# findings

scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 8fa1f2444979ec05
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: @rentaldrivego/api UNKNOWN
message: Package discovered: @rentaldrivego/api UNKNOWN
remediation: Track and scan dependencies.
raw_finding:
{"id": "731fc15901c69a78", "name": "@rentaldrivego/api", "version": "UNKNOWN", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:\\@rentaldrivego\\/api:\\@rentaldrivego\\/api:*:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/%40rentaldrivego/api", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "apps/api", "integrity": "", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 5e204c38947c3756
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: @rentaldrivego/dashboard 1.0.0
message: Package discovered: @rentaldrivego/dashboard 1.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "fb550e5d7052cd7e", "name": "@rentaldrivego/dashboard", "version": "1.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:\\@rentaldrivego\\/dashboard:\\@rentaldrivego\\/dashboard:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/%40rentaldrivego/dashboard@1.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "", "integrity": "", "dependencies": {"@rentaldrivego/types": "*", "autoprefixer": "^10.4.19", "dayjs": "^1.11.11", "lucide-react": "^0.376.0", "next": "14.2.3", "postcss": "^8.4.38", "react": "^18.3.1", "react-dom": "^18.3.1", "recharts": "^2.12.7", "sharp": "^0.34.5", "socket.io-client": "^4.7.5", "tailwindcss": "^3.4.3", "zod": "^3.23.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: f5ec61dae5249a19
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: @rentaldrivego/dashboard UNKNOWN
message: Package discovered: @rentaldrivego/dashboard UNKNOWN
remediation: Track and scan dependencies.
raw_finding:
{"id": "8302af283dd2fb59", "name": "@rentaldrivego/dashboard", "version": "UNKNOWN", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:\\@rentaldrivego\\/dashboard:\\@rentaldrivego\\/dashboard:*:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/%40rentaldrivego/dashboard", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "apps/dashboard", "integrity": "", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 71d8c650760061fb
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: @rentaldrivego/database 1.0.0
message: Package discovered: @rentaldrivego/database 1.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "bd8906fc40f841ac", "name": "@rentaldrivego/database", "version": "1.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:\\@rentaldrivego\\/database:\\@rentaldrivego\\/database:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/%40rentaldrivego/database@1.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "", "integrity": "", "dependencies": {"@prisma/client": "^5.13.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 8b90575e8ea88bd4
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: @rentaldrivego/database UNKNOWN
message: Package discovered: @rentaldrivego/database UNKNOWN
remediation: Track and scan dependencies.
raw_finding:
{"id": "2bdca263d566c09a", "name": "@rentaldrivego/database", "version": "UNKNOWN", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:\\@rentaldrivego\\/database:\\@rentaldrivego\\/database:*:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/%40rentaldrivego/database", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "packages/database", "integrity": "", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 8a8bb5bfb12506b1
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: @rentaldrivego/marketplace 1.0.0
message: Package discovered: @rentaldrivego/marketplace 1.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "71e9d3c366707710", "name": "@rentaldrivego/marketplace", "version": "1.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:\\@rentaldrivego\\/marketplace:\\@rentaldrivego\\/marketplace:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/%40rentaldrivego/marketplace@1.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "", "integrity": "", "dependencies": {"@rentaldrivego/types": "*", "autoprefixer": "^10.4.19", "dayjs": "^1.11.11", "lucide-react": "^0.376.0", "next": "14.2.3", "postcss": "^8.4.38", "react": "^18.3.1", "react-dom": "^18.3.1", "tailwindcss": "^3.4.3", "zod": "^3.23.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: f48ad70ae4557b5a
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: @rentaldrivego/marketplace UNKNOWN
message: Package discovered: @rentaldrivego/marketplace UNKNOWN
remediation: Track and scan dependencies.
raw_finding:
{"id": "999e66650845f9f4", "name": "@rentaldrivego/marketplace", "version": "UNKNOWN", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:\\@rentaldrivego\\/marketplace:\\@rentaldrivego\\/marketplace:*:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/%40rentaldrivego/marketplace", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "apps/marketplace", "integrity": "", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 93a5bccb6ac6aa22
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: @rentaldrivego/public-site 1.0.0
message: Package discovered: @rentaldrivego/public-site 1.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "f54f88caa8e97b5c", "name": "@rentaldrivego/public-site", "version": "1.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:\\@rentaldrivego\\/public-site:\\@rentaldrivego\\/public-site:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@rentaldrivego\\/public-site:\\@rentaldrivego\\/public_site:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@rentaldrivego\\/public_site:\\@rentaldrivego\\/public-site:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@rentaldrivego\\/public_site:\\@rentaldrivego\\/public_site:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@rentaldrivego\\/public:\\@rentaldrivego\\/public-site:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@rentaldrivego\\/public:\\@rentaldrivego\\/public_site:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/%40rentaldrivego/public-site@1.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "", "integrity": "", "dependencies": {"@rentaldrivego/types": "*", "autoprefixer": "^10.4.19", "dayjs": "^1.11.11", "lucide-react": "^0.376.0", "next": "14.2.3", "postcss": "^8.4.38", "react": "^18.3.1", "react-dom": "^18.3.1", "tailwindcss": "^3.4.3", "zod": "^3.23.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 308a85ace6addbbf
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: @rentaldrivego/types 1.0.0
message: Package discovered: @rentaldrivego/types 1.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "ba9eab15fb9d9b6f", "name": "@rentaldrivego/types", "version": "1.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:\\@rentaldrivego\\/types:\\@rentaldrivego\\/types:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/%40rentaldrivego/types@1.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "", "integrity": "", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 7f447d2356272ad6
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: @rentaldrivego/types UNKNOWN
message: Package discovered: @rentaldrivego/types UNKNOWN
remediation: Track and scan dependencies.
raw_finding:
{"id": "f26df386702211f3", "name": "@rentaldrivego/types", "version": "UNKNOWN", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:\\@rentaldrivego\\/types:\\@rentaldrivego\\/types:*:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/%40rentaldrivego/types", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "packages/types", "integrity": "", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 4b6c5d98db4a925c
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: @selderee/plugin-htmlparser2 0.11.0
message: Package discovered: @selderee/plugin-htmlparser2 0.11.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "264d7bf353437253", "name": "@selderee/plugin-htmlparser2", "version": "0.11.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:\\@selderee\\/plugin-htmlparser2:\\@selderee\\/plugin-htmlparser2:0.11.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@selderee\\/plugin-htmlparser2:\\@selderee\\/plugin_htmlparser2:0.11.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@selderee\\/plugin_htmlparser2:\\@selderee\\/plugin-htmlparser2:0.11.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@selderee\\/plugin_htmlparser2:\\@selderee\\/plugin_htmlparser2:0.11.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@selderee\\/plugin:\\@selderee\\/plugin-htmlparser2:0.11.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@selderee\\/plugin:\\@selderee\\/plugin_htmlparser2:0.11.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/%40selderee/plugin-htmlparser2@0.11.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/@selderee/plugin-htmlparser2/-/plugin-htmlparser2-0.11.0.tgz", "integrity": "sha512-P33hHGdldxGabLFjPPpaTxVolMrzrcegejx+0GxjrIb9Zv48D8yAIA/QTDR2dFl7Uz7urX8aX6+5bCZslr+gWQ==", "dependencies": {"domhandler": "^5.0.3", "selderee": "^0.11.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 96b2d8a0d3d3dca0
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: @socket.io/component-emitter 3.1.2
message: Package discovered: @socket.io/component-emitter 3.1.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "32ce324a035d4e3a", "name": "@socket.io/component-emitter", "version": "3.1.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:\\@socket.io\\/component-emitter:\\@socket.io\\/component-emitter:3.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@socket.io\\/component-emitter:\\@socket.io\\/component_emitter:3.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@socket.io\\/component_emitter:\\@socket.io\\/component-emitter:3.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@socket.io\\/component_emitter:\\@socket.io\\/component_emitter:3.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@socket.io\\/component:\\@socket.io\\/component-emitter:3.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@socket.io\\/component:\\@socket.io\\/component_emitter:3.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/%40socket.io/component-emitter@3.1.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/@socket.io/component-emitter/-/component-emitter-3.1.2.tgz", "integrity": "sha512-9BCxFwvbGg/RsZK9tjXd8s4UcwR0MWeFQ1XEKIQVVvAGJyINdrqKMcTRyLoK8Rse1GjzLV9cwjWV1olXRWEXVA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: de2edab9a58d26f1
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: @swc/counter 0.1.3
message: Package discovered: @swc/counter 0.1.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "d1ab0047814562a3", "name": "@swc/counter", "version": "0.1.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "Apache-2.0", "spdxExpression": "Apache-2.0", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:\\@swc\\/counter:\\@swc\\/counter:0.1.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/%40swc/counter@0.1.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/@swc/counter/-/counter-0.1.3.tgz", "integrity": "sha512-e2BR4lsJkkRlKZ/qCHPw9ZaSxc0MVUd7gtbtaB7aMvHeJVYe8sOB8DBZkP2DtISHGSku9sCK6T6cnY0CtXrOCQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 6291224f1bf77e3f
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: @swc/helpers 0.5.21
message: Package discovered: @swc/helpers 0.5.21
remediation: Track and scan dependencies.
raw_finding:
{"id": "f2d04f064acf1b61", "name": "@swc/helpers", "version": "0.5.21", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "Apache-2.0", "spdxExpression": "Apache-2.0", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:\\@swc\\/helpers:\\@swc\\/helpers:0.5.21:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/%40swc/helpers@0.5.21", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/@swc/helpers/-/helpers-0.5.21.tgz", "integrity": "sha512-jI/VAmtdjB/RnI8GTnokyX7Ug8c+g+ffD6QRLa6XQewtnGyukKkKSk3wLTM3b5cjt1jNh9x0jfVlagdN2gDKQg==", "dependencies": {"tslib": "^2.8.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: ec0bf772439a91e3
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: @swc/helpers 0.5.5
message: Package discovered: @swc/helpers 0.5.5
remediation: Track and scan dependencies.
