "b67644d5dbc09dde", + "type": "file", + "name": "/juice-shop/node_modules/cacache/node_modules/p-map/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f7afd4bd0f710b2b0c099a22a646cda6fb927688" + }, + { + "alg": "SHA-256", + "content": "3869a3eed147c70e77d2faece50ee97e7e55b851e8f46428fe71e218a349237f" + } + ] + }, + { + "bom-ref": "1859bc4f4a2d18f3", + "type": "file", + "name": "/juice-shop/node_modules/cacache/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "4bfa58e7ac62a86d0f86b54faa34f063f3344a61" + }, + { + "alg": "SHA-256", + "content": "3b4d9ce8c3a3f853d903c06b5ec38a06c8ac9a2ccb236bf6a532d92cfe1b07de" + } + ] + }, + { + "bom-ref": "335bdc2fe2e455b1", + "type": "file", + "name": "/juice-shop/node_modules/cacheable-request/node_modules/get-stream/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "000b39656a452f8e4ddcedb94597a6970c3f456a" + }, + { + "alg": "SHA-256", + "content": "08d0f76239ff04bf822de18ef5bff87f16fe6427b3bf8567b4fe3bf2176a320b" + } + ] + }, + { + "bom-ref": "8ec3f32f7feac498", + "type": "file", + "name": "/juice-shop/node_modules/cacheable-request/node_modules/json-buffer/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "6a175397a93014316dcf454724d6f93f2dac12b7" + }, + { + "alg": "SHA-256", + "content": "fa9898eaf4e2fb3ed3e0201cb1c40df1fa7aa67fc2442cb87827ac1435dd5d09" + } + ] + }, + { + "bom-ref": "7c660c19972eee91", + "type": "file", + "name": "/juice-shop/node_modules/cacheable-request/node_modules/keyv/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "2315bf1117b2f6bebee08fb9fd639a00ed7f099d" + }, + { + "alg": "SHA-256", + "content": "d86d32aa7e20779ba4ec8884babed30632cfd1cf193070eda9d8ef5c8640c1db" + } + ] + }, + { + "bom-ref": "4db687ce84306852", + "type": "file", + "name": "/juice-shop/node_modules/cacheable-request/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "9ce876f09b4eaf8362aed671962a970175bf3bf5" + }, + { + "alg": "SHA-256", + "content": "45bc898c23761b5ddd1fc7dfc1c09663969115ab867496af0fa075e71ed22c68" + } + ] + }, + { + "bom-ref": "c6956daa18bef315", + "type": "file", + "name": "/juice-shop/node_modules/call-bind-apply-helpers/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ba7d54557351d8746e4d2f88e7d4106ca4d0d541" + }, + { + "alg": "SHA-256", + "content": "59639b628c6846f674857c6a613fd47e2e4d2a24036cdf0f7a62ac634f4c8a5f" + } + ] + }, + { + "bom-ref": "b6f6b73ff3bfbfa9", + "type": "file", + "name": "/juice-shop/node_modules/call-bind/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "d0223fac2c7e7a940010416c2b34a562659d9ba0" + }, + { + "alg": "SHA-256", + "content": "c11be8b7f9bbe367c27d42fba734b8226c0b15e1e5e1c2d842822d9791f053c7" + } + ] + }, + { + "bom-ref": "9e66e35bbed092a1", + "type": "file", + "name": "/juice-shop/node_modules/call-bound/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "7c7c20ff22ed55c0f73a9ca1e378190b9ab3ba29" + }, + { + "alg": "SHA-256", + "content": "dcc8abb3c4ad3774234272149020cb36d7b1a3d377a419454d1e7adb368dd9c3" + } + ] + }, + { + "bom-ref": "7d3d3a3d290ccd59", + "type": "file", + "name": "/juice-shop/node_modules/camelcase/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "7b4c16368eaa4ca5dba17965ea8557a35368a0f0" + }, + { + "alg": "SHA-256", + "content": "b6d533c740d144de4da1493940b541978a77aae9d712dd0d609f60c58c83a73e" + } + ] + }, + { + "bom-ref": "a9d52294c22cb3e1", + "type": "file", + "name": "/juice-shop/node_modules/chainsaw/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f1208fa90fe3f162e1a72f3ce3751b66f6775830" + }, + { + "alg": "SHA-256", + "content": "51910ad64abca4eb8c2c23abb2f713ba5220db89ed89c9fd198d27241a5a70ea" + } + ] + }, + { + "bom-ref": "b8a1de32c9a3e45c", + "type": "file", + "name": "/juice-shop/node_modules/chalk/node_modules/supports-color/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "12db9c2598721e751dffd0b42a20b7ae419b20e2" + }, + { + "alg": "SHA-256", + "content": "34c434b27dc21bd0de7b5edca42fa0d9ebf72d2ac823c72865a334cb8fcfb9b5" + } + ] + }, + { + "bom-ref": "5628a13468b639c0", + "type": "file", + "name": "/juice-shop/node_modules/chalk/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "6837c455c887920ad9b0cad624aa4b9b51625fd8" + }, + { + "alg": "SHA-256", + "content": "80052c957e397ff669429ea957c2bdc792578c2178866f7a940c8eb975b5ca91" + } + ] + }, + { + "bom-ref": "b79ab87254c3ce21", + "type": "file", + "name": "/juice-shop/node_modules/character-parser/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a1b981e621b2868fbdb14e10de12ceea86bbe82e" + }, + { + "alg": "SHA-256", + "content": "49974b723e98bec9dab8641bca5ee468739c04a0b7fcc501d762924f32f80aba" + } + ] + }, + { + "bom-ref": "daefd6f2a703ca35", + "type": "file", + "name": "/juice-shop/node_modules/check-dependencies/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "0d5968e7c7e3727e9c4001180104b0eddd93cbd2" + }, + { + "alg": "SHA-256", + "content": "94e24419ae07c9befa0ddbacbb12f26e030a288c78c37db8f5b62558ce3e8620" + } + ] + }, + { + "bom-ref": "8ee6275f48bab73e", + "type": "file", + "name": "/juice-shop/node_modules/check-types/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f424a387a8b8c162e56279ca5259b40edd9f522b" + }, + { + "alg": "SHA-256", + "content": "fb5b3c004a773d1927ff110d5caa2080a6c5a89a0f61612d251296879b46f62d" + } + ] + }, + { + "bom-ref": "e42d8f08b628ab90", + "type": "file", + "name": "/juice-shop/node_modules/chownr/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "fc7d452c2e7e9b57f311b04f8b5826656ccc8e1b" + }, + { + "alg": "SHA-256", + "content": "4300e90fdd91ec7035047473c60f880251a9801bd786302729d4277751d3b948" + } + ] + }, + { + "bom-ref": "2bb34512d6ed8099", + "type": "file", + "name": "/juice-shop/node_modules/clarinet/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "4dc5d68200d25cdd05e4e38fef2ebb6ce2b6b299" + }, + { + "alg": "SHA-256", + "content": "b6ed9b595f76a6c8e4a7db7cae4e7df7beeeede69de0e9908a69143599be1b41" + } + ] + }, + { + "bom-ref": "638f589142dae955", + "type": "file", + "name": "/juice-shop/node_modules/clean-stack/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "4783e06a89ee21c7109f053235b03211ec87f5af" + }, + { + "alg": "SHA-256", + "content": "9b4a4a5cc61a09e61aa1ce84bc68c84aef90abf9a0280d09214a89189257ca7a" + } + ] + }, + { + "bom-ref": "2fb50faf350780da", + "type": "file", + "name": "/juice-shop/node_modules/clone-response/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c109beb613fd2573d6b8ccb99ed48f2b25360e94" + }, + { + "alg": "SHA-256", + "content": "5c4ec09512661e52caf27ee747116d8104fb7da25c7fbe82ffe760dbdda99e63" + } + ] + }, + { + "bom-ref": "0019325e638fe704", + "type": "file", + "name": "/juice-shop/node_modules/clone/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "0fdce1636b3aa8c1df63be2fdb3e3b66066b82d4" + }, + { + "alg": "SHA-256", + "content": "07e9c7efd55a99cbe2909d1fd46b032b67cba6b493d1fbc974fddf4f2adebc83" + } + ] + }, + { + "bom-ref": "eb2b49030d6f5596", + "type": "file", + "name": "/juice-shop/node_modules/code-point-at/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b223a41679c19b6eb58a4ebb29c7bb5c23ffb2db" + }, + { + "alg": "SHA-256", + "content": "25069e9b754306d51bb333f034a741d99e052bee4c99d13ecdba7f485bb01749" + } + ] + }, + { + "bom-ref": "ed2b6946fbd19a59", + "type": "file", + "name": "/juice-shop/node_modules/color-convert/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "799d15c0afcf7b320069d0734a1806b3062da05b" + }, + { + "alg": "SHA-256", + "content": "b19880ef7c610484649d11309820cd55c8934ebc4bde0b37706e94483bf2bd0f" + } + ] + }, + { + "bom-ref": "3c46986a22a3a71d", + "type": "file", + "name": "/juice-shop/node_modules/color-name/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "5aa7aaf5028aece2d7a920d5644c25c87723d203" + }, + { + "alg": "SHA-256", + "content": "522669bd4c785d5c372377f5b139243f5fb6cf6335fc9df0e7c2d294b6b678da" + } + ] + }, + { + "bom-ref": "09e0962e1ec58225", + "type": "file", + "name": "/juice-shop/node_modules/color-string/node_modules/color-name/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "bb882040c18e17fb8cbc49f064b62796ca24fe48" + }, + { + "alg": "SHA-256", + "content": "816c067d75efb40e8daf99d11a40029c95cb3634bbaf8ba1a09505c56705ab5e" + } + ] + }, + { + "bom-ref": "127f4164c44bc0fe", + "type": "file", + "name": "/juice-shop/node_modules/color-string/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "18e0a9c366ada5dfe0d8d04698e3cf60f3044d5b" + }, + { + "alg": "SHA-256", + "content": "c07e159e468107920cf59dc92a06185593c180c2bbf12cd6baf9494da68c8d35" + } + ] + }, + { + "bom-ref": "819af899297a8c56", + "type": "file", + "name": "/juice-shop/node_modules/color-support/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a47d93a86d7864eb1866a3367f7c5ace53dc18d1" + }, + { + "alg": "SHA-256", + "content": "baf5cca1519cfaa530a21810bda9fe6236082d855a59ff66f5ef437bf51451eb" + } + ] + }, + { + "bom-ref": "e818eeed57d136b2", + "type": "file", + "name": "/juice-shop/node_modules/color/node_modules/color-convert/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "4907e98a35921c9d764aeb9df809fdaa89120a9d" + }, + { + "alg": "SHA-256", + "content": "2ca1a776fdacc56b2c1463045e8b2edcc7ff31490c362ee84e258cc905b90e73" + } + ] + }, + { + "bom-ref": "4bc222d2bcaa417a", + "type": "file", + "name": "/juice-shop/node_modules/color/node_modules/color-name/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "bb882040c18e17fb8cbc49f064b62796ca24fe48" + }, + { + "alg": "SHA-256", + "content": "816c067d75efb40e8daf99d11a40029c95cb3634bbaf8ba1a09505c56705ab5e" + } + ] + }, + { + "bom-ref": "57aed51cb6ae5851", + "type": "file", + "name": "/juice-shop/node_modules/color/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "35844a694ca86f5724ae9b515c09453e5b0d79f1" + }, + { + "alg": "SHA-256", + "content": "e056a5ef1ac8bd65d4a19eb544b2b3dfb69e21da39543e3f58456d6f1793019e" + } + ] + }, + { + "bom-ref": "d0b0a97c5e2e5d15", + "type": "file", + "name": "/juice-shop/node_modules/colors/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a4f69f04fe66223dfe4b4bc5c73653a2a6d410b5" + }, + { + "alg": "SHA-256", + "content": "12d1b76eb6efbe581026d035eba2a3c916fc5d4664a9476d23bafc6813db9176" + } + ] + }, + { + "bom-ref": "81f963da9af09b33", + "type": "file", + "name": "/juice-shop/node_modules/component-emitter/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "93e268feac3350d3806f9deca82dfce16d06d9fd" + }, + { + "alg": "SHA-256", + "content": "cdb4584e6657cbc5bd76295b0e3828969fec5cdf3c812178ea80f37378398080" + } + ] + }, + { + "bom-ref": "f51218aa8512caab", + "type": "file", + "name": "/juice-shop/node_modules/component-type/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "03289fd70f7e974c6f698df8d877912ccd127e29" + }, + { + "alg": "SHA-256", + "content": "93a42e729e1f42670f510fbb1b7e90e6834a4e60657c67da82d321a4d99a30d3" + } + ] + }, + { + "bom-ref": "5b1b5f002bf2c9aa", + "type": "file", + "name": "/juice-shop/node_modules/compress-commons/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "49b373b2919e1a111b2b198de6f73e229c1b4708" + }, + { + "alg": "SHA-256", + "content": "0144c9f8c98abb94ae03eaec71cd3fe7190a8f1c77ea898a012ce30e72bdc6c1" + } + ] + }, + { + "bom-ref": "d0d6d0ed8bccea8b", + "type": "file", + "name": "/juice-shop/node_modules/compressible/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "dd8d4a57b09cc1f78941ee6b3c36192c64775600" + }, + { + "alg": "SHA-256", + "content": "78af3f89054f6ef1bc4ba56724a5edb55babf7fc6a4e88b8bb5ae631afcf9219" + } + ] + }, + { + "bom-ref": "312c35dec41dd764", + "type": "file", + "name": "/juice-shop/node_modules/compression/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "12e3bb6f942049ca301efab637953ab8aad3e61a" + }, + { + "alg": "SHA-256", + "content": "5c2303e1e6b34b76a1c913d4f09fc0b3e374d4539aa5c89b99d6d58ed91620e2" + } + ] + }, + { + "bom-ref": "8fae7af4c31f6cd5", + "type": "file", + "name": "/juice-shop/node_modules/concat-map/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "10e204a14998c9e1d13bba6ab5243194a94d5d6a" + }, + { + "alg": "SHA-256", + "content": "4fe5e8089b65ebfd55bb86f465ba896ba6a8e24b7b61de1e0f420f590616b118" + } + ] + }, + { + "bom-ref": "5d8f15bc351f04e5", + "type": "file", + "name": "/juice-shop/node_modules/concat-stream/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "bf0359010a483481d391dca89ee461e718627b0d" + }, + { + "alg": "SHA-256", + "content": "90182f042f9d995d6021ee7b9cb56d044b700fbf5f7dc03057343dcca4df00d5" + } + ] + }, + { + "bom-ref": "a52897b983b7dcf9", + "type": "file", + "name": "/juice-shop/node_modules/config/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "e8ef1128810fb2561de65ece79eb48991c87014c" + }, + { + "alg": "SHA-256", + "content": "f1bb1cba9e9cb4cc00e33db8dd4f254810d5df5f9ec4f51c6ffe9e396f84b0fc" + } + ] + }, + { + "bom-ref": "731c8704df34f5a0", + "type": "file", + "name": "/juice-shop/node_modules/console-control-strings/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "48149fd6456eb7fa73b547c26577132ed9fb15ca" + }, + { + "alg": "SHA-256", + "content": "2da7c4bb166dfa347305d34eebafaec098a9afeaaa26e4844736597507dbb968" + } + ] + }, + { + "bom-ref": "1785d86aac518945", + "type": "file", + "name": "/juice-shop/node_modules/constantinople/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "04d4d5b1853df1f182ee1f1a285c283c25c3fe22" + }, + { + "alg": "SHA-256", + "content": "7b0cf478d904186f397b8c75c0f8129d0f36bfcde75929880ac0bedb38c76c7f" + } + ] + }, + { + "bom-ref": "859fc284d76aec05", + "type": "file", + "name": "/juice-shop/node_modules/content-disposition/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "1b871ffaefe2a1fd69aa9b1538b4003bf0eae9ab" + }, + { + "alg": "SHA-256", + "content": "2459c0e8fbeb5716ab06e9ef73747bba46ed2bc52e310bd4e9f0ef1f102da61f" + } + ] + }, + { + "bom-ref": "f70b9353921aa950", + "type": "file", + "name": "/juice-shop/node_modules/content-type/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "1545c6d8538d7e59f375d4ae4b0e0d10471a6c1c" + }, + { + "alg": "SHA-256", + "content": "bd78a5427ffca1966621301edc6cac2146c8c1e137f122161ba90dca7ec89f77" + } + ] + }, + { + "bom-ref": "0467b7a246d95d5a", + "type": "file", + "name": "/juice-shop/node_modules/cookie-parser/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "5e3c194dcb531a61c8dc8c6d97fc65f138d52a09" + }, + { + "alg": "SHA-256", + "content": "27eebaa9ad78117c9b6965e3c6cd24356504e5a7abd3450cafc46a1b6e1e97e5" + } + ] + }, + { + "bom-ref": "41425c226d343b15", + "type": "file", + "name": "/juice-shop/node_modules/cookie-signature/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "eb071423205fc35573e714baa755e3a9e900a979" + }, + { + "alg": "SHA-256", + "content": "ab66777a673ae096d6b5aa51b5edb46b84e6fcd85dc03358c35576e3df0464f5" + } + ] + }, + { + "bom-ref": "a6c99b3abd656a2d", + "type": "file", + "name": "/juice-shop/node_modules/cookie/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "49ffb97b37b2a7b8b0967428ca088145d3483365" + }, + { + "alg": "SHA-256", + "content": "7fa781bd142e7f38b66bff64b4e3a8be9e53e340e7ddaf27caebd00322602208" + } + ] + }, + { + "bom-ref": "e3884c31ccbaa05d", + "type": "file", + "name": "/juice-shop/node_modules/cookieconsent/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ba04d229240bc8c46ccd04088b8baa8dec795500" + }, + { + "alg": "SHA-256", + "content": "9e3749607413186ef0b851086b376a19578e1195148c551683cac4fd47757fc6" + } + ] + }, + { + "bom-ref": "d1f2671ad94ba5f9", + "type": "file", + "name": "/juice-shop/node_modules/core-util-is/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "67e07f86f3ffc5d437b0c03d9bf2417493e64859" + }, + { + "alg": "SHA-256", + "content": "9effbb5ec239b4de8bae0499e760bc86b7fa731e310e7a2721d8ffb667194e44" + } + ] + }, + { + "bom-ref": "12bde977f17beb85", + "type": "file", + "name": "/juice-shop/node_modules/cors/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "29a6d78b59fd864df0f1ced954fcc06e2e31cf1e" + }, + { + "alg": "SHA-256", + "content": "b314218cdfc9e9442efd35c74c4176902c0bbd74700ba30d6055e70a76455174" + } + ] + }, + { + "bom-ref": "e8405c9520f9b2cf", + "type": "file", + "name": "/juice-shop/node_modules/crc/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "dcc2939933df570c8260f4fd4fbbd6b88c420626" + }, + { + "alg": "SHA-256", + "content": "3bdb1642fb5a6e1c822e5e3dccdce83c59bcd73e84934fdcd0c3c65ebda6718e" + } + ] + }, + { + "bom-ref": "027b8ab49f0aa84a", + "type": "file", + "name": "/juice-shop/node_modules/crc32-stream/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "669fb5f9deac7203619c72ea7a0df0d4460417d9" + }, + { + "alg": "SHA-256", + "content": "1913530699dad57c6bf7d89127c0c521266133a615b3685d51deca1ae9a33cda" + } + ] + }, + { + "bom-ref": "45ed7376e1c4089e", + "type": "file", + "name": "/juice-shop/node_modules/cross-spawn/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "9becaa8ecb51ad9b303dd62369423cb9f287163a" + }, + { + "alg": "SHA-256", + "content": "2e106cd9b4ae4e34ead35218371a0d4e172da72515a4f8f97d69a2e1fe3dee82" + } + ] + }, + { + "bom-ref": "b127472d4d9ef630", + "type": "file", + "name": "/juice-shop/node_modules/crypto-js/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "65c10fa4433d97c3ebe204470e8caaa105d6fcd2" + }, + { + "alg": "SHA-256", + "content": "b021f29bcaa1cef60884f4281e0011a5e80758e0f6460e9a6061f28e37282ca4" + } + ] + }, + { + "bom-ref": "aa8db616f4d18073", + "type": "file", + "name": "/juice-shop/node_modules/dateformat/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "3d4b932fedff8c3566e9eff570421fae695c91e7" + }, + { + "alg": "SHA-256", + "content": "9d72ce65bcf960ea44a19840e86c0476ae56034cca2181ecd6bced70559c97ff" + } + ] + }, + { + "bom-ref": "3b840494302c88f0", + "type": "file", + "name": "/juice-shop/node_modules/debug/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "8ebf0f80660d982fc68f00f82855696157e74b10" + }, + { + "alg": "SHA-256", + "content": "6c3d2c892db282317913ce7c340dd2edccd326bcafd18b644b8738144967d6ee" + } + ] + }, + { + "bom-ref": "d30ca97d143e50a6", + "type": "file", + "name": "/juice-shop/node_modules/decamelize/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ccda85295237a30d5621b1d9a4569be24c92564f" + }, + { + "alg": "SHA-256", + "content": "fb07ecfb5937f8757b0721fdafa6febff75d3c159f6dc8ec0d6ad4e1d1be7d9c" + } + ] + }, + { + "bom-ref": "76361e908b7a2f5a", + "type": "file", + "name": "/juice-shop/node_modules/decode-uri-component/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "6202fd7f4a33d4ef4d36b0f1a26ee5dc22f7851a" + }, + { + "alg": "SHA-256", + "content": "8f2e9784337b3b4fa69359f88f75a2847e0aa17776f062cb518d008d8d408bca" + } + ] + }, + { + "bom-ref": "abcf9eeb7038dfb3", + "type": "file", + "name": "/juice-shop/node_modules/decompress-response/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a8a1643a6d1bfc2cd01968fece47576aac7f85f0" + }, + { + "alg": "SHA-256", + "content": "e4f071e185bd8373eced227d9fc256e7cb17c05aadf4a9ff25e6ebdbef489580" + } + ] + }, + { + "bom-ref": "22ec135046954864", + "type": "file", + "name": "/juice-shop/node_modules/decompress-tar/node_modules/file-type/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "4b6f00aa1e5eedee8b2e01f411ac1e595f5580f5" + }, + { + "alg": "SHA-256", + "content": "d40eb8973856f8dc2a280d9c6549041068e1dd91041661cf48fdf11dff2d6896" + } + ] + }, + { + "bom-ref": "c503980f4ced6106", + "type": "file", + "name": "/juice-shop/node_modules/decompress-tar/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "2a60c06be62f9b9c9eff038925e902ce2e3c2a69" + }, + { + "alg": "SHA-256", + "content": "c218803dd64ee674ce941eda27ca12c5d949bc582de8cb30fc37f830c1184da0" + } + ] + }, + { + "bom-ref": "746ccdbae966acc7", + "type": "file", + "name": "/juice-shop/node_modules/decompress-tarbz2/node_modules/file-type/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a6530cf198e519ea50ee8e0bf674c209f5280991" + }, + { + "alg": "SHA-256", + "content": "11468db6795e371a155e5f59e4d3db4bac561f04bed7851609739ca2971363a6" + } + ] + }, + { + "bom-ref": "80cbc1d05d01d6e5", + "type": "file", + "name": "/juice-shop/node_modules/decompress-tarbz2/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "8868c09e4485e8a5259107e1627b82d28c9c4088" + }, + { + "alg": "SHA-256", + "content": "529925f1b024ee1493f613b8b8f341eb57c3f4d652387fb9d60ec6a94c55e848" + } + ] + }, + { + "bom-ref": "92e09285a233af8a", + "type": "file", + "name": "/juice-shop/node_modules/decompress-targz/node_modules/file-type/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "4b6f00aa1e5eedee8b2e01f411ac1e595f5580f5" + }, + { + "alg": "SHA-256", + "content": "d40eb8973856f8dc2a280d9c6549041068e1dd91041661cf48fdf11dff2d6896" + } + ] + }, + { + "bom-ref": "3497197d8b42fc4b", + "type": "file", + "name": "/juice-shop/node_modules/decompress-targz/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "3e50782d9594c0eb2209145de66307aa14762462" + }, + { + "alg": "SHA-256", + "content": "563940fa7817c65d09bf0825521cd80be7fe3371f655f63806dd39d0a332feeb" + } + ] + }, + { + "bom-ref": "3c44fa6e0ad24190", + "type": "file", + "name": "/juice-shop/node_modules/decompress-unzip/node_modules/file-type/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "5fb963b346a2cd3ac5d664048eeaf13db03da127" + }, + { + "alg": "SHA-256", + "content": "77dfe1fe927c8f631f4ff5cd7040a9f3fb8149ee65160d0f936dff5844d21ee8" + } + ] + }, + { + "bom-ref": "e8b13680ad5d1bd9", + "type": "file", + "name": "/juice-shop/node_modules/decompress-unzip/node_modules/get-stream/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b7150c9c5b976f0f6c27c5a5e4c5466e40091c19" + }, + { + "alg": "SHA-256", + "content": "30c9eb7f6849e5e7eb35dfd625b2e474c7632fbe4377f2186763967cce5e61aa" + } + ] + }, + { + "bom-ref": "983e33df2ad1616f", + "type": "file", + "name": "/juice-shop/node_modules/decompress-unzip/node_modules/pify/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "9d9d1d73f03f4b32f19e6829392a51c9d15b7195" + }, + { + "alg": "SHA-256", + "content": "bb4265f25a454b4daf716b81e525679d774fb23208b3f15284f23723be4e3284" + } + ] + }, + { + "bom-ref": "9e8466bb4726eb8d", + "type": "file", + "name": "/juice-shop/node_modules/decompress-unzip/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "fd0b816b1f4ad813eff7743092370f6fdd251e91" + }, + { + "alg": "SHA-256", + "content": "bd8dcc48b9394f349abfe168301e8d0e33d9b48d9fca79108d6a6302c9349f72" + } + ] + }, + { + "bom-ref": "6c94c86f307c66fb", + "type": "file", + "name": "/juice-shop/node_modules/decompress/node_modules/make-dir/node_modules/pify/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "83bfcdb9fe6dc82ba77d9ef596eb6e0bafac5a71" + }, + { + "alg": "SHA-256", + "content": "7d90a2e3e51176476ad26a1ab00523dccc83a9f84d276695beb8f56b7850b772" + } + ] + }, + { + "bom-ref": "2c09786ec1796aed", + "type": "file", + "name": "/juice-shop/node_modules/decompress/node_modules/make-dir/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "5dc583570034b28410731ea0164940ba872f2a53" + }, + { + "alg": "SHA-256", + "content": "d125b3068a54b746267706fa6c5e6087171fdf42f701cd7b64508c51dd1fec40" + } + ] + }, + { + "bom-ref": "72933db7dbfa206b", + "type": "file", + "name": "/juice-shop/node_modules/decompress/node_modules/pify/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "9d9d1d73f03f4b32f19e6829392a51c9d15b7195" + }, + { + "alg": "SHA-256", + "content": "bb4265f25a454b4daf716b81e525679d774fb23208b3f15284f23723be4e3284" + } + ] + }, + { + "bom-ref": "975f1a4c8f90a889", + "type": "file", + "name": "/juice-shop/node_modules/decompress/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "cca6473d46387c59d174ea40cae6ee46365a8fdb" + }, + { + "alg": "SHA-256", + "content": "d3d6e3c813ac057db9a5a7cd1ecbcb678df9238df896a7f791881d04efb7e96b" + } + ] + }, + { + "bom-ref": "ab5adb6937852a6a", + "type": "file", + "name": "/juice-shop/node_modules/deep-equal/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "917bab6d83cd346a03fad8ccb657ab7272de7314" + }, + { + "alg": "SHA-256", + "content": "21b5cf3db0f28c0b0125231ed308baf7d9324e96085165be0db27df55cc68279" + } + ] + }, + { + "bom-ref": "c454dfadc2e920c6", + "type": "file", + "name": "/juice-shop/node_modules/deep-extend/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "873beeb015297e8e026fdd9d97450877dcbb36cf" + }, + { + "alg": "SHA-256", + "content": "21b307891704eb34e9be621d7563d13734f75f41d8f97825862b05ca5bc2d217" + } + ] + }, + { + "bom-ref": "537453870f6f54f0", + "type": "file", + "name": "/juice-shop/node_modules/define-data-property/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c9384aa894159ee96e107cdd3002915849fc91fc" + }, + { + "alg": "SHA-256", + "content": "bde7f1465b344a24da2b10d2ee99f87edf8e0ecd177c28370b60ad9595de730e" + } + ] + }, + { + "bom-ref": "9476f4ea7e6c2b2d", + "type": "file", + "name": "/juice-shop/node_modules/define-properties/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "7258fe1b09441a50b6399709b9f40811b7da135f" + }, + { + "alg": "SHA-256", + "content": "b61b15058833610f17197bfb60847926703e077b180de684ccc50866906f6fb1" + } + ] + }, + { + "bom-ref": "1b2ffcca2df0f79f", + "type": "file", + "name": "/juice-shop/node_modules/delegates/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f192d34b412f6fda6a541acee81de9e0d48648bb" + }, + { + "alg": "SHA-256", + "content": "7fe6ba799e1316869f2990cfe8e51bd29a40e1e5f327babdd38d23e3e23e8d87" + } + ] + }, + { + "bom-ref": "6678801be132f9f4", + "type": "file", + "name": "/juice-shop/node_modules/depd/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "3c10082c1464a6f589aa10cda88285e780ebf857" + }, + { + "alg": "SHA-256", + "content": "5a3659bcc2e47b25ebf9f23f38eb9452a58920bfe4b59410bfa6fe84639a3b99" + } + ] + }, + { + "bom-ref": "eec301f8f3b84420", + "type": "file", + "name": "/juice-shop/node_modules/destroy/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "e12115ed9a1e2c56eb35ecfc14ff83b8c02935d5" + }, + { + "alg": "SHA-256", + "content": "f865b50652dc062f43142e01f55db2760cc10d255bd05afd232e738999c58188" + } + ] + }, + { + "bom-ref": "8bc3875e4b387ebe", + "type": "file", + "name": "/juice-shop/node_modules/detect-file/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "4bb909e6a4e96fae92a08102ea75db073df4348a" + }, + { + "alg": "SHA-256", + "content": "5c9dafc723e89cbed5a46bd5661a8ce51ff3b0ea7ec1f1a446d91294bff47283" + } + ] + }, + { + "bom-ref": "a393bd5916a4cd0d", + "type": "file", + "name": "/juice-shop/node_modules/detect-libc/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "df38d1adc85f0f39030df82734c0d53a6a4ab728" + }, + { + "alg": "SHA-256", + "content": "bb418f4fa450f8a418f8fc46c33727edef55aefd54c43ec6a9421a65ca8d9827" + } + ] + }, + { + "bom-ref": "5a30f6faf93b2d72", + "type": "file", + "name": "/juice-shop/node_modules/dfa/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "8380e4b8de016791903fae93500e6bed99730482" + }, + { + "alg": "SHA-256", + "content": "96c0ce3cc17b34aabd58fd442157766d9e244cba735e54ee4fe10d7841f0460c" + } + ] + }, + { + "bom-ref": "1bb68024d3e97b97", + "type": "file", + "name": "/juice-shop/node_modules/doctypes/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "871d1d4274f18991e95e1fb8152ee7f389e357c3" + }, + { + "alg": "SHA-256", + "content": "75c3011d12383ba4daaf2bd220c601da3c9b95205394ebd70b4a1c78814298bb" + } + ] + }, + { + "bom-ref": "619b6f952e0f06b0", + "type": "file", + "name": "/juice-shop/node_modules/dottie/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b45953cc74a96671397c527eea17d2c77f554954" + }, + { + "alg": "SHA-256", + "content": "b7ea4b539c814825c0bd87dafae06dfb855705957500b28c30b00769c4062ed1" + } + ] + }, + { + "bom-ref": "d28b45e53e257eda", + "type": "file", + "name": "/juice-shop/node_modules/double-ended-queue/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "30542f1f765ce4999dbac3bbe0b3ff1df8dcef06" + }, + { + "alg": "SHA-256", + "content": "006484a1d2b6898582f6b11c448bbde98d05fede3ed0b062250222329dc436a2" + } + ] + }, + { + "bom-ref": "f3372ec79becb2a2", + "type": "file", + "name": "/juice-shop/node_modules/download/node_modules/file-type/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "4a6b4729fde430cee32de953aa6fca071be059d1" + }, + { + "alg": "SHA-256", + "content": "8294d202a217083501a4d8331056aee92b4e08a793652199ba381ddc5827445c" + } + ] + }, + { + "bom-ref": "c3f3cbf8f4ff2f4d", + "type": "file", + "name": "/juice-shop/node_modules/download/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ae5526f3f8da448d11127e9eb7b12b4c0db0f5ae" + }, + { + "alg": "SHA-256", + "content": "c50eeac8286ef9c74324c8a3788c920d89af79ee02273482661d0e0e53c6ab98" + } + ] + }, + { + "bom-ref": "106fb8f1b61d6257", + "type": "file", + "name": "/juice-shop/node_modules/dunder-proto/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "d4f4da85fa9e51b4843d29d7e541991cf377b8d5" + }, + { + "alg": "SHA-256", + "content": "24df71008e4225c858f389dd2728b76cf66b752256d42a38ed7930aacae7fe2b" + } + ] + }, + { + "bom-ref": "5894bffde1daa3d9", + "type": "file", + "name": "/juice-shop/node_modules/duplexer2/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "03b1919d071f65ef5340b0afb32ebf000056bfcc" + }, + { + "alg": "SHA-256", + "content": "80a5177685b461feb7f741c08ab2268a63e108b03bae0e5056f6a6bebf8ce315" + } + ] + }, + { + "bom-ref": "df8bbf0236fafae1", + "type": "file", + "name": "/juice-shop/node_modules/duplexer3/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b78f4dda4b12e85d2889a30486b82c559f5744bd" + }, + { + "alg": "SHA-256", + "content": "107bd6232c7aa9c50bc3d562b3052e69cadad3a691bdce012ddb244b6357e3de" + } + ] + }, + { + "bom-ref": "34fe805dd8306128", + "type": "file", + "name": "/juice-shop/node_modules/eastasianwidth/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c3bff6d91fcbc648b17edd5f8e37bac1f47485a4" + }, + { + "alg": "SHA-256", + "content": "51db62f97656d02d4bc9670393cae42930dbd1ed89f5837056851807e602867a" + } + ] + }, + { + "bom-ref": "24c30fd7be7915c7", + "type": "file", + "name": "/juice-shop/node_modules/ee-first/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "7ffe61f87f94a558fabc177cad5c9b90b16481cf" + }, + { + "alg": "SHA-256", + "content": "a4eece6ff6b38bf7ac107323f381cc60500097a9cbdd473f5d5b45e68822cb89" + } + ] + }, + { + "bom-ref": "22a24226869668ed", + "type": "file", + "name": "/juice-shop/node_modules/eivindfjeldstad-dot/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "af20b4726ad418b94f3f536ccc764cda1236840f" + }, + { + "alg": "SHA-256", + "content": "ace4488e54d7e874ef61df9734a1a6c87c3df723a9cd14ef88294001f4e64f0d" + } + ] + }, + { + "bom-ref": "a4a53861d8e102bd", + "type": "file", + "name": "/juice-shop/node_modules/emoji-regex/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c26fe90da5886724a2676b8e3d5890beeacaad20" + }, + { + "alg": "SHA-256", + "content": "7bec29b9ca68f2c4becc60e866c2f9342ecdc89fab39841a818ccd9eda15c148" + } + ] + }, + { + "bom-ref": "482b285e3963b77c", + "type": "file", + "name": "/juice-shop/node_modules/enabled/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "35340901cea631effd557c9f64aeb682dcb2c459" + }, + { + "alg": "SHA-256", + "content": "5bc65d6409ffeb2c9eada8c0706d2b6426697d748fa2f409342f3668f4ee23f7" + } + ] + }, + { + "bom-ref": "09be820c9b0da635", + "type": "file", + "name": "/juice-shop/node_modules/encodeurl/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "40228259bb4f106706490d0b0b73cd4f35d6db44" + }, + { + "alg": "SHA-256", + "content": "5df10798f4b086da95c24180d7519fa4f68e2057a48e2ff6b76b91d6ffed1e9b" + } + ] + }, + { + "bom-ref": "c93e4459293d324c", + "type": "file", + "name": "/juice-shop/node_modules/encoding/node_modules/iconv-lite/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a3d90badf75db503f5dd3ff3fb76d120d1424978" + }, + { + "alg": "SHA-256", + "content": "3a9582fd121f841c245d1fcf84ef0b9e41c94b785b8d7eb63f9f5aec9bad0b98" + } + ] + }, + { + "bom-ref": "1d50debe32d304f2", + "type": "file", + "name": "/juice-shop/node_modules/encoding/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "52b117f2bc3113970224b9dc97b7fc18f7df30ab" + }, + { + "alg": "SHA-256", + "content": "8a868d7c206bf2eb71c0721a957b7a255738678f72c290c880b46fec4ec54dbe" + } + ] + }, + { + "bom-ref": "71392ff500a3d290", + "type": "file", + "name": "/juice-shop/node_modules/end-of-stream/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "7e21c9362d2b1158118b6673f45fa1c6695c847f" + }, + { + "alg": "SHA-256", + "content": "da504d0bef5a5974590b62f58df0003b448eccde6b5fbeb044506b7e43368eb5" + } + ] + }, + { + "bom-ref": "c7fe7fee3f0c0d6d", + "type": "file", + "name": "/juice-shop/node_modules/engine.io-parser/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "4a12fbe97085b55ea1025807ce2d6e45ed3c29c5" + }, + { + "alg": "SHA-256", + "content": "3745d9cfcd726c33b1066fc4c0ebfdfc8590b762861e4ff7d1f50b37f338afa4" + } + ] + }, + { + "bom-ref": "fd46da14523e0e94", + "type": "file", + "name": "/juice-shop/node_modules/engine.io/node_modules/cookie/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b7049b02b54f0da0a956bc0967ce39f5429442a5" + }, + { + "alg": "SHA-256", + "content": "07269baaaad9a16ef8a4666d69cdd387891658eaf31af3026abd8b9e3fefc9c9" + } + ] + }, + { + "bom-ref": "8f0078d6ad066963", + "type": "file", + "name": "/juice-shop/node_modules/engine.io/node_modules/debug/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "867baf5b5a330ab0443c88e654e8c43622c3d7a9" + }, + { + "alg": "SHA-256", + "content": "7a60ed9b6b14aa67f2ffe975715aaa6a78303844a5b43d33bfd619812088fe4d" + } + ] + }, + { + "bom-ref": "a3d4402268ca0bbe", + "type": "file", + "name": "/juice-shop/node_modules/engine.io/node_modules/ms/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c290eb97736177176d071da4ac855ab995685c97" + }, + { + "alg": "SHA-256", + "content": "1a6b4d9739790c0b94ab96c8cc0507e281c164c311ff4fbf5e57fb8d26290b40" + } + ] + }, + { + "bom-ref": "6cd8250162f98a5a", + "type": "file", + "name": "/juice-shop/node_modules/engine.io/node_modules/ws/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "55eba127d99266b82e347a07bc4e164aa9c134ab" + }, + { + "alg": "SHA-256", + "content": "0104bf7fa4b359d2a844c2ad0d37a0bf6fe14531e4c9c33055004dce85e8d1e7" + } + ] + }, + { + "bom-ref": "7466a33d6be0fcd2", + "type": "file", + "name": "/juice-shop/node_modules/engine.io/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "2b4f930598e5129e2c27429b87b7554cb065e11d" + }, + { + "alg": "SHA-256", + "content": "b72c50246f14911e15b0f0145cce9a20b78bf8aabf4b79d4c178ef02f53f3a27" + } + ] + }, + { + "bom-ref": "cfbb29459c6b00c8", + "type": "file", + "name": "/juice-shop/node_modules/env-paths/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b5b570f41c1d3e8f251fd06d075cefea4a3449a9" + }, + { + "alg": "SHA-256", + "content": "b92833e5851ec53bd4cd8093f6099d0c6e6818c4374ec1d09aa25d4f9ba91ec4" + } + ] + }, + { + "bom-ref": "8b3872572d29e6a1", + "type": "file", + "name": "/juice-shop/node_modules/err-code/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "5c7bc63340bc312d1563bb2b369e333e1165ab04" + }, + { + "alg": "SHA-256", + "content": "ff5360c17c3e197fc4a4a4fa0d07640292556d585a49c8651fd198e926d47bcc" + } + ] + }, + { + "bom-ref": "8d316251a9d3593b", + "type": "file", + "name": "/juice-shop/node_modules/errorhandler/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "1da18d3d3998adefa01c8b3d1260843baee1eeb4" + }, + { + "alg": "SHA-256", + "content": "f328451e39568b21310723feef6a731480bc3e74b239601a8babe2b7dd411c5d" + } + ] + }, + { + "bom-ref": "f50bb8c74d884419", + "type": "file", + "name": "/juice-shop/node_modules/es-define-property/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f1a35cb43fefef0d0e60920c4df5313ba630ee6d" + }, + { + "alg": "SHA-256", + "content": "3a2cb30dae30a96705dcd9aa2d5fb190cf8200f27badccfa5a81a4374e5708b4" + } + ] + }, + { + "bom-ref": "5d1762e3b0a20867", + "type": "file", + "name": "/juice-shop/node_modules/es-errors/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "d13bcb37ab6ab7f0911ce728148cb1c8485a81d1" + }, + { + "alg": "SHA-256", + "content": "1a0a0bcccc76b915cb64073317312840cf6363e9144b96f406d0059774dd5278" + } + ] + }, + { + "bom-ref": "80b4eebcad19a121", + "type": "file", + "name": "/juice-shop/node_modules/es-get-iterator/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "e5f87acaaa2bd7ba95797e07f31e74d503db6bfe" + }, + { + "alg": "SHA-256", + "content": "cce872f403e70751f0bc8dddb0f7d2e992eb624c9397f764fa7f2feae602ac3f" + } + ] + }, + { + "bom-ref": "8f0f70a0aeb02aa4", + "type": "file", + "name": "/juice-shop/node_modules/es-object-atoms/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "623e510034cf39440e8692aa26c9473765981674" + }, + { + "alg": "SHA-256", + "content": "9975f032714dd642d08c9b50129096f5daf878dbede1ca3544cdcdbf45b48eb0" + } + ] + }, + { + "bom-ref": "2f7d7ed9eebde60f", + "type": "file", + "name": "/juice-shop/node_modules/escape-html/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f9d3fd64a0196e77965489ce9b81fe4ce3a9ecb1" + }, + { + "alg": "SHA-256", + "content": "bd320a3e9d23249f5f7d3ce72f2fa426e28a6b2704bd2b281d0c92806a1f5223" + } + ] + }, + { + "bom-ref": "60df0a2fe5e1851d", + "type": "file", + "name": "/juice-shop/node_modules/escape-string-regexp/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f794290e774669d83cae4e20a497fbf680d20859" + }, + { + "alg": "SHA-256", + "content": "c804f228dd0d4d3b9019ac361339f20cbb1664d62d6853aaa7c2855fbd60fd12" + } + ] + }, + { + "bom-ref": "84c1eb0ab5502279", + "type": "file", + "name": "/juice-shop/node_modules/esprima/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "6c87daaded1f0130495358bdd1393757df2e9233" + }, + { + "alg": "SHA-256", + "content": "860df2e62153db26b370badf352d95edbf18e1eb54bdc2a479429b97155205b2" + } + ] + }, + { + "bom-ref": "d9a75e98df82970f", + "type": "file", + "name": "/juice-shop/node_modules/etag/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "e2debd5c6530254abe164bbd44f1e48b7c7c0018" + }, + { + "alg": "SHA-256", + "content": "836b9a5dd1c6af638f4602e83e2568277f9ab1f457db0b95d949c2a4ddb0462a" + } + ] + }, + { + "bom-ref": "16f3b8521b3b1340", + "type": "file", + "name": "/juice-shop/node_modules/ethers/node_modules/@types/node/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "dde693dc49d0c144fe2402fb5031a5bfc32207d7" + }, + { + "alg": "SHA-256", + "content": "d57a323bf4705370a5e2f0ce927e2f265017d2479fd31e9b32e11334c1550308" + } + ] + }, + { + "bom-ref": "c221a37e9ce427df", + "type": "file", + "name": "/juice-shop/node_modules/ethers/node_modules/undici-types/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "648c0c8889b843ccd3d07972c8cb535517966ad9" + }, + { + "alg": "SHA-256", + "content": "0635ace61c576d1297d05c344c4fab0a77e8c88ffa185c9f18b23d18f7387c40" + } + ] + }, + { + "bom-ref": "2101a4174666abb2", + "type": "file", + "name": "/juice-shop/node_modules/ethers/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "341e8593c90d88ab6b8b325a87a396c011dad895" + }, + { + "alg": "SHA-256", + "content": "86117317a7713eb371f63ff1fbf9366f22459e9a8621e83dc17c8c93e479185c" + } + ] + }, + { + "bom-ref": "76308cf822d62c3e", + "type": "file", + "name": "/juice-shop/node_modules/event-target-shim/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ce8a2ce9da7170ce539fb64b1f91287aed3c5910" + }, + { + "alg": "SHA-256", + "content": "980bdd7706c72d04a4df2e3ee2c8ffccf3bc72bd8e7cd13ca38be00cafc6e8db" + } + ] + }, + { + "bom-ref": "1135461c1a781267", + "type": "file", + "name": "/juice-shop/node_modules/eventemitter3/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "9735c2bc0d60a2aaa6d810d4cf1c47774b914f9c" + }, + { + "alg": "SHA-256", + "content": "675f6e2380c3118ca2c7e1bf39a2720b0eda169a282adabb0f38d27049a8283b" + } + ] + }, + { + "bom-ref": "73defd71555ba562", + "type": "file", + "name": "/juice-shop/node_modules/events/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "8aae12f382a34bc1dd6aae59d3f27e4098148e35" + }, + { + "alg": "SHA-256", + "content": "878ad3687fef7efe3757c1872a3af998c95197129a7445d632486a9591ee542e" + } + ] + }, + { + "bom-ref": "e171c8436472974e", + "type": "file", + "name": "/juice-shop/node_modules/eventsource-parser/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "8891ee39c65ac3e3b1e2a006e07c0f6c36f35253" + }, + { + "alg": "SHA-256", + "content": "fbf7bb33e1aeee68a24ad31c756a8e07730e4d84b1648b0f6888d2cfdb1cbc56" + } + ] + }, + { + "bom-ref": "7404bc574b2ee7fb", + "type": "file", + "name": "/juice-shop/node_modules/exit-x/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "918feaff171528f47dca38f22b4a8f87048483dd" + }, + { + "alg": "SHA-256", + "content": "e987b0c7eaafc6ba68476fc5be7d661a4cd162b1f8de0547b97ff81f045f8346" + } + ] + }, + { + "bom-ref": "bcd323cddff7e03e", + "type": "file", + "name": "/juice-shop/node_modules/exit/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ff06cfc562bae46b67f745152b929ef2aa7c08c6" + }, + { + "alg": "SHA-256", + "content": "5e2cb677a865c02d0a626eea6a718b9dd528cfb45ea20914bb6c396a7291c5e6" + } + ] + }, + { + "bom-ref": "7c4a92168ac613d9", + "type": "file", + "name": "/juice-shop/node_modules/expand-template/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "9fc7d90a7f18b4996e21b82c4eaff325c6ba07b9" + }, + { + "alg": "SHA-256", + "content": "90f652967155275d9fab2887a845454ee797340b28cc0c1b00f1889aaa65f771" + } + ] + }, + { + "bom-ref": "a2be51639c66ae2b", + "type": "file", + "name": "/juice-shop/node_modules/expand-tilde/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "89622a13cd2bfce8992324f0dd2331d2e59d5eb3" + }, + { + "alg": "SHA-256", + "content": "b2d0ab00c2e5d4f6a4ecf0d6a43cb88ce72f44b1847f5c09088c2a485aac07db" + } + ] + }, + { + "bom-ref": "c2108ace5275bc4a", + "type": "file", + "name": "/juice-shop/node_modules/exponential-backoff/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ad6dedac96b4754817f15c7f62c6b1d72fa249fe" + }, + { + "alg": "SHA-256", + "content": "c3076cc23aa8d9f5123900305b9c174af612bfef91211c658ab914611dd86fa8" + } + ] + }, + { + "bom-ref": "d5247719aad7e335", + "type": "file", + "name": "/juice-shop/node_modules/express-ipfilter/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "5fe2e65eb6f608ec98f5d7008da0268741977bdd" + }, + { + "alg": "SHA-256", + "content": "716fb94c7b2816f24531c4faa87fe99d10d4bc87fcd5240157bfe8d9dc078fac" + } + ] + }, + { + "bom-ref": "916a9d2e0fe9f551", + "type": "file", + "name": "/juice-shop/node_modules/express-jwt/node_modules/jsonwebtoken/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a202ae6847862336ee80642647cd5b5f63c78c0f" + }, + { + "alg": "SHA-256", + "content": "b47e393c9f3a368a8c9721dac7f50f2bb8ec02e11347366f6c5e600ae65e2133" + } + ] + }, + { + "bom-ref": "91d8150274f7b681", + "type": "file", + "name": "/juice-shop/node_modules/express-jwt/node_modules/moment/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "1256eb9bb42d4f145e4bcd9e95064d3b4943f1f1" + }, + { + "alg": "SHA-256", + "content": "b0a3d5ad3ee57c7bfc0803b6a38315c0b47501621742383a49af1b686f36a761" + } + ] + }, + { + "bom-ref": "21bdb9e450a3aa79", + "type": "file", + "name": "/juice-shop/node_modules/express-jwt/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "1360dc73f86f18b98bbfa0055fbf1d752740c055" + }, + { + "alg": "SHA-256", + "content": "ee2b6c1812872e159adc637a884c404e7a08eb31a49c4b0e93c808ab85219207" + } + ] + }, + { + "bom-ref": "a55e1bfc0ca209d3", + "type": "file", + "name": "/juice-shop/node_modules/express-rate-limit/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "1ebdeb0dec13e1ee5d489b19a778944b4c35dd30" + }, + { + "alg": "SHA-256", + "content": "859e9ad6910938c8175dd88c8a6ee30bdda86d1798f3ea48aec816164de2c9a0" + } + ] + }, + { + "bom-ref": "a68b5eb0ec2cac67", + "type": "file", + "name": "/juice-shop/node_modules/express-robots-txt/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ee778d9a5d45cf536d1da3fe87d817e3fb65f599" + }, + { + "alg": "SHA-256", + "content": "ff38ca4c23992763a6e3647a806eb44093e2c64a3965d6bd5b6c8a7a3bb7085d" + } + ] + }, + { + "bom-ref": "a851e0ca843f89df", + "type": "file", + "name": "/juice-shop/node_modules/express-security.txt/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "1d1f8efa7065c501ac19ce18c59773746c57698b" + }, + { + "alg": "SHA-256", + "content": "0309502f5ccd0218c615bc67d87263be0027d3c19860c9096a4917d823001033" + } + ] + }, + { + "bom-ref": "fa4cd5b6d2a47716", + "type": "file", + "name": "/juice-shop/node_modules/express/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f23a499f62bd04cfd60f30df0912884de5a9d085" + }, + { + "alg": "SHA-256", + "content": "c7db3b72582355c80cdcef1ad7b2c9a8f53557550724c6bef8502e9818c2ebe7" + } + ] + }, + { + "bom-ref": "9f6e75afd4b1b0da", + "type": "file", + "name": "/juice-shop/node_modules/ext-list/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ed4b7b5ad0481785ef315749f1bece88fbd43112" + }, + { + "alg": "SHA-256", + "content": "1aa02cbc277189344e32609c0f7e9303811a0ebbf1691607343468975257a2be" + } + ] + }, + { + "bom-ref": "8d65e0bb16ffae19", + "type": "file", + "name": "/juice-shop/node_modules/ext-name/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "9cc0d1f321318a0de7c63a80cb66222a60be6b16" + }, + { + "alg": "SHA-256", + "content": "b7dd56ec22b6e02488e6631f3e8d0812228161b6f02e04d5f7f25a9e58f4fa53" + } + ] + }, + { + "bom-ref": "2de494843ce7d9cd", + "type": "file", + "name": "/juice-shop/node_modules/extend/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b6cd42f3e1865fe04ed104d8798d40232f74702a" + }, + { + "alg": "SHA-256", + "content": "8d891b3f00bead114c4741d8a594e7aaa59114f53782ec9a9319a619709dc14f" + } + ] + }, + { + "bom-ref": "8c988672d682db0d", + "type": "file", + "name": "/juice-shop/node_modules/fast.js/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b488db397e98dd361707f8fa4d775f93c1254866" + }, + { + "alg": "SHA-256", + "content": "41ebff4b9f6a6598b47d69e2546ae3e5a439a72642ad3900669e39356d71477c" + } + ] + }, + { + "bom-ref": "b78eb521658790b4", + "type": "file", + "name": "/juice-shop/node_modules/fd-slicer/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "d8074c62f751ce835105f40fa0a95bcaa4979206" + }, + { + "alg": "SHA-256", + "content": "c765386ed427fcadd9ffd7ae1c7748d7127685098fdb85cde3d98df7e931ed2d" + } + ] + }, + { + "bom-ref": "6888248f0a9ff388", + "type": "file", + "name": "/juice-shop/node_modules/feature-policy/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ad637c779e1c1a9b45134570ea43e473ae44d2d9" + }, + { + "alg": "SHA-256", + "content": "a02b7816f5077eee026def9eef9b96f8511fa6e2995bacd168e0ad2311785317" + } + ] + }, + { + "bom-ref": "1b42fd6238ca14e6", + "type": "file", + "name": "/juice-shop/node_modules/fecha/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "217ec9bfd1608fa49904b38e4bd8e09291bffc1d" + }, + { + "alg": "SHA-256", + "content": "80ecd4a2611642303d3fdd2dcf480a806737c6b7e9b2306c9bb314fdf16c81d3" + } + ] + }, + { + "bom-ref": "2590440d7db51a7f", + "type": "file", + "name": "/juice-shop/node_modules/file-stream-rotator/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "006a62bb3da1401fb420e93f831f9901d455e6a5" + }, + { + "alg": "SHA-256", + "content": "743a71077be1d7bd2181334b5259f97cf396edcc5b61eb92fb9b26995aab80c7" + } + ] + }, + { + "bom-ref": "06e2227a64db54f6", + "type": "file", + "name": "/juice-shop/node_modules/file-type/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "9bc985e64fa6cc889fd63347ce118082115fbe7a" + }, + { + "alg": "SHA-256", + "content": "812c4de8a1af4058d6a1f7e38b2687a545d7273a9103058e8cf1177b5c95803c" + } + ] + }, + { + "bom-ref": "72262486768e9cf0", + "type": "file", + "name": "/juice-shop/node_modules/file-uri-to-path/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "5dee8a540c467ffbf9025481180c77a06a9f46f2" + }, + { + "alg": "SHA-256", + "content": "71eb1e24bb9694f89c613fa0aa307f977dd43f41d11794c7b48fabf6c55f66b0" + } + ] + }, + { + "bom-ref": "ee5690c3fae65ab7", + "type": "file", + "name": "/juice-shop/node_modules/filename-reserved-regex/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "9662d5519c4ea053d30cca8407bfe0e82c51fb76" + }, + { + "alg": "SHA-256", + "content": "cdbab11cec5a1837bda72ad9b1e91fa10cf22e634b4c1d550440b9a85e3dbd08" + } + ] + }, + { + "bom-ref": "8995b1676a1da70a", + "type": "file", + "name": "/juice-shop/node_modules/filenamify/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ac191eead429dc383ad2b6b379a0e8ff1837bf28" + }, + { + "alg": "SHA-256", + "content": "60ac75b25fe301fa718dec448dd812e5e64ff07aea1de630b934508aea8d9b98" + } + ] + }, + { + "bom-ref": "1751232317f7288d", + "type": "file", + "name": "/juice-shop/node_modules/fill-range/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "1682e8ba503f3836b55fc5763adfd0605f0d1b6a" + }, + { + "alg": "SHA-256", + "content": "87f5c78f9b47d21f9ca62b60cff1d250a3b468eab320dd13c3f3ab2464a02735" + } + ] + }, + { + "bom-ref": "f868ecd10a1f5bc3", + "type": "file", + "name": "/juice-shop/node_modules/finale-rest/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f9a24d135e58874e49a609e85eb002f28fb716bb" + }, + { + "alg": "SHA-256", + "content": "ef8d065b7073f5b58dc0f19f24263f0930dcf592e67ec4a94cd57b237b30a229" + } + ] + }, + { + "bom-ref": "070bd9cfd7642e53", + "type": "file", + "name": "/juice-shop/node_modules/finalhandler/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "0e0e56a5c06345a6a43b7a61390736c503407420" + }, + { + "alg": "SHA-256", + "content": "4907275accd15800e34bd953b35b64e391dbe182f75d870a5a30da72b4e9271b" + } + ] + }, + { + "bom-ref": "c369d24949434f29", + "type": "file", + "name": "/juice-shop/node_modules/findup-sync/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f68cd5a7999712c9082df2201062980e9b28fa16" + }, + { + "alg": "SHA-256", + "content": "10a04ec68f05ab4a6cc47917431544ee7cfe7b760065913a3c65cc7b743b6857" + } + ] + }, + { + "bom-ref": "39a924dee763b6e9", + "type": "file", + "name": "/juice-shop/node_modules/fined/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a1f7ac68d3496f59d5428c268fd757fa1df105f4" + }, + { + "alg": "SHA-256", + "content": "8d8b10b51c047096ab925bb9bb538cee021a246f36c61d675d12afc4f7953d9c" + } + ] + }, + { + "bom-ref": "2e252e1ad6fd5424", + "type": "file", + "name": "/juice-shop/node_modules/flagged-respawn/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "515caf1e8682c8a724c316e64553e908828231f5" + }, + { + "alg": "SHA-256", + "content": "6c04c192754301ec51a5506c3e6d6b89db47803a4f261abd49b4bd3dfcc7d6cc" + } + ] + }, + { + "bom-ref": "ebd29cd15163bbed", + "type": "file", + "name": "/juice-shop/node_modules/fn.name/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "339606d3e1f800255c7e03b02a94197f568cab3d" + }, + { + "alg": "SHA-256", + "content": "20d7245ef0121af63e27998ea2c1a477a712809f4a621ca5246869c32ff76cd9" + } + ] + }, + { + "bom-ref": "454a303e9bc374c4", + "type": "file", + "name": "/juice-shop/node_modules/fontkit/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "1f933307496553b0ba751d5878ae0f0a8e661b40" + }, + { + "alg": "SHA-256", + "content": "ffece6cf3f8adcb72394784ccb3772696241a93ba64fcfb5c5f7226b24be0662" + } + ] + }, + { + "bom-ref": "3d6dbef2b8f26571", + "type": "file", + "name": "/juice-shop/node_modules/for-each/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "1eb80e2f5665bd24adc0caa46741c4d4c52f4c02" + }, + { + "alg": "SHA-256", + "content": "789a488ade1ea7535497f7c86fded54281c4e7ff861fe8e0e667772a00680711" + } + ] + }, + { + "bom-ref": "2be490cce31c4fa0", + "type": "file", + "name": "/juice-shop/node_modules/for-in/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "e68ca23447b0f106e434b1ca3071685929a40b7f" + }, + { + "alg": "SHA-256", + "content": "f0d68cfe65109d06cf02bcc45e4b8bc18678d530f580eb62d112d919473e2539" + } + ] + }, + { + "bom-ref": "6103695e16a4823e", + "type": "file", + "name": "/juice-shop/node_modules/for-own/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "9e3f16c5c1c13709aca01bc598b74d6ebb48d447" + }, + { + "alg": "SHA-256", + "content": "2a10071296eaf81bef9f031ef4bacbf7a9d38cc3d262486a17e266801c105921" + } + ] + }, + { + "bom-ref": "32cdb8c1290e6e66", + "type": "file", + "name": "/juice-shop/node_modules/foreachasync/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f26165388b351226f15a9af7698ff5f7b9741e0f" + }, + { + "alg": "SHA-256", + "content": "5ea65195de8e3e84b0d005f186188ef895d92164b5e09f284e8697e7300221ff" + } + ] + }, + { + "bom-ref": "6a440fd65c36d617", + "type": "file", + "name": "/juice-shop/node_modules/foreground-child/node_modules/signal-exit/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "7ed47a76d7f1a65c0920cbf3d9f09c4adb9cc961" + }, + { + "alg": "SHA-256", + "content": "cd1c6cfa95782e432dd2affaa88c3a6dda7f46c8088d91f3acc0fba79dce5075" + } + ] + }, + { + "bom-ref": "a8e93b834471b9f9", + "type": "file", + "name": "/juice-shop/node_modules/foreground-child/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ca2af14071df0e6084e5797f9fbcf179d51f9e5d" + }, + { + "alg": "SHA-256", + "content": "434959cc3a188aa891e21bc23f5684421425722faf2dec45b7cff2ca2934bd6a" + } + ] + }, + { + "bom-ref": "1895b6fea9917730", + "type": "file", + "name": "/juice-shop/node_modules/forwarded/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "5d558cad52024d41373ae030c0d7ff67e8dfd7fe" + }, + { + "alg": "SHA-256", + "content": "550a78f64b6a76bc353d6a10152af5750613d0d910f8478943176c1a6196158a" + } + ] + }, + { + "bom-ref": "22a8f1c518c6c3ef", + "type": "file", + "name": "/juice-shop/node_modules/fresh/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "6d90f7658279184066c5ee790cfa3dde6921951b" + }, + { + "alg": "SHA-256", + "content": "65f8ebd91560a3a6143f06bd9066d337bcf5f0c53e4a5329b98894f24eefb8b1" + } + ] + }, + { + "bom-ref": "6a4e3ac3ed2b21e7", + "type": "file", + "name": "/juice-shop/node_modules/from2/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "9be6ddd4214e1de4ee7027c4ea14ff38571d62ed" + }, + { + "alg": "SHA-256", + "content": "df32d5ef7cad54b2d82a468b91e81e657fb132ce6698f5fe308947eba083a5e7" + } + ] + }, + { + "bom-ref": "aea151ed9d2b9086", + "type": "file", + "name": "/juice-shop/node_modules/fs-constants/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "554513fbd310c245ec547539af3c2326f5d38bda" + }, + { + "alg": "SHA-256", + "content": "9cefec768b4f8c52591b840367d077a46a5a2b72ea2778dcf037afd96b234671" + } + ] + }, + { + "bom-ref": "4cac965421059e60", + "type": "file", + "name": "/juice-shop/node_modules/fs-extra/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "dd47b6994e49f103b9c06ef05a5ef7fc210135a6" + }, + { + "alg": "SHA-256", + "content": "528b7d9a7708b1694510f752f286e7ef70f669fb604411645909252b3f99cd96" + } + ] + }, + { + "bom-ref": "e683373eacc181af", + "type": "file", + "name": "/juice-shop/node_modules/fs-minipass/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "2e472ead48322dd560133d10f39db20ee5e3fae1" + }, + { + "alg": "SHA-256", + "content": "e90117e65341117ce56ab6aaa8b59291210601f69c63996fbe446a9a30237fc6" + } + ] + }, + { + "bom-ref": "fddb86f3595998a9", + "type": "file", + "name": "/juice-shop/node_modules/fs.realpath/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "2ec89eb99a2117211b3879fa1bf42a4aac964a32" + }, + { + "alg": "SHA-256", + "content": "2985019b1b3cf5894df9b831816f7b480833931da982489e3a98c346ce7da897" + } + ] + }, + { + "bom-ref": "f5dc103e438ec3d4", + "type": "file", + "name": "/juice-shop/node_modules/fstream/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "acaf9487d855ef39c8c80b58d5ccec1d78ad67a8" + }, + { + "alg": "SHA-256", + "content": "167ac6b41593c409b18eea3aeb4272a2e33168404ac605a39d025eeb1b7f0675" + } + ] + }, + { + "bom-ref": "8e583ef383611786", + "type": "file", + "name": "/juice-shop/node_modules/function-bind/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "1fdcd92c6ad33cfab1c556504198e29a38759a7c" + }, + { + "alg": "SHA-256", + "content": "edb1c4faf4148e6e3d74ed8dbac1a1dc359a647ff4207aad4851396dc7a3559a" + } + ] + }, + { + "bom-ref": "d25131a2fed3720a", + "type": "file", + "name": "/juice-shop/node_modules/functions-have-names/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "e2328af43e01e155fde631bd72d8a7800289d67b" + }, + { + "alg": "SHA-256", + "content": "b821fe786f7afa6f8b2090ddbc053717528314ed39bdbff0e283a0b0103afee5" + } + ] + }, + { + "bom-ref": "d14a4438023ee449", + "type": "file", + "name": "/juice-shop/node_modules/gauge/node_modules/ansi-regex/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b37cfda3b81ab97ca6c2845f42a134be22e90722" + }, + { + "alg": "SHA-256", + "content": "23061f1352b3fe3c948a7a340f94fae9f5e08e430949f12e449636ba727b784b" + } + ] + }, + { + "bom-ref": "715def2b4db92e2c", + "type": "file", + "name": "/juice-shop/node_modules/gauge/node_modules/is-fullwidth-code-point/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "d73a908990051ad245c6de40672de507997f8cf1" + }, + { + "alg": "SHA-256", + "content": "8bab82161f70f70214df34fdf7c1cdfcef69d9aea8e9a56a575991a5ed7d905e" + } + ] + }, + { + "bom-ref": "a631f9374339eab2", + "type": "file", + "name": "/juice-shop/node_modules/gauge/node_modules/string-width/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "0a17570915e73311d0800c28660e70971f5bff57" + }, + { + "alg": "SHA-256", + "content": "d33f936e64b142b548af5923f28d0e3bf1bc8cac3dca174bc0d1f8d068e91868" + } + ] + }, + { + "bom-ref": "f9ad6c0bd9c61e10", + "type": "file", + "name": "/juice-shop/node_modules/gauge/node_modules/strip-ansi/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c9e0a8f6be8feff9265983acd92a0e76e12888c3" + }, + { + "alg": "SHA-256", + "content": "60dfc6bf58aea11944e7ddf08e516814a33fe805c38620939a5a1d7303c0bc54" + } + ] + }, + { + "bom-ref": "97a791e33582aefc", + "type": "file", + "name": "/juice-shop/node_modules/gauge/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "35539d2558f25a9c424168ea7396c72433795656" + }, + { + "alg": "SHA-256", + "content": "df591d77a6915f63b1930765f13d437c7d075024a794ccc608de1b0d3544da86" + } + ] + }, + { + "bom-ref": "76bf5ab8e3755266", + "type": "file", + "name": "/juice-shop/node_modules/geojson-utils/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "d9f6a7f819508087eeee64a0a125a76eaea897b6" + }, + { + "alg": "SHA-256", + "content": "4c3a2f48a5d486a8339f987ec4fb672be0c6e8d0baf382fbcf7d77dc4f635bc0" + } + ] + }, + { + "bom-ref": "3a50b11cc6d62cc9", + "type": "file", + "name": "/juice-shop/node_modules/get-caller-file/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "89c75b65b2c80b295b9544b2c99086a517380f86" + }, + { + "alg": "SHA-256", + "content": "680a080d2885c05bc51dde429c80784bfb248ca3ef3685438079c5015721e2ae" + } + ] + }, + { + "bom-ref": "de5c2244b6aeb0c7", + "type": "file", + "name": "/juice-shop/node_modules/get-intrinsic/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "43046e9d01abc17bd97dcfc2dd8fa25bf8f8619c" + }, + { + "alg": "SHA-256", + "content": "45b14763baacc59b0fd7b39e3ad983d5d2aaf7f5ed682f2fce9edb469826c999" + } + ] + }, + { + "bom-ref": "2e405af7846dd351", + "type": "file", + "name": "/juice-shop/node_modules/get-proto/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "6dbd8c5f598b42b9445a7958c5749122e09158d4" + }, + { + "alg": "SHA-256", + "content": "73839e012ac7134a632c9d9fc6bdb700ac9ab5553cce39eb789ba2b65663e734" + } + ] + }, + { + "bom-ref": "849bf19ed79bf539", + "type": "file", + "name": "/juice-shop/node_modules/get-stream/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ecf5eff5c593b997a40265bad859940565f1cf22" + }, + { + "alg": "SHA-256", + "content": "34078f73f1cd1b680486d29881da4a4ab72aae9e8f39ef097e3bfd6c7ce2c88c" + } + ] + }, + { + "bom-ref": "a9e5baa8f201187a", + "type": "file", + "name": "/juice-shop/node_modules/getobject/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "36da365b15fcfbe8dc2db30ab127d2f153c85c72" + }, + { + "alg": "SHA-256", + "content": "5cceaa22701866be935d5fc0e14bbcfa13ebe30b756932fc918827a81c56b33b" + } + ] + }, + { + "bom-ref": "ba706ce284baeecd", + "type": "file", + "name": "/juice-shop/node_modules/github-from-package/example/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "34adfc587fde9ec7027c12386651c2b8d592646a" + }, + { + "alg": "SHA-256", + "content": "1b0a33ff4aad344b3d09605b854a4b5bcf1b79bef1dc821fc32d206ba7cc0cf8" + } + ] + }, + { + "bom-ref": "8314c5df02d85b5a", + "type": "file", + "name": "/juice-shop/node_modules/github-from-package/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "72eb87470bfd738cfbaa08fdf06ec28b0c7f3775" + }, + { + "alg": "SHA-256", + "content": "67742aa2b856e3523c2f89132e41cc5026c49ffe7df58bd3ea906caaa217bd79" + } + ] + }, + { + "bom-ref": "daf7900310965889", + "type": "file", + "name": "/juice-shop/node_modules/glob/node_modules/brace-expansion/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ee29327a8b50605e858da5a9ca35c4dca1a3a21f" + }, + { + "alg": "SHA-256", + "content": "579ffcbe9f96809c7f69366c34835370909b13669d757d6d614b030609f3aa12" + } + ] + }, + { + "bom-ref": "a1b426558aaf5e3a", + "type": "file", + "name": "/juice-shop/node_modules/glob/node_modules/minimatch/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "dc1725a3de0ef90bdb2be99bebe81e96405817df" + }, + { + "alg": "SHA-256", + "content": "07347ae64d38f4cc1be3ffcc83322ec40d4609f5f3e9dc027ae91a4617239ac2" + } + ] + }, + { + "bom-ref": "f3e6e6e7d7ace0b8", + "type": "file", + "name": "/juice-shop/node_modules/glob/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "05e7b265b75fb6b98f140712737e92c97c487cc9" + }, + { + "alg": "SHA-256", + "content": "5455b1a29f8c3f3b6a41c2c053bf0684f14464bb5360f7b8c8702bf45b2da0bb" + } + ] + }, + { + "bom-ref": "4386dfc5fe0bfaee", + "type": "file", + "name": "/juice-shop/node_modules/global-modules/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "7eb8f441c47a7147a88af25e4b180c0b19c0756f" + }, + { + "alg": "SHA-256", + "content": "d91d8ab2abee8c24045e372400accd67b4212357d592ee99eb41567bd422047a" + } + ] + }, + { + "bom-ref": "b494839057154338", + "type": "file", + "name": "/juice-shop/node_modules/global-prefix/node_modules/ini/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "14b52ea8911e4e9f89acb4d876e87755e54529e2" + }, + { + "alg": "SHA-256", + "content": "8cfafc3521292bd7434d2f40762984f36eb12f03bde92b42a9df2ea17552f4a4" + } + ] + }, + { + "bom-ref": "c8cbc2f98b19e2c4", + "type": "file", + "name": "/juice-shop/node_modules/global-prefix/node_modules/which/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "6aa908dedff8d74053157a8a908db304252c8549" + }, + { + "alg": "SHA-256", + "content": "88269288cdfae9bec4232d6b4fdbb4f52ad5db216219d6d701b02a2fde14162a" + } + ] + }, + { + "bom-ref": "6ffd3e9dee54a626", + "type": "file", + "name": "/juice-shop/node_modules/global-prefix/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b819052d9650e51974f6e39f57bf125175b9860d" + }, + { + "alg": "SHA-256", + "content": "a58e288808740745879d771ed20d34c889572a6822709b545d661fa9a5555db2" + } + ] + }, + { + "bom-ref": "fffae2bb5c6db311", + "type": "file", + "name": "/juice-shop/node_modules/gopd/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "682b4b77bd041501546a485298d662b1a54de702" + }, + { + "alg": "SHA-256", + "content": "33ace32dc861f6da9d1fd9d0a44c66e8c6ff3b13358d070683c1c2978ff5f19f" + } + ] + }, + { + "bom-ref": "c0002dc6a2960e10", + "type": "file", + "name": "/juice-shop/node_modules/got/node_modules/get-stream/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "000b39656a452f8e4ddcedb94597a6970c3f456a" + }, + { + "alg": "SHA-256", + "content": "08d0f76239ff04bf822de18ef5bff87f16fe6427b3bf8567b4fe3bf2176a320b" + } + ] + }, + { + "bom-ref": "f6ef33929c7dd9e5", + "type": "file", + "name": "/juice-shop/node_modules/got/node_modules/pify/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "83bfcdb9fe6dc82ba77d9ef596eb6e0bafac5a71" + }, + { + "alg": "SHA-256", + "content": "7d90a2e3e51176476ad26a1ab00523dccc83a9f84d276695beb8f56b7850b772" + } + ] + }, + { + "bom-ref": "eea3b49854c7ceb2", + "type": "file", + "name": "/juice-shop/node_modules/got/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "1f84f9ede8d91e4fdaede119e1cb6dfac7162b92" + }, + { + "alg": "SHA-256", + "content": "37caee779790d68f90ed8b63f3f9658da3c70ddc7cf6d282a87779196b7c42bc" + } + ] + }, + { + "bom-ref": "5a8eca41ae10dfa4", + "type": "file", + "name": "/juice-shop/node_modules/graceful-fs/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "21a733b3f7e2ee153041de90fb03d5596934f346" + }, + { + "alg": "SHA-256", + "content": "5747d4ba6b17165c6ecac30ab3a331715f41c7ad546e1f1574dab1bdcb116181" + } + ] + }, + { + "bom-ref": "58e839eaa8f28272", + "type": "file", + "name": "/juice-shop/node_modules/grunt-cli/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "e599b431cc2ab5680478c2f36e8f4cb0ff2512d0" + }, + { + "alg": "SHA-256", + "content": "211eb236d706637b386a9bd72e5f8e2846b19e9696ade720549a278c2a7fb54e" + } + ] + }, + { + "bom-ref": "f4ae4ad26e00010d", + "type": "file", + "name": "/juice-shop/node_modules/grunt-contrib-compress/node_modules/ansi-regex/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b37cfda3b81ab97ca6c2845f42a134be22e90722" + }, + { + "alg": "SHA-256", + "content": "23061f1352b3fe3c948a7a340f94fae9f5e08e430949f12e449636ba727b784b" + } + ] + }, + { + "bom-ref": "134692b971ac03a4", + "type": "file", + "name": "/juice-shop/node_modules/grunt-contrib-compress/node_modules/ansi-styles/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "27a33893272864564ee2ba8b810d0f2bf4e30065" + }, + { + "alg": "SHA-256", + "content": "787f6262b31a31ec91978ac4488de398a4e780a8ce1e3a6fbbe17e3bdd105672" + } + ] + }, + { + "bom-ref": "e150aee8839b89e6", + "type": "file", + "name": "/juice-shop/node_modules/grunt-contrib-compress/node_modules/chalk/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a1764894981b73b8c03d267fc59b5c2a8f46a25d" + }, + { + "alg": "SHA-256", + "content": "afb4ae5465de455d491b9ec2caac993f6c52b2c2b00d9817ef33077f6054316a" + } + ] + }, + { + "bom-ref": "13ba5dcd005c3fc6", + "type": "file", + "name": "/juice-shop/node_modules/grunt-contrib-compress/node_modules/pretty-bytes/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "d4fe454f58534e1ef4b26586cce7560d0a0c1593" + }, + { + "alg": "SHA-256", + "content": "fb57051a060153501ecc4f0f405f694e4b8e354ff5a5e4a0e33ee47bdeca884f" + } + ] + }, + { + "bom-ref": "ae29d1981cf3b5b4", + "type": "file", + "name": "/juice-shop/node_modules/grunt-contrib-compress/node_modules/strip-ansi/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c9e0a8f6be8feff9265983acd92a0e76e12888c3" + }, + { + "alg": "SHA-256", + "content": "60dfc6bf58aea11944e7ddf08e516814a33fe805c38620939a5a1d7303c0bc54" + } + ] + }, + { + "bom-ref": "3190527799813378", + "type": "file", + "name": "/juice-shop/node_modules/grunt-contrib-compress/node_modules/supports-color/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "e492fe816d79b77deea6b08e79f1dd725e31968b" + }, + { + "alg": "SHA-256", + "content": "9b672598114d476cd159f22a3048f92feb9e2a26e3c0a5f2b097b00db96f7360" + } + ] + }, + { + "bom-ref": "09a01dd32e988c92", + "type": "file", + "name": "/juice-shop/node_modules/grunt-contrib-compress/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "74b3b66c0b882c2f6ad989971446ef680e558834" + }, + { + "alg": "SHA-256", + "content": "d75fe9bb9ea6398b82febadba5e93001a8be6a2f73d2ab77fd7783cf981ec19b" + } + ] + }, + { + "bom-ref": "d3cf3c9a5341713a", + "type": "file", + "name": "/juice-shop/node_modules/grunt-known-options/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "2f23630667ac2a43221ce73913f2a100444c9d3b" + }, + { + "alg": "SHA-256", + "content": "68aae8e3a01b7a135031a78b5f4f866a3613ae1d2e733d343d007d420f960412" + } + ] + }, + { + "bom-ref": "96633f89c77e0412", + "type": "file", + "name": "/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/ansi-styles/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "3c9ef7bd0a1c3d805814c654c457cc315c48c116" + }, + { + "alg": "SHA-256", + "content": "d405f010681d53f77691015e98461f8484b2afe6a9edfdd2ddb27b1e8a8e883d" + } + ] + }, + { + "bom-ref": "a3753b6533d660f0", + "type": "file", + "name": "/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/chalk/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "651223fdfe370f7eeea056c8bb29f6303cabb3c1" + }, + { + "alg": "SHA-256", + "content": "9cd907d34a45cb73b5c8a459d5602a36ccd456794665c529a3a5b0f02e196f26" + } + ] + }, + { + "bom-ref": "0f3a0ee9d68cee21", + "type": "file", + "name": "/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/color-convert/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "03f26ab8597e0117b7ad15bcfa9f0b31c8375ea9" + }, + { + "alg": "SHA-256", + "content": "9471d21744ca3137410448da6b3bd7b30ee91d42edce3b82ebcbf84faef74fb4" + } + ] + }, + { + "bom-ref": "c05df246d0e9da4f", + "type": "file", + "name": "/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/color-name/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "411d7c87d5b1dec0d479aa13e3406b5c38ac34f5" + }, + { + "alg": "SHA-256", + "content": "4a557ea373907e4643badb89ff21b3f4b969d20631086d78eab2e03d05c2efa4" + } + ] + }, + { + "bom-ref": "950c999c3fbae01a", + "type": "file", + "name": "/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/has-flag/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "688a5d7d9b58962757fdb849c4876e2ed534e12b" + }, + { + "alg": "SHA-256", + "content": "3fef4b52efbeabeadfffd5994e90b1025eb24263286e34170675956637d368b1" + } + ] + }, + { + "bom-ref": "3bd6754d8610e3b9", + "type": "file", + "name": "/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/supports-color/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "3c4abe10bd7383f277a3eac3ce43359fd92ad32e" + }, + { + "alg": "SHA-256", + "content": "d410a772f9f64b224482ec13815a4bbf1837c533e1be04b3687755c48b2efa1f" + } + ] + }, + { + "bom-ref": "87d25ae144f0bac3", + "type": "file", + "name": "/juice-shop/node_modules/grunt-legacy-log-utils/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "fd7bf6aca87308509a684eec0d57af6a97d2e673" + }, + { + "alg": "SHA-256", + "content": "0f3c2848bd95bc42d1d0907a53bc4c58af98d2fda3c6a392ff5f9eb3d7054f63" + } + ] + }, + { + "bom-ref": "02ce89ba38ae8e55", + "type": "file", + "name": "/juice-shop/node_modules/grunt-legacy-log/node_modules/colors/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "1cd1c78691f7985f2a1b21d18698fcadcedef856" + }, + { + "alg": "SHA-256", + "content": "59591b6842c5175579cdb52ffb10c2cbda4bf4129755daa3bdc5d36059a65c24" + } + ] + }, + { + "bom-ref": "da827748b250e2fa", + "type": "file", + "name": "/juice-shop/node_modules/grunt-legacy-log/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "4776e43427b086f1197f9fe45d810e2e31994f42" + }, + { + "alg": "SHA-256", + "content": "f2ba99338a46596bc93ffb9b0bcaaf852093559fb8adc8a46a65c9f0b8570ca9" + } + ] + }, + { + "bom-ref": "43874cfef3e40b1d", + "type": "file", + "name": "/juice-shop/node_modules/grunt-legacy-util/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ac0991341b67c10d582e6aaae42cf1a7f18bd5ff" + }, + { + "alg": "SHA-256", + "content": "73760a532d0d8ecaaf31356ee00535ea99aab390577db4ea274146280cac6d28" + } + ] + }, + { + "bom-ref": "1909918f9388b1a5", + "type": "file", + "name": "/juice-shop/node_modules/grunt-replace-json/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "e3809536e511d1e2d35f1b474ecf83f0525a5488" + }, + { + "alg": "SHA-256", + "content": "48b4ef2e97791b7f824cf0d382e16ca0b3ab6b8f1a8554a17d214edfad8159e6" + } + ] + }, + { + "bom-ref": "d2f6ad0534a207f6", + "type": "file", + "name": "/juice-shop/node_modules/grunt/node_modules/eventemitter2/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "7e98b1c611c82c90901f8e7482d39e23a940976b" + }, + { + "alg": "SHA-256", + "content": "2d91894dee5ab72977f359cbce89ab9161675cd0db8cb56ad6a93fec9a33fa59" + } + ] + }, + { + "bom-ref": "9760e9da627764bd", + "type": "file", + "name": "/juice-shop/node_modules/grunt/node_modules/glob/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "331a7d4bcec851ac4e7c1cc6624117fcab2be3af" + }, + { + "alg": "SHA-256", + "content": "3c5a47bd1991588b045fbb54fb4def5d52d9bbf1a8abfca39d370eb2274f6733" + } + ] + }, + { + "bom-ref": "82d54860f226282f", + "type": "file", + "name": "/juice-shop/node_modules/grunt/node_modules/iconv-lite/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a3d90badf75db503f5dd3ff3fb76d120d1424978" + }, + { + "alg": "SHA-256", + "content": "3a9582fd121f841c245d1fcf84ef0b9e41c94b785b8d7eb63f9f5aec9bad0b98" + } + ] + }, + { + "bom-ref": "3b4eb95960537cf8", + "type": "file", + "name": "/juice-shop/node_modules/grunt/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "9d2e82cae65e6c8c24f4685c74db6dbe7760f6ea" + }, + { + "alg": "SHA-256", + "content": "1cce5bfa08cfa562e267c67bb623c9b8612f548a6cd5cc16af92a3476000e005" + } + ] + }, + { + "bom-ref": "0f4be6a14