raw_finding:
{"id": "72bc47189d44cca0", "name": "@swc/helpers", "version": "0.5.5", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "Apache-2.0", "spdxExpression": "Apache-2.0", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:\\@swc\\/helpers:\\@swc\\/helpers:0.5.5:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/%40swc/helpers@0.5.5", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/@swc/helpers/-/helpers-0.5.5.tgz", "integrity": "sha512-KGYxvIOXcceOAbEk4bi/dVLEK9z8sZ0uBB3Il5b1rhfClSpcX0yfRO0KmTkqR2cnQDymwLB+25ZyMzICg/cm/A==", "dependencies": {"@swc/counter": "^0.1.3", "tslib": "^2.4.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 19698700a5d5ff08
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: @tootallnate/once 2.0.0
message: Package discovered: @tootallnate/once 2.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "a7bdaefe075a54be", "name": "@tootallnate/once", "version": "2.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:\\@tootallnate\\/once:\\@tootallnate\\/once:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/%40tootallnate/once@2.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/@tootallnate/once/-/once-2.0.0.tgz", "integrity": "sha512-XCuKFP5PS55gnMVu3dty8KPatLqUoy/ZYzDzAGCQ8JNFCkLXzmI7vNHCR+XpbZaMWQK/vQubr7PkYq8g470J/A==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 80bf92167036230d
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: @types/caseless 0.12.5
message: Package discovered: @types/caseless 0.12.5
remediation: Track and scan dependencies.
raw_finding:
{"id": "7578f19b88adc968", "name": "@types/caseless", "version": "0.12.5", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:\\@types\\/caseless:\\@types\\/caseless:0.12.5:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/%40types/caseless@0.12.5", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/@types/caseless/-/caseless-0.12.5.tgz", "integrity": "sha512-hWtVTC2q7hc7xZ/RLbxapMvDMgUnDvKvMOpKal4DrMyfGBUfB1oKaZlIRr6mJL+If3bAP6sV/QneGzF6tJjZDg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: a5c07d1028c25891
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: @types/cors 2.8.19
message: Package discovered: @types/cors 2.8.19
remediation: Track and scan dependencies.
raw_finding:
{"id": "8b6775e086bda391", "name": "@types/cors", "version": "2.8.19", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:\\@types\\/cors:\\@types\\/cors:2.8.19:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/%40types/cors@2.8.19", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/@types/cors/-/cors-2.8.19.tgz", "integrity": "sha512-mFNylyeyqN93lfe/9CSxOGREz8cpzAhH+E93xJ4xWQf62V8sQ/24reV2nyzUWM6H6Xji+GGHpkbLe7pVoUEskg==", "dependencies": {"@types/node": "*"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: d3e89ddbd967f67d
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: @types/d3-array 3.2.2
message: Package discovered: @types/d3-array 3.2.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "59c0361f7de521dd", "name": "@types/d3-array", "version": "3.2.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:\\@types\\/d3-array:\\@types\\/d3-array:3.2.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3-array:\\@types\\/d3_array:3.2.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3_array:\\@types\\/d3-array:3.2.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3_array:\\@types\\/d3_array:3.2.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-array:3.2.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_array:3.2.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/%40types/d3-array@3.2.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/@types/d3-array/-/d3-array-3.2.2.tgz", "integrity": "sha512-hOLWVbm7uRza0BYXpIIW5pxfrKe0W+D5lrFiAEYR+pb6w3N2SwSMaJbXdUfSEv+dT4MfHBLtn5js0LAWaO6otw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 4a5d6407d36c3dfe
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: @types/d3-color 3.1.3
message: Package discovered: @types/d3-color 3.1.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "ad88e8187765d8aa", "name": "@types/d3-color", "version": "3.1.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:\\@types\\/d3-color:\\@types\\/d3-color:3.1.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3-color:\\@types\\/d3_color:3.1.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3_color:\\@types\\/d3-color:3.1.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3_color:\\@types\\/d3_color:3.1.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-color:3.1.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_color:3.1.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/%40types/d3-color@3.1.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/@types/d3-color/-/d3-color-3.1.3.tgz", "integrity": "sha512-iO90scth9WAbmgv7ogoq57O9YpKmFBbmoEoCHDB2xMBY0+/KVrqAaCDyCE16dUspeOvIxFFRI+0sEtqDqy2b4A==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 075de1dd01220805
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: @types/d3-ease 3.0.2
message: Package discovered: @types/d3-ease 3.0.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "df6234ea1d1790c8", "name": "@types/d3-ease", "version": "3.0.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:\\@types\\/d3-ease:\\@types\\/d3-ease:3.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3-ease:\\@types\\/d3_ease:3.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3_ease:\\@types\\/d3-ease:3.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3_ease:\\@types\\/d3_ease:3.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-ease:3.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_ease:3.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/%40types/d3-ease@3.0.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/@types/d3-ease/-/d3-ease-3.0.2.tgz", "integrity": "sha512-NcV1JjO5oDzoK26oMzbILE6HW7uVXOHLQvHshBUW4UMdZGfiY6v5BeQwh9a9tCzv+CeefZQHJt5SRgK154RtiA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: ac33d3528c07735d
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: @types/d3-interpolate 3.0.4
message: Package discovered: @types/d3-interpolate 3.0.4
remediation: Track and scan dependencies.
raw_finding:
{"id": "d2cfc65d37d7fda7", "name": "@types/d3-interpolate", "version": "3.0.4", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:\\@types\\/d3-interpolate:\\@types\\/d3-interpolate:3.0.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3-interpolate:\\@types\\/d3_interpolate:3.0.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3_interpolate:\\@types\\/d3-interpolate:3.0.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3_interpolate:\\@types\\/d3_interpolate:3.0.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-interpolate:3.0.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_interpolate:3.0.4:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/%40types/d3-interpolate@3.0.4", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/@types/d3-interpolate/-/d3-interpolate-3.0.4.tgz", "integrity": "sha512-mgLPETlrpVV1YRJIglr4Ez47g7Yxjl1lj7YKsiMCb27VJH9W8NVM6Bb9d8kkpG/uAQS5AmbA48q2IAolKKo1MA==", "dependencies": {"@types/d3-color": "*"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 9ef37f1ec9a73980
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: @types/d3-path 3.1.1
message: Package discovered: @types/d3-path 3.1.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "0128eed2457b60d1", "name": "@types/d3-path", "version": "3.1.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:\\@types\\/d3-path:\\@types\\/d3-path:3.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3-path:\\@types\\/d3_path:3.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3_path:\\@types\\/d3-path:3.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3_path:\\@types\\/d3_path:3.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-path:3.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_path:3.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/%40types/d3-path@3.1.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/@types/d3-path/-/d3-path-3.1.1.tgz", "integrity": "sha512-VMZBYyQvbGmWyWVea0EHs/BwLgxc+MKi1zLDCONksozI4YJMcTt8ZEuIR4Sb1MMTE8MMW49v0IwI5+b7RmfWlg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: b363e223fe02334b
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: @types/d3-scale 4.0.9
message: Package discovered: @types/d3-scale 4.0.9
remediation: Track and scan dependencies.
raw_finding:
{"id": "6f0b81bc9d69ce92", "name": "@types/d3-scale", "version": "4.0.9", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:\\@types\\/d3-scale:\\@types\\/d3-scale:4.0.9:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3-scale:\\@types\\/d3_scale:4.0.9:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3_scale:\\@types\\/d3-scale:4.0.9:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3_scale:\\@types\\/d3_scale:4.0.9:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-scale:4.0.9:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_scale:4.0.9:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/%40types/d3-scale@4.0.9", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/@types/d3-scale/-/d3-scale-4.0.9.tgz", "integrity": "sha512-dLmtwB8zkAeO/juAMfnV+sItKjlsw2lKdZVVy6LRr0cBmegxSABiLEpGVmSJJ8O08i4+sGR6qQtb6WtuwJdvVw==", "dependencies": {"@types/d3-time": "*"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 22226a3e628ac76c
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: @types/d3-shape 3.1.8
message: Package discovered: @types/d3-shape 3.1.8
remediation: Track and scan dependencies.
raw_finding:
{"id": "533995aeaf2ae857", "name": "@types/d3-shape", "version": "3.1.8", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:\\@types\\/d3-shape:\\@types\\/d3-shape:3.1.8:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3-shape:\\@types\\/d3_shape:3.1.8:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3_shape:\\@types\\/d3-shape:3.1.8:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3_shape:\\@types\\/d3_shape:3.1.8:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-shape:3.1.8:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_shape:3.1.8:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/%40types/d3-shape@3.1.8", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/@types/d3-shape/-/d3-shape-3.1.8.tgz", "integrity": "sha512-lae0iWfcDeR7qt7rA88BNiqdvPS5pFVPpo5OfjElwNaT2yyekbM0C9vK+yqBqEmHr6lDkRnYNoTBYlAgJa7a4w==", "dependencies": {"@types/d3-path": "*"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: e91025b60bc33c45
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: @types/d3-time 3.0.4
message: Package discovered: @types/d3-time 3.0.4
remediation: Track and scan dependencies.
raw_finding:
{"id": "d051a01827d6eb95", "name": "@types/d3-time", "version": "3.0.4", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:\\@types\\/d3-time:\\@types\\/d3-time:3.0.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3-time:\\@types\\/d3_time:3.0.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3_time:\\@types\\/d3-time:3.0.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3_time:\\@types\\/d3_time:3.0.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-time:3.0.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_time:3.0.4:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/%40types/d3-time@3.0.4", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/@types/d3-time/-/d3-time-3.0.4.tgz", "integrity": "sha512-yuzZug1nkAAaBlBBikKZTgzCeA+k1uy4ZFwWANOfKw5z5LRhV0gNA7gNkKm7HoK+HRN0wX3EkxGk0fpbWhmB7g==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 83378a6b374bc40d
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: @types/d3-timer 3.0.2
message: Package discovered: @types/d3-timer 3.0.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "a9187c78265f1b66", "name": "@types/d3-timer", "version": "3.0.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:\\@types\\/d3-timer:\\@types\\/d3-timer:3.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3-timer:\\@types\\/d3_timer:3.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3_timer:\\@types\\/d3-timer:3.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3_timer:\\@types\\/d3_timer:3.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3-timer:3.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/d3:\\@types\\/d3_timer:3.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/%40types/d3-timer@3.0.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/@types/d3-timer/-/d3-timer-3.0.2.tgz", "integrity": "sha512-Ps3T8E8dZDam6fUyNiMkekK3XUsaUEik+idO9/YjPtfj2qruF8tFBXS7XhtE4iIXBLxhmLjP3SXpLhVf21I9Lw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 4a3de97ef48e263d
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: @types/jsonwebtoken 9.0.10
message: Package discovered: @types/jsonwebtoken 9.0.10
remediation: Track and scan dependencies.
raw_finding:
{"id": "bbe9092f97742247", "name": "@types/jsonwebtoken", "version": "9.0.10", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:\\@types\\/jsonwebtoken:\\@types\\/jsonwebtoken:9.0.10:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/%40types/jsonwebtoken@9.0.10", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/@types/jsonwebtoken/-/jsonwebtoken-9.0.10.tgz", "integrity": "sha512-asx5hIG9Qmf/1oStypjanR7iKTv0gXQ1Ov/jfrX6kS/EO0OFni8orbmGCn0672NHR3kXHwpAwR+B368ZGN/2rA==", "dependencies": {"@types/ms": "*", "@types/node": "*"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: be245f9788db1459
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: @types/long 4.0.2
message: Package discovered: @types/long 4.0.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "69a126982af5137d", "name": "@types/long", "version": "4.0.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:\\@types\\/long:\\@types\\/long:4.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/%40types/long@4.0.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/@types/long/-/long-4.0.2.tgz", "integrity": "sha512-MqTGEo5bj5t157U6fA/BiDynNkn0YknVdh48CMPkTSpFTVmvao5UQmm7uEF6xBEo7qIMAlY/JSleYaE6VOdpaA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: b5bebd78899827a5
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: @types/ms 2.1.0
message: Package discovered: @types/ms 2.1.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "fa54533e742eac71", "name": "@types/ms", "version": "2.1.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:\\@types\\/ms:\\@types\\/ms:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/%40types/ms@2.1.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/@types/ms/-/ms-2.1.0.tgz", "integrity": "sha512-GsCCIZDE/p3i96vtEqx+7dBUGXrc7zeSK3wwPHIaRThS+9OhWIXRqzs4d6k1SVU8g91DrNRWxWUGhp5KXQb2VA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 191b23786146803d
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: @types/node 20.19.39
message: Package discovered: @types/node 20.19.39
remediation: Track and scan dependencies.
raw_finding:
{"id": "c19052194c7f9053", "name": "@types/node", "version": "20.19.39", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:\\@types\\/node:\\@types\\/node:20.19.39:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/%40types/node@20.19.39", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/@types/node/-/node-20.19.39.tgz", "integrity": "sha512-orrrD74MBUyK8jOAD/r0+lfa1I2MO6I+vAkmAWzMYbCcgrN4lCrmK52gRFQq/JRxfYPfonkr4b0jcY7Olqdqbw==", "dependencies": {"undici-types": "~6.21.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 9b5805676545e7d1
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: @types/node 22.19.17
message: Package discovered: @types/node 22.19.17
remediation: Track and scan dependencies.
raw_finding:
{"id": "b0b14dd646c615be", "name": "@types/node", "version": "22.19.17", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:\\@types\\/node:\\@types\\/node:22.19.17:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/%40types/node@22.19.17", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/@types/node/-/node-22.19.17.tgz", "integrity": "sha512-wGdMcf+vPYM6jikpS/qhg6WiqSV/OhG+jeeHT/KlVqxYfD40iYJf9/AE1uQxVWFvU7MipKRkRv8NSHiCGgPr8Q==", "dependencies": {"undici-types": "~6.21.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 08409c71d4ce88d9
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: @types/request 2.48.13
message: Package discovered: @types/request 2.48.13
remediation: Track and scan dependencies.
raw_finding:
{"id": "656ffeda0aaf4e8b", "name": "@types/request", "version": "2.48.13", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:\\@types\\/request:\\@types\\/request:2.48.13:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/%40types/request@2.48.13", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/@types/request/-/request-2.48.13.tgz", "integrity": "sha512-FGJ6udDNUCjd19pp0Q3iTiDkwhYup7J8hpMW9c4k53NrccQFFWKRho6hvtPPEhnXWKvukfwAlB6DbDz4yhH5Gg==", "dependencies": {"@types/caseless": "*", "@types/node": "*", "@types/tough-cookie": "*", "form-data": "^2.5.5"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: dd961f2e03e7418d
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: @types/tough-cookie 4.0.5
message: Package discovered: @types/tough-cookie 4.0.5
remediation: Track and scan dependencies.
raw_finding:
{"id": "cf24fb05ea581070", "name": "@types/tough-cookie", "version": "4.0.5", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:\\@types\\/tough-cookie:\\@types\\/tough-cookie:4.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/tough-cookie:\\@types\\/tough_cookie:4.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/tough_cookie:\\@types\\/tough-cookie:4.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/tough_cookie:\\@types\\/tough_cookie:4.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/tough:\\@types\\/tough-cookie:4.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:\\@types\\/tough:\\@types\\/tough_cookie:4.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/%40types/tough-cookie@4.0.5", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/@types/tough-cookie/-/tough-cookie-4.0.5.tgz", "integrity": "sha512-/Ad8+nIOV7Rl++6f1BdKxFSMgmoqEoYbHRpPcx3JEfv8VRsQe9Z4mCXeJBzxs7mbHY/XOZZuXlRNfhpVPbs6ZA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 7a188cdbd82f20f1
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: @types/ws 8.18.1
message: Package discovered: @types/ws 8.18.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "919683ef9260890b", "name": "@types/ws", "version": "8.18.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:\\@types\\/ws:\\@types\\/ws:8.18.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/%40types/ws@8.18.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/@types/ws/-/ws-8.18.1.tgz", "integrity": "sha512-ThVF6DCVhA8kUGy+aazFQ4kXQ7E1Ty7A3ypFOe0IcJV8O/M511G99AW24irKrW56Wt44yG9+ij8FaqoBGkuBXg==", "dependencies": {"@types/node": "*"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 89056081bb223fd4
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: abbrev 2.0.0
message: Package discovered: abbrev 2.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "0277554910df9b38", "name": "abbrev", "version": "2.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:abbrev:abbrev:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/abbrev@2.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/abbrev/-/abbrev-2.0.0.tgz", "integrity": "sha512-6/mh1E2u2YgEsCHdY0Yx5oW+61gZU+1vXaoiHHrpKeuRNNgFvS+/jrwHiQhB5apAf5oB7UB7E19ol2R2LKH8hQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 873a6392b6c08a39
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: abort-controller 3.0.0
message: Package discovered: abort-controller 3.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "02974b3dbbe4d3d6", "name": "abort-controller", "version": "3.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:abort-controller:abort-controller:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:abort-controller:abort_controller:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:abort_controller:abort-controller:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:abort_controller:abort_controller:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:abort:abort-controller:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:abort:abort_controller:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/abort-controller@3.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/abort-controller/-/abort-controller-3.0.0.tgz", "integrity": "sha512-h8lQ8tacZYnR3vNQTgibj+tODHI5/+l06Au2Pcriv/Gmet0eaj4TwWH41sO9wnHDiQsEj19q0drzdWdeAHtweg==", "dependencies": {"event-target-shim": "^5.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 661684530a17a73f
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: abs-svg-path 0.1.1
message: Package discovered: abs-svg-path 0.1.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "2eb8f1fab63663a1", "name": "abs-svg-path", "version": "0.1.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:abs-svg-path:abs-svg-path:0.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:abs-svg-path:abs_svg_path:0.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:abs_svg_path:abs-svg-path:0.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:abs_svg_path:abs_svg_path:0.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:abs-svg:abs-svg-path:0.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:abs-svg:abs_svg_path:0.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:abs_svg:abs-svg-path:0.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:abs_svg:abs_svg_path:0.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:abs:abs-svg-path:0.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:abs:abs_svg_path:0.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/abs-svg-path@0.1.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/abs-svg-path/-/abs-svg-path-0.1.1.tgz", "integrity": "sha512-d8XPSGjfyzlXC3Xx891DJRyZfqk5JU0BJrDQcsWomFIV1/BIzPW5HDH5iDdWpqWaav0YVIEzT1RHTwWr0FFshA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 27802507a1dbe242
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: accepts 1.3.8
message: Package discovered: accepts 1.3.8
remediation: Track and scan dependencies.