722a4d7", + "type": "file", + "name": "/juice-shop/node_modules/handlebars/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "303d964b8e10574fcd0e88ba8920b96b0b917c6d" + }, + { + "alg": "SHA-256", + "content": "110a52011f3d7e7c411851e485747e203e4d061fc88b435c75a3b1def6a2d135" + } + ] + }, + { + "bom-ref": "64d54a28d68abc25", + "type": "file", + "name": "/juice-shop/node_modules/has-ansi/node_modules/ansi-regex/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b37cfda3b81ab97ca6c2845f42a134be22e90722" + }, + { + "alg": "SHA-256", + "content": "23061f1352b3fe3c948a7a340f94fae9f5e08e430949f12e449636ba727b784b" + } + ] + }, + { + "bom-ref": "7d81e37c24dcbcd8", + "type": "file", + "name": "/juice-shop/node_modules/has-ansi/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "6d2a70595a6482fc03d6615decd51e24073d5bc0" + }, + { + "alg": "SHA-256", + "content": "9ef1a1efe1471d262ecb5f55215109d051a1ef556e79fdd8fb31300f84d8ec5a" + } + ] + }, + { + "bom-ref": "4297df31d2d94f33", + "type": "file", + "name": "/juice-shop/node_modules/has-bigints/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ac647a2de47db6928f257a8a1e3b4274c198e083" + }, + { + "alg": "SHA-256", + "content": "b811e76ed3775f79abd7ea695c4407d800678a71703762f50bdde6f1f03098d4" + } + ] + }, + { + "bom-ref": "2cf3a2b520793d3e", + "type": "file", + "name": "/juice-shop/node_modules/has-flag/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "0a61b7395724eb79396b1cef110a74565de5ea88" + }, + { + "alg": "SHA-256", + "content": "5f786f6d16a53e7171fda89adc83bbd9c07fc17fb9de7ea78431283972593984" + } + ] + }, + { + "bom-ref": "349ffef9735ab8a9", + "type": "file", + "name": "/juice-shop/node_modules/has-property-descriptors/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a3e6c1869a4e2f16574906fea431ce7a4bc1a022" + }, + { + "alg": "SHA-256", + "content": "59a91e2cf32e4303d248708999a9ec3afd8e3649a87ba7abcf2177dc1984e3d5" + } + ] + }, + { + "bom-ref": "0e05bc1d650eedd8", + "type": "file", + "name": "/juice-shop/node_modules/has-symbol-support-x/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "2b9c85c4a1a16c5ebb307019bfadddbebba06a72" + }, + { + "alg": "SHA-256", + "content": "55cc66bb9aa16da08a9e70e21d258108b9b510b2fe39310959c54711b78dcba0" + } + ] + }, + { + "bom-ref": "7766705a80786a84", + "type": "file", + "name": "/juice-shop/node_modules/has-symbols/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "8e49a565463e9e23d9c32d8ccc18009321af19bf" + }, + { + "alg": "SHA-256", + "content": "5190268c0e3308d7446d1f7c036238f329f786938453e6017cb90980b3612e7a" + } + ] + }, + { + "bom-ref": "5b51f3e1c9da1db7", + "type": "file", + "name": "/juice-shop/node_modules/has-to-string-tag-x/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "efa6ac5d32b7cf37e677de7c59bec08dfa68aefb" + }, + { + "alg": "SHA-256", + "content": "cfe639d187fa85a2ae2f8c0b5490ed8d26cee136ec7a18dbec93442805bb9172" + } + ] + }, + { + "bom-ref": "9087ef2882eade55", + "type": "file", + "name": "/juice-shop/node_modules/has-tostringtag/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "75aeb5fec79dabebcda93a54b809a899fac1e214" + }, + { + "alg": "SHA-256", + "content": "30ab773c52021a6b800ea48f251abeeb1f6e378300f819204dfbb38d6e43f3ad" + } + ] + }, + { + "bom-ref": "adc4a153f232c5e6", + "type": "file", + "name": "/juice-shop/node_modules/has-unicode/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f25b286b591e5aa36e855957980e27569961d706" + }, + { + "alg": "SHA-256", + "content": "f106bbff8f1aed94ef54031d8a4e5ebd0275b3fefc15361a96150d9029a9d510" + } + ] + }, + { + "bom-ref": "b05c99fb147704a8", + "type": "file", + "name": "/juice-shop/node_modules/hashids/esm/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "dbd2cf3b837c1ed989df0bd7c68e7e3afc422110" + }, + { + "alg": "SHA-256", + "content": "dc5dc8f11f4b9b6d3fce9aff5d9ca80a33a8fae0f3dbc936ca46c34544b9e193" + } + ] + }, + { + "bom-ref": "00e066bad4f33753", + "type": "file", + "name": "/juice-shop/node_modules/hashids/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f80c92184acd8d5f637070d27846932cbed990ae" + }, + { + "alg": "SHA-256", + "content": "a259d571296946d349a9b2f60dccd26e3a212b122799b26e422c5c89989e42c5" + } + ] + }, + { + "bom-ref": "f9e78c6ee84a55da", + "type": "file", + "name": "/juice-shop/node_modules/hasown/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "5221fc7eb2ef1f25edc665579aac82a8445062b3" + }, + { + "alg": "SHA-256", + "content": "0e7437fae8ec34f1d908723882b99919c749d8c0953d9afa38d2674154bdd0e6" + } + ] + }, + { + "bom-ref": "84ecc6e47b30efbd", + "type": "file", + "name": "/juice-shop/node_modules/hbs/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "903f0298d1493eb315a6f02c7cf4a300721fc255" + }, + { + "alg": "SHA-256", + "content": "252ef4c8ef71cd4915e53b07e38937a9915969670e4df1347040cbb267c2fdd4" + } + ] + }, + { + "bom-ref": "63abd6929e4e1ec4", + "type": "file", + "name": "/juice-shop/node_modules/helmet/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f45fd39929e3c9ca97a65bbcaf3d1567920807a7" + }, + { + "alg": "SHA-256", + "content": "a4f9450eb1a4a5cf7615b6e6869daf0e15cb93b543c5468ccdc17bfb4b01060f" + } + ] + }, + { + "bom-ref": "16c73b31f3e4c1d0", + "type": "file", + "name": "/juice-shop/node_modules/hoister/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "cf8c5433ce82de1669c33ced53ca7921137caaf7" + }, + { + "alg": "SHA-256", + "content": "f933fea588f1f4793a42af6167cb2eda0e8870482e63e578117b1bbd9cca40ee" + } + ] + }, + { + "bom-ref": "421180b698895fd0", + "type": "file", + "name": "/juice-shop/node_modules/homedir-polyfill/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "90510f253e4efff50c5b4abb632aabb3ece8a9ca" + }, + { + "alg": "SHA-256", + "content": "b841920660c6b6a524d764904a766cc59c401ebaa523b12a3fd429f7774d7159" + } + ] + }, + { + "bom-ref": "1a2b99502e35ce1c", + "type": "file", + "name": "/juice-shop/node_modules/hooker/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "67494ba80a66767922c1d09ad788b0942f13e20f" + }, + { + "alg": "SHA-256", + "content": "6e06c9d7c91cf44224f8d3032172ac0b653728eee2e020ea6e0c6ab95d1f00de" + } + ] + }, + { + "bom-ref": "2ae09eeae6ba3d38", + "type": "file", + "name": "/juice-shop/node_modules/html-entities/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "bc9154a0b80955c1b19d667648d70cc2624d64e6" + }, + { + "alg": "SHA-256", + "content": "26f25169d8e5b02059de306c648403c215fc5e26251ad6be2717b5731bfb2ee8" + } + ] + }, + { + "bom-ref": "08448b2be8dae48c", + "type": "file", + "name": "/juice-shop/node_modules/http-cache-semantics/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "5d4b738e14b91ea4619d48058717be58524ebed7" + }, + { + "alg": "SHA-256", + "content": "5b7911fc41261e41b08d55a9586b8fca73b22d61496c39d46be353033d2867f3" + } + ] + }, + { + "bom-ref": "85e08fd107e43d4b", + "type": "file", + "name": "/juice-shop/node_modules/http-errors/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "23e3c3f5ca5a315e223ba47751bacc3550a10865" + }, + { + "alg": "SHA-256", + "content": "d540721372bf8bf77b5fad31f6567a916e24d0aeeb78c81ba92b69feea9f1eef" + } + ] + }, + { + "bom-ref": "eca6f772168b49c6", + "type": "file", + "name": "/juice-shop/node_modules/http-proxy-agent/node_modules/debug/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f1c3de400f61581ce6d6d43f9ec4c456cb8017f7" + }, + { + "alg": "SHA-256", + "content": "ea8e33d63fe5f3a4c36609b6c3df8e2ef1f8b8ba2fc3a2e1e53cb27291f384af" + } + ] + }, + { + "bom-ref": "e46a15ac0f3b5c3f", + "type": "file", + "name": "/juice-shop/node_modules/http-proxy-agent/node_modules/ms/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c290eb97736177176d071da4ac855ab995685c97" + }, + { + "alg": "SHA-256", + "content": "1a6b4d9739790c0b94ab96c8cc0507e281c164c311ff4fbf5e57fb8d26290b40" + } + ] + }, + { + "bom-ref": "a7eb51413ab67b17", + "type": "file", + "name": "/juice-shop/node_modules/http-proxy-agent/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f8b2b2bf2f3e2f8491496f9efe80b96442a803a9" + }, + { + "alg": "SHA-256", + "content": "38b61961aa0ba3028f2e120b3d883179281f6ba25fe22ff2214bf9f363161b65" + } + ] + }, + { + "bom-ref": "f425d9cb2d1368ca", + "type": "file", + "name": "/juice-shop/node_modules/https-proxy-agent/node_modules/debug/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f1c3de400f61581ce6d6d43f9ec4c456cb8017f7" + }, + { + "alg": "SHA-256", + "content": "ea8e33d63fe5f3a4c36609b6c3df8e2ef1f8b8ba2fc3a2e1e53cb27291f384af" + } + ] + }, + { + "bom-ref": "a86a3e17c8251998", + "type": "file", + "name": "/juice-shop/node_modules/https-proxy-agent/node_modules/ms/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c290eb97736177176d071da4ac855ab995685c97" + }, + { + "alg": "SHA-256", + "content": "1a6b4d9739790c0b94ab96c8cc0507e281c164c311ff4fbf5e57fb8d26290b40" + } + ] + }, + { + "bom-ref": "0fe13455a134efb9", + "type": "file", + "name": "/juice-shop/node_modules/https-proxy-agent/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "17ea193ab8be5c579a2d10e9a13bff389858f7e8" + }, + { + "alg": "SHA-256", + "content": "b08c1977d38f14f4be7fb5be33aab545e3e5a6e2e12100733a6ad97dec995206" + } + ] + }, + { + "bom-ref": "c87a73179df0e73c", + "type": "file", + "name": "/juice-shop/node_modules/humanize-ms/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "e6e3f6368e65173263dd3f9fa806de8e74c54217" + }, + { + "alg": "SHA-256", + "content": "b5cf746b84d4d4afcda0f9fd59c2120fed5e7f7be1ec52293879a8c13f30eced" + } + ] + }, + { + "bom-ref": "02928eaac13dc45a", + "type": "file", + "name": "/juice-shop/node_modules/i18n/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "0893936ce514e10f9e39f4173ec28715250a6baf" + }, + { + "alg": "SHA-256", + "content": "ea677f104de62c409c47338fbda0b12a31c074de2aec35a134ab07191f0f49e9" + } + ] + }, + { + "bom-ref": "46caf70990bc2356", + "type": "file", + "name": "/juice-shop/node_modules/iconv-lite/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a1e76edb6428e44345ed3851ff7af5d850434cf5" + }, + { + "alg": "SHA-256", + "content": "6f7c96c32f7d6e0498be71b0ccedaf298bb00ab4dd40c1d63655ec53477db384" + } + ] + }, + { + "bom-ref": "44e0e9b6ebf9296a", + "type": "file", + "name": "/juice-shop/node_modules/ieee754/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "19b82f401d4e2ef5db8528a35b2e12d1a2630d65" + }, + { + "alg": "SHA-256", + "content": "a8004b9c8dffe2e1b01a058ecf968a5d50beabcabc43cc98c655184ba6afc050" + } + ] + }, + { + "bom-ref": "423c26ed7bf6b002", + "type": "file", + "name": "/juice-shop/node_modules/ignore-walk/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "90dc22d9d2ed240a66e727ea9b8931ebcb8ae1eb" + }, + { + "alg": "SHA-256", + "content": "e7ebec436cd93ccc3827d6a2b4d4e30da28d063604a4e4640cdfe9116b82a9b3" + } + ] + }, + { + "bom-ref": "380cf797f867e8f3", + "type": "file", + "name": "/juice-shop/node_modules/iltorb/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "6567bb730f22b22008933aee31fa214b59532e2f" + }, + { + "alg": "SHA-256", + "content": "8770f6e48b68a8c6870ee796c921140bd48879772b1917bd9bc3b5b7f9f47e28" + } + ] + }, + { + "bom-ref": "e3c0880767139496", + "type": "file", + "name": "/juice-shop/node_modules/imurmurhash/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a28f2b413385af4188c4fc0ad1e0c38c2cd03cf4" + }, + { + "alg": "SHA-256", + "content": "aa3b07e7fa3d63aa96e401c3842b8cca1dd3247954baf92377094766e903c185" + } + ] + }, + { + "bom-ref": "d639c58f943234b0", + "type": "file", + "name": "/juice-shop/node_modules/indent-string/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "8e67654392f062ebc5cd54e0f7d06427700e73b9" + }, + { + "alg": "SHA-256", + "content": "5b15d951490ea56f6309d9203e1c3cfd036ad1c67ca1c7f372cbfdfbf3faecb7" + } + ] + }, + { + "bom-ref": "c1c590e4be9195f4", + "type": "file", + "name": "/juice-shop/node_modules/infer-owner/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "520dabd4fd509ef15c618b6a8dac1f070f82a4dc" + }, + { + "alg": "SHA-256", + "content": "84793570c7d0565481a1a713f9430d01987103e2e7d6c3121b1e6054eec1f625" + } + ] + }, + { + "bom-ref": "1fb89f15e777da47", + "type": "file", + "name": "/juice-shop/node_modules/inflection/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a346ba8ba91330083e37d70e74f0ac7300a07797" + }, + { + "alg": "SHA-256", + "content": "658ab85279b559d1126b7fb7ec389a22eefdbb186378c672ccb1524b51fc6986" + } + ] + }, + { + "bom-ref": "ab7934caf6284438", + "type": "file", + "name": "/juice-shop/node_modules/inflight/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "40e50820beed8bfee8ce186d5be617a8c213e7e1" + }, + { + "alg": "SHA-256", + "content": "5f2489e13f73e9ebad999134fae8a591f6d8b58e8341ec8e3b33397c4d1ef817" + } + ] + }, + { + "bom-ref": "f7207c779b7a268b", + "type": "file", + "name": "/juice-shop/node_modules/inherits/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "62b11dd736a0047fbd8d2dc0406d2118a549a359" + }, + { + "alg": "SHA-256", + "content": "be645800bc94fd8de29c8ae91690549b316cc437100108aeea7b2f347693cc80" + } + ] + }, + { + "bom-ref": "28b1dc9c97d73a5a", + "type": "file", + "name": "/juice-shop/node_modules/internal-slot/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "696536e795e6ff3c47d56b9e644e5e35d132a691" + }, + { + "alg": "SHA-256", + "content": "c75e491911f4ec299ffa5415dd20e914feea1b69ddccea2a58c82b6e4c7a714c" + } + ] + }, + { + "bom-ref": "369bf08929b96c40", + "type": "file", + "name": "/juice-shop/node_modules/interpret/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "40169e9ec112583cdb2c363d627b7a16ea7fe3d1" + }, + { + "alg": "SHA-256", + "content": "b768bb2ae4ceec49a06dadb163165eb2af172baf43288f94e2c2d53b187175f6" + } + ] + }, + { + "bom-ref": "a45ee910348f5469", + "type": "file", + "name": "/juice-shop/node_modules/into-stream/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "71a5a430e9790858c3a6c90e6d9d072353ce2e40" + }, + { + "alg": "SHA-256", + "content": "882d4f5836f96d6c6a801aac00c2b928588508ca1d43fbea337602afa6fd607f" + } + ] + }, + { + "bom-ref": "649cef1d93a4fa1f", + "type": "file", + "name": "/juice-shop/node_modules/invariant/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "59f8a398ae23614df8c1d975429934fdf9bc1949" + }, + { + "alg": "SHA-256", + "content": "ef0c08d9f91029e247bb570a04903f3a9bd646c1f2128d29e69ee171794cd2a3" + } + ] + }, + { + "bom-ref": "7fab279dc695278b", + "type": "file", + "name": "/juice-shop/node_modules/ip-address/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b8fc7d207cc0a71982e0f2e85879ac39110ee51e" + }, + { + "alg": "SHA-256", + "content": "efb3d32c0c7996237f78af8fd820e3d58e66fa76593fb329fab6b3ccb260afd6" + } + ] + }, + { + "bom-ref": "ca177c1486312986", + "type": "file", + "name": "/juice-shop/node_modules/ip6/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "7165eada544861027677ddcdf213c4e5967a3d18" + }, + { + "alg": "SHA-256", + "content": "dfea7973e120653c2568cb8eb65e89d8ae8c25ab4995c4ff5e2cd5b7976f8a7d" + } + ] + }, + { + "bom-ref": "f8fe814327cdf312", + "type": "file", + "name": "/juice-shop/node_modules/ipaddr.js/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "532be044ce57a9f81fed35f3742767f587cfbc95" + }, + { + "alg": "SHA-256", + "content": "fc1071893728a0e78fa40ce0dbe04c5a1021179fdcb5b229f274e3556d6a87cd" + } + ] + }, + { + "bom-ref": "2f1e42229d9d36ed", + "type": "file", + "name": "/juice-shop/node_modules/is-absolute/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "4bb791bb15f2343372fbbce4a46304777cd7704d" + }, + { + "alg": "SHA-256", + "content": "fdd72b01eac6f6d37dae881d90cb127758f9c5053e85c8487d323aac1e45cac0" + } + ] + }, + { + "bom-ref": "86c01f0434f5080f", + "type": "file", + "name": "/juice-shop/node_modules/is-arguments/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "8c0d7ca0e6fe66cd74d472528d04778eb7cc50d9" + }, + { + "alg": "SHA-256", + "content": "8962afc6bca1e62fc8d6413c1c82b0e060ff51fec9cb1d00d7c6b82337666e52" + } + ] + }, + { + "bom-ref": "dec63105e5cdac44", + "type": "file", + "name": "/juice-shop/node_modules/is-array-buffer/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "44fd3e5dfa707791be92aeeecc0fb3533b39bc71" + }, + { + "alg": "SHA-256", + "content": "38a3c4698e3f4f2235481483558a96e67be7e4e90ce5647950da73efd7ccfb1a" + } + ] + }, + { + "bom-ref": "b88f6dcec7df6bdb", + "type": "file", + "name": "/juice-shop/node_modules/is-bigint/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "68ec3664ed0d57b4cbbe598a49fadeef06b82fad" + }, + { + "alg": "SHA-256", + "content": "079916fe1d9e42dd3ed230521911d4ffa718f3bbd7efcc53d4bd8803b0cd11d9" + } + ] + }, + { + "bom-ref": "81098e3cc19b3efb", + "type": "file", + "name": "/juice-shop/node_modules/is-boolean-object/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "d8e80fa1a4ea5a6e58e4be826e5496a24df823e1" + }, + { + "alg": "SHA-256", + "content": "908dcc16536fcfa62185c80010d9e92891f41e1d279b337d830d99a8dae9aed5" + } + ] + }, + { + "bom-ref": "a54c9e80f248a095", + "type": "file", + "name": "/juice-shop/node_modules/is-callable/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "1f39ab1f57f84f43ff79dda15e9b93d7f138d73d" + }, + { + "alg": "SHA-256", + "content": "0d0981565f03ca488d263c94d038717ec4face8b129b8ff18e792dabae2af755" + } + ] + }, + { + "bom-ref": "0140598ef6fa1d35", + "type": "file", + "name": "/juice-shop/node_modules/is-core-module/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "39faf2be321b4a2f72d8fa7b72f4858163647b59" + }, + { + "alg": "SHA-256", + "content": "49d7841f3d48b2a09473b294a720b857d4450b10f4858d509edacb443555312e" + } + ] + }, + { + "bom-ref": "f72af394964e5ebf", + "type": "file", + "name": "/juice-shop/node_modules/is-date-object/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "0fdae008400e5f301759c2465a5776cef0d74193" + }, + { + "alg": "SHA-256", + "content": "224b3f8b6f9564aba91aefa417a925e00f3be92896af5bbeecf1e9e669e05ba5" + } + ] + }, + { + "bom-ref": "306c2076ebbabfb5", + "type": "file", + "name": "/juice-shop/node_modules/is-expression/node_modules/acorn/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f1ed049ec2757f4914862b3854b26363806c4859" + }, + { + "alg": "SHA-256", + "content": "dfcd42c47d09aa794214c28476d5b519c157e17d9490eb2c50faee3defd041bc" + } + ] + }, + { + "bom-ref": "f856e603c93f2999", + "type": "file", + "name": "/juice-shop/node_modules/is-expression/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a58f5d6e36c8bede8f377c6ade9bea70208318be" + }, + { + "alg": "SHA-256", + "content": "a87a48e8070af76c07b15557619ffbb6975f093121f5636fe69fa2f7f7d3ee81" + } + ] + }, + { + "bom-ref": "59062c8baf297ff1", + "type": "file", + "name": "/juice-shop/node_modules/is-extglob/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "3f1247dc7f917eba16d9607c17eb9818d2bf43eb" + }, + { + "alg": "SHA-256", + "content": "8031afcd87f448d75ba8a5dd2cde9c68f982a94f406ebae8e5fb7cf6dfdeede2" + } + ] + }, + { + "bom-ref": "73df7f64c83bf95d", + "type": "file", + "name": "/juice-shop/node_modules/is-fullwidth-code-point/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "49dbcba3eb3e3cba5b97bce28eb6194775d23c88" + }, + { + "alg": "SHA-256", + "content": "5b48496ca129073ed44a677b777ea3b91366c8bc228bc75fe858749a78ac1a32" + } + ] + }, + { + "bom-ref": "3566775eadb1c50f", + "type": "file", + "name": "/juice-shop/node_modules/is-glob/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "57a53965f8f746a1f0f29696ad6e770a8beff7e5" + }, + { + "alg": "SHA-256", + "content": "1cce62b80db12fc033d85250b5881b1a288476229abda8e1abd983724befd56f" + } + ] + }, + { + "bom-ref": "1a4636232de664ed", + "type": "file", + "name": "/juice-shop/node_modules/is-lambda/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "d7d1ac3b9e27615002074f87da8c39e91995ee88" + }, + { + "alg": "SHA-256", + "content": "55c72a97449e2b52a5b763bf6cfa7de3b9603fe2a57074066ddcbf522578c9b6" + } + ] + }, + { + "bom-ref": "a39649a384e0b0db", + "type": "file", + "name": "/juice-shop/node_modules/is-map/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ed28234ea9e98bffdfbf923897ff644aa9e154d7" + }, + { + "alg": "SHA-256", + "content": "b2d7c205058919c957fed69cbf8cdcd589dfc82c0aadc4c2e298f9ee3afd296a" + } + ] + }, + { + "bom-ref": "03c47976a8abccac", + "type": "file", + "name": "/juice-shop/node_modules/is-natural-number/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "096ffbf63a49e913e7758b58ceb3b64305517ba9" + }, + { + "alg": "SHA-256", + "content": "9170a51c5342b4a707c55517d66f7459ee82efa50169f1d9a1d98b345fbf6acb" + } + ] + }, + { + "bom-ref": "0262da7dd59c0aec", + "type": "file", + "name": "/juice-shop/node_modules/is-number-like/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "fbfa13f628360f4178cca9025b4df52da7e81863" + }, + { + "alg": "SHA-256", + "content": "34ac5ec903e8f8eae2536d33611a0003ac66e8bae7dabb2706b42af74b54578c" + } + ] + }, + { + "bom-ref": "76be1da5ab65b65b", + "type": "file", + "name": "/juice-shop/node_modules/is-number-object/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "64ce0f3ea95faf731a61339f0cdf8586ee2e7e15" + }, + { + "alg": "SHA-256", + "content": "0f647c3741eea832398ec6d2fab6dfc7d431e3a66e3def47ef01dae9ac79eb53" + } + ] + }, + { + "bom-ref": "f1129b53086b8544", + "type": "file", + "name": "/juice-shop/node_modules/is-number/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "2bd4ba6c07c12d2b7af0035e57b46cbb7e133477" + }, + { + "alg": "SHA-256", + "content": "51c133f4e41df982aef69027249ff9d7262645029f437d079adc7c83328fb620" + } + ] + }, + { + "bom-ref": "ec13d978e2ffe520", + "type": "file", + "name": "/juice-shop/node_modules/is-object/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "84ae32267e3fa601a9457e3361fd63c48a864595" + }, + { + "alg": "SHA-256", + "content": "23bab3622439df0c6ade1d7671e6609eb55abe359b559da21c6ac1e8ba92754c" + } + ] + }, + { + "bom-ref": "bfab0ff43a10d842", + "type": "file", + "name": "/juice-shop/node_modules/is-plain-obj/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "96165e985c551894f224d8ef606b1cf98689b7ac" + }, + { + "alg": "SHA-256", + "content": "3f2d9ecc4ad7921576d65361b4fce21c5cfee72a4fc18e38b6c2050738df67d1" + } + ] + }, + { + "bom-ref": "50004f7bee85f7f0", + "type": "file", + "name": "/juice-shop/node_modules/is-plain-object/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "1793cde25acd0f4f2d9f820d34c8675543770b93" + }, + { + "alg": "SHA-256", + "content": "9d230b1f721ff1453f40e10824eb4048072ba04c3d63979c48d59c20fabdbb96" + } + ] + }, + { + "bom-ref": "f8c9f8cb187cb66c", + "type": "file", + "name": "/juice-shop/node_modules/is-promise/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "204b9c0844ad7952b8c714a076936074a9813263" + }, + { + "alg": "SHA-256", + "content": "ebb992f44a73d06d3af839970ae14fa2a5a70a5dad61b527c21a9d89a774a617" + } + ] + }, + { + "bom-ref": "1c58d1cf9fa66802", + "type": "file", + "name": "/juice-shop/node_modules/is-regex/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "5693e910887ef21be281e8860ca0c3a29e59e794" + }, + { + "alg": "SHA-256", + "content": "b99ff9cb5a079a1d6060bce2d31f06780d4296539a5b57106047a86561cd4db3" + } + ] + }, + { + "bom-ref": "c980adcaa91df37c", + "type": "file", + "name": "/juice-shop/node_modules/is-relative/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "259ca538dacebc5458a1deef3600da0469f1f5de" + }, + { + "alg": "SHA-256", + "content": "b4059db81cb29586779cb6281b3ca0605774e1185e0b92432d6da2e8da3ad45c" + } + ] + }, + { + "bom-ref": "7903167b76a217dc", + "type": "file", + "name": "/juice-shop/node_modules/is-retry-allowed/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b8190b0addd0dde7253ba68348942036fc545ee5" + }, + { + "alg": "SHA-256", + "content": "b9c34d3385c5f3050b73c5650977c0af8963165ecbba9f3c85d618c55b4f3486" + } + ] + }, + { + "bom-ref": "fbb6c4fde168fe95", + "type": "file", + "name": "/juice-shop/node_modules/is-set/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "e0bfd95803a081436377c6057b747d27d1ce1fb9" + }, + { + "alg": "SHA-256", + "content": "1e23457a11d7836233f8a98ee97dd7a2cfdde4381e46a92b160ffeffe2c3d001" + } + ] + }, + { + "bom-ref": "e88eca3e5e9a891a", + "type": "file", + "name": "/juice-shop/node_modules/is-shared-array-buffer/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "983f03d977afdaa38aca26493740f8eaca2f6d04" + }, + { + "alg": "SHA-256", + "content": "a8c03e6ca8d6879d13cd4bc2cfd1e14c634006532a295016f4abdee27f5877e8" + } + ] + }, + { + "bom-ref": "0a91e7a774b6802a", + "type": "file", + "name": "/juice-shop/node_modules/is-stream/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f2f490f635a13ed709ee5c0605df8067905ddec1" + }, + { + "alg": "SHA-256", + "content": "8cab336575fb9e86b6f6473b57fe06b734e7443a2f25359b542b289e9cb2c010" + } + ] + }, + { + "bom-ref": "dad366ba2f83261f", + "type": "file", + "name": "/juice-shop/node_modules/is-string/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "1631d23f33757d6197f8ad6d696832b1a2759059" + }, + { + "alg": "SHA-256", + "content": "e34f86b9cc8a1811587ca3eb5efdb7f158f3646693b5e657e7188c52b54a696c" + } + ] + }, + { + "bom-ref": "c08ea8ada5949ef4", + "type": "file", + "name": "/juice-shop/node_modules/is-symbol/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "25682cb00f7d9b3167931c5bb00906dad9973d42" + }, + { + "alg": "SHA-256", + "content": "ae8d1155c6252e4b7077944b25b03a2c175ae632e3ee78508f12cc1c94f8296a" + } + ] + }, + { + "bom-ref": "4e461b2f5c2c4ab8", + "type": "file", + "name": "/juice-shop/node_modules/is-typed-array/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a069bc3c4312b2c2911625277a938f265f8b80c6" + }, + { + "alg": "SHA-256", + "content": "51dcf15ccc424ce76b36bef2ef64df7a53e75294cbddf08b4f7e639133145cc5" + } + ] + }, + { + "bom-ref": "cefa8bf83f04e683", + "type": "file", + "name": "/juice-shop/node_modules/is-unc-path/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "56e3e8226782aa420417222268679e375aea5155" + }, + { + "alg": "SHA-256", + "content": "b2edd3e5cf18fc0076ac78ca155cf7d892cd6525b5cc8995cdd57d2d40051860" + } + ] + }, + { + "bom-ref": "db9e0e9b86a27bc8", + "type": "file", + "name": "/juice-shop/node_modules/is-weakmap/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "18426dc3cc1e36705e80b9508a7c45f0f7d1e8f8" + }, + { + "alg": "SHA-256", + "content": "483ce3a97e913446c2e43013b79ae03240d583d938a61c3c3c0e2f095f56b553" + } + ] + }, + { + "bom-ref": "249d7b3d8ddd33b3", + "type": "file", + "name": "/juice-shop/node_modules/is-weakset/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "70492aadf02d82ca5637e0ba90fa98040501ba27" + }, + { + "alg": "SHA-256", + "content": "689f191f14c6dd30bfc0325475a738cd9633cf632c8e4ec81714591817b4ad36" + } + ] + }, + { + "bom-ref": "b6893e830a98bc5e", + "type": "file", + "name": "/juice-shop/node_modules/is-windows/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f452f4328f713c711a0e207be3d8a0958222c892" + }, + { + "alg": "SHA-256", + "content": "78963f69e47d6fb7b090bddd4e4eba074627fa32d5c4841a1839be88cf1418e1" + } + ] + }, + { + "bom-ref": "fa68caa9496cc100", + "type": "file", + "name": "/juice-shop/node_modules/isarray/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "73e13702b019b992300caa912bc2322a9093e21e" + }, + { + "alg": "SHA-256", + "content": "b0802c09bce6bf067d3e5f52390ea26972e11c88bb6ae38991316ac83ca14127" + } + ] + }, + { + "bom-ref": "f79628370d1c13c4", + "type": "file", + "name": "/juice-shop/node_modules/isexe/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "3b3eab80c4ffd08eef6b3381b98de7be3649d06b" + }, + { + "alg": "SHA-256", + "content": "395c2af9abeeaafe7391974c1eacfb2a2bdeef187f21c3f5582c49e0368e59bf" + } + ] + }, + { + "bom-ref": "f1d13d697a0287ad", + "type": "file", + "name": "/juice-shop/node_modules/isobject/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "dd20c4d536aa7a67fb5ed1eb4e5122ecd57534a9" + }, + { + "alg": "SHA-256", + "content": "c66c0936c8ac63e97aca4e747fe0da8df7d6f093eeb47fb29d4d186c41272465" + } + ] + }, + { + "bom-ref": "e0332078ad3fe8ae", + "type": "file", + "name": "/juice-shop/node_modules/isurl/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "cd24cb01b3ad1b0497249531912561ccd258c46a" + }, + { + "alg": "SHA-256", + "content": "9396a58aa6e42df65f7aecb92a08e6b5a84ecd6485ddfe9a3d481e7fd2cf1251" + } + ] + }, + { + "bom-ref": "394deabf459ea1fc", + "type": "file", + "name": "/juice-shop/node_modules/jackspeak/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "15e15f7f7565d0a355be813b2e68eb35e65102a5" + }, + { + "alg": "SHA-256", + "content": "3379e9c1be25729a6c7fc160e840108e15895c368e8060e42f68598f9f3065cd" + } + ] + }, + { + "bom-ref": "4c3c6302bba14d7a", + "type": "file", + "name": "/juice-shop/node_modules/js-stringify/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "8828486a7978be6f38eb93353a990f4b00a7fc66" + }, + { + "alg": "SHA-256", + "content": "133b036b739bb71c44008eb9c2bee9fd3169327fff26d2b390c63ccd70f8c3fc" + } + ] + }, + { + "bom-ref": "2f41d2a649d01b02", + "type": "file", + "name": "/juice-shop/node_modules/js-tokens/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "6704feb8cbaf803288d9185a2fc86017e24ba55b" + }, + { + "alg": "SHA-256", + "content": "47345931827b3e26db9fe690abb81f856a0d040cbca8af1e69711a64cd58ce0d" + } + ] + }, + { + "bom-ref": "347e6ce188d7733c", + "type": "file", + "name": "/juice-shop/node_modules/js-yaml/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "95731315a952b3ce6af42e97eea092eacd9ebcfc" + }, + { + "alg": "SHA-256", + "content": "4cdbd7e882f90a7f551726d9ae3ecd8363fd31b39a9d2970dcd0ea46e24c8ede" + } + ] + }, + { + "bom-ref": "921074ef846875d5", + "type": "file", + "name": "/juice-shop/node_modules/json-schema/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "513648712db28c1a0ea3abee63698dd426a84a7b" + }, + { + "alg": "SHA-256", + "content": "22fe1fdf2eb8925bb5ea40f4dbff8fbfcd695190362afeadb8ce1b7d79f6f3f0" + } + ] + }, + { + "bom-ref": "32b603d8da79ff6b", + "type": "file", + "name": "/juice-shop/node_modules/json5/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "7a38f8d159bc79dac6ac618707de02fcd3063f2e" + }, + { + "alg": "SHA-256", + "content": "1927c4592e3811cf9b8c86e568df1c41a373b628b4b322f88872395ef87e2ba5" + } + ] + }, + { + "bom-ref": "27a7570b0c74152d", + "type": "file", + "name": "/juice-shop/node_modules/jsonfile/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "be1e382c53344bb2a1cadd3798f7a58e0aa6a511" + }, + { + "alg": "SHA-256", + "content": "df710d3401289ba32728b5459ac334bf99b18259900ca22b2401f48d92892613" + } + ] + }, + { + "bom-ref": "bd4ac3b5d2e954fd", + "type": "file", + "name": "/juice-shop/node_modules/jsonwebtoken/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "305242068c0654ec18802417c31771ea78dd1dd1" + }, + { + "alg": "SHA-256", + "content": "5f6505d0fae5a241cbdd3cf6fa841034db7d9870ae774c59c342fad8cfb82eaa" + } + ] + }, + { + "bom-ref": "37b1e65e5500c81e", + "type": "file", + "name": "/juice-shop/node_modules/jstransformer/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b289d2aee71af7c52388667c93a40409604d0c86" + }, + { + "alg": "SHA-256", + "content": "47dd1297b10e67e178c2a788856a518fd05a0e0b0919f1f9f12b777dd458c454" + } + ] + }, + { + "bom-ref": "b251e323f6fb9445", + "type": "file", + "name": "/juice-shop/node_modules/jwa/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "eab0e2efcf0c2ad608521805b5989c409723f9dc" + }, + { + "alg": "SHA-256", + "content": "c2e3758f078a67c136a198241daba4fd306a75c474e8358d375807f350a159a6" + } + ] + }, + { + "bom-ref": "8a7d254763e044d8", + "type": "file", + "name": "/juice-shop/node_modules/jws/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "515e309b1f538c91d0be3ec2334bd3a138f920f1" + }, + { + "alg": "SHA-256", + "content": "897314a2d7de9b7096761af9694c4b6685dde9f82f39326510c5862e1f15c882" + } + ] + }, + { + "bom-ref": "32571877494842f1", + "type": "file", + "name": "/juice-shop/node_modules/kind-of/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "5cee1955868ef17a2d4c51f75f412419cc89e915" + }, + { + "alg": "SHA-256", + "content": "0710f74718210573ae878c0a733775d2ad9e9d5a5053f0521cbf9347a39a01ec" + } + ] + }, + { + "bom-ref": "548342893e4f9140", + "type": "file", + "name": "/juice-shop/node_modules/kuler/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c64c52e6c65728378f338e75e3278ebe469916af" + }, + { + "alg": "SHA-256", + "content": "7c22c6fe3ddd0ba047218d864008b002eab3fce6b499351e7a4c63e2cf703ae7" + } + ] + }, + { + "bom-ref": "fb816eca620057cf", + "type": "file", + "name": "/juice-shop/node_modules/lazystream/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "799982547b24774bfefb32bfc82e2c98d77329f3" + }, + { + "alg": "SHA-256", + "content": "cf0860e26be0d5c9098d1bd0ce5c5faf1e02d6c6b050a14bbb40c2fc1c087fec" + } + ] + }, + { + "bom-ref": "d156946ddd15802d", + "type": "file", + "name": "/juice-shop/node_modules/libxmljs2/node_modules/decompress-response/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ac9fad510ffaa52eccff29729383a2f0ed602bec" + }, + { + "alg": "SHA-256", + "content": "8fb6b0b19d09cc1c5b2caad128ae39b2fd693a35bb3d440c4e1143bfb9d10080" + } + ] + }, + { + "bom-ref": "6bc3b02baf949fdb", + "type": "file", + "name": "/juice-shop/node_modules/libxmljs2/node_modules/detect-libc/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "5c540dad2b3981037a3e2ea4d66da80986ab8a37" + }, + { + "alg": "SHA-256", + "content": "ee88e5b954fdf3a8480b1d01ef767d68d8ca2c6da269f58c5cf1c5550e9aa2a7" + } + ] + }, + { + "bom-ref": "db06d7c6227b4e17", + "type": "file", + "name": "/juice-shop/node_modules/libxmljs2/node_modules/mimic-response/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "9bb60eb9422dfbbf71811d0c1fe00dc14f61a36c" + }, + { + "alg": "SHA-256", + "content": "ff358428a418a46fb2431a2c48b396fb01c8291fec9e1f14434ade01196c8e9c" + } + ] + }, + { + "bom-ref": "af6a953db591af09", + "type": "file", + "name": "/juice-shop/node_modules/libxmljs2/node_modules/napi-build-utils/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "35b672da35e299376d0ffc4f22fd57088150a835" + }, + { + "alg": "SHA-256", + "content": "001ba5640df99785e76b7d407ae35a24c490f145737cf3f194408fb17dfec411" + } + ] + }, + { + "bom-ref": "9fb6cd83b9f1e8aa", + "type": "file", + "name": "/juice-shop/node_modules/libxmljs2/node_modules/node-abi/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "73514830b941035ead3ae1de9cb5b8a3dd395f10" + }, + { + "alg": "SHA-256", + "content": "0bf67c397d8f6a9136d44eda86f417c0c81893e99697cbdf8733cb2982d7884b" + } + ] + }, + { + "bom-ref": "005a9ed199ada6f6", + "type": "file", + "name": "/juice-shop/node_modules/libxmljs2/node_modules/prebuild-install/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "53b43dd098da8d4b0606d47cc71bbce0f9326251" + }, + { + "alg": "SHA-256", + "content": "d8502f5ce977ea10cc7e91e95b595ce845e838cf412801230e9a2f211ad68039" + } + ] + }, + { + "bom-ref": "301a56851011d899", + "type": "file", + "name": "/juice-shop/node_modules/libxmljs2/node_modules/simple-get/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "9db18a8163ab1fbb6e7c8bfd56c7483239d63c63" + }, + { + "alg": "SHA-256", + "content": "8337ba9774d6d8199a5861c6dfa57058f162bfb6210362c01db38f0a593f96d6" + } + ] + }, + { + "bom-ref": "566bf5c88a4fc951", + "type": "file", + "name": "/juice-shop/node_modules/libxmljs2/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f1f8578eadc922aad04a6d7c7b0c34d52859ba76" + }, + { + "alg": "SHA-256", + "content": "9f6e576adad1199ac47aaf3c8b2ecd28c4acbb9bd70c01d2772f319757e7102e" + } + ] + }, + { + "bom-ref": "1ba762e645ce493f", + "type": "file", + "name": "/juice-shop/node_modules/liftup/node_modules/findup-sync/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "990b9b7b1e0c10a10b929022ea7d2c7123a69dc2" + }, + { + "alg": "SHA-256", + "content": "d2a8fd0bcd4b5a28fd7132b036e909998b63f5c98614efc25997705f85481381" + } + ] + }, + { + "bom-ref": "7c3fe0e8663a0c9e", + "type": "file", + "name": "/juice-shop/node_modules/liftup/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "647850b8fba294d8450e62ae576687219a9d92e8" + }, + { + "alg": "SHA-256", + "content": "6e8687bb4f371e6a5a0316bc221394442e4fe55cf0c19f901b917e7765c6eeb5" + } + ] + }, + { + "bom-ref": "ba0b7389e74919a7", + "type": "file", + "name": "/juice-shop/node_modules/linebreak/node_modules/base64-js/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c5e890ef1a0688476da2fac589b8d70ee8b9e64d" + }, + { + "alg": "SHA-256", + "content": "c02b020c7ee58e1dd08