raw_finding:
{"id": "e96668e505272792", "name": "accepts", "version": "1.3.8", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:accepts:accepts:1.3.8:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/accepts@1.3.8", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/accepts/-/accepts-1.3.8.tgz", "integrity": "sha512-PYAthTa2m2VKxuvSD3DPC/Gy+U+sOA1LAuT8mkmRuvw+NACSaeXEQ+NHcVF7rONl6qcaxV3Uuemwawk+7+SJLw==", "dependencies": {"mime-types": "~2.1.34", "negotiator": "0.6.3"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 352cd9201a8ce90d
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /node_modules/@ungap/structured-clone/.github/workflows/node.js.yml
title: actions/checkout v2
message: Package discovered: actions/checkout v2
remediation: Track and scan dependencies.
raw_finding:
{"id": "b54bfb1da26ce9cd", "name": "actions/checkout", "version": "v2", "type": "github-action", "foundBy": "github-actions-usage-cataloger", "locations": [{"path": "/node_modules/@ungap/structured-clone/.github/workflows/node.js.yml", "accessPath": "/node_modules/@ungap/structured-clone/.github/workflows/node.js.yml", "annotations": {"evidence": "primary"}}], "licenses": [], "language": "", "cpes": [{"cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:github/actions/checkout@v2", "metadataType": "github-actions-use-statement", "metadata": {"value": "actions/checkout@v2"}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 3e33aad3d5646f4e
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /node_modules/busboy/.github/workflows/ci.yml
title: actions/checkout v2
message: Package discovered: actions/checkout v2
remediation: Track and scan dependencies.
raw_finding:
{"id": "8939931398f7f376", "name": "actions/checkout", "version": "v2", "type": "github-action", "foundBy": "github-actions-usage-cataloger", "locations": [{"path": "/node_modules/busboy/.github/workflows/ci.yml", "accessPath": "/node_modules/busboy/.github/workflows/ci.yml", "annotations": {"evidence": "primary"}}], "licenses": [], "language": "", "cpes": [{"cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:github/actions/checkout@v2", "metadataType": "github-actions-use-statement", "metadata": {"value": "actions/checkout@v2"}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: c9bdf9f43faeb29d
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /node_modules/busboy/.github/workflows/lint.yml
title: actions/checkout v2
message: Package discovered: actions/checkout v2
remediation: Track and scan dependencies.
raw_finding:
{"id": "9ed4a1365893a541", "name": "actions/checkout", "version": "v2", "type": "github-action", "foundBy": "github-actions-usage-cataloger", "locations": [{"path": "/node_modules/busboy/.github/workflows/lint.yml", "accessPath": "/node_modules/busboy/.github/workflows/lint.yml", "annotations": {"evidence": "primary"}}], "licenses": [], "language": "", "cpes": [{"cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:github/actions/checkout@v2", "metadataType": "github-actions-use-statement", "metadata": {"value": "actions/checkout@v2"}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: b70772177f81ea1d
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /node_modules/streamsearch/.github/workflows/ci.yml
title: actions/checkout v2
message: Package discovered: actions/checkout v2
remediation: Track and scan dependencies.
raw_finding:
{"id": "bf473f4674a4b4c1", "name": "actions/checkout", "version": "v2", "type": "github-action", "foundBy": "github-actions-usage-cataloger", "locations": [{"path": "/node_modules/streamsearch/.github/workflows/ci.yml", "accessPath": "/node_modules/streamsearch/.github/workflows/ci.yml", "annotations": {"evidence": "primary"}}], "licenses": [], "language": "", "cpes": [{"cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:github/actions/checkout@v2", "metadataType": "github-actions-use-statement", "metadata": {"value": "actions/checkout@v2"}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: ec35dedecdc67bae
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /node_modules/streamsearch/.github/workflows/lint.yml
title: actions/checkout v2
message: Package discovered: actions/checkout v2
remediation: Track and scan dependencies.
raw_finding:
{"id": "7ec5891cc205a593", "name": "actions/checkout", "version": "v2", "type": "github-action", "foundBy": "github-actions-usage-cataloger", "locations": [{"path": "/node_modules/streamsearch/.github/workflows/lint.yml", "accessPath": "/node_modules/streamsearch/.github/workflows/lint.yml", "annotations": {"evidence": "primary"}}], "licenses": [], "language": "", "cpes": [{"cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:github/actions/checkout@v2", "metadataType": "github-actions-use-statement", "metadata": {"value": "actions/checkout@v2"}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 4424fb771af041f1
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /node_modules/stream-shift/.github/workflows/test.yml
title: actions/checkout v3
message: Package discovered: actions/checkout v3
remediation: Track and scan dependencies.
raw_finding:
{"id": "8effbdc22037c585", "name": "actions/checkout", "version": "v3", "type": "github-action", "foundBy": "github-actions-usage-cataloger", "locations": [{"path": "/node_modules/stream-shift/.github/workflows/test.yml", "accessPath": "/node_modules/stream-shift/.github/workflows/test.yml", "annotations": {"evidence": "primary"}}], "licenses": [], "language": "", "cpes": [{"cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:github/actions/checkout@v3", "metadataType": "github-actions-use-statement", "metadata": {"value": "actions/checkout@v3"}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: a9754521213a3bbe
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /node_modules/reusify/.github/workflows/ci.yml
title: actions/checkout v4
message: Package discovered: actions/checkout v4
remediation: Track and scan dependencies.
raw_finding:
{"id": "fd10fce47017fa13", "name": "actions/checkout", "version": "v4", "type": "github-action", "foundBy": "github-actions-usage-cataloger", "locations": [{"path": "/node_modules/reusify/.github/workflows/ci.yml", "accessPath": "/node_modules/reusify/.github/workflows/ci.yml", "annotations": {"evidence": "primary"}}], "licenses": [], "language": "", "cpes": [{"cpe": "cpe:2.3:a:actions\\/checkout:actions\\/checkout:v4:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:github/actions/checkout@v4", "metadataType": "github-actions-use-statement", "metadata": {"value": "actions/checkout@v4"}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: d2f68bf6461c8bf2
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /node_modules/busboy/.github/workflows/ci.yml
title: actions/setup-node v1
message: Package discovered: actions/setup-node v1
remediation: Track and scan dependencies.
raw_finding:
{"id": "6b0792dcccc67817", "name": "actions/setup-node", "version": "v1", "type": "github-action", "foundBy": "github-actions-usage-cataloger", "locations": [{"path": "/node_modules/busboy/.github/workflows/ci.yml", "accessPath": "/node_modules/busboy/.github/workflows/ci.yml", "annotations": {"evidence": "primary"}}], "licenses": [], "language": "", "cpes": [{"cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:github/actions/setup-node@v1", "metadataType": "github-actions-use-statement", "metadata": {"value": "actions/setup-node@v1"}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: e6602c50b5a9ed75
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /node_modules/busboy/.github/workflows/lint.yml
title: actions/setup-node v1
message: Package discovered: actions/setup-node v1
remediation: Track and scan dependencies.
raw_finding:
{"id": "0dc9162b75e9df6b", "name": "actions/setup-node", "version": "v1", "type": "github-action", "foundBy": "github-actions-usage-cataloger", "locations": [{"path": "/node_modules/busboy/.github/workflows/lint.yml", "accessPath": "/node_modules/busboy/.github/workflows/lint.yml", "annotations": {"evidence": "primary"}}], "licenses": [], "language": "", "cpes": [{"cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:github/actions/setup-node@v1", "metadataType": "github-actions-use-statement", "metadata": {"value": "actions/setup-node@v1"}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 75e343f3c07ad957
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /node_modules/streamsearch/.github/workflows/ci.yml
title: actions/setup-node v1
message: Package discovered: actions/setup-node v1
remediation: Track and scan dependencies.
raw_finding:
{"id": "303b3812127b618f", "name": "actions/setup-node", "version": "v1", "type": "github-action", "foundBy": "github-actions-usage-cataloger", "locations": [{"path": "/node_modules/streamsearch/.github/workflows/ci.yml", "accessPath": "/node_modules/streamsearch/.github/workflows/ci.yml", "annotations": {"evidence": "primary"}}], "licenses": [], "language": "", "cpes": [{"cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:github/actions/setup-node@v1", "metadataType": "github-actions-use-statement", "metadata": {"value": "actions/setup-node@v1"}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: f81ee12d2fe7942d
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /node_modules/streamsearch/.github/workflows/lint.yml
title: actions/setup-node v1
message: Package discovered: actions/setup-node v1
remediation: Track and scan dependencies.
raw_finding:
{"id": "5dcd76ce8f7aa30c", "name": "actions/setup-node", "version": "v1", "type": "github-action", "foundBy": "github-actions-usage-cataloger", "locations": [{"path": "/node_modules/streamsearch/.github/workflows/lint.yml", "accessPath": "/node_modules/streamsearch/.github/workflows/lint.yml", "annotations": {"evidence": "primary"}}], "licenses": [], "language": "", "cpes": [{"cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:github/actions/setup-node@v1", "metadataType": "github-actions-use-statement", "metadata": {"value": "actions/setup-node@v1"}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: f2b699c115f128e7
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /node_modules/@ungap/structured-clone/.github/workflows/node.js.yml
title: actions/setup-node v2
message: Package discovered: actions/setup-node v2
remediation: Track and scan dependencies.
raw_finding:
{"id": "94c6b30301562d90", "name": "actions/setup-node", "version": "v2", "type": "github-action", "foundBy": "github-actions-usage-cataloger", "locations": [{"path": "/node_modules/@ungap/structured-clone/.github/workflows/node.js.yml", "accessPath": "/node_modules/@ungap/structured-clone/.github/workflows/node.js.yml", "annotations": {"evidence": "primary"}}], "licenses": [], "language": "", "cpes": [{"cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:github/actions/setup-node@v2", "metadataType": "github-actions-use-statement", "metadata": {"value": "actions/setup-node@v2"}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: c207c7fc955b5ded
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /node_modules/stream-shift/.github/workflows/test.yml
title: actions/setup-node v3
message: Package discovered: actions/setup-node v3
remediation: Track and scan dependencies.