812e7fe2808881433a4aaa4331b0a440961e8ce853e3e" + } + ] + }, + { + "bom-ref": "d3ce5f84bcccba24", + "type": "file", + "name": "/juice-shop/node_modules/linebreak/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "7f0f13cabdaa4467eddc525051411330fb1b9536" + }, + { + "alg": "SHA-256", + "content": "53f67b29d3d0c3bc43501bf17d658aa611a668128eeba39ae9eabeb1cdb505d0" + } + ] + }, + { + "bom-ref": "7dc1cd00d220dd42", + "type": "file", + "name": "/juice-shop/node_modules/listenercount/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "39b628e6e8b9f8e088189bc3be32981b305de75d" + }, + { + "alg": "SHA-256", + "content": "5a86ab80928808eeb15b05c191e506282760ac13059a9f0e80f4cc215e463e99" + } + ] + }, + { + "bom-ref": "60145520eefc7a45", + "type": "file", + "name": "/juice-shop/node_modules/lodash.isfinite/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c663108fc530fc52e8ce946399b099dad2f6114d" + }, + { + "alg": "SHA-256", + "content": "2abd2380279a93b32995b706fdb633fc9ac4f53166a770b1d146c17612444a84" + } + ] + }, + { + "bom-ref": "122b6ad9e727cf3d", + "type": "file", + "name": "/juice-shop/node_modules/lodash.set/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "1ee3b14200998ff446e2f7c90f6422cb02185980" + }, + { + "alg": "SHA-256", + "content": "bb7cee8203b5e5ce6d1d38222d558f7862fb5df28ae57d27faae5bd2bc0b2f53" + } + ] + }, + { + "bom-ref": "0131e7b3a4920851", + "type": "file", + "name": "/juice-shop/node_modules/lodash/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "eb811e51463439c808b7f983705ceff589b52735" + }, + { + "alg": "SHA-256", + "content": "5ef0a453b679125b155af19e1477f93b577ea826a57e1545f77608d326966e6a" + } + ] + }, + { + "bom-ref": "e50bfe97478dec70", + "type": "file", + "name": "/juice-shop/node_modules/logform/node_modules/@colors/colors/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "bc0cd68d3d25a31abb16de7e2b5ff5e20d974403" + }, + { + "alg": "SHA-256", + "content": "af67d5bc4fac331176780d7da47802a48d9bca01596d571685351b4a03a6b9c1" + } + ] + }, + { + "bom-ref": "22e1aedbe4ca080e", + "type": "file", + "name": "/juice-shop/node_modules/logform/node_modules/ms/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c290eb97736177176d071da4ac855ab995685c97" + }, + { + "alg": "SHA-256", + "content": "1a6b4d9739790c0b94ab96c8cc0507e281c164c311ff4fbf5e57fb8d26290b40" + } + ] + }, + { + "bom-ref": "9da95011a45655d9", + "type": "file", + "name": "/juice-shop/node_modules/logform/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ee3e0f5dfcca636f59f35b524c6cfee6f3839835" + }, + { + "alg": "SHA-256", + "content": "7fe3c68c465efc9460ce9abfbf95d5cacefc76fe159c7b171bf8923aa27e2660" + } + ] + }, + { + "bom-ref": "5a75403f3dcc5024", + "type": "file", + "name": "/juice-shop/node_modules/loose-envify/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "2162096bfa92a2ab1ab7bcde6fe70e590adb7eaf" + }, + { + "alg": "SHA-256", + "content": "8c2e27dae366396ced36fe0f7c6d35d71a1440fd8e82df5f2005a5297888a0d4" + } + ] + }, + { + "bom-ref": "10f0bd54d233df49", + "type": "file", + "name": "/juice-shop/node_modules/lowercase-keys/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "094e1a4133dcde74b82f3517eecd3acbba0ce722" + }, + { + "alg": "SHA-256", + "content": "b93a86a7d0bcaf9f4fbc2ff2732cecb237a70d541a5a8a3cd8c8b6b2829311dc" + } + ] + }, + { + "bom-ref": "bd9db762d4a43ff3", + "type": "file", + "name": "/juice-shop/node_modules/lru-cache/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "eba45f816c43b1e505440b7a7f8392e38ba11306" + }, + { + "alg": "SHA-256", + "content": "a7e05794a5dc81dfc79a0f186c5219f442f2f735b08a3e9b91aba59833badc2d" + } + ] + }, + { + "bom-ref": "e0c2747db32a0c49", + "type": "file", + "name": "/juice-shop/node_modules/make-dir/node_modules/semver/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "21cae1218ba3b5465b4fe24b2834306c0091cec7" + }, + { + "alg": "SHA-256", + "content": "5040deda6072a93c40e36c5188f24159498f6f84fe586bc47dea4a2de7a8fcdb" + } + ] + }, + { + "bom-ref": "9ff976043a8a7d22", + "type": "file", + "name": "/juice-shop/node_modules/make-dir/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "efaeb3af11445ed86a3b422c6779425597aedf92" + }, + { + "alg": "SHA-256", + "content": "d97dcd396bb3397b3e6651032ed52fd937dcfc6da85bd792792f3ecfb8206326" + } + ] + }, + { + "bom-ref": "7ec9ce6dba82ae08", + "type": "file", + "name": "/juice-shop/node_modules/make-fetch-happen/node_modules/http-cache-semantics/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "563b0d8af1a9641083e8f6cefbf4259fa845e7ca" + }, + { + "alg": "SHA-256", + "content": "bee0609d5ab09a590afe0e1209d3702b0afb0a3c158492f90902a724d889d22b" + } + ] + }, + { + "bom-ref": "990bfe245a74f3df", + "type": "file", + "name": "/juice-shop/node_modules/make-fetch-happen/node_modules/negotiator/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "046524b23a7aefb2b0cfd3ebbd0fd84c0f7df3f6" + }, + { + "alg": "SHA-256", + "content": "a33b5a293825b22957629dafe778ea4164e577499418cd907d937b874f27675a" + } + ] + }, + { + "bom-ref": "4ea4274efce61f51", + "type": "file", + "name": "/juice-shop/node_modules/make-fetch-happen/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "4e321611ef7ad4a60c9b8db56a8e49c35f4624f5" + }, + { + "alg": "SHA-256", + "content": "279b653b3c792aefb9cef4f0822747a5d81c1fd135bc92bc1251112ddc695b84" + } + ] + }, + { + "bom-ref": "9d31f65c2ab09031", + "type": "file", + "name": "/juice-shop/node_modules/make-iterator/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "4d4a1468c0616ef8d46d346b089bcb5d03ffe180" + }, + { + "alg": "SHA-256", + "content": "40aa14a22aba7bb3f924fcf0fd9228bc957318fcfeadf357533ee3d86782acec" + } + ] + }, + { + "bom-ref": "5febebc4eb8934d2", + "type": "file", + "name": "/juice-shop/node_modules/make-plural/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "d39bcf894b551faefa974cf0f466849a7c416c2c" + }, + { + "alg": "SHA-256", + "content": "dea92be18b2be286d23fee583b178685ecd7e18c49d2535d0ba625a02722553b" + } + ] + }, + { + "bom-ref": "9d3c9b562602f8cd", + "type": "file", + "name": "/juice-shop/node_modules/map-cache/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "59f4b9e44939cd98fa3853cd0437d509aed52b92" + }, + { + "alg": "SHA-256", + "content": "6f7a40df8df45e11963987035e12955b2e4a5fba23c8768fe1952d034680492d" + } + ] + }, + { + "bom-ref": "799c0ed2caa78c2f", + "type": "file", + "name": "/juice-shop/node_modules/marsdb/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "05593b5112e981dce1e0cc9fab47651e53dda0b8" + }, + { + "alg": "SHA-256", + "content": "3f66481f2e5de498a9b36561856a2e689ba4ed420d7f552887783b3a44e3d2f9" + } + ] + }, + { + "bom-ref": "1379ba30378be9a0", + "type": "file", + "name": "/juice-shop/node_modules/material-dynamic-colors/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "bb1f9ba797dca28daa3e95d60730f710789b00a8" + }, + { + "alg": "SHA-256", + "content": "e45734427454c7c96b0f05f296a6a7a173475ae5c0cd9d3853df665be4432bc8" + } + ] + }, + { + "bom-ref": "10e224c31272173c", + "type": "file", + "name": "/juice-shop/node_modules/material-icons/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b8622a72c9641421ce278db5b992acaa7a652028" + }, + { + "alg": "SHA-256", + "content": "622056b17608fe8a3a74c56215737e7835b0415795944a9ad00c0b4e1db942e2" + } + ] + }, + { + "bom-ref": "91e2d5fdfe75ee81", + "type": "file", + "name": "/juice-shop/node_modules/math-interval-parser/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "1e2f73e92f8caa8815589e89dcba720f53f0b218" + }, + { + "alg": "SHA-256", + "content": "5db4e0e76fdf0f85f164380a4d113ae51c34752d0d4f57a9e360ac88d199a33b" + } + ] + }, + { + "bom-ref": "5d2b1c71f9f7f0fc", + "type": "file", + "name": "/juice-shop/node_modules/math-intrinsics/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "017b2996c50a49f073f75e2cb92b61b9d4258bce" + }, + { + "alg": "SHA-256", + "content": "39d74aa5a354153130706286dd60a2d8409ce0c8f66546eff2edcac0afff17e1" + } + ] + }, + { + "bom-ref": "41acec6bed13e9df", + "type": "file", + "name": "/juice-shop/node_modules/media-typer/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "866c9ea28a167b6800da67cdbe18cc9f0ec5cbab" + }, + { + "alg": "SHA-256", + "content": "8ccf875e488e700b79ec48386e2f47c51c5f26297ec74e5e4e5d92dc5d70ef30" + } + ] + }, + { + "bom-ref": "d4514166c3cccd75", + "type": "file", + "name": "/juice-shop/node_modules/median/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "9cbbd09b97f16663e8695325d1ce0c44ae624cf5" + }, + { + "alg": "SHA-256", + "content": "48ae606a70183af9efa60fba296cfe1fdc103c06d3d5073e1b6c88312492bbe7" + } + ] + }, + { + "bom-ref": "95f3590ae1a5f493", + "type": "file", + "name": "/juice-shop/node_modules/merge-descriptors/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "d393c91c5d7c5291956c48571625b13cddd28990" + }, + { + "alg": "SHA-256", + "content": "6321e7d658510186de8976bd577ef59a1dcc4f1371d238ce2e676e484d1ebbed" + } + ] + }, + { + "bom-ref": "31274058be6e0ca5", + "type": "file", + "name": "/juice-shop/node_modules/messageformat-formatters/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "97ee08ab442ed44e08cfc000ed6f5a9f57795c1a" + }, + { + "alg": "SHA-256", + "content": "a29374a4688c850e080f311c796e3875a2c860c21389f59e82e5a17791c8aac2" + } + ] + }, + { + "bom-ref": "fe82be1d9ae235f2", + "type": "file", + "name": "/juice-shop/node_modules/messageformat-parser/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "d65d6a13fa614fdd498350e8839e76bbd3259ff3" + }, + { + "alg": "SHA-256", + "content": "7d4f82a9c3781764f348c4bae11f4466f0ef8de8557fcb955a9246f14e2fffc0" + } + ] + }, + { + "bom-ref": "a20b449ddab5f8ee", + "type": "file", + "name": "/juice-shop/node_modules/messageformat/node_modules/make-plural/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "4c9ce9e1ead0092177f7ce3e2dc6f5c6ebf04c33" + }, + { + "alg": "SHA-256", + "content": "2ff54f256f10f5f7d6d5542b83a1b659897f6b8620521eb8df01dbe83cc57b49" + } + ] + }, + { + "bom-ref": "38012535de558db2", + "type": "file", + "name": "/juice-shop/node_modules/messageformat/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "8d0f9e8b22ad0e4931d7109d2b8075fa34d07b0d" + }, + { + "alg": "SHA-256", + "content": "9a3b8590efa611ef114b154994715e4f9c1226f16592922e48ab86245dd8c6b5" + } + ] + }, + { + "bom-ref": "0263f12aaebb2590", + "type": "file", + "name": "/juice-shop/node_modules/methods/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "93fab7b874afa4232986a2cab9a7e900b5eaee5a" + }, + { + "alg": "SHA-256", + "content": "1aea21641646c87a589208a9363141cd2acd503db45c635f8217613c45837c09" + } + ] + }, + { + "bom-ref": "2de36aa2350f79d0", + "type": "file", + "name": "/juice-shop/node_modules/micromatch/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "0ae8e81288771f32a5d752c97255f75cb2f48524" + }, + { + "alg": "SHA-256", + "content": "94dbc881c0329813f2481f35fcfa725a2285d45926d33e9b9b8b80b28487752b" + } + ] + }, + { + "bom-ref": "0296a8d0f492b440", + "type": "file", + "name": "/juice-shop/node_modules/mime-db/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "192a69685a32f1ccc5df8a54ea0f117c48bd87f1" + }, + { + "alg": "SHA-256", + "content": "d03e37b915a050af548d543f4e45ff5de06ec767c19e745f18c431d9dc26b5bf" + } + ] + }, + { + "bom-ref": "6577f9cc20132f68", + "type": "file", + "name": "/juice-shop/node_modules/mime-types/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ee2c9eae301358bf7d646b5b7ede6c28fed4bf96" + }, + { + "alg": "SHA-256", + "content": "5053cc10259c3913ab6b6c8f13170a619c0d1836c1d9081238329a559fafeb3a" + } + ] + }, + { + "bom-ref": "f1b19fc9012e16fa", + "type": "file", + "name": "/juice-shop/node_modules/mime/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "0779ea22afe593a2ec0223d16e9ccb5d0e01e45f" + }, + { + "alg": "SHA-256", + "content": "f6a871d6ab40d2f2945d626a4d75da2fce78a35737c0870a0a4da9bee43f9d4e" + } + ] + }, + { + "bom-ref": "7ae6cb03d20978c5", + "type": "file", + "name": "/juice-shop/node_modules/mimic-response/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "082938445f1ca0117cf3c38752fb121b427d382b" + }, + { + "alg": "SHA-256", + "content": "a3c32b6656683020a9458474c9536dcbf37b873668b87635c19ff10b58f362ae" + } + ] + }, + { + "bom-ref": "57b40b4296b7335c", + "type": "file", + "name": "/juice-shop/node_modules/minimatch/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c9bac2254c52c209d494d1589dc2f5e6b7e8e5d9" + }, + { + "alg": "SHA-256", + "content": "eefa1c89527d52bbb2e8b053fe8ecf3e3ced399bdba82cf27e0e92edfd833938" + } + ] + }, + { + "bom-ref": "35402bb691c76fe3", + "type": "file", + "name": "/juice-shop/node_modules/minimist/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "2bec91d11358048bff848e353df12837beb6ad94" + }, + { + "alg": "SHA-256", + "content": "252881f6a068a3e70386706d88a694b5e8e9e053b6d9f309fd9a329e651bbf81" + } + ] + }, + { + "bom-ref": "0ce3fcfd5d3f85d3", + "type": "file", + "name": "/juice-shop/node_modules/minipass-collect/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "7ca3a77ca7b795148ecee5d9ebbe96e968dddb15" + }, + { + "alg": "SHA-256", + "content": "042ab826c5440a7d01a1cafae44c54840618319e2e64ed40df006c542b0768f8" + } + ] + }, + { + "bom-ref": "2f49a85fecc1eded", + "type": "file", + "name": "/juice-shop/node_modules/minipass-fetch/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "20a8b7cdd0d9df659a448aef3a4589ca2a95d39e" + }, + { + "alg": "SHA-256", + "content": "75e1d21fe4253c6a01b012e347900cf44c13f0ff541a5e000ff930faa504d84b" + } + ] + }, + { + "bom-ref": "cad99c93cd55d364", + "type": "file", + "name": "/juice-shop/node_modules/minipass-flush/node_modules/minipass/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "fc79b496665e2cdfc4bdaac9c7d7c4b2f4645f2c" + }, + { + "alg": "SHA-256", + "content": "e99f6b67ba6e5cda438efb7a23dd399ee5c2070af69ce77720d95de5fb42921e" + } + ] + }, + { + "bom-ref": "5f0f3638ac7b0591", + "type": "file", + "name": "/juice-shop/node_modules/minipass-flush/node_modules/yallist/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "d6a16b480cbd582f969b3d0ed89a157316268d10" + }, + { + "alg": "SHA-256", + "content": "c56b604bce814520105739e9559142ea9d4417454ebb933fd5687ca1d8d89bd5" + } + ] + }, + { + "bom-ref": "38745c803b98497e", + "type": "file", + "name": "/juice-shop/node_modules/minipass-flush/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "30f27741b9d1e471f8c4546c5fbe6fc3c3754821" + }, + { + "alg": "SHA-256", + "content": "00eb6d6a76a29658c56bfc079f9e5ec008ae6ba136b83467777948280077185c" + } + ] + }, + { + "bom-ref": "4ff17006d5277c36", + "type": "file", + "name": "/juice-shop/node_modules/minipass-pipeline/node_modules/minipass/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "fc79b496665e2cdfc4bdaac9c7d7c4b2f4645f2c" + }, + { + "alg": "SHA-256", + "content": "e99f6b67ba6e5cda438efb7a23dd399ee5c2070af69ce77720d95de5fb42921e" + } + ] + }, + { + "bom-ref": "c1efd518f9dcd825", + "type": "file", + "name": "/juice-shop/node_modules/minipass-pipeline/node_modules/yallist/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "d6a16b480cbd582f969b3d0ed89a157316268d10" + }, + { + "alg": "SHA-256", + "content": "c56b604bce814520105739e9559142ea9d4417454ebb933fd5687ca1d8d89bd5" + } + ] + }, + { + "bom-ref": "7c0cbc13afb024ff", + "type": "file", + "name": "/juice-shop/node_modules/minipass-pipeline/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "e30c58465801deaceb4b81898e531c75679563b1" + }, + { + "alg": "SHA-256", + "content": "c20f059ca6012af5a3d255948c7ab1fccc06ad1d0019c669b08ba251cd4b281d" + } + ] + }, + { + "bom-ref": "d3ed259d5482da0a", + "type": "file", + "name": "/juice-shop/node_modules/minipass-sized/node_modules/minipass/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "fc79b496665e2cdfc4bdaac9c7d7c4b2f4645f2c" + }, + { + "alg": "SHA-256", + "content": "e99f6b67ba6e5cda438efb7a23dd399ee5c2070af69ce77720d95de5fb42921e" + } + ] + }, + { + "bom-ref": "3e18a7e8e377c6ab", + "type": "file", + "name": "/juice-shop/node_modules/minipass-sized/node_modules/yallist/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "d6a16b480cbd582f969b3d0ed89a157316268d10" + }, + { + "alg": "SHA-256", + "content": "c56b604bce814520105739e9559142ea9d4417454ebb933fd5687ca1d8d89bd5" + } + ] + }, + { + "bom-ref": "34a24a99ed575347", + "type": "file", + "name": "/juice-shop/node_modules/minipass-sized/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "615e0e93dfdbc65b217029380591abc9e9b64136" + }, + { + "alg": "SHA-256", + "content": "55b337582c4192528f19eea2ababf77b18fe2ada15f346b25a2c1d276fec182b" + } + ] + }, + { + "bom-ref": "9a05f826f703ddd3", + "type": "file", + "name": "/juice-shop/node_modules/minipass/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "61235e7e9cfd09deb1ed8a00c522c6bbbcdef750" + }, + { + "alg": "SHA-256", + "content": "b8ab116187d5e9375d494f17437eb862cbee4b329c21f15412c6a5170ec2f55c" + } + ] + }, + { + "bom-ref": "382928441b43b545", + "type": "file", + "name": "/juice-shop/node_modules/minizlib/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ecda8f42a2256be6ae9bba8a268ae3964683fe09" + }, + { + "alg": "SHA-256", + "content": "3e3b206f94f3bd444f18fed847d8caeacb84925c628ae3d87805bc1dd6c4c470" + } + ] + }, + { + "bom-ref": "3c50ee0860577f1f", + "type": "file", + "name": "/juice-shop/node_modules/mkdirp-classic/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "1038c88acb879de67ec347d0c4e1639e6ddc6f17" + }, + { + "alg": "SHA-256", + "content": "dd81e4703dc7005247e7c2dc056c67c936923a40b4dc9b266cf8acf3442ba89c" + } + ] + }, + { + "bom-ref": "21754330bb985d00", + "type": "file", + "name": "/juice-shop/node_modules/mkdirp/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "44ed68c9d570bf46fb09d444537a6520b60f77cd" + }, + { + "alg": "SHA-256", + "content": "8856bdf1f9b0f5d6b79fc8af4c5d23ca25a41c8cbce465d4b2f5a2852eab1859" + } + ] + }, + { + "bom-ref": "02ba3507545bbfb0", + "type": "file", + "name": "/juice-shop/node_modules/moment-timezone/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f63ec700f7f848f155b904f161a24db413a96aed" + }, + { + "alg": "SHA-256", + "content": "4b5a6218fe37ea04bbe19f463fc2477e141bfb8ee18506bd99e871a0d25c3dad" + } + ] + }, + { + "bom-ref": "a65356aa393d9aee", + "type": "file", + "name": "/juice-shop/node_modules/moment/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "d32c71de37d4b9dffede0ee39dedd2eca5b4bb12" + }, + { + "alg": "SHA-256", + "content": "5e2f0870f4d1bbef11e8bf90babd72a4399b86b19da81de796a58457a37b8e13" + } + ] + }, + { + "bom-ref": "5d8e5f8eb332cbb3", + "type": "file", + "name": "/juice-shop/node_modules/morgan/node_modules/on-finished/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c29040f7d6143d368f7373aa6cced5817b070c87" + }, + { + "alg": "SHA-256", + "content": "c67ecda258b136ba8f9bc2b6600979bde85308c2a27ea0941465d9cb12239cf3" + } + ] + }, + { + "bom-ref": "900af9f3ed6035c9", + "type": "file", + "name": "/juice-shop/node_modules/morgan/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "12b5f22ea2a5cfefd023b561d82364d939346484" + }, + { + "alg": "SHA-256", + "content": "4b0296a5e97c48109500944481c91bc6548a3fa2d8cffe3eadb2efad148859e2" + } + ] + }, + { + "bom-ref": "ecef42f3e8439dc9", + "type": "file", + "name": "/juice-shop/node_modules/ms/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "4d354da7ece1c7d5689b8104f3b6f3dcbac7790e" + }, + { + "alg": "SHA-256", + "content": "30fbfaa3840b2f63978ad4bcd7ed8dc24d277b818e4755fe93eda8cb1bc8b74c" + } + ] + }, + { + "bom-ref": "7baa8b0d369883b7", + "type": "file", + "name": "/juice-shop/node_modules/multer/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "9d5f9e911709c067c01dc860c8f6e35a7429a6ab" + }, + { + "alg": "SHA-256", + "content": "49eef045324ab4b414b473dd93dd471f68dbc68eaa7003e88e85b6f70c5b4873" + } + ] + }, + { + "bom-ref": "75f3090d2e009509", + "type": "file", + "name": "/juice-shop/node_modules/mustache/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "7388b74f1debb1f95b9fd3f1d61102a98c28909f" + }, + { + "alg": "SHA-256", + "content": "6cd082a032f4c79c9f57d1bbd0ebbf9626d05e25f3347b20d3745708b57ecfae" + } + ] + }, + { + "bom-ref": "3db8185a425251f4", + "type": "file", + "name": "/juice-shop/node_modules/nan/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "0e0bd529c8f4d49238fb7e91741829cf7b0d2686" + }, + { + "alg": "SHA-256", + "content": "9be1db68926741824af69344a811048ea7f236090ee7b39fd639aec9e0a1f2c7" + } + ] + }, + { + "bom-ref": "2cca3284ccccc973", + "type": "file", + "name": "/juice-shop/node_modules/nan/tools/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c8b6de0212f33be85f01aea1581791bd14aa2a73" + }, + { + "alg": "SHA-256", + "content": "26c59824a231aa81659c1d72c0a359e271889881218212ececcd4b393dfe13aa" + } + ] + }, + { + "bom-ref": "d2dc5c0b77d163c2", + "type": "file", + "name": "/juice-shop/node_modules/napi-build-utils/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b502791eceb8f2957092667ec0ad17b7dba27817" + }, + { + "alg": "SHA-256", + "content": "a49e21f07e39fa8b5ab477b981260594519dca2e0107e820826c040054a63a1a" + } + ] + }, + { + "bom-ref": "2a1b1b32f0fb96a7", + "type": "file", + "name": "/juice-shop/node_modules/needle/node_modules/debug/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "3d5aebece9ee472dd80cdbe1235c8ce746c76c25" + }, + { + "alg": "SHA-256", + "content": "bc3ebfd4898960d942e65f60696f2af26917d6ddf016dd159c52beb9241d3983" + } + ] + }, + { + "bom-ref": "e7dc0e4a4b405a47", + "type": "file", + "name": "/juice-shop/node_modules/needle/node_modules/ms/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c290eb97736177176d071da4ac855ab995685c97" + }, + { + "alg": "SHA-256", + "content": "1a6b4d9739790c0b94ab96c8cc0507e281c164c311ff4fbf5e57fb8d26290b40" + } + ] + }, + { + "bom-ref": "399c8f21e0a14f35", + "type": "file", + "name": "/juice-shop/node_modules/needle/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "9bf939335cef204af46611dc82702b42200fdc34" + }, + { + "alg": "SHA-256", + "content": "5fa6ed0d41bd2d31a28d87fe3529024f19da63f499bc046fe292d0ce82446357" + } + ] + }, + { + "bom-ref": "b25c3aaa9d2dd0a8", + "type": "file", + "name": "/juice-shop/node_modules/negotiator/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "94342123a37046fc1dd4ed813dd2103479225426" + }, + { + "alg": "SHA-256", + "content": "d7c1fb78e3186b6385077e0b7b365adca324274963e41e1d68f78b4f82105e4f" + } + ] + }, + { + "bom-ref": "852343ce50ba912c", + "type": "file", + "name": "/juice-shop/node_modules/neo-async/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "420739d2572278d648b89b2206cfbf89e89832ef" + }, + { + "alg": "SHA-256", + "content": "bdf14e4aab20dbe30f54ecb40d41ff75339327f9a1cf8638931ea16256ceaa6f" + } + ] + }, + { + "bom-ref": "cdb120ef5ed6b87e", + "type": "file", + "name": "/juice-shop/node_modules/neoip/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "942efccc7392733b4afd569706e617d916358f32" + }, + { + "alg": "SHA-256", + "content": "858dd14b36a3a87d7db24a605fa140e2d2fff44391857539d7c05d09c9f1d218" + } + ] + }, + { + "bom-ref": "ffeef1239cfd1070", + "type": "file", + "name": "/juice-shop/node_modules/node-abi/node_modules/semver/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "21cae1218ba3b5465b4fe24b2834306c0091cec7" + }, + { + "alg": "SHA-256", + "content": "5040deda6072a93c40e36c5188f24159498f6f84fe586bc47dea4a2de7a8fcdb" + } + ] + }, + { + "bom-ref": "e9eac9fdfd363db5", + "type": "file", + "name": "/juice-shop/node_modules/node-abi/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "df5a7d5e4921222cd4686a78783540cea2c316c3" + }, + { + "alg": "SHA-256", + "content": "b5db851f28f5d20f1d0aed33ccc40aceab12fb3472108cd1fe4f6118be11084b" + } + ] + }, + { + "bom-ref": "2c88ec9b157dc369", + "type": "file", + "name": "/juice-shop/node_modules/node-addon-api/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "7823e132377d718289188b35c5c8c362e8d89953" + }, + { + "alg": "SHA-256", + "content": "e4947cf10e432c42459e60a00947ccd1ad2501e16cf1a530b3d39f0c2de5c83f" + } + ] + }, + { + "bom-ref": "8fa2fbf3f2cb5639", + "type": "file", + "name": "/juice-shop/node_modules/node-gyp/node_modules/abbrev/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "58ff9d74c88270726b05e383ba4d2641a18438f3" + }, + { + "alg": "SHA-256", + "content": "1903498f98eab52f962076359b74e436bb24cf484fd1a75af97a2509712029ae" + } + ] + }, + { + "bom-ref": "8cacde246fbe2335", + "type": "file", + "name": "/juice-shop/node_modules/node-gyp/node_modules/isexe/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "36605d910c925406fc90023dbfdece89c4b97c5a" + }, + { + "alg": "SHA-256", + "content": "668c167be26edf600ee1c4fab262d7afa5afa66f3fd389b3c4c942bab249f0c4" + } + ] + }, + { + "bom-ref": "6073c5ace5cf49bc", + "type": "file", + "name": "/juice-shop/node_modules/node-gyp/node_modules/nopt/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "317e51d1f350fa28d851280d460bebcd9154acca" + }, + { + "alg": "SHA-256", + "content": "a892ac4d9de9c19c5649cd38963ff353ce637455f83667a6b3a691bee62a7912" + } + ] + }, + { + "bom-ref": "eb8a36586d28213f", + "type": "file", + "name": "/juice-shop/node_modules/node-gyp/node_modules/which/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "519f542417e96085fb8a1ad8d7a0f913155b5e56" + }, + { + "alg": "SHA-256", + "content": "9f06638e5fcb977409c2181382492dd0d62885999e5739a8f285960d5a78906d" + } + ] + }, + { + "bom-ref": "6af8b609a3947cab", + "type": "file", + "name": "/juice-shop/node_modules/node-gyp/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "5d92c5b3b8cda01495cd181fb02e407a93e3bdac" + }, + { + "alg": "SHA-256", + "content": "11896cdb5e5657602a5e6163c5a8fa145011b7feb27ce5d5222b1c82df84314a" + } + ] + }, + { + "bom-ref": "ac70dfb2719dd49b", + "type": "file", + "name": "/juice-shop/node_modules/node-pre-gyp/lib/util/nw-pre-gyp/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "3a785cd04b35cc9a5fb36ad1a97561e7d3c3cf53" + }, + { + "alg": "SHA-256", + "content": "49144a24c7d686ca276850e6ffdd97147148c10acf3fe94317c96aa07de6a6ed" + } + ] + }, + { + "bom-ref": "f715a6fefb46e161", + "type": "file", + "name": "/juice-shop/node_modules/node-pre-gyp/node_modules/chownr/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c3024b92485c885b974e1f46cb2c32de716c6f06" + }, + { + "alg": "SHA-256", + "content": "7c18e85ac9eff99dc6cb6c5626e11ebea658e69119e0bc8cb4bd799c2b48125a" + } + ] + }, + { + "bom-ref": "d232c38636cdfba7", + "type": "file", + "name": "/juice-shop/node_modules/node-pre-gyp/node_modules/fs-minipass/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "5e6807bb3e5a5035a1cf03f1a855b3e6492f4ae1" + }, + { + "alg": "SHA-256", + "content": "3539da425561866028c253efb502461eba9a61f60e7aed6236df87f8f5fa8217" + } + ] + }, + { + "bom-ref": "991002d08d17a087", + "type": "file", + "name": "/juice-shop/node_modules/node-pre-gyp/node_modules/minipass/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "e55449021f01663c8f607ceb7dbbf50d166624f1" + }, + { + "alg": "SHA-256", + "content": "f62740d4879900b0e5c1ab64580e4dae15e1345b162d148a260d39834c8f41ba" + } + ] + }, + { + "bom-ref": "a534625fea84a658", + "type": "file", + "name": "/juice-shop/node_modules/node-pre-gyp/node_modules/minizlib/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "bcb1bbab5e11777e5eabdd3ddcf01fbf2529853c" + }, + { + "alg": "SHA-256", + "content": "2a50eac171f8d9eead35f637c6c4bb965875fe5c876b5c888ba5fde46f4daf9d" + } + ] + }, + { + "bom-ref": "7af91e988a80f003", + "type": "file", + "name": "/juice-shop/node_modules/node-pre-gyp/node_modules/nopt/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "332100289a0b019f231d6066376efdfb85345547" + }, + { + "alg": "SHA-256", + "content": "d85eee455ed9a79caa4a91d52e89857e576d30eefc3c826f0bf4dfbe067d0679" + } + ] + }, + { + "bom-ref": "1f9fc55b42fde767", + "type": "file", + "name": "/juice-shop/node_modules/node-pre-gyp/node_modules/semver/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "21cae1218ba3b5465b4fe24b2834306c0091cec7" + }, + { + "alg": "SHA-256", + "content": "5040deda6072a93c40e36c5188f24159498f6f84fe586bc47dea4a2de7a8fcdb" + } + ] + }, + { + "bom-ref": "e2408b08fba44521", + "type": "file", + "name": "/juice-shop/node_modules/node-pre-gyp/node_modules/tar/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "cb08ea3f1813046f69fe762a54ee739e63596d79" + }, + { + "alg": "SHA-256", + "content": "a042350bb5cc1c9677d434b751b6a44fead64bcea99393a1251620db9c0e17a1" + } + ] + }, + { + "bom-ref": "7c39451e6b1e97c9", + "type": "file", + "name": "/juice-shop/node_modules/node-pre-gyp/node_modules/yallist/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "96cc9bf2282dd9cd2c0bb49c2bca096782b2da5e" + }, + { + "alg": "SHA-256", + "content": "27699a6415a43f128c0e8ddcd5bf6e265f6cf3a581a9d959c11b977244fadc34" + } + ] + }, + { + "bom-ref": "e41534109592b0e3", + "type": "file", + "name": "/juice-shop/node_modules/node-pre-gyp/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "508afa4b14190f24381eebc0cbdd37fd03d370e8" + }, + { + "alg": "SHA-256", + "content": "f3e84b56fe45a07986847204250cb1fc382071adf2aa9e96bcea2ebc61355cd4" + } + ] + }, + { + "bom-ref": "d09fd07281206a27", + "type": "file", + "name": "/juice-shop/node_modules/noop-logger/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "0e21795f953d07a6714df586fde5026d83794a17" + }, + { + "alg": "SHA-256", + "content": "0af1b47cb5cb1cefca495ac1bbaa6a7e0372f2865103a5dacb64b99dfd990d17" + } + ] + }, + { + "bom-ref": "9e16a0b69ff0b8f3", + "type": "file", + "name": "/juice-shop/node_modules/nopt/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "bb6de23bed529e3e5ea2583b0f1702ebb9d02805" + }, + { + "alg": "SHA-256", + "content": "9c2a5fec768304c3b6e67baaeec8cf4d4cd28a416c3f16da1de7db698ab772f7" + } + ] + }, + { + "bom-ref": "e28f2223a0fb88cf", + "type": "file", + "name": "/juice-shop/node_modules/normalize-path/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "4d6a654a05a46de332cfc70023e3ff0b39673fba" + }, + { + "alg": "SHA-256", + "content": "cd2d883ed14f4525cc3a87441b616327d38d1f8d096d12eef35f4c60dac9d796" + } + ] + }, + { + "bom-ref": "e5876dad65ef708c", + "type": "file", + "name": "/juice-shop/node_modules/normalize-url/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "671dad55b1d83fb8c0838614bf00a76f7592961b" + }, + { + "alg": "SHA-256", + "content": "69befc6d902d0a1b361bbfb5ab863704b67ab5d9df1dbd9869a9152f6ad4c5d8" + } + ] + }, + { + "bom-ref": "236d0aa97c073142", + "type": "file", + "name": "/juice-shop/node_modules/notevil/node_modules/esprima/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "683cbde057cd3d8ff0105ecd318496ae8f6b19d2" + }, + { + "alg": "SHA-256", + "content": "9c8ec869b019be7bbc6e877aced29252cb4e229801e0dcd81ec36baf06c10722" + } + ] + }, + { + "bom-ref": "ddce0cc1aa956e8f", + "type": "file", + "name": "/juice-shop/node_modules/notevil/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "120bad0d2afc319a5da02e45d3a921b134636026" + }, + { + "alg": "SHA-256", + "content": "f9c36acd702b764beee8fdf8f3abec74b12bc1cb9b6b241ac9b88f8875e7c102" + } + ] + }, + { + "bom-ref": "dba33a67bd8e365c", + "type": "file", + "name": "/juice-shop/node_modules/npm-bundled/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "aee4023f29d5d73bbb7dedaa7187b2711b0a34e4" + }, + { + "alg": "SHA-256", + "content": "2f824d252e975f9a48384b691e02add8d85390aae1ee9e839cc3387d34b946c5" + } + ] + }, + { + "bom-ref": "13555fbce930ffe1", + "type": "file", + "name": "/juice-shop/node_modules/npm-normalize-package-bin/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "11198c06f8e234719166cd7209046b80fc516ebe" + }, + { + "alg": "SHA-256", + "content": "67b169fe285b204b15486098d0811e526fdf0bfa1d06cfb67f51bcd59e056bd1" + } + ] + }, + { + "bom-ref": "4ab994ebd0d8603b", + "type": "file", + "name": "/juice-shop/node_modules/npm-packlist/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "133a1af585371208c4017d29f13f33cd08dea5f9" + }, + { + "alg": "SHA-256", + "content": "55a0ee2e0cad20e525b8acf612ac1645f3fafa72721fde27e1a3b1e4a4aae7a0" + } + ] + }, + { + "bom-ref": "f69c4289b32a34de", + "type": "file", + "name": "/juice-shop/node_modules/npmlog/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "d655b0502579af043c389d145afe76ed496e3b0e" + }, + { + "alg": "SHA-256", + "content": "f88d2fef96cb03bfb402e22425b3b4214968f03d3c812e9c850fcdc5d7b9fd19" + } + ] + }, + { + "bom-ref": "3d578b96ee201c68", + "type": "file", + "name": "/juice-shop/node_modules/number-is-nan/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b550ea20e6c7ed59ae2d8c0a384245bffab3f18e" + }, + { + "alg": "SHA-256", + "content": "242447f707a34988f6307983f56ab5efc4bee47dda47f931ad9d53ed9937c78d" + } + ] + }, + { + "bom-ref": "f9ac05c9cbe3fdb7", + "type": "file", + "name": "/juice-shop/node_modules/object-assign/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "13257489764dfb0dfce9cf643096047658a826d7" + }, + { + "alg": "SHA-256", + "content": "5990bbffa235fc675debd925d50f6c3f48a2b4526d8c9f7555cadec9029d0d7f" + } + ] + }, + { + "bom-ref": "12300559ca5c3a7f", + "type": "file", + "name": "/juice-shop/node_modules/object-inspect/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f59a216249b68601d6e44515c4f9188a2110cc50" + }, + { + "alg": "SHA-256", + "content": "21c5c63f653705f44a60f5fe93752b231caf6ff07b01805740bd89b71b2d6d8a" + } + ] + }, + { + "bom-ref": "1727ba7eaee4d909", + "type": "file", + "name": "/juice-shop/node_modules/object-is/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b37d4100f63846d229417569f747a582e0729f15" + }, + { + "alg": "SHA-256", + "content": "642cdbac75e401aa7ccb5c3a1ae12765dbf03ee9e844c6e2215114f8b0ad7f2f" + } + ] + }, + { + "bom-ref": "5b28dc0ae4fa55d6", + "type": "file", + "name": "/juice-shop/node_modules/object-keys/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "e40c3de9648f3ccff16f512b6316c7f1981b5834" + }, + { + "alg": "SHA-256", + "content": "60128330481888bf0e83a713699bee6668c5948821ef06106d8c9613b6081b45" + } + ] + }, + { + "bom-ref": "4dc3077ccc8dc90d", + "type": "file", + "name": "/juice-shop/node_modules/object.assign/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "450174ba31f98098017fbf306567e4273a95c328" + }, + { + "alg": "SHA-256", + "content": "982c86a45d0edc61215628380656301e17e5a7f83c9e3072b38dff6778b0e1aa" + } + ] + }, + { + "bom-ref": "9f1b63e8e76008e6", + "type": "file", + "name": "/juice-shop/node_modules/object.defaults/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "e2e67e299fc4fc4f3a49c7d763bb40d9f8f952b3" + }, + { + "alg": "SHA-256", + "content": "49c2b0cbb2f4939b127392fe318b41d1304bca237e963bb264b09acd38c3a7e4" + } + ] + }, + { + "bom-ref": "505fa682c47a5a22", + "type": "file", + "name": "/juice-shop/node_modules/object.map/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "fc036829452a5b195d1139453fdd07550b7c95fa" + }, + { + "alg": "SHA-256", + "content": "a57d602ccb0e7d55a2b304aba41457457b46225682fe862c02374acb3c5c0c2f" + } + ] + }, + { + "bom-ref": "06c753f3074f9759", + "type": "file", + "name": "/juice-shop/node_modules/object.pick/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "7a553ddd8f24c96892437678a12c8a2cdd804312" + }, + { + "alg": "SHA-256", + "content": "e48178e83342140e91433af2e90ae5d41b7d70058ef92e1afea3acb9149f991f" + } + ] + }, + { + "bom-ref": "67d2da2ad3e11ed7", + "type": "file", + "name": "/juice-shop/node_modules/on-finished/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "777e9cd400b42dee1199eacfb325876caeaff3cc" + }, + { + "alg": "SHA-256", + "content": "c812eca4b0dee2317cb446124cb27ae8e5b993c8fdd0144886b629ef6ef53fc1" + } + ] + }, + { + "bom-ref": "9dbf82815c575905", + "type": "file", + "name": "/juice-shop/node_modules/on-headers/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "924744de2790eee065f7c1437c9d4757cab78730" + }, + { + "alg": "SHA-256", + "content": "86ef65dd0d349960bfc6a01292c1d40f49b064fffca48bd209a0e693c534a246" + } + ] + }, + { + "bom-ref": "20a0d142ad641e5d", + "type": "file", + "name": "/juice-shop/node_modules/once/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b2456f0417ad4f7dec058401908740c4da1ee7ba" + }, + { + "alg": "SHA-256", + "content": "33840d74c14c94bfb75c76374765b635531b1eacb88d7f1f2f380c94d0ea1328" + } + ] + }, + { + "bom-ref": "0cdfcc776c83fa28", + "type": "file", + "name": "/juice-shop/node_modules/one-time/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a7cf310a3413d75cf4374823b2300cfe2dec3b24" + }, + { + "alg": "SHA-256", + "content": "95f439060816dac444a0bd628e9849fd0894afe8e9eb4110bd737daadad46175" + } + ] + }, + { + "bom-ref": "b9b1b3e8d8a25874", + "type": "file", + "name": "/juice-shop/node_modules/opentype.js/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "2017ce966b04df622563e99bb7966c3b36998e57" + }, + { + "alg": "SHA-256", + "content": "1cf7903eeaba55cdb56ba47ce893a3b104ccecd2e954061b5c5616529a9db69e" + } + ] + }, + { + "bom-ref": "ea5be11c6956f38b", + "type": "file", + "name": "/juice-shop/node_modules/os-homedir/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "36fa0ba7b479b41f98dde0822cc2a026bd5d7e14" + }, + { + "alg": "SHA-256", + "content": "465f469dc1dc630aa9347b28153da8b71d94b8fe87669bd1d49bc5b0eeeb364b" + } + ] + }, + { + "bom-ref": "070e3d100fbeaf0f", + "type": "file", + "name": "/juice-shop/node_modules/os-tmpdir/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "48367dfdddfa0b59ba77d7c490da5ed3124275b0" + }, + { + "alg": "SHA-256", + "content": "708404ce657fbad57a4804f3ccfcda877e038b981fb9675aebcc57de91e95694" + } + ] + }, + { + "bom-ref": "f613e5757253ad2b", + "type": "file", + "name": "/juice-shop/node_modules/osenv/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "76ff6531fce9614d1e45fa45269bc021992e75f0" + }, + { + "alg": "SHA-256", + "content": "184e6e41648f04dcb0d7141210a54bc2213c2e856aad7fd8f93a0bab7eb519c2" + } + ] + }, + { + "bom-ref": "316e63d501476bac", + "type": "file", + "name": "/juice-shop/node_modules/otplib/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "97ac8cffd99ccf116638eae4aca9a120135c5394" + }, + { + "alg": "SHA-256", + "content": "84dd2e60dfd43a4b03d1e185b06954a97d41f5a90354ac556b8ee2cb0937a448" + } + ] + }, + { + "bom-ref": "087f4484f1b06afc", + "type": "file", + "name": "/juice-shop/node_modules/p-cancelable/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "1916b879c05ff7c43c6506dabd376267b118ad23" + }, + { + "alg": "SHA-256", + "content": "a65bb176766f5b9eb222552c19d553637ab89a572a7d1a37aea1c38348e353c0" + } + ] + }, + { + "bom-ref": "a82bf9abf62480b8", + "type": "file", + "name": "/juice-shop/node_modules/p-event/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "9828dde97e4d989a4e855f4338d18543162103f8" + }, + { + "alg": "SHA-256", + "content": "35131b3ecb0dfec3dec4ffae014374deca7ed3c1fea16165f9bfc5fa55f4ad64" + } + ] + }, + { + "bom-ref": "d0a4884eb7ce3cf1", + "type": "file", + "name": "/juice-shop/node_modules/p-finally/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "29a603e1e24363c6a469d6922dd71dea18d4a32d" + }, + { + "alg": "SHA-256", + "content": "a96137ab1fb624d4e5fe2b6413417565e72323e709268eab8a790ea51eeda6dc" + } + ] + }, + { + "bom-ref": "69253d86948f4bbf", + "type": "file", + "name": "/juice-shop/node_modules/p-is-promise/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "5ec1f21e446cce1704f5bebd6c76308c624b3088" + }, + { + "alg": "SHA-256", + "content": "f320222ce152d59bbaa210d7b9f6c0b46c1be5f8b941aaa79388cfb84d63867a" + } + ] + }, + { + "bom-ref": "950c80162604de84", + "type": "file", + "name": "/juice-shop/node_modules/p-map/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "5f275de37ed635969b147d1adac21fd6d36ced42" + }, + { + "alg": "SHA-256", + "content": "6f0aeb7043d0737e5bcaf8c2bf83b4a8ded247922aca592d684e37499d028ae7" + } + ] + }, + { + "bom-ref": "80e1e3c4168dc77a", + "type": "file", + "name": "/juice-shop/node_modules/p-timeout/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "100425335fbce935be2397458b04276a845443ae" + }, + { + "alg": "SHA-256", + "content": "e95b82abb3ca8493c57213efdc80556eaf4be8409ca12dae831428c080c2c289" + } + ] + }, + { + "bom-ref": "6ec33fe567e6d77d", + "type": "file", + "name": "/juice-shop/node_modules/p-try/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "37f6698fd2ca69e00a1b747e374f1eb3d99954b0" + }, + { + "alg": "SHA-256", + "content": "ff793c821f36985cde9f9d9ff6297e6c1304f8e597aa2d48dc53eda83c11e54c" + } + ] + }, + { + "bom-ref": "f8706935c6ea98e0", + "type": "file", + "name": "/juice-shop/node_modules/package-json-from-dist/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "d93947bd52021bb5f785613249e0e198a3b48025" + }, + { + "alg": "SHA-256", + "content": "38fdaf168bc63a6422a7dbe7e41a7b52b02326edef8b14019e0333ef60b37b47" + } + ] + }, + { + "bom-ref": "9af163270c18611d", + "type": "file", + "name": "/juice-shop/node_modules/pako/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "83f786af36407a022c0f83198df1429214210a1a" + }, + { + "alg": "SHA-256", + "content": "0014f350a6834ed6a2d1211e0a2e3aa471cb426edf63379c785f9647ea2b4e01" + } + ] + }, + { + "bom-ref": "c9a2dc0e6f982914", + "type": "file", + "name": "/juice-shop/node_modules/parse-filepath/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a22d4709dc4be9310d39c64ec4f03233201f3d7d" + }, + { + "alg": "SHA-256", + "content": "1a299df30f2845bc3e8529b1833806d7e85914d9ce19b6ebe57d5a553399adba" + } + ] + }, + { + "bom-ref": "14b814912558cfc5", + "type": "file", + "name": "/juice-shop/node_modules/parse-passwd/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "25fb0f091c688a3376145c783fd823aa6fd93b82" + }, + { + "alg": "SHA-256", + "content": "0ddfc8e12d83546f17c0a269d47eaad6f74aab078ab1da742097823fba730eee" + } + ] + }, + { + "bom-ref": "8715eb5353b48ed4", + "type": "file", + "name": "/juice-shop/node_modules/parseurl/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "646dc756ff16c464fcb63e17b2cd5ee4ad4f8b66" + }, + { + "alg": "SHA-256", + "content": "98c7b953c844cac7c0be2d5abc6559c6fd3a6075fd159b04c0f1bf46145bfed2" + } + ] + }, + { + "bom-ref": "aafee4a1aa0d8b2b", + "type": "file", + "name": "/juice-shop/node_modules/path-exists/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "dc362acdf83f36298d8ea6c823ac1d0b3b2096ea" + }, + { + "alg": "SHA-256", + "content": "5e258d1a0d185ae469fec34de2af18913421b94181ef61238efcfe0b00d1b2c3" + } + ] + }, + { + "bom-ref": "dc27d6445de1c8f1", + "type": "file", + "name": "/juice-shop/node_modules/path-is-absolute/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "51b80416ea8aff0f6f04b15ee2e114250ba1a14c" + }, + { + "alg": "SHA-256", + "content": "be5b83877f6998b840b9365d7ab77e885f0d583337826c22daccaeb6e303fd4c" + } + ] + }, + { + "bom-ref": "e8528546db87b8f4", + "type": "file", + "name": "/juice-shop/node_modules/path-key/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f330c46f59dbdd92dddf8a2cfc2c1569b469bdd2" + }, + { + "alg": "SHA-256", + "content": "25594dab72681c910d9cc919263a4daf27d77a75e0d2c26a4d958d6d6b798f86" + } + ] + }, + { + "bom-ref": "38d67f744b03ce8d", + "type": "file", + "name": "/juice-shop/node_modules/path-parse/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "6ea9437323546aaaeb28afa33d0c9c7ed03e93a5" + }, + { + "alg": "SHA-256", + "content": "9c680ecfd322afe056b4ccbfdb6c7043342276903f017c0a29b77c3926790d13" + } + ] + }, + { + "bom-ref": "88cac29a6ee50bca", + "type": "file", + "name": "/juice-shop/node_modules/path-root-regex/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "715724f361b739f0c9721f038f1bd8b2bcbe5d60" + }, + { + "alg": "SHA-256", + "content": "dc054d43f815636a3dbb6d82a610289afd57b61c18b6e18f7c1f800f15f74ff4" + } + ] + }, + { + "bom-ref": "c7ec5fc971358797", + "type": "file", + "name": "/juice-shop/node_modules/path-root/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "0c48e82e37942bc5a594e8ddddf7f83ce3e0633a" + }, + { + "alg": "SHA-256", + "content": "03a07ba10675a90d6eda6eccb2f138aa6c0980db2e30ff7b3f9a1a20f140022b" + } + ] + }, + { + "bom-ref": "6dd6b05ed697f504", + "type": "file", + "name": "/juice-shop/node_modules/path-scurry/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "57ceeacc9d50abbd7e370e6a697520cc0784baa6" + }, + { + "alg": "SHA-256", + "content": "eda5ff683c26f88a134198fa2700b371abc9092c61a81474226bdfc6f9348c14" + } + ] + }, + { + "bom-ref": "7d90faa40fcc25aa", + "type": "file", + "name": "/juice-shop/node_modules/path-to-regexp/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "eebea274a1c39b3d45c86875caae218d3d5938a4" + }, + { + "alg": "SHA-256", + "content": "643e7a3db344a1513c1c7797d2aff9c50fc52cab665233e11768cfbca9f8c0f9" + } + ] + }, + { + "bom-ref": "83015db4db66739d", + "type": "file", + "name": "/juice-shop/node_modules/pdfkit/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "dc640b6b8ac5a82bd10be32a77fb21287dd4e25e" + }, + { + "alg": "SHA-256", + "content": "c839357686687a89e09118af96877e008463f9ec73743bd942393a1e1c8d2c2b" + } + ] + }, + { + "bom-ref": "a22b676c6095a086", + "type": "file", + "name": "/juice-shop/node_modules/peek-readable/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "046bccda296eb83ebe6419bcca8d83b6bc38cc0b" + }, + { + "alg": "SHA-256", + "content": "7be739e6dd2c01c1246559662feba2794332d16e28ef9927fdcb5f8ecd47f510" + } + ] + }, + { + "bom-ref": "ecaa20057e1faf29", + "type": "file", + "name": "/juice-shop/node_modules/pend/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "bcc6ba00d4e6de6354b46bc7687d946fe6a1446d" + }, + { + "alg": "SHA-256", + "content": "1e4f01d39cc13c261f7ab81d0509d36bd98d8eceaf9ed75f2ab274286f3c3920" + } + ] + }, + { + "bom-ref": "16c04052ed12ded4", + "type": "file", + "name": "/juice-shop/node_modules/pg-connection-string/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "4cf473bef682dfcf5787c61a2badc7100094d940" + }, + { + "alg": "SHA-256", + "content": "b4bb600d392debbef01b428d3331e7fe2dfd0eef5eb142b49d9d77121e8aeaca" + } + ] + }, + { + "bom-ref": "e69bb8e80a582e15", + "type": "file", + "name": "/juice-shop/node_modules/picocolors/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "6a7013e29f9b6720f52bc0502ee2968d6749d7a8" + }, + { + "alg": "SHA-256", + "content": "ef2ac226c4811d312e12c64214c453878653e834482125ae475f27cea60de737" + } + ] + }, + { + "bom-ref": "3f3efee94c415dc2", + "type": "file", + "name": "/juice-shop/node_modules/picomatch/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "736efee8b038ba25e328de826282cd73ee01c455" + }, + { + "alg": "SHA-256", + "content": "63264d817e856a4bff57d4304f2b38d2964a4f6df520eb169e7bcdb619f13e9a" + } + ] + }, + { + "bom-ref": "3af284b0a1f20f28", + "type": "file", + "name": "/juice-shop/node_modules/pify/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "920b385a20c890185d57e5ea1dcc86e3ff4d51a7" + }, + { + "alg": "SHA-256", + "content": "6f3beed79477c32ec1533609a75bef5cc3998e96657277519b3d66bfcc6d046d" + } + ] + }, + { + "bom-ref": "b37c4e0de0c78250", + "type": "file", + "name": "/juice-shop/node_modules/pinkie-promise/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "737766e86a40fa8b428ab9528b41bcc88430757b" + }, + { + "alg": "SHA-256", + "content": "0be4b7f157d8f59a1e9f3358c8ffc374e0350467ecebea59f795a49639115eb0" + } + ] + }, + { + "bom-ref": "160f75ee550ffc92", + "type": "file", + "name": "/juice-shop/node_modules/pinkie/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b110de0e6bdd8dca481c37b9defbcbced1e414a8" + }, + { + "alg": "SHA-256", + "content": "afcd1666f0ca44b0ffe0587fbd1db52799334626cb121ef4eaa1780a9951dfb7" + } + ] + }, + { + "bom-ref": "6d2e24de188d670e", + "type": "file", + "name": "/juice-shop/node_modules/png-js/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f6a2f416535c834f378921adae42405d92bf9911" + }, + { + "alg": "SHA-256", + "content": "afd3a9e519b30e7197605822ce772f1702014c74577bf536176419e0e7492667" + } + ] + }, + { + "bom-ref": "54cae7537069463d", + "type": "file", + "name": "/juice-shop/node_modules/portscanner/node_modules/async/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "5da55b9a896c8eed5f30013777ffbc8181bdfa67" + }, + { + "alg": "SHA-256", + "content": "180dfef0fd278a5225cdd10d1f352041129c337a961fb32ee53437fa85de76c1" + } + ] + }, + { + "bom-ref": "90fdee0c8d5f31a4", + "type": "file", + "name": "/juice-shop/node_modules/possible-typed-array-names/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "23814e5ed3fdcea6f3c2e3299c1b9af685ba7c50" + }, + { + "alg": "SHA-256", + "content": "0ff73753495cfff4556a5f8b7847ba1c06530341986e642a8637c6db74d87894" + } + ] + }, + { + "bom-ref": "37330cf940d51da3", + "type": "file", + "name": "/juice-shop/node_modules/prebuild-install/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "e94e270dc48d57def16e7e6e55f92a2a87e90f4b" + }, + { + "alg": "SHA-256", + "content": "3a1c35a4b0d10d5f721dea267fdbf9981c37d13ffdd0fbd97044c5f1fcbcb026" + } + ] + }, + { + "bom-ref": "222c2c0f5cec983b", + "type": "file", + "name": "/juice-shop/node_modules/prepend-http/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a8b03b82dbd901db3e7c35f46d9ff9ed842fb6ac" + }, + { + "alg": "SHA-256", + "content": "310e7bb7d9e8be40ffd7a01972f41b43b14865db69290a157e748198544d9b0b" + } + ] + }, + { + "bom-ref": "e2a07138d5724fd8", + "type": "file", + "name": "/juice-shop/node_modules/proc-log/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ef77e00bb180e2d474ef8ec427d3ddb2dffe8b60" + }, + { + "alg": "SHA-256", + "content": "636f411adcca5bcfec9c68ee39ce18f3ee00d27934dbbcde3c6635929faceb85" + } + ] + }, + { + "bom-ref": "23a0ebea0c288516", + "type": "file", + "name": "/juice-shop/node_modules/process-nextick-args/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "75936b9172e05098607a006de74399060a53a79c" + }, + { + "alg": "SHA-256", + "content": "6d6d93d057f39bc3173d53e694b61833fd0ce89c1d669156169136d31a968131" + } + ] + }, + { + "bom-ref": "975cddb486b78847", + "type": "file", + "name": "/juice-shop/node_modules/process/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "266a0cf0da901a3bdd4ab76d0ba9032640455ca3" + }, + { + "alg": "SHA-256", + "content": "8501b4909630e60c9e9f68c4ca8ccb1964688500e61c60408a26d5480a9dd3d4" + } + ] + }, + { + "bom-ref": "9bfa8ef764001f9a", + "type": "file", + "name": "/juice-shop/node_modules/prom-client/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b93965acb54ef1e6422840164a2bb2d6898edfe1" + }, + { + "alg": "SHA-256", + "content": "1e7e9aac3c44d9396a057924677e507f67ef293435d5c9e2beb7c4d3358b8d24" + } + ] + }, + { + "bom-ref": "7fc394dfa78c2900", + "type": "file", + "name": "/juice-shop/node_modules/promise-inflight/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "46be8c622d5a7a8c74a905df7eafb893fdb8a965" + }, + { + "alg": "SHA-256", + "content": "386697ebbf39442f0570d59c851e00ca22330a0a5ce3f389b621f6a0d6d7517a" + } + ] + }, + { + "bom-ref": "0c5740d8c6beafe9", + "type": "file", + "name": "/juice-shop/node_modules/promise-retry/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "fc649cbedea73287db37a431e5761e9c0b4abca9" + }, + { + "alg": "SHA-256", + "content": "71c2995725304ffa82e03be2c21e83f3b7c0c557846df88aaed0f2b9fa75d911" + } + ] + }, + { + "bom-ref": "070ddb329bfa66ec", + "type": "file", + "name": "/juice-shop/node_modules/promise/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "521b2aa15341f7fa10ae150c4aff97fdbdc755d7" + }, + { + "alg": "SHA-256", + "content": "86c20e9c15f4d9f1fdbde8abe56ffc37ae69deffbf3ffd1ecb88712cd0da79a5" + } + ] + }, + { + "bom-ref": "790056f73b66e5a1", + "type": "file", + "name": "/juice-shop/node_modules/proxy-addr/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a04c60d6b2441d6e2a6ebddcab75aa6efc2d1d9c" + }, + { + "alg": "SHA-256", + "content": "e490a79f8058cbb7c0e9fd3b9977013102b5cbd8d232259b93bb2ebf85834a51" + } + ] + }, + { + "bom-ref": "ffdbc61d1deae572", + "type": "file", + "name": "/juice-shop/node_modules/pug-attrs/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b6adb0c7677506fb099c945daa2fade50883dc13" + }, + { + "alg": "SHA-256", + "content": "d064880b628e0ddc37c08af0da95486766c2eb313163c887a21996d5c96dce86" + } + ] + }, + { + "bom-ref": "fee3451497471471", + "type": "file", + "name": "/juice-shop/node_modules/pug-code-gen/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "3e5b05f507b7a424591ac9c81f6f9f17bda582c5" + }, + { + "alg": "SHA-256", + "content": "d3ae59d22cb7ae708da8b0391ab0d4f96efd8355f194cb732b230c4e998d964c" + } + ] + }, + { + "bom-ref": "310ea890ec7dd6f2", + "type": "file", + "name": "/juice-shop/node_modules/pug-error/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "6b67957081e9f303679cd5f7c4519b101e917879" + }, + { + "alg": "SHA-256", + "content": "6927ab8cdb89570d57b34d5953786ae2b56b89560301d452bc95c7519aa62212" + } + ] + }, + { + "bom-ref": "aa2d8695d0874b97", + "type": "file", + "name": "/juice-shop/node_modules/pug-filters/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "7a57db8c52388e0e345d522793b8842cd8d28ddc" + }, + { + "alg": "SHA-256", + "content": "88d2560b67ad36dafaaf59bfba4d42aa8aad7e96f181f37e067227b267924037" + } + ] + }, + { + "bom-ref": "d3e5bfea52074880", + "type": "file", + "name": "/juice-shop/node_modules/pug-lexer/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "6c1c883900e11b3b22227f99d97cc525d19989b0" + }, + { + "alg": "SHA-256", + "content": "c49fbdee905f6f11a937a56b458e041e26bc418c3c29bd8d87603bd165a23944" + } + ] + }, + { + "bom-ref": "263e01f81080b545", + "type": "file", + "name": "/juice-shop/node_modules/pug-linker/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "1696fada4ca8ba8097ef2cfa28d4337ba7607d4f" + }, + { + "alg": "SHA-256", + "content": "e284fe50d7618ddf9a8a32a6fce649ffc1cd5bec45e01ecf282878599d41db4d" + } + ] + }, + { + "bom-ref": "cc3b376c4a43d8ad", + "type": "file", + "name": "/juice-shop/node_modules/pug-load/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "e13cea3113c17bdd86ca3eb40af38c2e1295706f" + }, + { + "alg": "SHA-256", + "content": "04f9984f732962d8da625959b64c0d8ef4f7e1e5710a08109dd86e730a35dce6" + } + ] + }, + { + "bom-ref": "c20e56af2597cfdf", + "type": "file", + "name": "/juice-shop/node_modules/pug-parser/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "d111b223e7ec673a31910cda43a2ef7d4b2da1b9" + }, + { + "alg": "SHA-256", + "content": "b43513e8ce41a63f8cfc55e4dc9ab984f30660038837c734a1af60e0f3395bad" + } + ] + }, + { + "bom-ref": "a2e032a2c27748ec", + "type": "file", + "name": "/juice-shop/node_modules/pug-runtime/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "8318bca8d15260b136ef57deff7a05b199dff789" + }, + { + "alg": "SHA-256", + "content": "7ec7b608c7bad13a87cf6def1504d52e9bbb9aa342a79377513c58b9a85407a2" + } + ] + }, + { + "bom-ref": "0b395706e24e6f03", + "type": "file", + "name": "/juice-shop/node_modules/pug-strip-comments/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "d7037a265da4f9e91a6310af25e40ed858a33ebb" + }, + { + "alg": "SHA-256", + "content": "e499b0bb59d0755058031cd3a614c9ad196757ec3b36a761673f881592bb8d8f" + } + ] + }, + { + "bom-ref": "562a47a0d1049b76", + "type": "file", + "name": "/juice-shop/node_modules/pug-walk/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "8d626183f9c9d359642139d252f7654feae0d189" + }, + { + "alg": "SHA-256", + "content": "3073874b1942b8fa10554e527a2dd8a25ba98b4bf7352f4c1c26a5c272bc47e2" + } + ] + }, + { + "bom-ref": "183172a1df081c8b", + "type": "file", + "name": "/juice-shop/node_modules/pug/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "febcb2192aa59ee6981372e25850ea6e619e54c3" + }, + { + "alg": "SHA-256", + "content": "f31b3672f89b96f2caac2eab7f72867f188904022c76bbab7f9fac462e14171f" + } + ] + }, + { + "bom-ref": "57d45e80b20748db", + "type": "file", + "name": "/juice-shop/node_modules/pump/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ba8b05dd465d8b6329881e2deb3c835149284fea" + }, + { + "alg": "SHA-256", + "content": "d369a9c97d4aaca4a637af77b6ead9169146809ff3c27268e62151b613cae016" + } + ] + }, + { + "bom-ref": "0675f49db6bf1ccf", + "type": "file", + "name": "/juice-shop/node_modules/qs/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "28ff514a8a7863ca7923010f797ca3edaa52be34" + }, + { + "alg": "SHA-256", + "content": "c2facc4c7f2752d13d3d222bc44ce4370aeeb901a9e9ad5f41d9bca489d1c7ef" + } + ] + }, + { + "bom-ref": "0cb4f5d7807f74e1", + "type": "file", + "name": "/juice-shop/node_modules/query-string/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "e8cc4ec989ecb29722e4e4e683c1ec41e3181fa3" + }, + { + "alg": "SHA-256", + "content": "eb68a1c5d0725473fd4a6b2fe86a3858cdf56ab74971461c1e16000faff7cb9b" + } + ] + }, + { + "bom-ref": "4208a97742a0a85b", + "type": "file", + "name": "/juice-shop/node_modules/range-parser/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "e82a50d4be1c57ded40bf39a5232bf5c6dabb46d" + }, + { + "alg": "SHA-256", + "content": "d0b5f54eaa59001dc86720a9be1fdf653bad83707d70842332fb3e8847f65a89" + } + ] + }, + { + "bom-ref": "fb05c427c89b9f43", + "type": "file", + "name": "/juice-shop/node_modules/range_check/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "dab1ef784249ced9cec139f8ab8116ef52b3c492" + }, + { + "alg": "SHA-256", + "content": "2c24bfbea87b799d13ddf1abf348cd5343b811cfdc37a0e350a9456ce53405b7" + } + ] + }, + { + "bom-ref": "f4ba141442739e14", + "type": "file", + "name": "/juice-shop/node_modules/raw-body/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "3b4460aa6d8a136f0e419acb5d5e7c82ade86989" + }, + { + "alg": "SHA-256", + "content": "3847f01a7ffd81ca56879b158b8301f96244113f152ed117bff3f3abf5f88a5f" + } + ] + }, + { + "bom-ref": "313a48f9a52a047f", + "type": "file", + "name": "/juice-shop/node_modules/rc/node_modules/ini/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "14b52ea8911e4e9f89acb4d876e87755e54529e2" + }, + { + "alg": "SHA-256", + "content": "8cfafc3521292bd7434d2f40762984f36eb12f03bde92b42a9df2ea17552f4a4" + } + ] + }, + { + "bom-ref": "d38778f5e00e6924", + "type": "file", + "name": "/juice-shop/node_modules/rc/node_modules/strip-json-comments/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "d33064d55afd32cee36afe2ef20a37d1e80c2967" + }, + { + "alg": "SHA-256", + "content": "52fba89a1d2724dfeafa21ec58f8c4a8a210103cc6b65b4468ab3fb973ad1753" + } + ] + }, + { + "bom-ref": "c4de1537fdbecce8", + "type": "file", + "name": "/juice-shop/node_modules/rc/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "19966e2b4994a704ea472a1ba1eb8e1d14f446d8" + }, + { + "alg": "SHA-256", + "content": "96f035349a8e6034d380348ec3d454ed8ea3a602c7a5700eb36ff48310bdbe9f" + } + ] + }, + { + "bom-ref": "d0a0da7d4f05a7d5", + "type": "file", + "name": "/juice-shop/node_modules/readable-stream/node_modules/isarray/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "e4a5d79d5ea9366beb66cf993d11b88603e6333e" + }, + { + "alg": "SHA-256", + "content": "93165ce56e458216c18240cd961a522af5b18e51da06f55d88ac552234455d95" + } + ] + }, + { + "bom-ref": "8596f184958e76d1", + "type": "file", + "name": "/juice-shop/node_modules/readable-stream/node_modules/safe-buffer/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "bf9a046dba09dcce1bd474ff0f84c39cb57dc5b4" + }, + { + "alg": "SHA-256", + "content": "3d8b6d944be9e931a178914afbb3d6b79bfa199c032872b687bed41ed996c747" + } + ] + }, + { + "bom-ref": "c9d29bf98b8dbe6e", + "type": "file", + "name": "/juice-shop/node_modules/readable-stream/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "33a4118b015167682f053d85f7bb21b9ff9d161f" + }, + { + "alg": "SHA-256", + "content": "67bde829e31cba3f50c77d14a30fa0f2295223b7ffa07f3b84606a5a79bb97f8" + } + ] + }, + { + "bom-ref": "6a6987c3e3fdbe1b", + "type": "file", + "name": "/juice-shop/node_modules/readable-web-to-node-stream/node_modules/buffer/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "3156a9cd35dc750bebc2eaaf42a5933c8ee6b892" + }, + { + "alg": "SHA-256", + "content": "5b105ac0abbf5985cbe62ad28a34032d85c7ef623e0eb01f39441b0feb419004" + } + ] + }, + { + "bom-ref": "34d03a0741a3bb60", + "type": "file", + "name": "/juice-shop/node_modules/readable-web-to-node-stream/node_modules/readable-stream/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a2e7e379ccac07b02eddfa67746a0e521f5a4878" + }, + { + "alg": "SHA-256", + "content": "246e18f32bc77525436b73f8ac600560f246f9bc05a36dedc07f448ae19239ac" + } + ] + }, + { + "bom-ref": "f1cd7eb1c3bf92dc", + "type": "file", + "name": "/juice-shop/node_modules/readable-web-to-node-stream/node_modules/string_decoder/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "3e519b003fbce961f41cc48fa4237c6debda1266" + }, + { + "alg": "SHA-256", + "content": "31984c85cd4f3df0aa75075acdec98c25961496897d1f46d04ed4a701f129c54" + } + ] + }, + { + "bom-ref": "d96af902413c8520", + "type": "file", + "name": "/juice-shop/node_modules/readable-web-to-node-stream/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b48d8b20ab930e5208848273443f9bf3bb368df4" + }, + { + "alg": "SHA-256", + "content": "3ee3a77f8bf8c288745aec229244cb79b63b9959a9b7c8ee18e326286976bc6e" + } + ] + }, + { + "bom-ref": "6749723ddc56a32d", + "type": "file", + "name": "/juice-shop/node_modules/rechoir/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "074780fd0c9b73b6950e8d1575af5ff4b663414a" + }, + { + "alg": "SHA-256", + "content": "e63b051cbcd61e17c3ab84c9bd7315929c5425d7fbb91007a04245abf867a4b2" + } + ] + }, + { + "bom-ref": "1a4609ea1dc95a58", + "type": "file", + "name": "/juice-shop/node_modules/regexp.prototype.flags/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f0b903f5607a2b6b97708e20a940efbf3d896589" + }, + { + "alg": "SHA-256", + "content": "03b311526afa87b388a05af86fb9ad86331888d2b5ef260e635c9023a9a14a1e" + } + ] + }, + { + "bom-ref": "23d72fe2857abb55", + "type": "file", + "name": "/juice-shop/node_modules/remove-trailing-separator/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ca8ba920e17ef8348a3064c5705d3f90dac8b26f" + }, + { + "alg": "SHA-256", + "content": "5d1595f6fe1dc0db45fd3a05a64f0e5719b8af55ebd769f0bcba0ff6e7f8d7a8" + } + ] + }, + { + "bom-ref": "03a89a7c9c87e20a", + "type": "file", + "name": "/juice-shop/node_modules/replace/node_modules/ansi-styles/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "3c9ef7bd0a1c3d805814c654c457cc315c48c116" + }, + { + "alg": "SHA-256", + "content": "d405f010681d53f77691015e98461f8484b2afe6a9edfdd2ddb27b1e8a8e883d" + } + ] + }, + { + "bom-ref": "3cd975bd41416fb7", + "type": "file", + "name": "/juice-shop/node_modules/replace/node_modules/cliui/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "3a61c252373aa1eeb6b761d39d33baac564ac4ab" + }, + { + "alg": "SHA-256", + "content": "aefd282b90d2d0a055f3b40bbd2010531ba7cbf902e76a314fe09fe777491814" + } + ] + }, + { + "bom-ref": "7451363eeb8def3d", + "type": "file", + "name": "/juice-shop/node_modules/replace/node_modules/color-convert/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "03f26ab8597e0117b7ad15bcfa9f0b31c8375ea9" + }, + { + "alg": "SHA-256", + "content": "9471d21744ca3137410448da6b3bd7b30ee91d42edce3b82ebcbf84faef74fb4" + } + ] + }, + { + "bom-ref": "fe808e5ea0eca1f9", + "type": "file", + "name": "/juice-shop/node_modules/replace/node_modules/color-name/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "411d7c87d5b1dec0d479aa13e3406b5c38ac34f5" + }, + { + "alg": "SHA-256", + "content": "4a557ea373907e4643badb89ff21b3f4b969d20631086d78eab2e03d05c2efa4" + } + ] + }, + { + "bom-ref": "8e6068cb913f5e04", + "type": "file", + "name": "/juice-shop/node_modules/replace/node_modules/find-up/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "5ca7872ad39eee7733cc76e3842bc670c99f8829" + }, + { + "alg": "SHA-256", + "content": "19b9626d190ae97ecbc47843ff5781c462b6acfca35a2652dccded7d046dce53" + } + ] + }, + { + "bom-ref": "b5646d1b82af1737", + "type": "file", + "name": "/juice-shop/node_modules/replace/node_modules/locate-path/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "5f601eecc68d9b9eaf032912bf0326dafd3dc485" + }, + { + "alg": "SHA-256", + "content": "6fb0681c3501741d68594c69a0baae9f558f2d426c136946f2c7780a8c5e27bd" + } + ] + }, + { + "bom-ref": "87ceb382fd0ccfcb", + "type": "file", + "name": "/juice-shop/node_modules/replace/node_modules/minimatch/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "280930d830662d7377fd7dcdaa659e3d536b71c2" + }, + { + "alg": "SHA-256", + "content": "3b73bedeed5d09d561ddac7e212eb37e3eb37f0daba8738e59607ce1caaf93ed" + } + ] + }, + { + "bom-ref": "f27917e747dc4f52", + "type": "file", + "name": "/juice-shop/node_modules/replace/node_modules/p-limit/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "fce4cfb0ed8e8882a02082db5cec1437a90e2fdf" + }, + { + "alg": "SHA-256", + "content": "d4529e88d06488042103f25322b0b60d90dfc5de0ed61c3b7c7d27f2ac3fe1bb" + } + ] + }, + { + "bom-ref": "815a8bdeb6acedb7", + "type": "file", + "name": "/juice-shop/node_modules/replace/node_modules/p-locate/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "2a78ada043c0e10bff3b34fbbe5d1adb181b7c56" + }, + { + "alg": "SHA-256", + "content": "26d44c5d05942d6b315ecde2f3dcf78972cfb3b4c81c932ac2573d3eea5f5e94" + } + ] + }, + { + "bom-ref": "5886f9edd3e6fec3", + "type": "file", + "name": "/juice-shop/node_modules/replace/node_modules/wrap-ansi/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "1fbb028113b65f2616bec5fc66afee5f329607ad" + }, + { + "alg": "SHA-256", + "content": "ee3d1495da354ea19d3900e3f28a4e93cc202966623fee4ad6fe54346b385075" + } + ] + }, + { + "bom-ref": "f5246983c8615c0e", + "type": "file", + "name": "/juice-shop/node_modules/replace/node_modules/yargs-parser/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "728222492ccbc98db8f25613d6997f7524b9130e" + }, + { + "alg": "SHA-256", + "content": "2de71e9a1ff3e5bce791f5e3de66e1ad86f4f143d8c3ce4fbaad7a615e5c5e70" + } + ] + }, + { + "bom-ref": "8fcc144881b02f02", + "type": "file", + "name": "/juice-shop/node_modules/replace/node_modules/yargs/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "58caaec51e509a371e3df929a919a3157fdbfc7b" + }, + { + "alg": "SHA-256", + "content": "be417ad995e4f608d6f5243ad90b28f3f2604c73abb30d72382ae13358a74949" + } + ] + }, + { + "bom-ref": "ecfbedbbdce13fd8", + "type": "file", + "name": "/juice-shop/node_modules/replace/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "e3cc0e70d0bcee319ee831c0682c59b61ad3fb03" + }, + { + "alg": "SHA-256", + "content": "5c88ee721365a797b5846c260e968912c5de3b1966d843e8f8f0aadeea3421b6" + } + ] + }, + { + "bom-ref": "cb82c6e4ddaaaa12", + "type": "file", + "name": "/juice-shop/node_modules/require-directory/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a2e7fa658504a11868812ca0f9f8b08433bc2e3a" + }, + { + "alg": "SHA-256", + "content": "5690bdddd6eb4abd795fa5319df7552279508df9d562d571e3132ddff3045a71" + } + ] + }, + { + "bom-ref": "fd4c1648ad52c3de", + "type": "file", + "name": "/juice-shop/node_modules/require-main-filename/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "670907eeff6a76b76996f639a5e71a8cea7ed603" + }, + { + "alg": "SHA-256", + "content": "cc3853357a59a82c9a0e5cebbe52221eccc4a52bced4557300b69bbec17fa41b" + } + ] + }, + { + "bom-ref": "c71d2b39d3fcc365", + "type": "file", + "name": "/juice-shop/node_modules/resolve-dir/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b6147edfc55437b27388119c5ff8ce89eb4208fc" + }, + { + "alg": "SHA-256", + "content": "c124e4c2746edf4bd9322cb823ce1b4e0168ed393bfe2e6eecd8d12a47498d05" + } + ] + }, + { + "bom-ref": "f1faff8c6f5172bc", + "type": "file", + "name": "/juice-shop/node_modules/resolve/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "36a106c595add60c403fd7a6178948de47422f9e" + }, + { + "alg": "SHA-256", + "content": "e4f9221a50e017b41b7c5c286f257108b2496327d10ccaf2a460592849e756dc" + } + ] + }, + { + "bom-ref": "76b8aad8ae3566ab", + "type": "file", + "name": "/juice-shop/node_modules/resolve/test/resolver/baz/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "0e5f7a5ddaf05e7d5a39fc67bbc4993de92e9012" + }, + { + "alg": "SHA-256", + "content": "cd33f816f635bcf9cdbe5a13d877bc8901a1a90819b1d73c16b35b6cdbebecaf" + } + ] + }, + { + "bom-ref": "051772e9f995d25b", + "type": "file", + "name": "/juice-shop/node_modules/resolve/test/resolver/browser_field/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "e5a9d36b5a39fc1f1c257ca949df43dd40a265ff" + }, + { + "alg": "SHA-256", + "content": "2857c211f81109bda6a96584f2e7a1ac5610baa0f67bbc77f7e766c4152281f4" + } + ] + }, + { + "bom-ref": "a80d7910b47c8aa4", + "type": "file", + "name": "/juice-shop/node_modules/resolve/test/resolver/false_main/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "9598eab563115c03c659ee404d91f9a6431df39d" + }, + { + "alg": "SHA-256", + "content": "064d9e3c87123a24e31276d1bcfce16b81bb2156d42c07f427b8ddcbf675f790" + } + ] + }, + { + "bom-ref": "7a8a236efd42ff37", + "type": "file", + "name": "/juice-shop/node_modules/resolve/test/resolver/invalid_main/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "dad7dffe799806c49f1cccc039e3d6cbb38d1a26" + }, + { + "alg": "SHA-256", + "content": "ed30bf3c22be924be67b278ed079ba425dd0ae37110d7027bf9369f771abcb36" + } + ] + }, + { + "bom-ref": "c185ddeaee4f40a0", + "type": "file", + "name": "/juice-shop/node_modules/resolve/test/resolver/multirepo/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b58a1b0588a1102572e64a4d2047ce8731de1a76" + }, + { + "alg": "SHA-256", + "content": "ec13311cdf8e7ba462d94656a0f2f90c55b290dc1ad6f7e82da2d3b140c27f20" + } + ] + }, + { + "bom-ref": "d1bc3943b0346662", + "type": "file", + "name": "/juice-shop/node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "3926c908fd9627cc3e3094edf3a7fc547d4871a6" + }, + { + "alg": "SHA-256", + "content": "ab5dbb7f635d5474648e5ac92df08020b60d0d91a68a740e46186587e05d3da3" + } + ] + }, + { + "bom-ref": "bae31fa1b9fa712f", + "type": "file", + "name": "/juice-shop/node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "9e0fcac261c4f4c0e6cbd05fd95ed904a9fe4b5b" + }, + { + "alg": "SHA-256", + "content": "f41fd8ba3d2df58d7d1658be4c77d11d07285fab1e94a6c8151b3548c6f0a8aa" + } + ] + }, + { + "bom-ref": "ddfe590829dfdb8b", + "type": "file", + "name": "/juice-shop/node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "0803d5d30c2a6fec04f09b9969969a91743b28cf" + }, + { + "alg": "SHA-256", + "content": "41ea23c25ff8e7080ab08d38a9f5de9ab986280902f7268de45bc0a5b7e9e028" + } + ] + }, + { + "bom-ref": "c4c50e7d9d476690", + "type": "file", + "name": "/juice-shop/node_modules/responselike/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "51b587b317d6db031acef526f84e2cf043442bcc" + }, + { + "alg": "SHA-256", + "content": "df25ad367800a698875604c21edf7f76e2ed563f7069d8659eeb8db46ab10117" + } + ] + }, + { + "bom-ref": "ab694a3d0e87fc37", + "type": "file", + "name": "/juice-shop/node_modules/restructure/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f1fb9c1b78a8fee6469b904983154c54b0430586" + }, + { + "alg": "SHA-256", + "content": "ff45dfa0be24887b940014f1abe1d876079b5aff4d09b7db18061f5bac257faf" + } + ] + }, + { + "bom-ref": "a64b5539dca56cf8", + "type": "file", + "name": "/juice-shop/node_modules/retry-as-promised/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "08c60998fb0b0ee0a723a490df8d67c8d8df7ebd" + }, + { + "alg": "SHA-256", + "content": "b411ec1e5930b4d30c6cce8d39d119136504607a09d4e27a7ce4a61632a512ea" + } + ] + }, + { + "bom-ref": "332f31436efb69d6", + "type": "file", + "name": "/juice-shop/node_modules/retry/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "10dd0941e4e65c436c4f7111efdb1679c966c478" + }, + { + "alg": "SHA-256", + "content": "c0733eb226e2a6572c7c9c2bc8b4a0efabe233971b0dee1e6d62c6898257e1da" + } + ] + }, + { + "bom-ref": "1724ad19e7b9beba", + "type": "file", + "name": "/juice-shop/node_modules/rimraf/node_modules/glob/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ec0700462dfce89024e67c0437eabca858407176" + }, + { + "alg": "SHA-256", + "content": "b00b6d35eda6d4aa6893baf19e53b7d005019ed840e4fa116c926a532ec577cf" + } + ] + }, + { + "bom-ref": "5b5d1d9d95980800", + "type": "file", + "name": "/juice-shop/node_modules/rimraf/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "d1241a4f102aa0d377e63ee84d58b278677c3435" + }, + { + "alg": "SHA-256", + "content": "3fb2eed4a1f87b6d9c0b28cb502967bff6c3bfd3484e505b91b157d88200d071" + } + ] + }, + { + "bom-ref": "97ea7ad6a59723ee", + "type": "file", + "name": "/juice-shop/node_modules/safe-buffer/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "6ce1dddfb8739c577ae2ad84f1aba01427791f57" + }, + { + "alg": "SHA-256", + "content": "e4018fdbfe625433371f48274fee26f520bbe865e0d8c85bf3aa07424134b90c" + } + ] + }, + { + "bom-ref": "d7ef4d1f30185a96", + "type": "file", + "name": "/juice-shop/node_modules/safe-regex-test/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "cb66d98715b7a0639f1f793aa1865