raw_finding:
{"id": "c1170e00c0039987", "name": "actions/setup-node", "version": "v3", "type": "github-action", "foundBy": "github-actions-usage-cataloger", "locations": [{"path": "/node_modules/stream-shift/.github/workflows/test.yml", "accessPath": "/node_modules/stream-shift/.github/workflows/test.yml", "annotations": {"evidence": "primary"}}], "licenses": [], "language": "", "cpes": [{"cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:github/actions/setup-node@v3", "metadataType": "github-actions-use-statement", "metadata": {"value": "actions/setup-node@v3"}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 751a614666804651
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /node_modules/reusify/.github/workflows/ci.yml
title: actions/setup-node v4
message: Package discovered: actions/setup-node v4
remediation: Track and scan dependencies.
raw_finding:
{"id": "de6527b74c32bd7a", "name": "actions/setup-node", "version": "v4", "type": "github-action", "foundBy": "github-actions-usage-cataloger", "locations": [{"path": "/node_modules/reusify/.github/workflows/ci.yml", "accessPath": "/node_modules/reusify/.github/workflows/ci.yml", "annotations": {"evidence": "primary"}}], "licenses": [], "language": "", "cpes": [{"cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:actions\\/setup:actions\\/setup-node:v4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:actions\\/setup:actions\\/setup_node:v4:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:github/actions/setup-node@v4", "metadataType": "github-actions-use-statement", "metadata": {"value": "actions/setup-node@v4"}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 87ee223622bbf049
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: agent-base 6.0.2
message: Package discovered: agent-base 6.0.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "12d1ed2dd95a1a7c", "name": "agent-base", "version": "6.0.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:agent-base:agent-base:6.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:agent-base:agent_base:6.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:agent_base:agent-base:6.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:agent_base:agent_base:6.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:agent:agent-base:6.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:agent:agent_base:6.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/agent-base@6.0.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz", "integrity": "sha512-RZNwNclF7+MS/8bDg70amg32dyeZGZxiDuQmZxKLAlQjr3jGyLx+4Kkk58UO7D2QdgFIQCovuSuZESne6RG6XQ==", "dependencies": {"debug": "4"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 3360c58589af5938
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: agent-base 7.1.4
message: Package discovered: agent-base 7.1.4
remediation: Track and scan dependencies.
raw_finding:
{"id": "f7259be6132b188d", "name": "agent-base", "version": "7.1.4", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:agent-base:agent-base:7.1.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:agent-base:agent_base:7.1.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:agent_base:agent-base:7.1.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:agent_base:agent_base:7.1.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:agent:agent-base:7.1.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:agent:agent_base:7.1.4:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/agent-base@7.1.4", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/agent-base/-/agent-base-7.1.4.tgz", "integrity": "sha512-MnA+YT8fwfJPgBx3m60MNqakm30XOkyIoH1y6huTQvC0PwZG7ki8NacLBcrPbNoo8vEZy7Jpuk7+jMO+CUovTQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 83a9e4994a4bae21
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: ansi-regex 5.0.1
message: Package discovered: ansi-regex 5.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "434b3315d409487e", "name": "ansi-regex", "version": "5.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:ansi-regex_project:ansi-regex:5.0.1:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/ansi-regex@5.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz", "integrity": "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 55dee429ce8d0ebc
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: ansi-regex 6.2.2
message: Package discovered: ansi-regex 6.2.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "351fe1b55f0afa57", "name": "ansi-regex", "version": "6.2.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:ansi-regex_project:ansi-regex:6.2.2:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/ansi-regex@6.2.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.2.2.tgz", "integrity": "sha512-Bq3SmSpyFHaWjPk8If9yc6svM8c56dB5BAtW4Qbw5jHTwwXXcTLoRMkpDJp6VL0XzlWaCHTXrkFURMYmD0sLqg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 78d002033ed5f3df
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: ansi-styles 4.3.0
message: Package discovered: ansi-styles 4.3.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "d7348151a8592cc2", "name": "ansi-styles", "version": "4.3.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:ansi-styles:ansi-styles:4.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ansi-styles:ansi_styles:4.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ansi_styles:ansi-styles:4.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ansi_styles:ansi_styles:4.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ansi:ansi-styles:4.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ansi:ansi_styles:4.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/ansi-styles@4.3.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz", "integrity": "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==", "dependencies": {"color-convert": "^2.0.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 5a3dc64757afbf1c
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: ansi-styles 6.2.3
message: Package discovered: ansi-styles 6.2.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "b7d3f8e2ee8c8206", "name": "ansi-styles", "version": "6.2.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:ansi-styles:ansi-styles:6.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ansi-styles:ansi_styles:6.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ansi_styles:ansi-styles:6.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ansi_styles:ansi_styles:6.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ansi:ansi-styles:6.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ansi:ansi_styles:6.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/ansi-styles@6.2.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-6.2.3.tgz", "integrity": "sha512-4Dj6M28JB+oAH8kFkTLUo+a2jwOFkuqb3yucU0CANcRRUbxS0cP0nZYCGjcc3BNXwRIsUVmDGgzawme7zvJHvg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: a0800e7f7f0173c9
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: any-promise 1.3.0
message: Package discovered: any-promise 1.3.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "dc69ebae19192ee6", "name": "any-promise", "version": "1.3.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:any-promise:any-promise:1.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:any-promise:any_promise:1.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:any_promise:any-promise:1.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:any_promise:any_promise:1.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:any:any-promise:1.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:any:any_promise:1.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/any-promise@1.3.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/any-promise/-/any-promise-1.3.0.tgz", "integrity": "sha512-7UvmKalWRt1wgjL1RrGxoSJW/0QZFIegpeGvZG9kjp8vrRu55XTHbwnqq2GpXm9uLbcuhxm3IqX9OB4MZR1b2A==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 4e58783cc9de2b91
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: anymatch 3.1.3
message: Package discovered: anymatch 3.1.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "0f1f6d6adbfca65a", "name": "anymatch", "version": "3.1.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:jonschlinkert:anymatch:3.1.3:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/anymatch@3.1.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/anymatch/-/anymatch-3.1.3.tgz", "integrity": "sha512-KMReFUr0B4t+D+OBkjR3KYqvocp2XaSzO55UcB6mgQMd3KbcE+mWTyvVV7D/zsdEbNnV6acZUutkiHQXvTr1Rw==", "dependencies": {"normalize-path": "^3.0.0", "picomatch": "^2.0.4"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: c5e1f2e50730714b
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: append-field 1.0.0
message: Package discovered: append-field 1.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "02ed6bf0c016d0d3", "name": "append-field", "version": "1.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:append-field:append-field:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:append-field:append_field:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:append_field:append-field:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:append_field:append_field:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:append:append-field:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:append:append_field:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/append-field@1.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/append-field/-/append-field-1.0.0.tgz", "integrity": "sha512-klpgFSWLW1ZEs8svjfb7g4qWY0YS5imI82dTg+QahUvJ8YqAY0P10Uk8tTyh9ZGuYEZEMaeJYCF5BFuX552hsw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 413f489faf894e63
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: arg 5.0.2
message: Package discovered: arg 5.0.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "c190b80836cef557", "name": "arg", "version": "5.0.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:arg:arg:5.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/arg@5.0.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/arg/-/arg-5.0.2.tgz", "integrity": "sha512-PYjyFOLKQ9y57JvQ6QLo8dAgNqswh8M1RMJYdQduT6xbWSgK36P/Z/v+p888pM69jMMfS8Xd8F6I1kQ/I9HUGg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 0ee2786b2f8f8ad4
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: array-flatten 1.1.1
message: Package discovered: array-flatten 1.1.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "f61b69e470287928", "name": "array-flatten", "version": "1.1.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:array-flatten:array-flatten:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:array-flatten:array_flatten:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:array_flatten:array-flatten:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:array_flatten:array_flatten:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:array:array-flatten:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:array:array_flatten:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/array-flatten@1.1.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz", "integrity": "sha512-PCVAQswWemu6UdxsDFFX/+gVeYqKAod3D3UVm91jHwynguOwAvYPhx8nNlM++NqRcK6CxxpUafjmhIdKiHibqg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 374f7e7db72708e5
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: arrify 2.0.1
message: Package discovered: arrify 2.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "e733388ffa39ebc5", "name": "arrify", "version": "2.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:arrify:arrify:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/arrify@2.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/arrify/-/arrify-2.0.1.tgz", "integrity": "sha512-3duEwti880xqi4eAMN8AyR4a0ByT90zoYdLlevfrvU43vb0YZwZVfxOgxWrLXXXpyugL0hNZc9G6BiB5B3nUug==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: e3ccd8258c57c2f8
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: async-retry 1.3.3
message: Package discovered: async-retry 1.3.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "3f1747f861c5fded", "name": "async-retry", "version": "1.3.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:async-retry:async-retry:1.3.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:async-retry:async_retry:1.3.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:async_retry:async-retry:1.3.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:async_retry:async_retry:1.3.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:async:async-retry:1.3.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:async:async_retry:1.3.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/async-retry@1.3.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/async-retry/-/async-retry-1.3.3.tgz", "integrity": "sha512-wfr/jstw9xNi/0teMHrRW7dsz3Lt5ARhYNZ2ewpadnhaIp5mbALhOAP+EAdsC7t4Z6wqsDVv9+W6gm1Dk9mEyw==", "dependencies": {"retry": "0.13.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: c5b9a7358fc490f2
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: asynckit 0.4.0
message: Package discovered: asynckit 0.4.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "3f371bd1625a90e5", "name": "asynckit", "version": "0.4.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:asynckit:asynckit:0.4.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/asynckit@0.4.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz", "integrity": "sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: b5ad0267f42a44eb
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: autoprefixer 10.5.0
message: Package discovered: autoprefixer 10.5.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "9d0845c4768cfcf5", "name": "autoprefixer", "version": "10.5.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:autoprefixer:autoprefixer:10.5.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/autoprefixer@10.5.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/autoprefixer/-/autoprefixer-10.5.0.tgz", "integrity": "sha512-FMhOoZV4+qR6aTUALKX2rEqGG+oyATvwBt9IIzVR5rMa2HRWPkxf+P+PAJLD1I/H5/II+HuZcBJYEFBpq39ong==", "dependencies": {"browserslist": "^4.28.2", "caniuse-lite": "^1.0.30001787", "fraction.js": "^5.3.4", "picocolors": "^1.1.1", "postcss-value-parser": "^4.2.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: fba99cf19e7cc071
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: axios 1.15.2
message: Package discovered: axios 1.15.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "691f5259c0d155d0", "name": "axios", "version": "1.15.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:axios:axios:1.15.2:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/axios@1.15.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/axios/-/axios-1.15.2.tgz", "integrity": "sha512-wLrXxPtcrPTsNlJmKjkPnNPK2Ihe0hn0wGSaTEiHRPxwjvJwT3hKmXF4dpqxmPO9SoNb2FsYXj/xEo0gHN+D5A==", "dependencies": {"follow-redirects": "^1.15.11", "form-data": "^4.0.5", "proxy-from-env": "^2.1.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 15b2afab0d6c8b1b
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: balanced-match 1.0.2
message: Package discovered: balanced-match 1.0.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "0d7c80c1e227b7e2", "name": "balanced-match", "version": "1.0.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:balanced-match:balanced-match:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:balanced-match:balanced_match:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:balanced_match:balanced-match:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:balanced_match:balanced_match:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:balanced:balanced-match:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:balanced:balanced_match:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/balanced-match@1.0.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz", "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: e3263834d404d719
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: base64-js 0.0.8
message: Package discovered: base64-js 0.0.8
remediation: Track and scan dependencies.