634860a57af" + }, + { + "alg": "SHA-256", + "content": "b9efdb318b7f4094e6d2605ba9fbef93570abe1119488a491a4e8f3216781030" + } + ] + }, + { + "bom-ref": "44cccdd714429497", + "type": "file", + "name": "/juice-shop/node_modules/safe-stable-stringify/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "7fbe83d8818942f4a13c95d9dc4a265a0a178f4d" + }, + { + "alg": "SHA-256", + "content": "797e552ecb0f8ffe8ffb714e6c4888b28a8ca39eb9c0040836b2b6f640037798" + } + ] + }, + { + "bom-ref": "b5a81a0e88a6307d", + "type": "file", + "name": "/juice-shop/node_modules/safer-buffer/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "5ed0fab8e5cac53e4d072acbd82fca9be08f5e67" + }, + { + "alg": "SHA-256", + "content": "4247a3a63c45a6a7ced1557fe4dd9d2a163af4915d594b95e5867b69a53edb52" + } + ] + }, + { + "bom-ref": "078ecd91e582af15", + "type": "file", + "name": "/juice-shop/node_modules/sanitize-filename/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "583442f76c2f329bb602374055a9f565f952a002" + }, + { + "alg": "SHA-256", + "content": "0d84b93a20ba2ec3a997b9e0df651fb490c21fc53b44edaf5182b285b74a664f" + } + ] + }, + { + "bom-ref": "e9ff6b8e1888f057", + "type": "file", + "name": "/juice-shop/node_modules/sanitize-html/node_modules/domelementtype/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "92f89ed727789dfec8061a78aeb4b61afe286883" + }, + { + "alg": "SHA-256", + "content": "f50e652e1cd48ada00210fa948baf45543853fe1a5e59497bc20744d454a2d5b" + } + ] + }, + { + "bom-ref": "73eff97fc93c9285", + "type": "file", + "name": "/juice-shop/node_modules/sanitize-html/node_modules/domhandler/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "7deee12976bd63abcda058ea45238790cf5e82e0" + }, + { + "alg": "SHA-256", + "content": "042d85faac37437c9a63f3a73b1bd11b9b2d6f222ec06318c3b3f2c1b791ab03" + } + ] + }, + { + "bom-ref": "3a7e02e155bba8f9", + "type": "file", + "name": "/juice-shop/node_modules/sanitize-html/node_modules/domutils/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "d78c2049a85f4b100f23bd9f9547ea79af37246e" + }, + { + "alg": "SHA-256", + "content": "47aec9a46c6ea593aa2fdda8e9f8d9169eb1b9e60a1606bd3c28c6baa061bd9b" + } + ] + }, + { + "bom-ref": "42bb618f089a7c0e", + "type": "file", + "name": "/juice-shop/node_modules/sanitize-html/node_modules/he/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "e8229c2260816ecf6ebc6a5f4ada1162383d98e9" + }, + { + "alg": "SHA-256", + "content": "f014bb22a82665e6c6bfa092fdf8ae1253b4720880d708bf5b164bbf4485f56b" + } + ] + }, + { + "bom-ref": "a66e2d89afd55b03", + "type": "file", + "name": "/juice-shop/node_modules/sanitize-html/node_modules/htmlparser2/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "9b04372e328879041da8678a7ccf3c06a28941f0" + }, + { + "alg": "SHA-256", + "content": "9531c552f8bae4773c1cd60c82aa6eddfb455efda55b2a20bb651fc010da58fb" + } + ] + }, + { + "bom-ref": "cbe1cab5f5336d1a", + "type": "file", + "name": "/juice-shop/node_modules/sanitize-html/node_modules/isarray/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ab8acbe8ed0a77bb0ffdb1416758fb659f61d598" + }, + { + "alg": "SHA-256", + "content": "083f974e63787f3d95611642c78c036bc2c5e0fbed443804500b9328ea69f74d" + } + ] + }, + { + "bom-ref": "1cf237297a74fa4d", + "type": "file", + "name": "/juice-shop/node_modules/sanitize-html/node_modules/lodash/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "727f3ff6469bd987fcea8093d885fd40ed5f0357" + }, + { + "alg": "SHA-256", + "content": "eb5d62e173ed8dd45dc5417c5d9b1981def2e335f44b402507fcf206310d81da" + } + ] + }, + { + "bom-ref": "f9b316f6fd0a9647", + "type": "file", + "name": "/juice-shop/node_modules/sanitize-html/node_modules/readable-stream/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a92e127209f2f143bdc03e00e3c32ac87b6dd13f" + }, + { + "alg": "SHA-256", + "content": "7a06e45bb5ec514ac88be84d3f679ee1b87228a41b805bfcff0b8452be35d802" + } + ] + }, + { + "bom-ref": "800b209996d03dc5", + "type": "file", + "name": "/juice-shop/node_modules/sanitize-html/node_modules/string_decoder/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "8bb5fc68a015d61057dff1f32826f6c2aadec61c" + }, + { + "alg": "SHA-256", + "content": "c2ddaf59d49fc50cb922aef5723935c9c0827e40a33a65b18197a447d966bc15" + } + ] + }, + { + "bom-ref": "b9bb2170d0771da5", + "type": "file", + "name": "/juice-shop/node_modules/sanitize-html/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "5bead99213de5940b0e8f01d3e1cebf7b52eeeb4" + }, + { + "alg": "SHA-256", + "content": "91c64186e2ab5995c2bdd85edae12ef60a511bd27594e8c224aaaa7be4302ffc" + } + ] + }, + { + "bom-ref": "d708f087171198bd", + "type": "file", + "name": "/juice-shop/node_modules/sax/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "893420e31a29f39b1d5e5402a62402e2bfe4e4b8" + }, + { + "alg": "SHA-256", + "content": "fbba682a346c26e3ba992594262e91104018477c6e6a58221d64b23339f66dc4" + } + ] + }, + { + "bom-ref": "e6f3296a856755ee", + "type": "file", + "name": "/juice-shop/node_modules/seek-bzip/node_modules/commander/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "74103756a0fe401ed4d8137e04607758a77897eb" + }, + { + "alg": "SHA-256", + "content": "3ab88e050858ad5fc1d2e7f993d959b83c7e2ddec64afe86cc4055f799e4762d" + } + ] + }, + { + "bom-ref": "cb1f34e3e0e5c0f3", + "type": "file", + "name": "/juice-shop/node_modules/seek-bzip/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b9ebdcb7652f4785584d74376c1a378e786ba012" + }, + { + "alg": "SHA-256", + "content": "c2456ab31a98e61c5fbaea0e50fc6ac816e1c1b9ae0798353cb70237a578ec42" + } + ] + }, + { + "bom-ref": "b067e2fa3eb1cc49", + "type": "file", + "name": "/juice-shop/node_modules/semver/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "d364bb66b4d1d9d5830fd72fa0809bddb8ec83c6" + }, + { + "alg": "SHA-256", + "content": "55c0bf1b742691521220be5da502e87a0d963027b5c889c52eb6bb9ae7cbf6c6" + } + ] + }, + { + "bom-ref": "ff09f2674dea2fe8", + "type": "file", + "name": "/juice-shop/node_modules/send/node_modules/ms/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c290eb97736177176d071da4ac855ab995685c97" + }, + { + "alg": "SHA-256", + "content": "1a6b4d9739790c0b94ab96c8cc0507e281c164c311ff4fbf5e57fb8d26290b40" + } + ] + }, + { + "bom-ref": "92f7d82bb0a69a50", + "type": "file", + "name": "/juice-shop/node_modules/send/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "be9e23af3a0b910ad55ba8d3fea03ee05acbacad" + }, + { + "alg": "SHA-256", + "content": "2d511afc0dc9965be1f1a5b4b7966cad2e02b95be6e5ff962baabebc12739385" + } + ] + }, + { + "bom-ref": "a649bb90476d710f", + "type": "file", + "name": "/juice-shop/node_modules/sequelize-pool/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f4d051b193b22198e35b664d8137ce0faa320eb0" + }, + { + "alg": "SHA-256", + "content": "32a3cf4651e735e074ea036282c1fd04ec4e70ea1cc59ee1ade8e1507cc672f7" + } + ] + }, + { + "bom-ref": "5aa777663275f5f8", + "type": "file", + "name": "/juice-shop/node_modules/sequelize/node_modules/debug/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f1c3de400f61581ce6d6d43f9ec4c456cb8017f7" + }, + { + "alg": "SHA-256", + "content": "ea8e33d63fe5f3a4c36609b6c3df8e2ef1f8b8ba2fc3a2e1e53cb27291f384af" + } + ] + }, + { + "bom-ref": "a5d68699d0553258", + "type": "file", + "name": "/juice-shop/node_modules/sequelize/node_modules/ms/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c290eb97736177176d071da4ac855ab995685c97" + }, + { + "alg": "SHA-256", + "content": "1a6b4d9739790c0b94ab96c8cc0507e281c164c311ff4fbf5e57fb8d26290b40" + } + ] + }, + { + "bom-ref": "45f12229f889f341", + "type": "file", + "name": "/juice-shop/node_modules/sequelize/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c2f39c7f8df35a56c610f8d70ba3359f1e7f3584" + }, + { + "alg": "SHA-256", + "content": "7549212df1c0b263cdee3b2026961ee206b75661555c56e03f97e078a74e3bdf" + } + ] + }, + { + "bom-ref": "31a555e9f575c694", + "type": "file", + "name": "/juice-shop/node_modules/serve-index/node_modules/depd/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f7628780acc25dc2bf90d09203940e23977b7ada" + }, + { + "alg": "SHA-256", + "content": "9df7afa632a7aa4e245c4583d06704b7f196cff999aca6d0a2492fa4d78f8e73" + } + ] + }, + { + "bom-ref": "4e3612b64504b3be", + "type": "file", + "name": "/juice-shop/node_modules/serve-index/node_modules/http-errors/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "6d57719351d640c46fa95ee1e5e3748a52d1b2b7" + }, + { + "alg": "SHA-256", + "content": "1dd477225e1ea42b2b77ead847803fad252fd8d38744a0d37fafd71c21294fde" + } + ] + }, + { + "bom-ref": "2df059b6092934ff", + "type": "file", + "name": "/juice-shop/node_modules/serve-index/node_modules/statuses/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "3eb797e37a18f16f3f41fed3cb41c8e425df5933" + }, + { + "alg": "SHA-256", + "content": "39cf653c972f99725bae6adab44da5df52185fa1fc3bdaf671a8f62d0e182631" + } + ] + }, + { + "bom-ref": "f722ec671bc04b9c", + "type": "file", + "name": "/juice-shop/node_modules/serve-index/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "d0fda17773bfa73fd6e108562c471c95b6b3a16c" + }, + { + "alg": "SHA-256", + "content": "177ffd2dde5c523c1b2f008f8892b7f932fdf0882d407b48522fcd8cbfb95c0b" + } + ] + }, + { + "bom-ref": "dee9a24d146177e0", + "type": "file", + "name": "/juice-shop/node_modules/serve-static/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "26cc135af6d3450084492330fd0234a31e33c28d" + }, + { + "alg": "SHA-256", + "content": "068fbb0738f4eb2f8ea6ad2f9757ef060d0b79e7990bb9c3dc5ead72a0e3b1f8" + } + ] + }, + { + "bom-ref": "f2050397e0460e44", + "type": "file", + "name": "/juice-shop/node_modules/set-blocking/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "1fd9e7bbe562d20ee078877ba14aaef71a6dea6a" + }, + { + "alg": "SHA-256", + "content": "e0c598215c66f2c35edbc3cb2a3433d45f9d4b726524c095c93e7376d87a3bce" + } + ] + }, + { + "bom-ref": "d01d158bb92a545e", + "type": "file", + "name": "/juice-shop/node_modules/set-function-length/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "bd0bcfc74bf8e9fe8d1edb2b3a893d096a6067f7" + }, + { + "alg": "SHA-256", + "content": "2c81bab7f7a60d625164bd840d863548e3f9d4d1aa976b9d2966e5e1e36132a7" + } + ] + }, + { + "bom-ref": "df9b6bdb273b684c", + "type": "file", + "name": "/juice-shop/node_modules/set-function-name/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c9127dbfc1f2b960c9173553f74338ad3f2a4bb5" + }, + { + "alg": "SHA-256", + "content": "fc56137cbf0646e79e68881215cd5937db9830f3293e880e757b31832303e1fa" + } + ] + }, + { + "bom-ref": "425ad474bd61dd2a", + "type": "file", + "name": "/juice-shop/node_modules/setimmediate/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "9cb87b9a133431be9bc111ed4b2aadbc10c0eb0e" + }, + { + "alg": "SHA-256", + "content": "56c7968c8062ad56e94b8ddb477e514098e0fa34b060aa86b67232fdb12e184d" + } + ] + }, + { + "bom-ref": "7b9ae4753171291f", + "type": "file", + "name": "/juice-shop/node_modules/setprototypeof/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "cbf2d7ae54256a7ab84245eb6d72c56f6a015453" + }, + { + "alg": "SHA-256", + "content": "5b39ddf23d2c12a751cb4af2ce12dd5c87314350be7526fff69b4a3ff2a2d538" + } + ] + }, + { + "bom-ref": "9aeb2183b1f39833", + "type": "file", + "name": "/juice-shop/node_modules/shebang-command/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "2e2395a2e489846382e5cefdf011dcd7cacb82a5" + }, + { + "alg": "SHA-256", + "content": "44de390ae5ed6c5f9758b8b9c90b93fa53977d5361731600429f1de08f4b3f30" + } + ] + }, + { + "bom-ref": "90a539963a65b16f", + "type": "file", + "name": "/juice-shop/node_modules/shebang-regex/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "4c10640951d12ad418aa40c29b550fdfe3d2567a" + }, + { + "alg": "SHA-256", + "content": "b8018c6b8cc9900dfd1ac18a54956ba34c453fdc2da5e5fe555ee8f04133a1c5" + } + ] + }, + { + "bom-ref": "ff22fd997deb6043", + "type": "file", + "name": "/juice-shop/node_modules/side-channel-list/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "5ac3ca0b70af7d5b7c3aba36e212d2e73038cd80" + }, + { + "alg": "SHA-256", + "content": "90f0c08c6c17f4a3fa3dd61873223957b89da4201f01dc0c8b95b0b9e6a2a59a" + } + ] + }, + { + "bom-ref": "4778d8a53818e490", + "type": "file", + "name": "/juice-shop/node_modules/side-channel-map/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ab10f444db9aa7420125e321884ca7d765854b2f" + }, + { + "alg": "SHA-256", + "content": "914a8bd732b82523d95bb697eec3e6d95badc5eb13b196fb0772e59354a3ab25" + } + ] + }, + { + "bom-ref": "cf502c60637acb5d", + "type": "file", + "name": "/juice-shop/node_modules/side-channel-weakmap/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "cdb337908d19d32a79dc189c7bce63981babc35e" + }, + { + "alg": "SHA-256", + "content": "8c11f0a1c6cfa549588d991a5cb1b04d62953277ed29f47463d415d5946388a8" + } + ] + }, + { + "bom-ref": "2aa2b3381326db23", + "type": "file", + "name": "/juice-shop/node_modules/side-channel/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ca10dba255c81fa003499be7fca61829ec3c331e" + }, + { + "alg": "SHA-256", + "content": "b33b18efda612f3149f2e5102b305cb77bc5067eae372fb1c83f74c263b5b18e" + } + ] + }, + { + "bom-ref": "688ded9d9c4771be", + "type": "file", + "name": "/juice-shop/node_modules/signal-exit/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "69859ffcd06c12c103de10319bd03a2b5cbcb903" + }, + { + "alg": "SHA-256", + "content": "cec1bba4c97e0cf653c13c8c79f745aac2232131ee718c93c4236c1b9577a201" + } + ] + }, + { + "bom-ref": "864074c26e6278b2", + "type": "file", + "name": "/juice-shop/node_modules/simple-concat/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f422558f27a7e5f252acbd8bdbc175e5c334733d" + }, + { + "alg": "SHA-256", + "content": "d6ae2e35a0c64b4469f1e531a3244efd50be7c115ef42d1422e54d14d9359e99" + } + ] + }, + { + "bom-ref": "fbc916a17ca2d3cf", + "type": "file", + "name": "/juice-shop/node_modules/simple-get/node_modules/decompress-response/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c5a4c61cfb916b9f37bab7a1dfa468aa67621ed6" + }, + { + "alg": "SHA-256", + "content": "0c292d1260be4289147620bcdac5c9d87a54391253acd9c16b0bebbda2e207c9" + } + ] + }, + { + "bom-ref": "974aba45081cfa4e", + "type": "file", + "name": "/juice-shop/node_modules/simple-get/node_modules/mimic-response/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b6472ce506e8d5c379f868d79eb81e7a1b7f9989" + }, + { + "alg": "SHA-256", + "content": "50a55612f7430b826449e8404ab3137e28df64e75728c4c374c5a46e6e37a894" + } + ] + }, + { + "bom-ref": "47a1ac40a509d4d3", + "type": "file", + "name": "/juice-shop/node_modules/simple-get/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a230100956cda434dd566886e048f791b4e2f373" + }, + { + "alg": "SHA-256", + "content": "edb86ca0d77c45e8c16c1b7ff777dfb58f762f635888bb2ebdc25fc48e0069f3" + } + ] + }, + { + "bom-ref": "aa491e5d4fbc6693", + "type": "file", + "name": "/juice-shop/node_modules/smart-buffer/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a9db89be9421029bd73baf8199042a08253a0b59" + }, + { + "alg": "SHA-256", + "content": "188644cdf467d6a768ad25ed3ee8eb845dc5cb29aadc4c88ca7c5cb5f631d66a" + } + ] + }, + { + "bom-ref": "5e4d690c8f7c4730", + "type": "file", + "name": "/juice-shop/node_modules/socket.io-adapter/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "fb5c3162ffd9b1be27d08bdaa36ef6cf2e97aded" + }, + { + "alg": "SHA-256", + "content": "86922aabfaa9b82872def69312c92b61594068dc43dfc49b9e144a0496940cea" + } + ] + }, + { + "bom-ref": "914d4d01106bcde8", + "type": "file", + "name": "/juice-shop/node_modules/socket.io-parser/node_modules/debug/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "867baf5b5a330ab0443c88e654e8c43622c3d7a9" + }, + { + "alg": "SHA-256", + "content": "7a60ed9b6b14aa67f2ffe975715aaa6a78303844a5b43d33bfd619812088fe4d" + } + ] + }, + { + "bom-ref": "22a4a494bc19cbd4", + "type": "file", + "name": "/juice-shop/node_modules/socket.io-parser/node_modules/ms/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c290eb97736177176d071da4ac855ab995685c97" + }, + { + "alg": "SHA-256", + "content": "1a6b4d9739790c0b94ab96c8cc0507e281c164c311ff4fbf5e57fb8d26290b40" + } + ] + }, + { + "bom-ref": "39c8c3bdbb17fd9a", + "type": "file", + "name": "/juice-shop/node_modules/socket.io-parser/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "8407ea865970282b35bed55b7833de5bd41e840b" + }, + { + "alg": "SHA-256", + "content": "67463e2389df34f3fb19eda8e5bc3cc8caebb760a0530c5530a1e1ff9354600a" + } + ] + }, + { + "bom-ref": "11967c6e19931ffb", + "type": "file", + "name": "/juice-shop/node_modules/socket.io/node_modules/debug/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "867baf5b5a330ab0443c88e654e8c43622c3d7a9" + }, + { + "alg": "SHA-256", + "content": "7a60ed9b6b14aa67f2ffe975715aaa6a78303844a5b43d33bfd619812088fe4d" + } + ] + }, + { + "bom-ref": "81fd31ffef5b18d4", + "type": "file", + "name": "/juice-shop/node_modules/socket.io/node_modules/ms/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c290eb97736177176d071da4ac855ab995685c97" + }, + { + "alg": "SHA-256", + "content": "1a6b4d9739790c0b94ab96c8cc0507e281c164c311ff4fbf5e57fb8d26290b40" + } + ] + }, + { + "bom-ref": "954febd1e94fb24f", + "type": "file", + "name": "/juice-shop/node_modules/socket.io/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "6f22afab9c088cf3ce3bf2d7b4a804024b45844a" + }, + { + "alg": "SHA-256", + "content": "1672136700d2101477b56598fac2ffc3f75927b73e29970efa8d6b092e602f0e" + } + ] + }, + { + "bom-ref": "14bb5bd28f545bfb", + "type": "file", + "name": "/juice-shop/node_modules/socks-proxy-agent/node_modules/debug/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f1c3de400f61581ce6d6d43f9ec4c456cb8017f7" + }, + { + "alg": "SHA-256", + "content": "ea8e33d63fe5f3a4c36609b6c3df8e2ef1f8b8ba2fc3a2e1e53cb27291f384af" + } + ] + }, + { + "bom-ref": "ffec06141a57d13e", + "type": "file", + "name": "/juice-shop/node_modules/socks-proxy-agent/node_modules/ms/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c290eb97736177176d071da4ac855ab995685c97" + }, + { + "alg": "SHA-256", + "content": "1a6b4d9739790c0b94ab96c8cc0507e281c164c311ff4fbf5e57fb8d26290b40" + } + ] + }, + { + "bom-ref": "adb0ab9f5a6f6e16", + "type": "file", + "name": "/juice-shop/node_modules/socks-proxy-agent/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a52f0cff949fd82f9e42d4214d2917964d7a9bdb" + }, + { + "alg": "SHA-256", + "content": "5667d50ea8b62c802757a3a2737a6515edbae3129bb3ef0980ca5d15c91ed99f" + } + ] + }, + { + "bom-ref": "cc7c7f117c3cada1", + "type": "file", + "name": "/juice-shop/node_modules/socks/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "523f507922724c638bd3c8b47a400471996db5ae" + }, + { + "alg": "SHA-256", + "content": "eaddd44b758b8d53f4a9c11807748a7372319ef6b4ee680ac5e48ca64aece161" + } + ] + }, + { + "bom-ref": "7288ce87ee6cf536", + "type": "file", + "name": "/juice-shop/node_modules/sort-keys-length/node_modules/sort-keys/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "92992db85cebb6cc7fe8499883fab75317dede8d" + }, + { + "alg": "SHA-256", + "content": "a72e52a4583971e362e857316f0ac3455d8e337edfe9d517bb4b3df59c623019" + } + ] + }, + { + "bom-ref": "642f9c8577ef29d1", + "type": "file", + "name": "/juice-shop/node_modules/sort-keys-length/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a9e67fe75f99168558e087c823e00d16e2e5fd9e" + }, + { + "alg": "SHA-256", + "content": "397d31b7680c4de5ef238fa187ab90c465d9001725425f1b5afcbc21da3117a0" + } + ] + }, + { + "bom-ref": "9eb96ccd9393e0f2", + "type": "file", + "name": "/juice-shop/node_modules/sort-keys/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f83b46c2c5ffaafb231798460fcb5ed2f0f5abbd" + }, + { + "alg": "SHA-256", + "content": "62554970e1506c5f08d966be5f20601b4f48ac0f4558b7b22302b8da77f9b8e5" + } + ] + }, + { + "bom-ref": "deaca71eee6a8c0a", + "type": "file", + "name": "/juice-shop/node_modules/source-map/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "14a0ce5da3f60b78d15612f9b2d3ef0e9bd38345" + }, + { + "alg": "SHA-256", + "content": "3fdebd9f5c0107bcf7b73e0d17e0147042bcfb74884106e4428afbf17171ef06" + } + ] + }, + { + "bom-ref": "918ba388e7173db5", + "type": "file", + "name": "/juice-shop/node_modules/sprintf-js/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "e99c21e49fb559d1b16f5662d44028a4e96b19a0" + }, + { + "alg": "SHA-256", + "content": "c97349295cae4e40a6f16a26096330997257c00be67bd8fd0ac3391719e4ee5f" + } + ] + }, + { + "bom-ref": "a92637855995828c", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/@npmcli/fs/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c20a133f8af3542513591f91ff497e787041046a" + }, + { + "alg": "SHA-256", + "content": "5b88548f042642dbf78f279484943e4814fc5bf7232d617304907442eef5acf0" + } + ] + }, + { + "bom-ref": "e9c69270ac35fa97", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/agent-base/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "609a1aaa756f9bd0d85449d4c9e1040c170e9115" + }, + { + "alg": "SHA-256", + "content": "05daa619e51686fd21d15f987f943f6692c56b9f489f555cbaf42a4263d5c5e8" + } + ] + }, + { + "bom-ref": "f9fe285abd1613fc", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/are-we-there-yet/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "d792cfe57d00f2091f3d8d2625450abc412db2f6" + }, + { + "alg": "SHA-256", + "content": "e8b9bcbdd0c1936b2f42a8973ebe253772972e73cfaef6087b187346a47ba5d3" + } + ] + }, + { + "bom-ref": "d4c214d48b3b423b", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/cacache/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b950dc47e5dcf04ff6ee11af65ab345b787fa32d" + }, + { + "alg": "SHA-256", + "content": "382853487006ff7da906b0e7bea08c4f3a7b4491da6a17b7c7c82dcf6db9df10" + } + ] + }, + { + "bom-ref": "568ef42a70a57f01", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/chownr/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a23947ade20a2757d5abf7f9fec197c2674c0a20" + }, + { + "alg": "SHA-256", + "content": "96ba7fc1dcfad50de6c406fb3fcfe57850ebea4d8ecedbc0b45b9c59fc629d69" + } + ] + }, + { + "bom-ref": "6770856b9e1eb991", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/debug/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f1c3de400f61581ce6d6d43f9ec4c456cb8017f7" + }, + { + "alg": "SHA-256", + "content": "ea8e33d63fe5f3a4c36609b6c3df8e2ef1f8b8ba2fc3a2e1e53cb27291f384af" + } + ] + }, + { + "bom-ref": "c64fdb277ea592ba", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/decompress-response/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ac9fad510ffaa52eccff29729383a2f0ed602bec" + }, + { + "alg": "SHA-256", + "content": "8fb6b0b19d09cc1c5b2caad128ae39b2fd693a35bb3d440c4e1143bfb9d10080" + } + ] + }, + { + "bom-ref": "bcefcca7c23b3bfc", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/detect-libc/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "5c540dad2b3981037a3e2ea4d66da80986ab8a37" + }, + { + "alg": "SHA-256", + "content": "ee88e5b954fdf3a8480b1d01ef767d68d8ca2c6da269f58c5cf1c5550e9aa2a7" + } + ] + }, + { + "bom-ref": "de42dc309b77eb32", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/fs-minipass/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "55871ab123b38e2af83fdab7b189a4a61ba46465" + }, + { + "alg": "SHA-256", + "content": "02b36a2a2e729813a196c97486bb12955345e201d6ccda5fb2b322f62fa381ab" + } + ] + }, + { + "bom-ref": "03c3e7343ab18f69", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/gauge/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "4fcf177b51dd6ac24efce2242b42e97148785e7d" + }, + { + "alg": "SHA-256", + "content": "9035270ed26179ae66ebb75f50a46b3c919ed6b0536350ce5130b72077b59de5" + } + ] + }, + { + "bom-ref": "93d9877d92f9e6bf", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/glob/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ec0700462dfce89024e67c0437eabca858407176" + }, + { + "alg": "SHA-256", + "content": "b00b6d35eda6d4aa6893baf19e53b7d005019ed840e4fa116c926a532ec577cf" + } + ] + }, + { + "bom-ref": "a97a3ee5a8d67d0a", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/http-cache-semantics/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "563b0d8af1a9641083e8f6cefbf4259fa845e7ca" + }, + { + "alg": "SHA-256", + "content": "bee0609d5ab09a590afe0e1209d3702b0afb0a3c158492f90902a724d889d22b" + } + ] + }, + { + "bom-ref": "2e70cbf41e3dff64", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/http-proxy-agent/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c9882a8fcdc1aef336df3579af2fbb95974c3931" + }, + { + "alg": "SHA-256", + "content": "8993f95f35c6bd7adef96df428b2aa1e6cadf1a6b9c33eaa917f05098bb1bfca" + } + ] + }, + { + "bom-ref": "7255a96714e31e72", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/https-proxy-agent/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "8c0a375492fc2b2fc37efae92d78ddd0b07de53a" + }, + { + "alg": "SHA-256", + "content": "d41d9127cbed43df8e2d404bfaf41361942a8afeb82eb57ccf8515e04eb33d1d" + } + ] + }, + { + "bom-ref": "f691f88f78495aee", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/lru-cache/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "05256617890052107b341acf6cbe16fd9f22f86c" + }, + { + "alg": "SHA-256", + "content": "b06071b99bebe6cc7f7716f65ed4f36ff54aaf78d74ea0bec72f9029a8e2c215" + } + ] + }, + { + "bom-ref": "5dfb2e0a7593761b", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/make-fetch-happen/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "8821070ee31fdf50e1f86d2044631dd4844dc388" + }, + { + "alg": "SHA-256", + "content": "550620d374c9f9c931c5a97a899b00ec74b5e89db48dce76b9c113dbf9e2c6f8" + } + ] + }, + { + "bom-ref": "ffae8cb410933038", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/mimic-response/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "9bb60eb9422dfbbf71811d0c1fe00dc14f61a36c" + }, + { + "alg": "SHA-256", + "content": "ff358428a418a46fb2431a2c48b396fb01c8291fec9e1f14434ade01196c8e9c" + } + ] + }, + { + "bom-ref": "5da553817461a33b", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/minipass-collect/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ff5c7864735844778d9f653604ac1754604f89c4" + }, + { + "alg": "SHA-256", + "content": "a0f049a58dbf9fd58e9b4686db2d51200cdea584c9b6425b400faa24133ace25" + } + ] + }, + { + "bom-ref": "66d90af4cd8dafed", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/minipass-fetch/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "d8d597c8560806f8ed174711d725bbef811d8e03" + }, + { + "alg": "SHA-256", + "content": "4d59739fa5052e0c91edc0642ad95414427ffbac186c5570257cec8eb78dd751" + } + ] + }, + { + "bom-ref": "a1def2fbd27ed2ca", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/minipass/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "fc79b496665e2cdfc4bdaac9c7d7c4b2f4645f2c" + }, + { + "alg": "SHA-256", + "content": "e99f6b67ba6e5cda438efb7a23dd399ee5c2070af69ce77720d95de5fb42921e" + } + ] + }, + { + "bom-ref": "4ad0c08fca11d0e8", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/minizlib/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "5745585933310f7807eebd4e9bc01e2d83ba160d" + }, + { + "alg": "SHA-256", + "content": "dd7d78caf139ba9228a84bee7bb5fa7b92e4d332b836f07bdf1b0f9e78fa6340" + } + ] + }, + { + "bom-ref": "5dd82cfca5ac177d", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/mkdirp/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "46da394a85c88f3288e19ccd89c03174e1360c52" + }, + { + "alg": "SHA-256", + "content": "a7357d86be1fd6cd9ac7bc78c4d49155ce08c6087a2378fae5b15ce2eb34b9a2" + } + ] + }, + { + "bom-ref": "9113735c0a55528b", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/ms/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c290eb97736177176d071da4ac855ab995685c97" + }, + { + "alg": "SHA-256", + "content": "1a6b4d9739790c0b94ab96c8cc0507e281c164c311ff4fbf5e57fb8d26290b40" + } + ] + }, + { + "bom-ref": "6e77313af266b0b4", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/napi-build-utils/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "35b672da35e299376d0ffc4f22fd57088150a835" + }, + { + "alg": "SHA-256", + "content": "001ba5640df99785e76b7d407ae35a24c490f145737cf3f194408fb17dfec411" + } + ] + }, + { + "bom-ref": "5496c00a388122d7", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/node-abi/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "73514830b941035ead3ae1de9cb5b8a3dd395f10" + }, + { + "alg": "SHA-256", + "content": "0bf67c397d8f6a9136d44eda86f417c0c81893e99697cbdf8733cb2982d7884b" + } + ] + }, + { + "bom-ref": "01bdf6c3a4fa4df8", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/node-gyp/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "bc62a4513e54488bafdeb2f4095483538cc80503" + }, + { + "alg": "SHA-256", + "content": "961dd5d2924a81e0c75ae3e5853784ae270e894b86c0229e31ed8619893a582c" + } + ] + }, + { + "bom-ref": "64f9db7473a8f65f", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/npmlog/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "41bc0fcee7ad3ab38c8de1c030a849af36bbb262" + }, + { + "alg": "SHA-256", + "content": "13b247da6685d68bbbb6da390709fee7a2d6ce0658095bbc921ba31c1cbd86fa" + } + ] + }, + { + "bom-ref": "d1058a460980a2ed", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/prebuild-install/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "53b43dd098da8d4b0606d47cc71bbce0f9326251" + }, + { + "alg": "SHA-256", + "content": "d8502f5ce977ea10cc7e91e95b595ce845e838cf412801230e9a2f211ad68039" + } + ] + }, + { + "bom-ref": "a6e9c5f007c8f942", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/readable-stream/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "6bc59e2d7a44059a5f86b25e3e8ef9b80a83fcac" + }, + { + "alg": "SHA-256", + "content": "469ea81f64037d1f179bcd46412217903a2924dd2e7d7d9b728659b6f12c3e69" + } + ] + }, + { + "bom-ref": "569482470e9a4356", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/rimraf/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ed8ec0789d4558ea2492b653fd0be9f16b90020d" + }, + { + "alg": "SHA-256", + "content": "fea6f9125ca35f3d20946205be39fb3758b21b5af44f75910799573bd1230d4c" + } + ] + }, + { + "bom-ref": "d2adca35d8c8bf73", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/simple-get/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "9db18a8163ab1fbb6e7c8bfd56c7483239d63c63" + }, + { + "alg": "SHA-256", + "content": "8337ba9774d6d8199a5861c6dfa57058f162bfb6210362c01db38f0a593f96d6" + } + ] + }, + { + "bom-ref": "b8d8bb690f340584", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/socks-proxy-agent/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b376e943406ee22b05111950d5053884327ec513" + }, + { + "alg": "SHA-256", + "content": "bbe51d9a0b7ac254c152efcc699dc65958e6fbab666d1c87d8b5873136b56a10" + } + ] + }, + { + "bom-ref": "8e72dd1c159419ea", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/ssri/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "6e55d0ea8fbd72c6e89310dd958b22dcd6d2e56a" + }, + { + "alg": "SHA-256", + "content": "6b456b51d5431d6c47bd8ed15994582096f42e3e3cced980ecf4824bf627869f" + } + ] + }, + { + "bom-ref": "12535e9fc7df1722", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/tar/node_modules/minipass/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f351144cafb23a2e78d442708fcbcfdcd4c5420f" + }, + { + "alg": "SHA-256", + "content": "280af43113a60826e63a6bf79e115fdf5f89d5866f663cdde3d229640671cee1" + } + ] + }, + { + "bom-ref": "182960e690b744a3", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/tar/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "8b9fbec9a68117d7405c65ab254846287a63a494" + }, + { + "alg": "SHA-256", + "content": "89bd6d32c9e56eab63f3f62b96080aa43afa530675701610d74793d4719d1137" + } + ] + }, + { + "bom-ref": "78ad9e3594aa6130", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/unique-filename/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "9ffc9a77d53279c1e6dc931d443376bdda383931" + }, + { + "alg": "SHA-256", + "content": "1a1017165f7029207fc753240baccebb6b658881fec0b7cc88558d833a74c711" + } + ] + }, + { + "bom-ref": "7c7a3aa2634b5891", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/unique-slug/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ea2ce7c13d4cba3ed5e48e0c8dbe7e22c7f38220" + }, + { + "alg": "SHA-256", + "content": "15936d07741b462fb77ed70603112bc2f8377869f326b15c185b78cea1692269" + } + ] + }, + { + "bom-ref": "4c1a5bd6586171b0", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/wide-align/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "7f52b4652fe9ff874b294815483566da18d118ec" + }, + { + "alg": "SHA-256", + "content": "433984d8ab6027ebf54dea96093fb32a231fb0c4f16cc08445da7d62a6d8837f" + } + ] + }, + { + "bom-ref": "3665f1dc8bebb181", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/node_modules/yallist/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "d6a16b480cbd582f969b3d0ed89a157316268d10" + }, + { + "alg": "SHA-256", + "content": "c56b604bce814520105739e9559142ea9d4417454ebb933fd5687ca1d8d89bd5" + } + ] + }, + { + "bom-ref": "ccc5fccc553831cf", + "type": "file", + "name": "/juice-shop/node_modules/sqlite3/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "97366bb2fa9d63bb9660b3d130efb6d37a6b80ef" + }, + { + "alg": "SHA-256", + "content": "c782c19485b0026e209076a236484a62885cb3a0828322a2936043230ed1ec41" + } + ] + }, + { + "bom-ref": "d88e3abe43dbdb1a", + "type": "file", + "name": "/juice-shop/node_modules/ssri/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "203926d505f969e44375e6a40942ce43ae490f44" + }, + { + "alg": "SHA-256", + "content": "5c18917c39afce09b6ebdfd212c736c390d74d1a72db8bd1561117f949669252" + } + ] + }, + { + "bom-ref": "5cc4118b979a5109", + "type": "file", + "name": "/juice-shop/node_modules/stack-trace/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "4ab8ba513ca79e30bcbe250d567418e8571d897e" + }, + { + "alg": "SHA-256", + "content": "9d4ebf4546836593d64b8627bab4f12100a33e39810cec6e175f3e71f0825c16" + } + ] + }, + { + "bom-ref": "3b23c6810a1ece47", + "type": "file", + "name": "/juice-shop/node_modules/statuses/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "7fcf010639ac286c47c517ea92d7ab13cbbee298" + }, + { + "alg": "SHA-256", + "content": "dc2508da5568ba768d94b73126cd20a5df934bc0c651ad681022236484ca156c" + } + ] + }, + { + "bom-ref": "38569f437c01eed1", + "type": "file", + "name": "/juice-shop/node_modules/stop-iteration-iterator/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "9da2c93d8d5dadcd5c5c6676b8da87a09dfd5299" + }, + { + "alg": "SHA-256", + "content": "d081cc886d55d23d704721c7b03b78b0f5600459a75d9b2fb63449d99d87cc81" + } + ] + }, + { + "bom-ref": "2d46225d84ae7c38", + "type": "file", + "name": "/juice-shop/node_modules/stream-buffers/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "6d8ca85d78d4faac879d4ec7cdbf4eadca10888a" + }, + { + "alg": "SHA-256", + "content": "7f6be66ac31f7dc6351d5737aa3d1cf016209b737c1b36b763cf6d5f15d112df" + } + ] + }, + { + "bom-ref": "4a512846337a502e", + "type": "file", + "name": "/juice-shop/node_modules/streamsearch/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b75e7127bad8663e7e009826561501526d2afd16" + }, + { + "alg": "SHA-256", + "content": "029b54b7db483222a64b99ab0e27b37d0ca59ca4a95d591b121b2cfb3a45eacb" + } + ] + }, + { + "bom-ref": "a0a81cd50259f0a9", + "type": "file", + "name": "/juice-shop/node_modules/strict-uri-encode/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a82ba4bf6c6714c55d554a492ec4f4b4b0a2aa9e" + }, + { + "alg": "SHA-256", + "content": "0d73babfda858dfced0e39e23cd72e7db28ea986f26d838cd9c4f7d287a6feeb" + } + ] + }, + { + "bom-ref": "047e2c718c81c17c", + "type": "file", + "name": "/juice-shop/node_modules/string-width-cjs/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a5306c15bba6cb123d9f061ca85eb56576c6638f" + }, + { + "alg": "SHA-256", + "content": "6457a02418f004fe5d3fbbb19c7cbcc1450a8b887ff9a471dc6985ac83a48d36" + } + ] + }, + { + "bom-ref": "f16ef5d58de0e77a", + "type": "file", + "name": "/juice-shop/node_modules/string-width/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a5306c15bba6cb123d9f061ca85eb56576c6638f" + }, + { + "alg": "SHA-256", + "content": "6457a02418f004fe5d3fbbb19c7cbcc1450a8b887ff9a471dc6985ac83a48d36" + } + ] + }, + { + "bom-ref": "5f97e55b6bd25eb7", + "type": "file", + "name": "/juice-shop/node_modules/string_decoder/node_modules/safe-buffer