raw_finding:
{"id": "b2d621b6dd16cf05", "name": "base64-js", "version": "0.0.8", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:base64-js:base64-js:0.0.8:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:base64-js:base64_js:0.0.8:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:base64_js:base64-js:0.0.8:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:base64_js:base64_js:0.0.8:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:base64:base64-js:0.0.8:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:base64:base64_js:0.0.8:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/base64-js@0.0.8", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/base64-js/-/base64-js-0.0.8.tgz", "integrity": "sha512-3XSA2cR/h/73EzlXXdU6YNycmYI7+kicTxks4eJg2g39biHR84slg2+des+p7iHYhbRg/udIS4TD53WabcOUkw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 277066fc01f56c50
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: base64-js 1.5.1
message: Package discovered: base64-js 1.5.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "c7ab39b9720e240f", "name": "base64-js", "version": "1.5.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:base64-js:base64-js:1.5.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:base64-js:base64_js:1.5.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:base64_js:base64-js:1.5.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:base64_js:base64_js:1.5.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:base64:base64-js:1.5.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:base64:base64_js:1.5.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/base64-js@1.5.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz", "integrity": "sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: d8b667ce3a0cff7b
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: base64id 2.0.0
message: Package discovered: base64id 2.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "224462b6727019f7", "name": "base64id", "version": "2.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:base64id:base64id:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/base64id@2.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/base64id/-/base64id-2.0.0.tgz", "integrity": "sha512-lGe34o6EHj9y3Kts9R4ZYs/Gr+6N7MCaMlIFA3F1R2O5/m7K06AxfSeO5530PEERE6/WyEg3lsuyw4GHlPZHog==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: b03c61c0d46ca441
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: baseline-browser-mapping 2.10.24
message: Package discovered: baseline-browser-mapping 2.10.24
remediation: Track and scan dependencies.
raw_finding:
{"id": "013c8659dba6bad8", "name": "baseline-browser-mapping", "version": "2.10.24", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "Apache-2.0", "spdxExpression": "Apache-2.0", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:baseline-browser-mapping:baseline-browser-mapping:2.10.24:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:baseline-browser-mapping:baseline_browser_mapping:2.10.24:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:baseline_browser_mapping:baseline-browser-mapping:2.10.24:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:baseline_browser_mapping:baseline_browser_mapping:2.10.24:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:baseline-browser:baseline-browser-mapping:2.10.24:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:baseline-browser:baseline_browser_mapping:2.10.24:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:baseline_browser:baseline-browser-mapping:2.10.24:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:baseline_browser:baseline_browser_mapping:2.10.24:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:baseline:baseline-browser-mapping:2.10.24:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:baseline:baseline_browser_mapping:2.10.24:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/baseline-browser-mapping@2.10.24", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/baseline-browser-mapping/-/baseline-browser-mapping-2.10.24.tgz", "integrity": "sha512-I2NkZOOrj2XuguvWCK6OVh9GavsNjZjK908Rq3mIBK25+GD8vPX5w2WdxVqnQ7xx3SrZJiCiZFu+/Oz50oSYSA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 83b4bdfed9e1341d
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: basic-auth 2.0.1
message: Package discovered: basic-auth 2.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "3e5df9b4f6b62db4", "name": "basic-auth", "version": "2.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:basic-auth:basic-auth:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:basic-auth:basic_auth:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:basic_auth:basic-auth:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:basic_auth:basic_auth:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:basic:basic-auth:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:basic:basic_auth:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/basic-auth@2.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/basic-auth/-/basic-auth-2.0.1.tgz", "integrity": "sha512-NF+epuEdnUYVlGuhaxbbq+dvJttwLnGY+YixlXlME5KpQ5W3CnXA5cVTneY3SPbPDRkcjMbifrwmFYcClgOZeg==", "dependencies": {"safe-buffer": "5.1.2"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 673442d13a9240b9
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: bcryptjs 2.4.3
message: Package discovered: bcryptjs 2.4.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "06243f2e41cd3912", "name": "bcryptjs", "version": "2.4.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:bcryptjs:bcryptjs:2.4.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/bcryptjs@2.4.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/bcryptjs/-/bcryptjs-2.4.3.tgz", "integrity": "sha512-V/Hy/X9Vt7f3BbPJEi8BdVFMByHi+jNXrYkW3huaybV/kQ0KJg0Y6PkEMbn+zeT+i+SiKZ/HMqJGIIt4LZDqNQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: b36a32eeee7b64f7
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: bidi-js 1.0.3
message: Package discovered: bidi-js 1.0.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "983a70fcd42b01da", "name": "bidi-js", "version": "1.0.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:bidi-js:bidi-js:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:bidi-js:bidi_js:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:bidi_js:bidi-js:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:bidi_js:bidi_js:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:bidi:bidi-js:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:bidi:bidi_js:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/bidi-js@1.0.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/bidi-js/-/bidi-js-1.0.3.tgz", "integrity": "sha512-RKshQI1R3YQ+n9YJz2QQ147P66ELpa1FQEg20Dk8oW9t2KgLbpDLLp9aGZ7y8WHSshDknG0bknqGw5/tyCs5tw==", "dependencies": {"require-from-string": "^2.0.2"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 2fa656db5288bebd
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: bignumber.js 9.3.1
message: Package discovered: bignumber.js 9.3.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "0debd0f90c403668", "name": "bignumber.js", "version": "9.3.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:bignumber.js:bignumber.js:9.3.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/bignumber.js@9.3.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/bignumber.js/-/bignumber.js-9.3.1.tgz", "integrity": "sha512-Ko0uX15oIUS7wJ3Rb30Fs6SkVbLmPBAKdlm7q9+ak9bbIeFf0MwuBsQV6z7+X768/cHsfg+WlysDWJcmthjsjQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 7dd5ae9dd664c020
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: binary-extensions 2.3.0
message: Package discovered: binary-extensions 2.3.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "a472eb11fead94f4", "name": "binary-extensions", "version": "2.3.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:binary-extensions:binary-extensions:2.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:binary-extensions:binary_extensions:2.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:binary_extensions:binary-extensions:2.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:binary_extensions:binary_extensions:2.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:binary:binary-extensions:2.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:binary:binary_extensions:2.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/binary-extensions@2.3.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/binary-extensions/-/binary-extensions-2.3.0.tgz", "integrity": "sha512-Ceh+7ox5qe7LJuLHoY0feh3pHuUDHAcRUeyL2VYghZwfpkNIy/+8Ocg0a3UuSoYzavmylwuLWQOf3hl0jjMMIw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: d29a5e4fb92420c3
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: body-parser 1.20.5
message: Package discovered: body-parser 1.20.5
remediation: Track and scan dependencies.
raw_finding:
{"id": "04b33f5cfaf593a5", "name": "body-parser", "version": "1.20.5", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:openjsf:body-parser:1.20.5:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/body-parser@1.20.5", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.5.tgz", "integrity": "sha512-3grm+/2tUOvu2cjJkvsIxrv/wVpfXQW4PsQHYm7yk4vfpu7Ekl6nEsYBoJUL6qDwZUx8wUhQ8tR2qz+ad9c9OA==", "dependencies": {"bytes": "~3.1.2", "content-type": "~1.0.5", "debug": "2.6.9", "depd": "2.0.0", "destroy": "~1.2.0", "http-errors": "~2.0.1", "iconv-lite": "~0.4.24", "on-finished": "~2.4.1", "qs": "~6.15.1", "raw-body": "~2.5.3", "type-is": "~1.6.18", "unpipe": "~1.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 8d245dad35d0de48
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: brace-expansion 2.1.0
message: Package discovered: brace-expansion 2.1.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "833f3564230327b0", "name": "brace-expansion", "version": "2.1.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:brace-expansion:brace-expansion:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:brace-expansion:brace_expansion:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:brace_expansion:brace-expansion:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:brace_expansion:brace_expansion:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:brace:brace-expansion:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:brace:brace_expansion:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/brace-expansion@2.1.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.0.tgz", "integrity": "sha512-TN1kCZAgdgweJhWWpgKYrQaMNHcDULHkWwQIspdtjV4Y5aurRdZpjAqn6yX3FPqTA9ngHCc4hJxMAMgGfve85w==", "dependencies": {"balanced-match": "^1.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 2c758a1366af3ce7
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: braces 3.0.3
message: Package discovered: braces 3.0.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "e8863a3d87ad712b", "name": "braces", "version": "3.0.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:braces_project:braces:3.0.3:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}, {"cpe": "cpe:2.3:a:jonschlinkert:braces:3.0.3:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/braces@3.0.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/braces/-/braces-3.0.3.tgz", "integrity": "sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA==", "dependencies": {"fill-range": "^7.1.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 4acea70fbe4d3073
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: brotli 1.3.3
message: Package discovered: brotli 1.3.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "6bc686959e36e164", "name": "brotli", "version": "1.3.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:brotli:brotli:1.3.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/brotli@1.3.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/brotli/-/brotli-1.3.3.tgz", "integrity": "sha512-oTKjJdShmDuGW94SyyaoQvAjf30dZaHnjJ8uAF+u2/vGJkJbJPJAT1gDiOJP5v1Zb6f9KEyW/1HpuaWIXtGHPg==", "dependencies": {"base64-js": "^1.1.2"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 08e716a2d2fe7179
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: browserify-zlib 0.2.0
message: Package discovered: browserify-zlib 0.2.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "adb6ab9adab6e7b8", "name": "browserify-zlib", "version": "0.2.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:browserify-zlib:browserify-zlib:0.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:browserify-zlib:browserify_zlib:0.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:browserify_zlib:browserify-zlib:0.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:browserify_zlib:browserify_zlib:0.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:browserify:browserify-zlib:0.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:browserify:browserify_zlib:0.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/browserify-zlib@0.2.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/browserify-zlib/-/browserify-zlib-0.2.0.tgz", "integrity": "sha512-Z942RysHXmJrhqk88FmKBVq/v5tqmSkDz7p54G/MGyjMnCFFnC79XWNbg+Vta8W6Wb2qtSZTSxIGkJrRpCFEiA==", "dependencies": {"pako": "~1.0.5"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 27d8113ce8ad07e6
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: browserslist 4.28.2
message: Package discovered: browserslist 4.28.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "4688a05ee871df84", "name": "browserslist", "version": "4.28.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:browserslist_project:browserslist:4.28.2:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/browserslist@4.28.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/browserslist/-/browserslist-4.28.2.tgz", "integrity": "sha512-48xSriZYYg+8qXna9kwqjIVzuQxi+KYWp2+5nCYnYKPTr0LvD89Jqk2Or5ogxz0NUMfIjhh2lIUX/LyX9B4oIg==", "dependencies": {"baseline-browser-mapping": "^2.10.12", "caniuse-lite": "^1.0.30001782", "electron-to-chromium": "^1.5.328", "node-releases": "^2.0.36", "update-browserslist-db": "^1.2.3"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 4b1e259ceb7e99ec
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: buffer-equal-constant-time 1.0.1
message: Package discovered: buffer-equal-constant-time 1.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "ea42e35a908d5ccd", "name": "buffer-equal-constant-time", "version": "1.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "BSD-3-Clause", "spdxExpression": "BSD-3-Clause", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:buffer-equal-constant-time:buffer-equal-constant-time:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:buffer-equal-constant-time:buffer_equal_constant_time:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:buffer_equal_constant_time:buffer-equal-constant-time:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:buffer_equal_constant_time:buffer_equal_constant_time:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:buffer-equal-constant:buffer-equal-constant-time:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:buffer-equal-constant:buffer_equal_constant_time:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:buffer_equal_constant:buffer-equal-constant-time:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:buffer_equal_constant:buffer_equal_constant_time:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:buffer-equal:buffer-equal-constant-time:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:buffer-equal:buffer_equal_constant_time:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:buffer_equal:buffer-equal-constant-time:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:buffer_equal:buffer_equal_constant_time:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:buffer:buffer-equal-constant-time:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:buffer:buffer_equal_constant_time:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/buffer-equal-constant-time@1.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/buffer-equal-constant-time/-/buffer-equal-constant-time-1.0.1.tgz", "integrity": "sha512-zRpUiDwd/xk6ADqPMATG8vc9VPrkck7T07OIx0gnjmJAnHnTVXNQG3vfvWNuiZIkwu9KrKdA1iJKfsfTVxE6NA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 991f80bfd3038fd0
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: buffer-from 1.1.2
message: Package discovered: buffer-from 1.1.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "98e22d90241a7628", "name": "buffer-from", "version": "1.1.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:buffer-from:buffer-from:1.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:buffer-from:buffer_from:1.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:buffer_from:buffer-from:1.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:buffer_from:buffer_from:1.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:buffer:buffer-from:1.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:buffer:buffer_from:1.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/buffer-from@1.1.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.2.tgz", "integrity": "sha512-E+XQCRwSbaaiChtv6k6Dwgc+bx+Bs6vuKJHHl5kox/BaKbhiXzqQOwK4cO22yElGp2OCmjwVhT3HmxgyPGnJfQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: e092abe833e5a95d
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: busboy 1.6.0
message: Package discovered: busboy 1.6.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "3009b8237fb85cf0", "name": "busboy", "version": "1.6.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:busboy:busboy:1.6.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/busboy@1.6.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/busboy/-/busboy-1.6.0.tgz", "integrity": "sha512-8SFQbg/0hQ9xy3UNTB0YEnsNBbWfhf7RtnzpL7TkBiTBRfrQ9Fxcnz7VJsleJpyp6rVLvXiuORqjlHi5q+PYuA==", "dependencies": {"streamsearch": "^1.1.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 81eb78c52edce0ec
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: bytes 3.1.2
message: Package discovered: bytes 3.1.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "f9a24c0655f5cc44", "name": "bytes", "version": "3.1.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:bytes:bytes:3.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/bytes@3.1.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz", "integrity": "sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: a35927eb13a2081e
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: call-bind-apply-helpers 1.0.2
message: Package discovered: call-bind-apply-helpers 1.0.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "2303cf02934afa6a", "name": "call-bind-apply-helpers", "version": "1.0.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:call-bind-apply-helpers:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:call-bind-apply-helpers:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:call_bind_apply_helpers:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:call_bind_apply_helpers:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:call-bind-apply:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:call-bind-apply:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:call_bind_apply:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:call_bind_apply:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:call-bind:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:call-bind:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:call_bind:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:call_bind:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:call:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:call:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/call-bind-apply-helpers@1.0.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz", "integrity": "sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==", "dependencies": {"es-errors": "^1.3.0", "function-bind": "^1.1.2"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 4e5277c95313e881
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: call-bound 1.0.4
message: Package discovered: call-bound 1.0.4
remediation: Track and scan dependencies.
raw_finding:
{"id": "23c8e695a4ffce79", "name": "call-bound", "version": "1.0.4", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:call-bound:call-bound:1.0.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:call-bound:call_bound:1.0.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:call_bound:call-bound:1.0.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:call_bound:call_bound:1.0.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:call:call-bound:1.0.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:call:call_bound:1.0.4:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/call-bound@1.0.4", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz", "integrity": "sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg==", "dependencies": {"call-bind-apply-helpers": "^1.0.2", "get-intrinsic": "^1.3.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: a4cb8d0a4eb7503f
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: camelcase 5.3.1
message: Package discovered: camelcase 5.3.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "98453e2c1718f20f", "name": "camelcase", "version": "5.3.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:camelcase:camelcase:5.3.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/camelcase@5.3.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/camelcase/-/camelcase-5.3.1.tgz", "integrity": "sha512-L28STB170nwWS63UjtlEOE3dldQApaJXZkOI1uMFfzf3rRuPegHaHesyee+YxQ+W6SvRDQV6UrdOdRiR153wJg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 3b9efee290bbc139
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: camelcase-css 2.0.1
message: Package discovered: camelcase-css 2.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "b224930ed183bceb", "name": "camelcase-css", "version": "2.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:camelcase-css:camelcase-css:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:camelcase-css:camelcase_css:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:camelcase_css:camelcase-css:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:camelcase_css:camelcase_css:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:camelcase:camelcase-css:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:camelcase:camelcase_css:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/camelcase-css@2.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/camelcase-css/-/camelcase-css-2.0.1.tgz", "integrity": "sha512-QOSvevhslijgYwRx6Rv7zKdMF8lbRmx+uQGx2+vDc+KI/eBnsy9kit5aj23AgGu3pa4t9AgwbnXWqS+iOY+2aA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 54ace4d8b29c3fad
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: caniuse-lite 1.0.30001791
message: Package discovered: caniuse-lite 1.0.30001791
remediation: Track and scan dependencies.