/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "bf9a046dba09dcce1bd474ff0f84c39cb57dc5b4" + }, + { + "alg": "SHA-256", + "content": "3d8b6d944be9e931a178914afbb3d6b79bfa199c032872b687bed41ed996c747" + } + ] + }, + { + "bom-ref": "074fe457aba40bdf", + "type": "file", + "name": "/juice-shop/node_modules/string_decoder/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "da598f24028fdd9f3801969161159c1bbeb2034c" + }, + { + "alg": "SHA-256", + "content": "e278ca18803862a6d1b6bedc6a3394159ac86e5c4a162614fef006c79dcda3a2" + } + ] + }, + { + "bom-ref": "a95d5ffe6c59a083", + "type": "file", + "name": "/juice-shop/node_modules/strip-ansi-cjs/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "892d549c672831716abe655f087946d2644f2852" + }, + { + "alg": "SHA-256", + "content": "0130850b9da0584f54cc20d3dab6365c807e9436ac78e016d5009efa99bd0530" + } + ] + }, + { + "bom-ref": "abcd8159781b61fd", + "type": "file", + "name": "/juice-shop/node_modules/strip-ansi/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "892d549c672831716abe655f087946d2644f2852" + }, + { + "alg": "SHA-256", + "content": "0130850b9da0584f54cc20d3dab6365c807e9436ac78e016d5009efa99bd0530" + } + ] + }, + { + "bom-ref": "59aab570ea202490", + "type": "file", + "name": "/juice-shop/node_modules/strip-dirs/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "485740a0eee81e8d7459585521c0b7fda39bfb72" + }, + { + "alg": "SHA-256", + "content": "34d0fd27a6a9b87b1aed243a0c85ef98abe77e04946cc065162f62f6badcb10d" + } + ] + }, + { + "bom-ref": "aab985767126f1a5", + "type": "file", + "name": "/juice-shop/node_modules/strip-outer/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "6d5564549073d159389a2b94894bacf92d24cd93" + }, + { + "alg": "SHA-256", + "content": "998a40b2428ff1fe95ba0ceff8a99565d16fa80763a276bc0aa4b21fc5a79993" + } + ] + }, + { + "bom-ref": "b7f691eff4e4709b", + "type": "file", + "name": "/juice-shop/node_modules/strtok3/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "4c0a17cf164dfbab502a584082eb6e1847e6677b" + }, + { + "alg": "SHA-256", + "content": "4db1129e1b61a3d33a7955fefcfc4923e02cee3d238015545db4d3f67d79c99e" + } + ] + }, + { + "bom-ref": "adbc430ed58c0187", + "type": "file", + "name": "/juice-shop/node_modules/supports-preserve-symlinks-flag/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ca0c14a63df0bdf41422d5e8c79d38e214da561a" + }, + { + "alg": "SHA-256", + "content": "aef0ae2d21ae9181d8702c2063ce0ee274ba1063e5312e4baab5673aa6d4d5db" + } + ] + }, + { + "bom-ref": "03c0d045550772ff", + "type": "file", + "name": "/juice-shop/node_modules/svg-captcha/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "0efdde17b2dbfc8fa8ca40aa6950c67e0e877631" + }, + { + "alg": "SHA-256", + "content": "0d9c39548169d675ff8c0dd7ebb76319d4aade71f423dd9643092f4e968341ab" + } + ] + }, + { + "bom-ref": "70aee8d254a15fbf", + "type": "file", + "name": "/juice-shop/node_modules/swagger-ui-dist/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "798672954d4bc6de27c5c9a268a96d75b22e63aa" + }, + { + "alg": "SHA-256", + "content": "bd16f463bc0ca4c4d136bc53930113560db8d95518ddfaf94a55117bc70c399a" + } + ] + }, + { + "bom-ref": "0f459db962e6ed39", + "type": "file", + "name": "/juice-shop/node_modules/swagger-ui-express/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "3e3986c37083e87abdc0f50382b0e13d1e989e72" + }, + { + "alg": "SHA-256", + "content": "2a7d7d50229bd13523e90730b6877cb9caa1e9491aa378640093a4040894d376" + } + ] + }, + { + "bom-ref": "01f55659926b405c", + "type": "file", + "name": "/juice-shop/node_modules/tar-fs/node_modules/bl/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "093539237b878bed9c3aa2b22e8c1b84cd414df7" + }, + { + "alg": "SHA-256", + "content": "fea66d3b8671e46f77e83db040837cf72da180b8d390d53c43d882fd553659df" + } + ] + }, + { + "bom-ref": "a0b12b014c3d5e53", + "type": "file", + "name": "/juice-shop/node_modules/tar-fs/node_modules/chownr/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c3024b92485c885b974e1f46cb2c32de716c6f06" + }, + { + "alg": "SHA-256", + "content": "7c18e85ac9eff99dc6cb6c5626e11ebea658e69119e0bc8cb4bd799c2b48125a" + } + ] + }, + { + "bom-ref": "b2c8a5a4ff41548e", + "type": "file", + "name": "/juice-shop/node_modules/tar-fs/node_modules/readable-stream/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "6bc59e2d7a44059a5f86b25e3e8ef9b80a83fcac" + }, + { + "alg": "SHA-256", + "content": "469ea81f64037d1f179bcd46412217903a2924dd2e7d7d9b728659b6f12c3e69" + } + ] + }, + { + "bom-ref": "535d63710d8b72cc", + "type": "file", + "name": "/juice-shop/node_modules/tar-fs/node_modules/tar-stream/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f5f0d892c75460d1d9b79580c165740daf8513fe" + }, + { + "alg": "SHA-256", + "content": "bf26c92d0b2d3b865681bac5cf3bca4cd405e33fcb47f45216899aaed4f81010" + } + ] + }, + { + "bom-ref": "98603c17084f6013", + "type": "file", + "name": "/juice-shop/node_modules/tar-fs/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b65b60b762d1806f9292fca397e2492ce3308629" + }, + { + "alg": "SHA-256", + "content": "ba35bcca6e868b872346f2905b3ff58fed8c99d475f9b3124afbf5de37514443" + } + ] + }, + { + "bom-ref": "0b61d6251bb3d300", + "type": "file", + "name": "/juice-shop/node_modules/tar-stream/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "82b92a8ad07a5547aa365bf7d54c48e4752fed7e" + }, + { + "alg": "SHA-256", + "content": "00e16b8127d249e89451e861b7757b51c7d8918bbce7273c978fdb3f121cd403" + } + ] + }, + { + "bom-ref": "977b7b2c5d39e6de", + "type": "file", + "name": "/juice-shop/node_modules/tar/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b68f0fbfd5f06dce070841eb03ee7784b25e694f" + }, + { + "alg": "SHA-256", + "content": "5dabbd9d4e4f0c6c7ba3096814c68bdce77f393e44938e05647f29b8d7351905" + } + ] + }, + { + "bom-ref": "3b9a6b0b57afaf6f", + "type": "file", + "name": "/juice-shop/node_modules/tdigest/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "d346cb0cf35a0ada66aa9aa426d7ca7b1bb537ab" + }, + { + "alg": "SHA-256", + "content": "d956f6e092443eb1dca696b921b85ca86c93241de87a0fb8af4fcfaa15797b42" + } + ] + }, + { + "bom-ref": "540e621dd665e0ac", + "type": "file", + "name": "/juice-shop/node_modules/text-hex/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "22adf500975e8bb558a26de483d7b7c2044cb6a8" + }, + { + "alg": "SHA-256", + "content": "84b96b962f6fa158dfb9d814778d0f8f1635c35d4ed0dd65fefc6afb30570eeb" + } + ] + }, + { + "bom-ref": "aa387ca0bd708672", + "type": "file", + "name": "/juice-shop/node_modules/through/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "8bc63accbab0e155f8aa7c6eb46eee6e859bcb6b" + }, + { + "alg": "SHA-256", + "content": "6580a473cf2f91c6752a01d2c31f729cb14f7e042b830ba46f8949f89e26bdb4" + } + ] + }, + { + "bom-ref": "f78c21dbeb027ef7", + "type": "file", + "name": "/juice-shop/node_modules/timed-out/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "4e735d6703795556aa1bdc916058d1d301d6d746" + }, + { + "alg": "SHA-256", + "content": "fdd01b108ebb6fc5e033fb494fbd52bdd7ac38759cd66e930cd43d49b86ecab2" + } + ] + }, + { + "bom-ref": "d28f05bb30a7effb", + "type": "file", + "name": "/juice-shop/node_modules/tiny-inflate/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "34700e8451c817e74d6c6f9a1c0801703e11a63a" + }, + { + "alg": "SHA-256", + "content": "7a97c9567b054c9294036537d42a112f4bd4263892fbfe2714e6acdf25816c6d" + } + ] + }, + { + "bom-ref": "d28463fa46ccbe46", + "type": "file", + "name": "/juice-shop/node_modules/tinyglobby/node_modules/fdir/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "87c30edff77dd2a0847ac92b0a76837682d64eb2" + }, + { + "alg": "SHA-256", + "content": "aca49395d61ef383a09f74555c66ed45817ca2b5724e710a4dc9e0471b83d8f5" + } + ] + }, + { + "bom-ref": "7048d3e54314c67b", + "type": "file", + "name": "/juice-shop/node_modules/tinyglobby/node_modules/picomatch/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c39e8b54abb2ea9a53dbb2013c1854057971f7a4" + }, + { + "alg": "SHA-256", + "content": "b8deb10b4e1f7cc2fe8236a70995f4c6b5ec3ecf93f02f2b6427a8600d2c1d20" + } + ] + }, + { + "bom-ref": "1bd648c267c75a92", + "type": "file", + "name": "/juice-shop/node_modules/tinyglobby/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "800e1c7af60c9646b06d305edb23dee61466bd66" + }, + { + "alg": "SHA-256", + "content": "83419fbcd0e8b6b1fadd70f647cba140e9fc7f59748525541b9874fa1fae152e" + } + ] + }, + { + "bom-ref": "36d248ed99e1c701", + "type": "file", + "name": "/juice-shop/node_modules/to-buffer/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "2e3e5055412187a0c53bf11b58b792633297aba8" + }, + { + "alg": "SHA-256", + "content": "b9a28e593c952536fd850edc56098bf40679a21e7d1aa6e64a762921af663ef7" + } + ] + }, + { + "bom-ref": "09a4f6cb7a72c599", + "type": "file", + "name": "/juice-shop/node_modules/to-regex-range/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c16a607925055788aae94f1123fa0d769af161bf" + }, + { + "alg": "SHA-256", + "content": "766fc1bb34fffcd503c89f4194188ce059795c52fd0dc6753cd4b7dcfc3fe1ec" + } + ] + }, + { + "bom-ref": "b67d84a7a7c21868", + "type": "file", + "name": "/juice-shop/node_modules/toidentifier/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "e8fe1d02a381b71a33e41588ae26746d34fa4903" + }, + { + "alg": "SHA-256", + "content": "f34c59f784d43da6e633390d85d14ca60539b4676159444f313c62fcfc3b68dc" + } + ] + }, + { + "bom-ref": "6ae4ca287176399b", + "type": "file", + "name": "/juice-shop/node_modules/token-stream/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "45c7c0d74ae7dd7472a18f68b9ad05815a6f84ea" + }, + { + "alg": "SHA-256", + "content": "0715f6c496a2e1866067d32679bb610687465f6f94724bb1c7bcdc1b50964f08" + } + ] + }, + { + "bom-ref": "0fdc5f4c6bbd9156", + "type": "file", + "name": "/juice-shop/node_modules/token-types/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "3836dc720a9de8346b44e9b48075a0cf40a12a08" + }, + { + "alg": "SHA-256", + "content": "8376de6a6272c19359e4feb53a8206760777291a7a09cec3964ee37fe092354e" + } + ] + }, + { + "bom-ref": "ee1f01dc0863ce55", + "type": "file", + "name": "/juice-shop/node_modules/traverse/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "06c9415120aba8a3d5a3564763b9b406cb96f23a" + }, + { + "alg": "SHA-256", + "content": "305d53d5257aa2a3618a2ce42ce50ad45d1b108186580f3c00482e42086b2d14" + } + ] + }, + { + "bom-ref": "3c773cfd393b5961", + "type": "file", + "name": "/juice-shop/node_modules/trim-repeated/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "43166e064e6112331c58224799fcda38e15dab92" + }, + { + "alg": "SHA-256", + "content": "caf8852960da48c505e1ec6884878a9bb52b8fbbb8eb1dcc855f19a7f50fe4ac" + } + ] + }, + { + "bom-ref": "e4af2c3e0bfc8b3e", + "type": "file", + "name": "/juice-shop/node_modules/triple-beam/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "1e356e8f3df9978c633d2fdd6adef6f8f6f17f9f" + }, + { + "alg": "SHA-256", + "content": "b7c3d5228846e6719feb034f1aa72f294f1804ef9cf1f3fd7e1659413b9b3950" + } + ] + }, + { + "bom-ref": "a9544b6c1ed27927", + "type": "file", + "name": "/juice-shop/node_modules/truncate-utf8-bytes/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "97ad55b3d7fef9910d4e8b426845e9a2e8bdbe01" + }, + { + "alg": "SHA-256", + "content": "8da766c7092b0ce9fd8f3b2ac2f41d1b739df9210067d3f710d65d95c9c17a7a" + } + ] + }, + { + "bom-ref": "f0e5bf7590207d2b", + "type": "file", + "name": "/juice-shop/node_modules/tslib/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c7227cadc95e0155ca68f85e9487ebbb9091034e" + }, + { + "alg": "SHA-256", + "content": "7ecf3460a204a34f0ef8ea32d0f9828385658d4e5d5e271f93f40e7b36a32972" + } + ] + }, + { + "bom-ref": "814f3186f183193b", + "type": "file", + "name": "/juice-shop/node_modules/tunnel-agent/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b0f728acf482a20e28d3d25e56b084529c2533d4" + }, + { + "alg": "SHA-256", + "content": "08a8560b650b49370af44148a8645c11675ba97d21ee7f347d8d434b13c51074" + } + ] + }, + { + "bom-ref": "4e4aaff7c1111491", + "type": "file", + "name": "/juice-shop/node_modules/type-is/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "28d55c4730fdacf9019317fae0ba93a0b6aebd0b" + }, + { + "alg": "SHA-256", + "content": "87917e3dda1080179447633c3edff7e4b917d62b463893c88cef5be0b2babc63" + } + ] + }, + { + "bom-ref": "9743cd039686444c", + "type": "file", + "name": "/juice-shop/node_modules/typecast/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "21c7885a03c0f346f10b8c44d64dc5e2b06a4345" + }, + { + "alg": "SHA-256", + "content": "751046532a62d8d98efba8b21055fea0acf58057a69713cf4badbbbddc30af6a" + } + ] + }, + { + "bom-ref": "bd370f1a6539a3eb", + "type": "file", + "name": "/juice-shop/node_modules/typed-array-buffer/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "d2a1cbffbc42f558a580d54bd12a6a496ac1b569" + }, + { + "alg": "SHA-256", + "content": "f0f933ad37d3be61efcb8c4fe64088cd97a4bc86038d5bc19f33df1e995bac56" + } + ] + }, + { + "bom-ref": "c38daa94bb12f3ea", + "type": "file", + "name": "/juice-shop/node_modules/typedarray/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "80e445329a66d6a606165762bb9c34dd7caf135d" + }, + { + "alg": "SHA-256", + "content": "622ebab64ef61f10e4dd28a099e88545c477ccf7d5aa28d2eb4462c857e76fda" + } + ] + }, + { + "bom-ref": "70c903397afc9b19", + "type": "file", + "name": "/juice-shop/node_modules/uglify-js/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "babba559ebf25dbad8e337ff1e622e1e499ecd28" + }, + { + "alg": "SHA-256", + "content": "4e7908267a1b0dfd5af0004dba63e8392ffc509ae986d5931017a55d7d65167d" + } + ] + }, + { + "bom-ref": "0d561c19e547886b", + "type": "file", + "name": "/juice-shop/node_modules/unbzip2-stream/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "cf8bdf0d4fa8254d541678572099ad8738f1e054" + }, + { + "alg": "SHA-256", + "content": "ebb4f3f85319e57392b46070e1c39ba33ad74aa2f01934ffea0ecfcbb22282af" + } + ] + }, + { + "bom-ref": "3ac620652041cbd8", + "type": "file", + "name": "/juice-shop/node_modules/unc-path-regex/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "5e66f1c422e03aee88f570bd73d7498db87bc036" + }, + { + "alg": "SHA-256", + "content": "ec92f74becc17cf02d61f006553f750e6a9ebbe2e5dfb4057003f9e67065f973" + } + ] + }, + { + "bom-ref": "678f1eed4a07eb98", + "type": "file", + "name": "/juice-shop/node_modules/underscore.string/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "becb44287069fbf82c0b0d3c281b1bcfcbf135f4" + }, + { + "alg": "SHA-256", + "content": "b8a24fd9e9423e22f083c7cf94fbf8f45caa56bf9e662fb58deb7a5999ab5e34" + } + ] + }, + { + "bom-ref": "74b819c8233f23a6", + "type": "file", + "name": "/juice-shop/node_modules/undici-types/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "def899bd021e6c2f7b962f89c29326e2eab41c2c" + }, + { + "alg": "SHA-256", + "content": "11f873b423b96a5ad444a099685ca6b9de1379dcd83fd8d368e757ddb53658e4" + } + ] + }, + { + "bom-ref": "ae7a3553226677e2", + "type": "file", + "name": "/juice-shop/node_modules/unicode-properties/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "6d843d2dbd0f2cb1a31a2ae38b8e90fcb43d75a5" + }, + { + "alg": "SHA-256", + "content": "4dba3776474dc9f928749684eeaeabacb40fd0e58ef704b2c2a976201830183b" + } + ] + }, + { + "bom-ref": "063a80a56611d160", + "type": "file", + "name": "/juice-shop/node_modules/unicode-trie/node_modules/pako/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "d10e69957646e41e179176878d2a3de76aaf4f13" + }, + { + "alg": "SHA-256", + "content": "dc1090fc2228e15fb13cc8aa81f3c99c9c0a4237f99a42d1c7ffda1b137cf1cf" + } + ] + }, + { + "bom-ref": "6b2b6cd804ef3446", + "type": "file", + "name": "/juice-shop/node_modules/unicode-trie/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "06c142c393c921d1f8ea85e83697d9ac3c737b06" + }, + { + "alg": "SHA-256", + "content": "11742ae162c45a0f55a4d85ae1c6dc7dd380e203173d3bca04e72ca3b68729b6" + } + ] + }, + { + "bom-ref": "284167632d2fbf07", + "type": "file", + "name": "/juice-shop/node_modules/unique-filename/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "7ab7ef7fed369084e86d0800e1861115c3ff1bcd" + }, + { + "alg": "SHA-256", + "content": "ac3d03b4b239b3eff717b2fdb3dac9f32fd9bf49ee8c20cd87f82fd148c2a7e5" + } + ] + }, + { + "bom-ref": "648c3142ed2760b6", + "type": "file", + "name": "/juice-shop/node_modules/unique-slug/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "6bfb7b3e3ad92a208217828bc65a87369999d06f" + }, + { + "alg": "SHA-256", + "content": "23b9c2630936c9633601c95d91165f2d5dd8f099886e058873eb282ac537fdb7" + } + ] + }, + { + "bom-ref": "ab6955dc967e7a6f", + "type": "file", + "name": "/juice-shop/node_modules/universalify/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ee873fdef51ff8bb443eaa2e404c470fee171133" + }, + { + "alg": "SHA-256", + "content": "10e53f10939bb8a4a73af6e06829b670bbf9da66a36edcc644441852806b87ee" + } + ] + }, + { + "bom-ref": "ba07f605ff7fd443", + "type": "file", + "name": "/juice-shop/node_modules/unpipe/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "f67f2d17a18c3ded93c9423903df8e6678f4e416" + }, + { + "alg": "SHA-256", + "content": "28b717f978d2a4fc72cd08236931443b63fe6586102df3d1967e2b21ea8c5e11" + } + ] + }, + { + "bom-ref": "7558e57560a486e9", + "type": "file", + "name": "/juice-shop/node_modules/unzipper/node_modules/bluebird/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "798aabfd8f98b7acc51b06ccf115f6f5f13ff3bb" + }, + { + "alg": "SHA-256", + "content": "5e8f820b5628dc16da723fdb42c0c8c50a59f201591a335310fe754a076598f6" + } + ] + }, + { + "bom-ref": "5b0b560c8ce7a211", + "type": "file", + "name": "/juice-shop/node_modules/unzipper/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ff392885ebb8c1ee02209a3803b2e7d3f585fd01" + }, + { + "alg": "SHA-256", + "content": "10a99b6c186386454323df981067d807c9cf22493d3636bdad05e599adba5635" + } + ] + }, + { + "bom-ref": "6b6a49e81fcc9b99", + "type": "file", + "name": "/juice-shop/node_modules/url-parse-lax/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "4f3578d706cc6f6b8c71191b6846e74e91d60259" + }, + { + "alg": "SHA-256", + "content": "7ccad07cb7916cb11fdf9ee02fb93a9dceabc860c1550186506c0744b1504f76" + } + ] + }, + { + "bom-ref": "802e5f14144d1a3f", + "type": "file", + "name": "/juice-shop/node_modules/url-to-options/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "72b6578557d3299f9e72b3d0bcca11f73e3581af" + }, + { + "alg": "SHA-256", + "content": "39f7f5ee9153c83263fdf0c38e140d34ec4a9bbb88c9988862e2f0530033994e" + } + ] + }, + { + "bom-ref": "75df89c4cc08ae69", + "type": "file", + "name": "/juice-shop/node_modules/utf8-byte-length/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "223456bfa4f5067cc378339ab9c448b028e4d203" + }, + { + "alg": "SHA-256", + "content": "b889d007bbd065efe6d9dedc6b4905794fb17b179e0591501782df6afc085314" + } + ] + }, + { + "bom-ref": "e69803c34d32c987", + "type": "file", + "name": "/juice-shop/node_modules/util-deprecate/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "2e69081e7bab6e09d3dcfd680716fdeea577431d" + }, + { + "alg": "SHA-256", + "content": "7bba467f049074957e693fc06672848b040c38fa071b6eed8690f5fbe090a8b2" + } + ] + }, + { + "bom-ref": "daa143fa5fe026ba", + "type": "file", + "name": "/juice-shop/node_modules/utils-merge/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a03473329c34092ea6a88cc11c409a4ecf8bad33" + }, + { + "alg": "SHA-256", + "content": "6238e6d7e2fddd3e4826014b4e69cb20d332b472999728a7157db454c69121b8" + } + ] + }, + { + "bom-ref": "248fa709b802b4df", + "type": "file", + "name": "/juice-shop/node_modules/uuid/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "a58d29c1fd72b80ea213864527ae7bb48ae3f2be" + }, + { + "alg": "SHA-256", + "content": "56c3eae5f83172f7ab5205980ebd9a1328f6436628d893720938d5679208922c" + } + ] + }, + { + "bom-ref": "1cafa51f04e5e6ba", + "type": "file", + "name": "/juice-shop/node_modules/v8flags/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "fe85f10e486cd4e1d7ee177facfe769a897c033a" + }, + { + "alg": "SHA-256", + "content": "4a2fcc6269964dfc38575354664c1c3643ae60829841e79bc7d750de58b244c7" + } + ] + }, + { + "bom-ref": "f1dcf9eeef54b1f7", + "type": "file", + "name": "/juice-shop/node_modules/validate/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "47c6d175ec289a4e7ef3cad1758e784810496aa5" + }, + { + "alg": "SHA-256", + "content": "605a57bda1914000b35b68d484f713b57b95a244fb82371c00b0cbfbc908ec4b" + } + ] + }, + { + "bom-ref": "d1e7a9aacf7f0c69", + "type": "file", + "name": "/juice-shop/node_modules/validator/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "eb80193f4fd9b5609d93bf399acf2ecce162f1a0" + }, + { + "alg": "SHA-256", + "content": "e33c239e4e4cbd1142b7ad37e831951f45cce3e655f3164eb88c7e1eae1a2af5" + } + ] + }, + { + "bom-ref": "531e2362f2be721a", + "type": "file", + "name": "/juice-shop/node_modules/vary/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "82f740e2254b786f7a3a39a762d4d0fc6ec7b008" + }, + { + "alg": "SHA-256", + "content": "73edaee964d527117a9f69d6360fbe6cec534abd9127794be01a6af58a139daa" + } + ] + }, + { + "bom-ref": "afe2db664316bb3d", + "type": "file", + "name": "/juice-shop/node_modules/void-elements/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "b0b8e02fd6d29a691289f9d279e1be41201a79c4" + }, + { + "alg": "SHA-256", + "content": "9cc3503e65c64719269421c1820f11bb66ad5a5f1597ee68e350ed18dd23b98a" + } + ] + }, + { + "bom-ref": "0ca7c0f59826047e", + "type": "file", + "name": "/juice-shop/node_modules/walk/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "48409567c2bff0f58fde79948118ac9d50ada686" + }, + { + "alg": "SHA-256", + "content": "a2a8f916e38926b6b45761a7e8eb14952a1754a0bf0d2c3689038af9bf156bdb" + } + ] + }, + { + "bom-ref": "2749ed97afbd1fcc", + "type": "file", + "name": "/juice-shop/node_modules/walkdir/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ec0b65e01578e50bb446aca570ba7b5efde8e29f" + }, + { + "alg": "SHA-256", + "content": "628303c50a0895ba01d1869d6adf63eecf2d3534e2b143f98d3f21eca77d25d6" + } + ] + }, + { + "bom-ref": "bc581e93fef0e5d0", + "type": "file", + "name": "/juice-shop/node_modules/walkdir/test/comparison/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ff50ca027638d23483435b73da1bdcfca4b7f269" + }, + { + "alg": "SHA-256", + "content": "1fe01eca0bb65e21e447caa7378df650ffd1a129ef80c0a07bea254c07646628" + } + ] + }, + { + "bom-ref": "cabb5c18c8648211", + "type": "file", + "name": "/juice-shop/node_modules/which-boxed-primitive/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "0af7e24076139571355204f3bace1c3a603949a6" + }, + { + "alg": "SHA-256", + "content": "9e0869e7c145b1d1e6ea0e63b2870a1aa230e7f75ffe69240908c90d35c02aa9" + } + ] + }, + { + "bom-ref": "9c8a3deed348a6db", + "type": "file", + "name": "/juice-shop/node_modules/which-collection/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "7c6ebd4f25ca1ca27d30f8d395cf4f330f619638" + }, + { + "alg": "SHA-256", + "content": "bf95e02a88d5b89dbc6b544c334a317c234f3c4a237f9f1dcf611506990ed196" + } + ] + }, + { + "bom-ref": "dd705b9814d938ac", + "type": "file", + "name": "/juice-shop/node_modules/which-module/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "66bc9244d8b750f43d498703675d6d71f8e1981c" + }, + { + "alg": "SHA-256", + "content": "02f6f6833d09c32100317a390892888ae44da4f712b2271d4b308bcace09a99f" + } + ] + }, + { + "bom-ref": "97abe6258db93419", + "type": "file", + "name": "/juice-shop/node_modules/which-pm-runs/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "d37f6577f5a53592a5080771fec8aa3340b1a86c" + }, + { + "alg": "SHA-256", + "content": "0eb3591abd6e960733cb1d8739e329d2565397e5a3d8b4326b30c80f31d69ab4" + } + ] + }, + { + "bom-ref": "1a187803227d3f2e", + "type": "file", + "name": "/juice-shop/node_modules/which-typed-array/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "83d5355df4ef773d3a2d050c11d6c5d2a34310e7" + }, + { + "alg": "SHA-256", + "content": "ea9e55ff13c852ed5ac5746a4049a3f6131722f8372f2c3fc0b3802a5538588c" + } + ] + }, + { + "bom-ref": "50c6fd24ac329293", + "type": "file", + "name": "/juice-shop/node_modules/which/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "402837c5ba60f95b309957adc4657b8fe4fb1f05" + }, + { + "alg": "SHA-256", + "content": "43010039ed5e89f7186960be682b3cb5cda5ab6cdfb06cbfd4f081cf0e7b4260" + } + ] + }, + { + "bom-ref": "fec0de2af75501fb", + "type": "file", + "name": "/juice-shop/node_modules/wide-align/node_modules/ansi-regex/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "4c7437872b679c9cb6df8a53d4928c07c36a18dd" + }, + { + "alg": "SHA-256", + "content": "3b443ff0b23130799b2c5755582ef6f62096064e4d270d0122b03477ea68ca1c" + } + ] + }, + { + "bom-ref": "96743594f50253ed", + "type": "file", + "name": "/juice-shop/node_modules/wide-align/node_modules/is-fullwidth-code-point/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "8b4b76c3bc63680159f5e97ff8e3a218f25e7c00" + }, + { + "alg": "SHA-256", + "content": "1c5c73b201f50ae5201dc7afad16ccb32f16c411040c5b93b689f4c6ade17c27" + } + ] + }, + { + "bom-ref": "36f939e10249430f", + "type": "file", + "name": "/juice-shop/node_modules/wide-align/node_modules/string-width/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "1b26460d736e2cd59d75ff10cbdee5c483f6596f" + }, + { + "alg": "SHA-256", + "content": "4118bb2266a7a1adaac138d4b5813742483414c9dd536b98a851e032ae98adf3" + } + ] + }, + { + "bom-ref": "f3863c9c12d54b51", + "type": "file", + "name": "/juice-shop/node_modules/wide-align/node_modules/strip-ansi/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "9ce1d9cd5e0e83463c97e87ce10e25bbcc6f9e4a" + }, + { + "alg": "SHA-256", + "content": "682840451efde52b36dba755741011e0d82bc2a89760e24aab8c564723d8369a" + } + ] + }, + { + "bom-ref": "321d63ba84cd7897", + "type": "file", + "name": "/juice-shop/node_modules/wide-align/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "3a42d35dea67d3af17d76c4232cf1f56532b1732" + }, + { + "alg": "SHA-256", + "content": "524d5d89924ba461deda48989a748f8450bca19fd00eb8ffa07dbed870bfdfb1" + } + ] + }, + { + "bom-ref": "d8cdcf04b020ef9f", + "type": "file", + "name": "/juice-shop/node_modules/winston-transport/node_modules/readable-stream/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "6bc59e2d7a44059a5f86b25e3e8ef9b80a83fcac" + }, + { + "alg": "SHA-256", + "content": "469ea81f64037d1f179bcd46412217903a2924dd2e7d7d9b728659b6f12c3e69" + } + ] + }, + { + "bom-ref": "dd7e466ceee9593a", + "type": "file", + "name": "/juice-shop/node_modules/winston-transport/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "41ed9fa7f4c7c753ec90200f0c3df7665149afb8" + }, + { + "alg": "SHA-256", + "content": "212ebeebb9f3f301a77fe581c1c367ef9d70ec8b3d7c46593010b2fd2e89bda1" + } + ] + }, + { + "bom-ref": "7b94adcab0008c24", + "type": "file", + "name": "/juice-shop/node_modules/winston/node_modules/@colors/colors/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "bc0cd68d3d25a31abb16de7e2b5ff5e20d974403" + }, + { + "alg": "SHA-256", + "content": "af67d5bc4fac331176780d7da47802a48d9bca01596d571685351b4a03a6b9c1" + } + ] + }, + { + "bom-ref": "b46d243c5743c579", + "type": "file", + "name": "/juice-shop/node_modules/winston/node_modules/is-stream/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "dac0050410d80a991cfa4ccdd0eb37f4020b49dd" + }, + { + "alg": "SHA-256", + "content": "07cf93d9490a2d7ed7731810b49b1c314c760291bb66cdfbc0279258ceb65ec9" + } + ] + }, + { + "bom-ref": "a46dbd4f44ca4bab", + "type": "file", + "name": "/juice-shop/node_modules/winston/node_modules/readable-stream/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "6bc59e2d7a44059a5f86b25e3e8ef9b80a83fcac" + }, + { + "alg": "SHA-256", + "content": "469ea81f64037d1f179bcd46412217903a2924dd2e7d7d9b728659b6f12c3e69" + } + ] + }, + { + "bom-ref": "990411f1a41ac90c", + "type": "file", + "name": "/juice-shop/node_modules/winston/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "20eab7a88cdb780cb1023993439f123e19020641" + }, + { + "alg": "SHA-256", + "content": "f96cc6b8da151f7237b2fe38629ed06f55b7f230b281a70ddfa128e1b2648e6c" + } + ] + }, + { + "bom-ref": "37e72b05c55735c1", + "type": "file", + "name": "/juice-shop/node_modules/with/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "36745b30bb45cffb3ec3646489ca7406c3235363" + }, + { + "alg": "SHA-256", + "content": "30d01a7f84509e2ee075442a2e56ccbee6a9a98c46d86f32659d24b2b34a8609" + } + ] + }, + { + "bom-ref": "60b62755432c3eb8", + "type": "file", + "name": "/juice-shop/node_modules/wkx/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "4fbad714a31c115ee6ba9b12e896792bd1a783e0" + }, + { + "alg": "SHA-256", + "content": "12eaedf0c094ee3c00b553926c70585eeeca003e9cc31d4c869fe68f711f2ea1" + } + ] + }, + { + "bom-ref": "d593931b151d04a1", + "type": "file", + "name": "/juice-shop/node_modules/wordwrap/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "91c29dfbc287ca5f45c833a5ab47bd471f344ad2" + }, + { + "alg": "SHA-256", + "content": "4346d2850babb5ed5b1685510e007adc142384e6468613f32f460db2cfee1297" + } + ] + }, + { + "bom-ref": "648990a6941608ac", + "type": "file", + "name": "/juice-shop/node_modules/wrap-ansi-cjs/node_modules/ansi-styles/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "3c9ef7bd0a1c3d805814c654c457cc315c48c116" + }, + { + "alg": "SHA-256", + "content": "d405f010681d53f77691015e98461f8484b2afe6a9edfdd2ddb27b1e8a8e883d" + } + ] + }, + { + "bom-ref": "add60f5393dd0f9b", + "type": "file", + "name": "/juice-shop/node_modules/wrap-ansi-cjs/node_modules/color-convert/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "03f26ab8597e0117b7ad15bcfa9f0b31c8375ea9" + }, + { + "alg": "SHA-256", + "content": "9471d21744ca3137410448da6b3bd7b30ee91d42edce3b82ebcbf84faef74fb4" + } + ] + }, + { + "bom-ref": "78916a0f8d57d3f3", + "type": "file", + "name": "/juice-shop/node_modules/wrap-ansi-cjs/node_modules/color-name/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "411d7c87d5b1dec0d479aa13e3406b5c38ac34f5" + }, + { + "alg": "SHA-256", + "content": "4a557ea373907e4643badb89ff21b3f4b969d20631086d78eab2e03d05c2efa4" + } + ] + }, + { + "bom-ref": "dbc5147bce0f98ec", + "type": "file", + "name": "/juice-shop/node_modules/wrap-ansi-cjs/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "3442b7381f1b431861a986d8cdf144ced299db29" + }, + { + "alg": "SHA-256", + "content": "0b0cf0bf62bd0cc71da2128e3269e63edd566feffdd501aa3692acd6db93c3c9" + } + ] + }, + { + "bom-ref": "b1589cef3690c37f", + "type": "file", + "name": "/juice-shop/node_modules/wrap-ansi/node_modules/ansi-regex/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ce200865f7a4839de6213072c7986484139c50b1" + }, + { + "alg": "SHA-256", + "content": "a58f1d6dbaca116f4aaa83906a0a992da2303a07ca920b2ce877573988eae352" + } + ] + }, + { + "bom-ref": "ee57f85ee5494cc8", + "type": "file", + "name": "/juice-shop/node_modules/wrap-ansi/node_modules/ansi-styles/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "adb4944aaa807d2d90a6d54e220759c3081c10d2" + }, + { + "alg": "SHA-256", + "content": "0cf1f46ceee4b380298db6e6a54f14d345abe09abd5f650cbc20c8ac2ab27744" + } + ] + }, + { + "bom-ref": "c13a2bda40c40c69", + "type": "file", + "name": "/juice-shop/node_modules/wrap-ansi/node_modules/emoji-regex/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "238c48183550d02ab5c0dd37e13d57006dce640a" + }, + { + "alg": "SHA-256", + "content": "181fa046bdbb7d8958c57dcef2e63aea9af667036e218c7222479a8618375f1a" + } + ] + }, + { + "bom-ref": "7ec8ff3f6b3d606c", + "type": "file", + "name": "/juice-shop/node_modules/wrap-ansi/node_modules/string-width/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "53ae7a1b3953e86624927fec8421d453d9c88e41" + }, + { + "alg": "SHA-256", + "content": "adbcb3b95ea29c1f2a91a0af600fd9136ce408a38622332848ba4630dc473659" + } + ] + }, + { + "bom-ref": "95baf8c37936c9d6", + "type": "file", + "name": "/juice-shop/node_modules/wrap-ansi/node_modules/strip-ansi/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "6c109cf2dd51ea9d89ed05e64161782df7559477" + }, + { + "alg": "SHA-256", + "content": "228b214dd06ca80ab3c36e2b890a8696a39cea65585f6d61498c922c615e18a0" + } + ] + }, + { + "bom-ref": "c9ba79edeee1afa7", + "type": "file", + "name": "/juice-shop/node_modules/wrap-ansi/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c14f366cb2c71b662f7edb2dcf7370a513fc641f" + }, + { + "alg": "SHA-256", + "content": "609dd6ab176847e57e799dba2e4c4ad355abe463ec67a5ab0dccec08b67e6761" + } + ] + }, + { + "bom-ref": "08882c33956bacd5", + "type": "file", + "name": "/juice-shop/node_modules/wrappy/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "156d61004996b07079664753e7b5c415b99e4c89" + }, + { + "alg": "SHA-256", + "content": "712ac9c4c3cef8bc79f42cf6075ff18551f4cb768f35158214fd643853ad7abc" + } + ] + }, + { + "bom-ref": "a9a37fd62e64c205", + "type": "file", + "name": "/juice-shop/node_modules/ws/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "6f2ab48fb7d118a83ff9ae1ace83309f2db23321" + }, + { + "alg": "SHA-256", + "content": "61c104d44cd4ff02b190f970b8cb0a8d70af0a7274e0eff46580b1e20200decc" + } + ] + }, + { + "bom-ref": "1e4d2694c45bfa32", + "type": "file", + "name": "/juice-shop/node_modules/xtend/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "1ff55cea8456af743102bdd7fc40b95fe34a7770" + }, + { + "alg": "SHA-256", + "content": "b02ffef8cda96c5c3ee00a00390e63f608362c2ddfb3ed754e181d013a45d48a" + } + ] + }, + { + "bom-ref": "9de1087f1c82c29c", + "type": "file", + "name": "/juice-shop/node_modules/y18n/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "ad32dfe662561409f091e109f6830ccab42124ff" + }, + { + "alg": "SHA-256", + "content": "5995de811ffa1b8a8e9ed9bd0444f60058dba9ce1ccbe12f2d5e12c31a975d9c" + } + ] + }, + { + "bom-ref": "341565d18e912150", + "type": "file", + "name": "/juice-shop/node_modules/yallist/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "4eaebb818148fd3bcc27e1aef2d88497999f675e" + }, + { + "alg": "SHA-256", + "content": "1b9d47057ce39814531ff93f668823b4fa03e7d23945449c274a1ff6d4cc297f" + } + ] + }, + { + "bom-ref": "0c9c383d46168e33", + "type": "file", + "name": "/juice-shop/node_modules/yaml-schema-validator/node_modules/commander/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "74103756a0fe401ed4d8137e04607758a77897eb" + }, + { + "alg": "SHA-256", + "content": "3ab88e050858ad5fc1d2e7f993d959b83c7e2ddec64afe86cc4055f799e4762d" + } + ] + }, + { + "bom-ref": "2f2553ebd1045388", + "type": "file", + "name": "/juice-shop/node_modules/yaml-schema-validator/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "39604da28e16de9ffa9046ec18a06b36baabcf32" + }, + { + "alg": "SHA-256", + "content": "5a89e68a562c98edec01f9aefacf2d5f95e95d0dd543e8e0125a9333f59bc2e1" + } + ] + }, + { + "bom-ref": "831b909c31e5f923", + "type": "file", + "name": "/juice-shop/node_modules/yauzl/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "e91b995ab78ed0ec2c169efc0c17f7f25c679e44" + }, + { + "alg": "SHA-256", + "content": "9119ac0c70d33b16e3c69dbc5cdeab71eb513124a04d961f2c9e7402c9fec8eb" + } + ] + }, + { + "bom-ref": "9c34c7d2887687c5", + "type": "file", + "name": "/juice-shop/node_modules/z85/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c7c525898d3d17ae288951589d49a82860f873cd" + }, + { + "alg": "SHA-256", + "content": "eb5ed55479185f63ff524af3718856f22fcbdee2befeeb2537b171bb90266896" + } + ] + }, + { + "bom-ref": "f2647390bc93e043", + "type": "file", + "name": "/juice-shop/node_modules/zip-stream/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "543a5a3cbe7a0a3c766e9acc28a9d79696183d79" + }, + { + "alg": "SHA-256", + "content": "51c0c491481381690f272d535d4d1453fc4982f13bb96e659faff5a4487b8133" + } + ] + }, + { + "bom-ref": "4a7e71a714a13401", + "type": "file", + "name": "/juice-shop/node_modules/zod/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "e168ef2ff344c6d274af1cb6cd14b33cb3f16d95" + }, + { + "alg": "SHA-256", + "content": "70eedbe34fd52385a4ae2f3e5759b19682189f0118ea73a6e7c32c677f61668e" + } + ] + }, + { + "bom-ref": "4bfb70bfbcd4b20d", + "type": "file", + "name": "/juice-shop/package.json", + "hashes": [ + { + "alg": "SHA-1", + "content": "c29cbaf50f88c8bdf4ba41094a238fa93d5199ea" + }, + { + "alg": "SHA-256", + "content": "57b2d89c1b3500dfc04674b00c9ba374e1ef423ababb64e814b39f90fe87c933" + } + ] + } + ], + "dependencies": [ + { + "ref": "pkg:deb/debian/libc6@2.41-12%2Bdeb13u2?arch=amd64&distro=debian-13&package-id=089516409246f602&upstream=glibc", + "dependsOn": [ + "pkg:deb/debian/libgcc-s1@14.2.0-19?arch=amd64&distro=debian-13&package-id=3031df5904016f0f&upstream=gcc-14" + ] + }, + { + "ref": "pkg:deb/debian/libgcc-s1@14.2.0-19?arch=amd64&distro=debian-13&package-id=3031df5904016f0f&upstream=gcc-14", + "dependsOn": [ + "pkg:deb/debian/gcc-14-base@14.2.0-19?arch=amd64&distro=debian-13&package-id=aeb0ddb21095ed8c&upstream=gcc-14", + "pkg:deb/debian/libc6@2.41-12%2Bdeb13u2?arch=amd64&distro=debian-13&package-id=089516409246f602&upstream=glibc" + ] + }, + { + "ref": "pkg:deb/debian/libgomp1@14.2.0-19?arch=amd64&distro=debian-13&package-id=a3600d8be216b213&upstream=gcc-14", + "dependsOn": [ + "pkg:deb/debian/gcc-14-base@14.2.0-19?arch=amd64&distro=debian-13&package-id=aeb0ddb21095ed8c&upstream=gcc-14", + "pkg:deb/debian/libc6@2.41-12%2Bdeb13u2?arch=amd64&distro=debian-13&package-id=089516409246f602&upstream=glibc" + ] + }, + { + "ref": "pkg:deb/debian/libssl3t64@3.5.5-1~deb13u2?arch=amd64&distro=debian-13&package-id=d839547e5a6a801d&upstream=openssl", + "dependsOn": [ + "pkg:deb/debian/libc6@2.41-12%2Bdeb13u2?arch=amd64&distro=debian-13&package-id=089516409246f602&upstream=glibc", + "pkg:deb/debian/libzstd1@1.5.7%2Bdfsg-1?arch=amd64&distro=debian-13&package-id=5bd7e38ab1e29af4&upstream=libzstd", + "pkg:deb/debian/zlib1g@1%3A1.3.dfsg%2Breally1.3.1-1%2Bb1?arch=amd64&distro=debian-13&package-id=7bfd545dc64f4e5a&upstream=zlib%401%3A1.3.dfsg%2Breally1.3.1-1" + ] + }, + { + "ref": "pkg:deb/debian/libstdc%2B%2B6@14.2.0-19?arch=amd64&distro=debian-13&package-id=cf66ea0dff490b7a&upstream=gcc-14", + "dependsOn": [ + "pkg:deb/debian/gcc-14-base@14.2.0-19?arch=amd64&distro=debian-13&package-id=aeb0ddb21095ed8c&upstream=gcc-14", + "pkg:deb/debian/libc6@2.41-12%2Bdeb13u2?arch=amd64&distro=debian-13&package-id=089516409246f602&upstream=glibc", + "pkg:deb/debian/libgcc-s1@14.2.0-19?arch=amd64&distro=debian-13&package-id=3031df5904016f0f&upstream=gcc-14" + ] + }, + { + "ref": "pkg:deb/debian/libzstd1@1.5.7%2Bdfsg-1?arch=amd64&distro=debian-13&package-id=5bd7e38ab1e29af4&upstream=libzstd", + "dependsOn": [ + "pkg:deb/debian/libc6@2.41-12%2Bdeb13u2?arch=amd64&distro=debian-13&package-id=089516409246f602&upstream=glibc" + ] + }, + { + "ref": "pkg:deb/debian/tzdata-legacy@2026a-0%2Bdeb13u1?arch=all&distro=debian-13&package-id=577ba637f36cc46d&upstream=tzdata", + "dependsOn": [ + "pkg:deb/debian/tzdata@2026a-0%2Bdeb13u1?arch=all&distro=debian-13&package-id=882dfe0230a0d58f" + ] + }, + { + "ref": "pkg:deb/debian/zlib1g@1%3A1.3.dfsg%2Breally1.3.1-1%2Bb1?arch=amd64&distro=debian-13&package-id=7bfd545dc64f4e5a&upstream=zlib%401%3A1.3.dfsg%2Breally1.3.1-1", + "dependsOn": [ + "pkg:deb/debian/libc6@2.41-12%2Bdeb13u2?arch=amd64&distro=debian-13&package-id=089516409246f602&upstream=glibc" + ] + } + ] + } +} diff --git a/labs/lab8/keys/cosign.pub b/labs/lab8/keys/cosign.pub new file mode 100644 index 000000000..d92521fca --- /dev/null +++ b/labs/lab8/keys/cosign.pub @@ -0,0 +1,4 @@ +-----BEGIN PUBLIC KEY----- +MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEgXHek1xchUrD2cVJW1GgY6OFJEdE +nCl4RZNRtLk+KeV8CaeUaQofBQabyNaLYJXUSS+mSUfQE3XLNx6gVcO/mg== +-----END PUBLIC KEY----- diff --git a/labs/lab9/falco/rules/custom-rules.yaml b/labs/lab9/falco/rules/custom-rules.yaml new file mode 100644 index 000000000..32a9c8ea9 --- /dev/null +++ b/labs/lab9/falco/rules/custom-rules.yaml @@ -0,0 +1,11 @@ +- rule: Write to /tmp by container + desc: Container modifying system config under /tmp + condition: > + open_write and + container.id != host and + fd.name startswith /tmp/ + output: > + Config write in container (container=%container.name user=%user.name + file=%fd.name proc=%proc.cmdline) + priority: WARNING + tags: [container, drift] \ No newline at end of file diff --git a/submissions/lab1.md b/submissions/lab1.md new file mode 100644 index 000000000..5b44411dd --- /dev/null +++ b/submissions/lab1.md @@ -0,0 +1,75 @@ +# Lab 1 — Submission + +## Triage Report: OWASP Juice Shop + +### Scope & Asset +- Asset: OWASP Juice Shop (local lab instance) +- Image: `bkimminich/juice-shop:v20.0.0` +- Image digest: `sha256:fd58bdc9745416afce8184ee0666278a436574633ea7880365153a63bfd418b0` +- Host OS: `Windows 11 25H2` +- Docker version: `28.3.0` + +### Deployment Details +- Run command used: `docker run -d --name juice-shop -p 127.0.0.1:3000:3000 bkimminich/juice-shop:v20.0.0` +- Access URL: http://127.0.0.1:3000 +- Network exposure: 127.0.0.1 only? [x] Yes [ ] No +- Container restart policy: `no` + +### Health Check +- HTTP code on `/`: `200` +- API check (first 200 chars of `/api/Products`): + ``` + {"status":"success","data":[{"id":1,"name":"Apple Juice (1000ml)","description":"The all-time classic.","price":1.99,"deluxePrice":0.99,"image":"apple_juice.jpg","createdAt":"2026-06-12T19:30:57.156Z" + ``` +- Container uptime: `Up 31 minutes` + +### Initial Surface Snapshot (from browser exploration) +- Login/Registration visible: [x] Yes [ ] No — notes: Accessible from the topbar. +- Product listing/search present: [x] Yes [ ] No — notes: On the main page. +- Admin or account area discoverable: [x] Yes [ ] No — notes: Although there doesn't seem to be a visible indication of an admin page a user can find, it can be discovered by analyzing code or bruteforcing. Access to the page is restricted without superuser privileges. +- Client-side errors in DevTools console: [ ] Yes [x] No — notes: No errors present. +- Pre-populated local storage / cookies: Adds a cookie to store language preference on first load. Local storage was empty. + +### Security Headers (Quick Look) +Run: `curl -I http://127.0.0.1:3000 2>&1 | head -20`. Paste output: +``` +Access-Control-Allow-Origin: * +X-Content-Type-Options: nosniff +X-Frame-Options: SAMEORIGIN +Feature-Policy: payment 'self' +X-Recruiting: /#/jobs +Accept-Ranges: bytes +Cache-Control: public, max-age=0 +Last-Modified: Fri, 12 Jun 2026 19:31:00 GMT +ETag: W/"26af-19ebd50f802" +Content-Type: text/html; charset=UTF-8 +Content-Length: 9903 +Vary: Accept-Encoding +Date: Fri, 12 Jun 2026 20:22:37 GMT +Connection: keep-alive +Keep-Alive: timeout=5 +``` +Which of these are MISSING? (cross-reference Lecture 1 OWASP Top 10:2025 — A06) +- [x] `Content-Security-Policy` +- [x] `Strict-Transport-Security` +- [ ] `X-Content-Type-Options: nosniff` +- [ ] `X-Frame-Options` + +### Top 3 Risks Observed (2-3 sentences each, in your own words) +1. Broken Access Control — Admin page is discoverable by any unauthorized user. Bruteforcing an admin's account credentials is enough to get full control over the shop. OWASP Top 10:2025 A01. +2. Security Misconfiguration — Missing security headers, vulnerable to client-side attacks such as Cross-Site Scripting. OWASP Top 10:2025 A05. +3. Injection — The responses seems to be taken directly from the database. If there are no server-side checks of user-input, the DB is vulnerable to SQL-injection. OWASP Top 10:2025 A04. + +## PR Template Setup + +- File: `.github/PULL_REQUEST_TEMPLATE.md` +- Sections included: Goal / Changes / Testing / Artifacts & Screenshots +- Checklist items: + - [ ] Title is clear (`feat(labN): ` style) + - [ ] No secrets/large temp files committed + - [ ] Submission file at `submissions/labN.md` exists +- Auto-fill verified: [ ] Yes — PR description showed my template (screenshot or link to draft PR) + +## GitHub Community + +Starring repositories helps increasing their popularity and shows what you're interested in to other people. Following other developers helps stay up to date with their activity and projects. \ No newline at end of file diff --git a/submissions/lab10.md b/submissions/lab10.md new file mode 100644 index 000000000..3f0f39273 --- /dev/null +++ b/submissions/lab10.md @@ -0,0 +1,53 @@ +# Lab 10 — Submission + +## Task 1: DefectDojo Setup + Import + +### DefectDojo version +- Version installed: 3.1.101 + +### Product + Engagement +- Product ID: 1 +- Product name: OWASP Juice Shop +- Engagement ID: 1 +- Engagement status: In Progress + +### Imports completed +| Lab | Scan type | File | Findings imported | +|-----|-----------|------|------------------:| +| 4 | Anchore Grype | grype-from-sbom.json | 110 | +| 4 | Trivy Scan | trivy.json | 115 | +| 6 | Checkov Scan | results_json.json | 80 | +| 7 | Trivy Scan (image) | trivy-image.json | 51 | +| **Total raw imports** | | | 356 | +| **After dedup** | | | 152 | + +### Dedup example (Lecture 10 slide 11) +- CVE/ID: CVE-2010-4756 (GHSA-35jh-r3h4-6jhm) +- Number of source tools: 2 (Anchore Grype + Trivy Scan) +- DefectDojo's single finding ID: 93 + +### Lab 9 – Falco runtime monitoring + +Falco 0.43.1 was deployed with the modern BPF probe and custom rules. +It monitored a container named `lab9-target` (alpine:3.20). The log file +is located at `labs/lab9/logs/falco.log`. + +**Detected events:** + +| Timestamp (UTC) | Priority | Rule | Description | +|-----------------------|----------|-----------------------------|-----------------------------------------------------------------------------| +| 2026-07-17T08:12:23 | Notice | Terminal shell in container | Shell spawned with attached terminal (`sh -lc echo "shell-in-container test"`) | +| 2026-07-17T08:12:33 | Warning | Read sensitive file untrusted | `/etc/shadow` opened for reading by `cat` | +| 2026-07-17T08:20:03 | Warning | Write to /tmp by container | Custom rule: file `/tmp/my-write.txt` created via `sh -lc echo "test" > /tmp/my-write.txt` | + +**Rule counts by severity:** +- WARNING: 2 +- NOTICE: 1 + +**Triggered rules:** +- Terminal shell in container +- Read sensitive file untrusted +- Write to /tmp by container (custom rule) + +Not imported into DefectDojo. No native Falco parser exists. +Runtime findings were reviewed manually and are documented here for completeness. \ No newline at end of file diff --git a/submissions/lab11.md b/submissions/lab11.md new file mode 100644 index 000000000..a56c57e48 --- /dev/null +++ b/submissions/lab11.md @@ -0,0 +1,158 @@ +# Lab 11 — BONUS — Submission + +## Task 1: TLS + Security Headers + +### nginx.conf (paste the SSL + header sections only — not the whole file) +```nginx +# ... + server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name _; + + ssl_certificate /etc/nginx/certs/localhost.crt; + ssl_certificate_key /etc/nginx/certs/localhost.key; + ssl_session_timeout 10m; + ssl_session_cache shared:SSL:10m; + ssl_protocols TLSv1.3; + ssl_conf_command Ciphersuites TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256; + ssl_prefer_server_ciphers off; + ssl_stapling off; +# ... + add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always; + add_header X-Frame-Options "DENY" always; + add_header X-Content-Type-Options "nosniff" always; + add_header Referrer-Policy "strict-origin-when-cross-origin" always; + add_header Permissions-Policy "camera=(), geolocation=(), microphone=()" always; + add_header Cross-Origin-Opener-Policy "same-origin" always; + add_header Cross-Origin-Resource-Policy "same-origin" always; + add_header Content-Security-Policy-Report-Only "default-src 'self'; script-src 'self'; style-src 'self'; font-src 'self'; img-src 'self'; connect-src 'self'" always; +# ... +``` + +### A. HTTPS redirect proof +``` +HTTP/1.1 308 Permanent Redirect +Server: nginx +Date: Fri, 17 Jul 2026 18:20:14 GMT +Content-Type: text/html +Content-Length: 164 +Connection: keep-alive +Location: https://localhost/ +X-Frame-Options: DENY +X-Content-Type-Options: nosniff +Referrer-Policy: strict-origin-when-cross-origin +Permissions-Policy: camera=(), geolocation=(), microphone=() +Cross-Origin-Opener-Policy: same-origin +Cross-Origin-Resource-Policy: same-origin +Content-Security-Policy-Report-Only: default-src 'self'; script-src 'self'; style-src 'self'; font-src 'self'; img-src 'self'; connect-src 'self' +``` + +### B. TLS 1.3 proof +``` +Connecting to ::1 +Can't use SSL_get_servername +depth=0 CN=juice.local +verify error:num=18:self-signed certificate +CONNECTION ESTABLISHED +Protocol version: TLSv1.3 +Ciphersuite: TLS_AES_256_GCM_SHA384 +Peer certificate: CN=juice.local +``` + +### C. Security headers proof (all 6 present) +``` +HTTP/1.1 200 OK +Server: nginx +Date: Fri, 17 Jul 2026 18:20:44 GMT +Content-Type: text/html; charset=UTF-8 +Content-Length: 9903 +Connection: keep-alive +Feature-Policy: payment 'self' +X-Recruiting: /#/jobs +Accept-Ranges: bytes +Cache-Control: public, max-age=0 +Last-Modified: Fri, 17 Jul 2026 18:19:25 GMT +ETag: W/"26af-19f714e0056" +Vary: Accept-Encoding +Strict-Transport-Security: max-age=63072000; includeSubDomains; preload +X-Frame-Options: DENY +X-Content-Type-Options: nosniff +Referrer-Policy: strict-origin-when-cross-origin +Permissions-Policy: camera=(), geolocation=(), microphone=() +Cross-Origin-Opener-Policy: same-origin +Cross-Origin-Resource-Policy: same-origin +Content-Security-Policy-Report-Only: default-src 'self'; script-src 'self'; style-src 'self'; font-src 'self'; img-src 'self'; connect-src 'self' +``` + +### What each header defends against (1 sentence each) +- HSTS: MitM attacks due to unencrypted connections over HTTP. +- X-Content-Type-Options: nosniff: MIME confusion attacks due to MIME‑type sniffing. +- X-Frame-Options: DENY: embedding the website into unauthorized malicious pages to steal data or manipulate user actions. +- Referrer-Policy: leaking any sensitive URL details to other origins. +- Permissions-Policy: getting access to browser features not used by the website. +- Content-Security-Policy: XSS and data injection attacks through resources loaded from other origins. + +## Task 2: Production Posture + +### Rate limit proof +| HTTP code | Count out of 60 | +|-----------|----------------:| +| 200 | 0 | +| 429 | 54 | +| 5xx | 6 | + +### Timeout enforced +Instead of `nc`, I used `openssl`. The unexpected end of file is caused by nginx closing the connection due to timeout. +``` +Connecting to ::1 +Can't use SSL_get_servername +depth=0 CN=juice.local +verify error:num=18:self-signed certificate +verify return:1 +depth=0 CN=juice.local +verify return:1 +18600000:error:0A000126:SSL routines::unexpected eof while reading:../openssl-3.5.4/ssl/record/rec_layer_s3.c:696: + +``` + +### Cipher hardening +``` +New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384 + Cipher : TLS_AES_256_GCM_SHA384 + Cipher : TLS_AES_256_GCM_SHA384 + +``` +Additionally, I ran `docker run --rm drwetter/testssl.sh --quiet --color 0 host.docker.internal:443 2>&1 | grep "TLS_AES_256_GCM_SHA384.*X25519" | head -1` which gave this result: +``` + Java 8u442 (OpenJDK) TLSv1.3 TLS_AES_256_GCM_SHA384 253 bit ECDH (X25519) +``` +**Conclusion:** The TLS 1.3 cipher `TLS_AES_256_GCM_SHA384` is negotiated, and the key exchange uses the X25519 elliptic curve (as confirmed by the `ECDH (X25519)` annotation). + +### Cert rotation runbook (7 steps) + +1. **Detect expiry** + Continuously monitor certificate expiration dates (e.g., `openssl x509 -enddate -noout -in cert.pem` or automated alerts). Alert at 30 days, page at 7 days before expiry. + +2. **Order new cert** + Generate a new certificate signing request (CSR) and obtain a fresh certificate. Use Let's Encrypt + certbot (or an internal CA) to produce the new `fullchain.pem` and `privkey.pem`. + +3. **Validate** + Inspect the new certificate (`openssl x509 -in newcert.pem -text`) and verify the chain (`openssl verify -CAfile ca.pem newcert.pem`). Ensure the CN/SANs, expiry, and key match expectations. + +4. **Atomic swap** + Place the new certificate and key in a staging directory, then atomically replace the live files. Use a symlink swap (`ln -sf newcert.pem live/cert.pem`) or a rename operation, followed by a graceful reload (`nginx -s reload`). + +5. **Verify** + Confirm the new certificate is served: `curl -vk https://yoursite.com | head -1` should show the new serial/expiry. Run `testssl.sh` for a full posture check. Test application functionality. + +6. **Rollback plan** + Keep the previous certificate and key on disk for at least 7 days. If the new certificate causes issues, revert the symlink (or restore the old files) and reload Nginx. Document the rollback procedure. + +7. **Audit** + Log the rotation event with the certificate serial number, expiry date, timestamp, and operator. Send the audit record to your SIEM or defect tracker for traceability. + +### What OCSP stapling buys you (2-3 sentences, reference Reading 11) + +OCSP stapling allows the server to periodically fetch the certificate's revocation status from the issuing CA and attach (“staple”) that signed response to the TLS handshake. This eliminates the extra client round-trip to the CA's OCSP responder, improving performance and preventing the CA from learning which sites each user visits (privacy). In a production environment with a publicly‑trusted certificate, stapling provides fast, privacy‑preserving revocation checking; for a self‑signed lab certificate there is no CA to respond to OCSP queries, so `ssl_stapling` has no effect (it's just documentation‑only). \ No newline at end of file diff --git a/submissions/lab2.md b/submissions/lab2.md new file mode 100644 index 000000000..486c74836 --- /dev/null +++ b/submissions/lab2.md @@ -0,0 +1,29 @@ +## Task 1: Baseline Threat Model + +### Risk count by severity +| Severity | Count | +|----------|------:| +| Critical | 0 | +| High | 0 | +| Elevated | 4 | +| Medium | 14 | +| Low | 5 | +| **Total** | 23 | + +### Top 5 risks (paste from `jq` output) +1. **cross-site-scripting** — Cross-Site Scripting (XSS) risk at Juice Shop Application; severity: elevated; affecting: juice-shop +2. **missing-authentication** — Missing Authentication covering communication link To App from Reverse Proxy to Juice Shop Application; severity: elevated; affecting: juice-shop +3. **unencrypted-communication** - Unencrypted Communication named Direct to App (no proxy) between User Browser and Juice Shop Application transferring authentication data (like credentials, token, session-id, etc.); severity: elevated; affecting: user-browser +4. **unencrypted-communication** - Unencrypted Communication named To App between Reverse Proxy and Juice Shop Application; severity: elevated; affecting: reverse-proxy +5. **unnecessary-data-transfer** - Unnecessary Data Transfer of Tokens & Sessions data at User Browser from/to Juice Shop Application; severity: low; affecting: user-browser + +### STRIDE mapping (Lecture 2 slide 7) +For each top-5 risk, name the STRIDE letter(s) it primarily violates: +- Risk 1: **I** — A malicious actor can easily steal user credentials and/or personal data via an XSS attack. +- Risk 2: **S** — Any attacker who was access to the internal network can impersonate the proxy and send malicious requests directly to the app. +- Risk 3: **I** — Unencrypted data transfer via http is vulnerable to MitM attacks. +- Risk 4: **I** — Same as Risk 3 but within an internal network. +- Risk 5: **I** — Increases the attack surface for malicious actors, exposing user sessions unnecessarily. + +### Trust boundary observation +Looking at `data-flow-diagram.png`, there is an arrow going from the internet into container network for direct communication between a web-browser and the app, completely bypassing the proxy and using an unencrypted communication channel (Risk 3). It is particularly attractive to an attacker because any credentials and session tokens can be easily intercepted with a MitM attack. \ No newline at end of file diff --git a/submissions/lab3.md b/submissions/lab3.md new file mode 100644 index 000000000..6dd265804 --- /dev/null +++ b/submissions/lab3.md @@ -0,0 +1,81 @@ +# Lab 3 — Submission + +## Task 1: SSH Commit Signing + +### Local configuration +- `git config --global gpg.format` → +- `git config --global user.signingkey` → +- `git config --global commit.gpgsign` → + +### Local verification +Output of `git log --show-signature -1`: +``` +commit 3981230e2cb6f39734f156b910ab6f0b775a147d (HEAD -> feature/lab3) +Good "git" signature for 47586934+err0r522@users.noreply.github.com with ED25519 key +``` +Although the key is public, I had to remove the fingerprint (gitleaks). +``` +Author: err0r522 <47586934+err0r522@users.noreply.github.com> +Date: Fri Jun 26 21:54:59 2026 +0300 + + test: first signed commit +``` + +### GitHub verification +- Direct link to your most recent commit on GitHub: [Link](https://github.com/err0r522/DevSecOps-Intro/commit/3981230e2cb6f39734f156b910ab6f0b775a147d) +- Screenshot of the Verified badge: Link to image file in PR + +### One-paragraph reflection (2-3 sentences) +A malicious actor can make a commit using a team member's name and email address to impersonate them and push malicious code on their behalf. However, such commit won't have the Verified badge, so if the team member normally signs their commits, the unverified commit will immediately stand out and allow them to prove they weren't the one who pushed it. + +## Task 2: Pre-commit + gitleaks + +### `.pre-commit-config.yaml` +``` +repos: + - repo: https://github.com/gitleaks/gitleaks + rev: v8.24.2 + hooks: + - id: gitleaks + - repo: https://github.com/pre-commit/pre-commit-hooks + rev: v6.0.0 + hooks: + - id: detect-private-key + - id: check-added-large-files +``` + +### `pre-commit install` output +``` +pre-commit installed at .git\hooks\pre-commit +``` + +### The blocked commit +Output of the `git commit` that gitleaks blocked (the failing hook output): +``` +- hook id: gitleaks +- exit code: 1 + +○ + │╲ + │ ○ + ○ ░ + ░ gitleaks + +Finding: GH_PAT=REDACTED +Secret: REDACTED +RuleID: github-pat +Entropy: 4.143943 +File: submissions/leak-attempt.txt +Line: 2 +Fingerprint: submissions/leak-attempt.txt:github-pat:2 + +10:36PM INF 1 commits scanned. +10:36PM INF scanned ~101 bytes (101 bytes) in 68.9ms +10:36PM WRN leaks found: 1 +``` + +### Tune-out exercise +Suppose a teammate insists they need to commit `AKIA*` strings because they're documentation examples in `docs/`. Briefly describe two approaches: +1. **Inline allowlist** — `[allowlist]` block in `.gitleaks.toml`. This is OK when the strings are easily identifiable as fake and only show up in one place. However, it is not okay to make many of such exceptions as they tend to accumulate. +2. **Path exclusion** — `paths: [docs/]` in `.gitleaks.toml`. It is risky if the directory contains any leftover logs or dumps. Though human error is also a risk on it's own, whoever writes the docs can make an intentional or accidental mistake. +``` \ No newline at end of file diff --git a/submissions/lab4.md b/submissions/lab4.md new file mode 100644 index 000000000..945614987 --- /dev/null +++ b/submissions/lab4.md @@ -0,0 +1,79 @@ +# Lab 4 — Submission + +## Task 1: Syft + Grype on Juice Shop + +### SBOM stats +- `juice-shop.cdx.json` component count: 1846 +- `juice-shop.cdx.json` size: 1504963 bytes (1.44 MB) +- `juice-shop.spdx.json` component count: 911 + +### Grype severity breakdown (paste table or JSON) +| Severity | Count | +|----------|------:| +| Critical | 7 | +| High | 52 | +| Medium | 36 | +| Low | 6 | +| Negligible | 7 | +| **Total** | 108 | + +### Top 10 CVEs (paste from jq output) +| CVE | Severity | Package | Installed | Fix | +|-----|----------|---------|-----------|-----| +| GHSA-c7hr-j4mj-j2w6 | Critical | jsonwebtoken | 0.1.0 | 4.2.2 | +| GHSA-c7hr-j4mj-j2w6 | Critical | jsonwebtoken | 0.4.0 | 4.2.2 | +| GHSA-jf85-cpcp-j695 | Critical | lodash | 2.4.2 | 4.17.12 | +| GHSA-xwcq-pm8m-c4vf | Critical | crypto-js | 3.3.0 | 4.2.0 | +| CVE-2026-5450 | Critical | libc6 | 2.41-12+deb13u2 | | +| CVE-2026-34182 | Critical | libssl3t64 | 3.5.5-1~deb13u2 | 3.5.6-1~deb13u2 | +| GHSA-5mrr-rgp6-x4gr | Critical | marsdb | 0.6.11 | | +| GHSA-35jh-r3h4-6jhm | High | lodash | 2.4.2 | 4.17.21 | +| GHSA-8hfj-j24r-96c4 | High | moment | 2.0.0 | 2.29.2 | +| GHSA-p6mc-m468-83gw | High | lodash.set | 4.3.2 | | + +### Fix-available rate +Out of the top 10 CVEs, 7 out of 10 have a fix available. This means we must prioritize fixing those vulnurabilities first, as they already have an immediate fix and are too critical to ignore. We can use Grype in a CI workflow and fail builds if high or critical CVEs with immediate fixes are detected (Slide 12 of the lecture). + +## Bonus: Sign-Ready SBOM for Lab 8 + +### CycloneDX schema version +- `specVersion`: 1.7 +- `bomFormat`: CycloneDX + +### Image digest captured +- `docker inspect ... RepoDigests`: sha256:fd58bdc9745416afce8184ee0666278a436574633ea7880365153a63bfd418b0 + +### Attestation predicate (paste first 30 lines of juice-shop-attestation.json) + +``` +{ + "_type": "https://in-toto.io/Statement/v1", + "subject": [ + { + "name": "bkimminich/juice-shop:v20.0.0", + "digest": { + "sha256": "sha256:fd58bdc9745416afce8184ee0666278a436574633ea7880365153a63bfd418b0" + } + } + ], + "predicateType": "https://cyclonedx.org/bom/v1.5", + "predicate": { + "$schema": "http://cyclonedx.org/schema/bom-1.7.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.7", + "serialNumber": "urn:uuid:c9f730f3-8484-493e-b1dd-573b77aff8b3", + "version": 1, + "metadata": { + "timestamp": "2026-07-03T21:55:10+03:00", + "tools": { + "components": [ + { + "type": "application", + "author": "anchore", + "name": "syft", + "version": "1.46.0" + } + ] + }, + "component": { +``` \ No newline at end of file diff --git a/submissions/lab5.md b/submissions/lab5.md new file mode 100644 index 000000000..6ca509cbd --- /dev/null +++ b/submissions/lab5.md @@ -0,0 +1,22 @@ +# Lab 5 — Submission + +## Task 1: DAST with OWASP ZAP + +### Baseline (unauthenticated) scan +- Duration: 10 minutes +- Total alerts: 10 + +| Severity | Count | +|----------|------:| +| High | 0 | +| Medium | 2 | +| Low | 5 | +| Informational | 3 | + +### Authenticated full scan +- Duration: 1 hour 30 minutes +- Total alerts: 0, it crashed with an error + +### The "10–20× more" claim (Lecture 5 slide 11) +I could not verify the claim. +I tried to run the authenticated scan twice, it crashed on activeScan both times. \ No newline at end of file diff --git a/submissions/lab6.md b/submissions/lab6.md new file mode 100644 index 000000000..1317b01c7 --- /dev/null +++ b/submissions/lab6.md @@ -0,0 +1,21 @@ +# Lab 6 — Submission + +## Task 1: Checkov on Terraform + +### Terraform scan (passed/failed per framework) +| Framework | Passed | Failed | +|-----------|-------:|-------:| +| terraform | 49 | 78 | +| secrets | 0 | 2 | + +### Top 5 rule IDs (by frequency) +| Rule ID | Count | What it checks | +|---------|------:|----------------| +| CKV_AWS_289 | 4 | Ensure IAM policies does not allow permissions management / resource exposure without constraints | +| CKV_AWS_355 | 4 | Ensure no IAM policies documents allow "*" as a statement's resource for restrictable actions | +| CKV_AWS_23 | 3 | Ensure every security groups rule has a description | +| CKV_AWS_288 | 3 | Ensure IAM policies does not allow data exfiltration | +| CKV_AWS_290 | 3 | Ensure IAM policies does not allow write access without constraints | + +### Module-leverage analysis (Lecture 6 slide 17) +Every IAM policy in `iqm.tf` sets `Resource = "*"`. `admin_policy`, `s3_full_access`, `service_policy` and `privilege_escalation` together trigger 16 findings across `CKV_AWS_289`, `CKV_AWS_355`, `CKV_AWS_288`, and `CKV_AWS_290`. Dropping that wildcard would fix all four of them. \ No newline at end of file diff --git a/submissions/lab7.md b/submissions/lab7.md new file mode 100644 index 000000000..1830f2623 --- /dev/null +++ b/submissions/lab7.md @@ -0,0 +1,34 @@ +# Lab 7 — Submission + +## Task 1: Trivy Image + Config Scan + +### Image scan severity breakdown +| Severity | Total | With fix available | +|----------|------:|------------------:| +| Critical | 6 | 4 | +| High | 44 | 43 | +| **Total** | 50 | 47 | + +### Top 10 CVEs with fixes +| CVE | Severity | Package | Installed | Fix | +|-----|----------|---------|-----------|-----| +| CVE-2023-46233 | CRITICAL | crypto-js | 3.3.0 | 4.2.0 | +| CVE-2015-9235 | CRITICAL | jsonwebtoken | 0.1.0 | 4.2.2 | +| CVE-2015-9235 | CRITICAL | jsonwebtoken | 0.4.0 | 4.2.2 | +| CVE-2019-10744 | CRITICAL | lodash | 2.4.2 | 4.17.12 | +| CVE-2026-45447 | HIGH | libssl3t64 | 3.5.5-1~deb13u2 | 3.5.6-1~deb13u2 | +| NSWG-ECO-428 | HIGH | base64url | 0.0.6 | >=3.0.0 | +| CVE-2020-15084 | HIGH | express-jwt | 0.1.3 | 6.0.0 | +| CVE-2022-25881 | HIGH | http-cache-semantics | 3.8.1 | 4.1.1 | +| CVE-2022-23539 | HIGH | jsonwebtoken | 0.1.0 | 9.0.0 | +| NSWG-ECO-17 | HIGH | jsonwebtoken | 0.1.0 | >=4.2.2 | + +### Compared to Lab 4's Grype scan +Look back at your Lab 4 Grype results on the same image. Pick **two CVEs**: +1. BOTH Grype and Trivy found a CVE in jsonwebtoken (CVE-2015-9235/GHSA-c7hr-j4mj-j2w6). +2. Grype found and Trivy missed a CVE in libc6 (CVE-2026-5450). + +As mentioned in Lecture 4, "Grype and Trivy match installed deps against CVE DBs". +In the first case, both DBs had this vulnerability listed and thus produced the same result. Though despite that, +Grype used GitHub Advisory alias instead of the CVE index. +In the second case, only one of the DBs had the vulnerability listed probably due to database freshness. \ No newline at end of file diff --git a/submissions/lab8.md b/submissions/lab8.md new file mode 100644 index 000000000..e4ac0847f --- /dev/null +++ b/submissions/lab8.md @@ -0,0 +1,93 @@ +# Lab 8 — Submission + +## Task 1: Sign + Tamper Demo + +### Registry + image push +- Registry container: `lab8-registry` running on `localhost:5000` +- Image pushed: `localhost:5000/juice-shop:v20.0.0` +- Image digest: `localhost:5000/juice-shop@sha256:7cc03b0e0b5b622f82834fab6ee428a4ca2de5853f9ece07e7ade795e3834271` + +### Signing +- Output of `cosign sign` (just the success line is fine): +``` +tlog entry created with index: 2138921334 +Pushing signature to: localhost:5000/juice-shop +``` + +### Verification (PASSED) +Output of `cosign verify` on original digest: +```json +[{"critical":{"identity":{"docker-reference":"localhost:5000/juice-shop"},"image":{"docker-manifest-digest":"sha256:7cc03b0e0b5b622f82834fab6ee428a4ca2de5853f9ece07e7ade795e3834271"},"type":"cosign container image signature"},"optional":{"Bundle":{"SignedEntryTimestamp":"MEUCIQD2N/cteSJxILttOAGrcJe2vcKeTDhmK569TVyHofU/XQIgbsa4oHPMpi5VYInPygQ6v2Hss4nxOuiuTNJoZUdDboc=","Payload":{"body":"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","integratedTime":1783712137,"logIndex":2138921334,"logID":"c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d"}}}}] +``` + +### Tamper Demo (FAILED — correctly) +Output of `cosign verify` on tampered digest: +``` +WARNING: Skipping tlog verification is an insecure practice that lacks of transparency and auditability verification for the signature. +Error: no signatures found +main.go:69: error during command execution: no signatures found +``` + +### Sanity — original still verifies +``` +WARNING: Skipping tlog verification is an insecure practice that lacks of transparency and auditability verification for the signature. + +Verification for localhost:5000/juice-shop@sha256:7cc03b0e0b5b622f82834fab6ee428a4ca2de5853f9ece07e7ade795e3834271 -- +The following checks were performed on each of these signatures: + - The cosign claims were validated + - The signatures were verified against the specified public key +``` + +### Why digest binding matters (Lecture 8 slide 6) +If Cosign signed the tag instead, the tampered image re-tagged as `v20.0.0-tampered` would have verified successfully. Bounding the signature to a mutable tag name allows an attacker to completely bypass the integrity check. + +## Task 2: SBOM + Provenance Attestations + +### SBOM attestation +- Attached: yes +- Verify-attestation output (first 30 lines of decoded payload): +Note: the output doesn't show `_type`, `subject`, and `predicateType` because the given command filtered for +`.predicate`. As the consequence, the json file consists only of predicacte with components. +```json +{ + "_type": "https://in-toto.io/Statement/v1", + "subject": [ + { + "name": "bkimminich/juice-shop:v20.0.0", + "digest": { + "sha256": "sha256:fd58bdc9745416afce8184ee0666278a436574633ea7880365153a63bfd418b0" + } + } + ], + "predicateType": "https://cyclonedx.org/bom/v1.5", + "predicate": { + "$schema": "http://cyclonedx.org/schema/bom-1.7.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.7", + "serialNumber": "urn:uuid:c9f730f3-8484-493e-b1dd-573b77aff8b3", + "version": 1, + "metadata": { + "timestamp": "2026-07-03T21:55:10+03:00", + "tools": { + "components": [ + { + "type": "application", + "author": "anchore", + "name": "syft", + "version": "1.46.0" + } + ] + }, + "component": { +``` +- Component count matches Lab 4 source: yes +- diff between Lab 4 SBOM and the extracted-from-attestation SBOM: empty diff + +### Provenance attestation +- Attached: yes +- Builder ID in predicate: `https://localhost/lab8-student` +- buildType in predicate: `https://example.com/lab8/local-build` + +### What this gives a Lab 9 verifier (2-3 sentences) + +When Log4Shell hits, you can instantly check the SBOM to see if Log4j is present and let Kyverno block the image before it runs. Without the SBOM, you have to scan the image or wait for an alert - by then the vulnerable container might already be live. \ No newline at end of file diff --git a/submissions/lab9.md b/submissions/lab9.md new file mode 100644 index 000000000..169333381 --- /dev/null +++ b/submissions/lab9.md @@ -0,0 +1,116 @@ +# Lab 9 — Submission + +## Task 1: Runtime Detection with Falco + +### Baseline alert A — Terminal shell in container +```json +{ + //... + "output_fields": { + //... + "container.image.repository": "alpine", + "container.image.tag": "3.20", + "container.name": "lab9-target", + //... + "proc.cmdline": "sh -lc echo \"shell-in-container test\"", + "proc.exepath": "/bin/busybox", + "proc.name": "sh", + "proc.pname": "runc", + //... + }, + "priority": "Notice", + "rule": "Terminal shell in container", + "source": "syscall", + "tags": [ + "T1059", + "container", + "maturity_stable", + "mitre_execution", + "shell" + ], + "time": "2026-07-17T08:12:23.072037770Z" +} +``` + +### Baseline alert B — Read sensitive file untrusted (`cat /etc/shadow`) +```json +{ + //... + "output_fields": { + //... + "container.image.repository": "alpine", + "container.image.tag": "3.20", + "container.name": "lab9-target", + //... + "fd.name": "/etc/shadow", + //... + "proc.cmdline": "cat /etc/shadow", + "proc.exepath": "/bin/busybox", + "proc.name": "cat", + //... + }, + "priority": "Warning", + "rule": "Read sensitive file untrusted", + "source": "syscall", + "tags": [ + "T1555", + "container", + "filesystem", + "host", + "maturity_stable", + "mitre_credential_access" + ], + "time": "2026-07-17T08:12:33.163894952Z" +} +``` + +### Custom rule (paste labs/lab9/falco/rules/custom-rules.yaml) +```yaml +- rule: Write to /tmp by container + desc: Container modifying system config under /tmp + condition: > + open_write and + container.id != host and + fd.name startswith /tmp/ + output: > + Config write in container (container=%container.name user=%user.name + file=%fd.name proc=%proc.cmdline) + priority: WARNING + tags: [container, drift] +``` + +### Custom rule fired +```json +{ + //... + "output_fields": { + //... + "container.image.repository": "alpine", + "container.image.tag": "3.20", + "container.name": "lab9-target", + //... + "fd.name": "/tmp/my-write.txt", + //... + "proc.cmdline": "sh -lc echo \"test\" > /tmp/my-write.txt", + "user.name": "root" + }, + "priority": "Warning", + "rule": "Write to /tmp by container", + "source": "syscall", + "tags": [ + "container", + "drift" + ], + "time": "2026-07-17T08:20:03.590751606Z" +} +``` + +### Tuning consideration (Lecture 9 slide 8) +To account for legitimate uses I can add +exception clause(s) (`and not proc.name=...`) +to allow certain processes to bypass this rule. + +If the list grows too large, I'd switch to using the `exceptions:` block instead +to make the list better structured, easier to audit and configure. + +As the last resort, it might be worth to disable the rule altogether if it becomes unmanageable. \ No newline at end of file