raw_finding:
{"id": "574728aff770dffd", "name": "caniuse-lite", "version": "1.0.30001791", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "CC-BY-4.0", "spdxExpression": "CC-BY-4.0", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:caniuse-lite:caniuse-lite:1.0.30001791:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:caniuse-lite:caniuse_lite:1.0.30001791:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:caniuse_lite:caniuse-lite:1.0.30001791:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:caniuse_lite:caniuse_lite:1.0.30001791:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:caniuse:caniuse-lite:1.0.30001791:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:caniuse:caniuse_lite:1.0.30001791:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/caniuse-lite@1.0.30001791", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001791.tgz", "integrity": "sha512-yk0l/YSrOnFZk3UROpDLQD9+kC1l4meK/wed583AXrzoarMGJcbRi2Q4RaUYbKxYAsZ8sWmaSa/DsLmdBeI1vQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: d2ccf1883f8178ec
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: chokidar 3.6.0
message: Package discovered: chokidar 3.6.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "e6e064efe5c17d2c", "name": "chokidar", "version": "3.6.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:chokidar:chokidar:3.6.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/chokidar@3.6.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/chokidar/-/chokidar-3.6.0.tgz", "integrity": "sha512-7VT13fmjotKpGipCW9JEQAusEPE+Ei8nl6/g4FBAmIm0GOOLMua9NDDo/DWp0ZAxCr3cPq5ZpBqmPAQgDda2Pw==", "dependencies": {"anymatch": "~3.1.2", "braces": "~3.0.2", "glob-parent": "~5.1.2", "is-binary-path": "~2.1.0", "is-glob": "~4.0.1", "normalize-path": "~3.0.0", "readdirp": "~3.6.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 265715c369a6ec46
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: client-only 0.0.1
message: Package discovered: client-only 0.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "e7be86c370ee2217", "name": "client-only", "version": "0.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:client-only:client-only:0.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:client-only:client_only:0.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:client_only:client-only:0.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:client_only:client_only:0.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:client:client-only:0.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:client:client_only:0.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/client-only@0.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/client-only/-/client-only-0.0.1.tgz", "integrity": "sha512-IV3Ou0jSMzZrd3pZ48nLkT9DA7Ag1pnPzaiQhpW7c3RbcqqzvzzVu+L8gfqMp/8IM2MQtSiqaCxrrcfu8I8rMA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: c077917c166ed35e
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: cliui 6.0.0
message: Package discovered: cliui 6.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "0b1fbe7259e117a1", "name": "cliui", "version": "6.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:cliui:cliui:6.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/cliui@6.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/cliui/-/cliui-6.0.0.tgz", "integrity": "sha512-t6wbgtoCXvAzst7QgXxJYqPt0usEfbgQdftEPbLL/cvv6HPE5VgvqCuAIDR0NgU52ds6rFwqrgakNLrHEjCbrQ==", "dependencies": {"string-width": "^4.2.0", "strip-ansi": "^6.0.0", "wrap-ansi": "^6.2.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: b756cde7127582a3
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: cliui 8.0.1
message: Package discovered: cliui 8.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "6699f516cd09331f", "name": "cliui", "version": "8.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:cliui:cliui:8.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/cliui@8.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/cliui/-/cliui-8.0.1.tgz", "integrity": "sha512-BSeNnyus75C4//NQ9gQt1/csTXyo/8Sb+afLAkzAptFuMsod9HFokGNudZpi/oQV73hnVK+sR+5PVRMd+Dr7YQ==", "dependencies": {"string-width": "^4.2.0", "strip-ansi": "^6.0.1", "wrap-ansi": "^7.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 6102e65c9c7e3be7
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: clone 2.1.2
message: Package discovered: clone 2.1.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "924490c8cb0d8bef", "name": "clone", "version": "2.1.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:clone:clone:2.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/clone@2.1.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/clone/-/clone-2.1.2.tgz", "integrity": "sha512-3Pe/CF1Nn94hyhIYpjtiLhdCoEoz0DqQ+988E9gmeEdQZlojxnOb74wctFyuwWQHzqyf9X7C7MG8juUpqBJT8w==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: de7fc275efead359
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: clsx 2.1.1
message: Package discovered: clsx 2.1.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "1cdd74d474651cd1", "name": "clsx", "version": "2.1.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:clsx:clsx:2.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/clsx@2.1.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/clsx/-/clsx-2.1.1.tgz", "integrity": "sha512-eYm0QWBtUrBWZWG0d386OGAw16Z995PiOVo2B7bjWSbHedGl5e0ZWaq65kOGgUSNesEIDkB9ISbTg/JK9dhCZA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 03115b0621f3a47e
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: cluster-key-slot 1.1.2
message: Package discovered: cluster-key-slot 1.1.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "635dabdd9cdc8fd8", "name": "cluster-key-slot", "version": "1.1.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "Apache-2.0", "spdxExpression": "Apache-2.0", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:cluster-key-slot:cluster-key-slot:1.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:cluster-key-slot:cluster_key_slot:1.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:cluster_key_slot:cluster-key-slot:1.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:cluster_key_slot:cluster_key_slot:1.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:cluster-key:cluster-key-slot:1.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:cluster-key:cluster_key_slot:1.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:cluster_key:cluster-key-slot:1.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:cluster_key:cluster_key_slot:1.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:cluster:cluster-key-slot:1.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:cluster:cluster_key_slot:1.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/cluster-key-slot@1.1.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/cluster-key-slot/-/cluster-key-slot-1.1.2.tgz", "integrity": "sha512-RMr0FhtfXemyinomL4hrWcYJxmX6deFdCxpJzhDttxgO1+bcCnkk+9drydLVDmAMG7NE6aN/fl4F7ucU/90gAA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 56e4289efb51aa13
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: color-convert 2.0.1
message: Package discovered: color-convert 2.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "fcc3d45495abf3bd", "name": "color-convert", "version": "2.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:color-convert:color-convert:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:color-convert:color_convert:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:color_convert:color-convert:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:color_convert:color_convert:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:color:color-convert:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:color:color_convert:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/color-convert@2.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz", "integrity": "sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==", "dependencies": {"color-name": "~1.1.4"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 568b6e4207edec50
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: color-name 1.1.4
message: Package discovered: color-name 1.1.4
remediation: Track and scan dependencies.
raw_finding:
{"id": "9d8d6c4ccfd91cbf", "name": "color-name", "version": "1.1.4", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:color-name:color-name:1.1.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:color-name:color_name:1.1.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:color_name:color-name:1.1.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:color_name:color_name:1.1.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:color:color-name:1.1.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:color:color_name:1.1.4:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/color-name@1.1.4", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz", "integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: c5d023023358f691
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: color-name 2.1.0
message: Package discovered: color-name 2.1.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "8dfa4f08fc1899a7", "name": "color-name", "version": "2.1.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:color-name:color-name:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:color-name:color_name:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:color_name:color-name:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:color_name:color_name:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:color:color-name:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:color:color_name:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/color-name@2.1.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/color-name/-/color-name-2.1.0.tgz", "integrity": "sha512-1bPaDNFm0axzE4MEAzKPuqKWeRaT43U/hyxKPBdqTfmPF+d6n7FSoTFxLVULUJOmiLp01KjhIPPH+HrXZJN4Rg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: d0d3f9cc2cfd641a
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: color-string 1.9.1
message: Package discovered: color-string 1.9.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "b96884f4eed4192d", "name": "color-string", "version": "1.9.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:color-string_project:color-string:1.9.1:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/color-string@1.9.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/color-string/-/color-string-1.9.1.tgz", "integrity": "sha512-shrVawQFojnZv6xM40anx4CkoDP+fZsw/ZerEMsW/pyzsRbElpsL/DBVW7q3ExxwusdNXI3lXpuhEZkzs8p5Eg==", "dependencies": {"color-name": "^1.0.0", "simple-swizzle": "^0.2.2"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: b8edaba313b178d2
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: color-string 2.1.4
message: Package discovered: color-string 2.1.4
remediation: Track and scan dependencies.
raw_finding:
{"id": "1f15e4f4433605fc", "name": "color-string", "version": "2.1.4", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:color-string_project:color-string:2.1.4:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/color-string@2.1.4", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/color-string/-/color-string-2.1.4.tgz", "integrity": "sha512-Bb6Cq8oq0IjDOe8wJmi4JeNn763Xs9cfrBcaylK1tPypWzyoy2G3l90v9k64kjphl/ZJjPIShFztenRomi8WTg==", "dependencies": {"color-name": "^2.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 227fe4ddfe5bcfb2
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: combined-stream 1.0.8
message: Package discovered: combined-stream 1.0.8
remediation: Track and scan dependencies.
raw_finding:
{"id": "6feb2abce081a13b", "name": "combined-stream", "version": "1.0.8", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:combined-stream:combined-stream:1.0.8:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:combined-stream:combined_stream:1.0.8:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:combined_stream:combined-stream:1.0.8:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:combined_stream:combined_stream:1.0.8:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:combined:combined-stream:1.0.8:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:combined:combined_stream:1.0.8:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/combined-stream@1.0.8", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz", "integrity": "sha512-FQN4MRfuJeHf7cBbBMJFXhKSDq+2kAArBlmRBvcvFE5BB1HZKXtSFASDhdlz9zOYwxh8lDdnvmMOe/+5cdoEdg==", "dependencies": {"delayed-stream": "~1.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: df1825804c4b40ea
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: commander 10.0.1
message: Package discovered: commander 10.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "68cb0d0425b8ec71", "name": "commander", "version": "10.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:commander:commander:10.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/commander@10.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/commander/-/commander-10.0.1.tgz", "integrity": "sha512-y4Mg2tXshplEbSGzx7amzPwKKOCGuoSRP/CjEdwwk0FOGlUbq6lKuoyDZTNZkmxHdJtp54hdfY/JUrdL7Xfdug==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: b275a043135b9b63
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: commander 4.1.1
message: Package discovered: commander 4.1.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "6ef23c8bf6c64c11", "name": "commander", "version": "4.1.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:commander:commander:4.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/commander@4.1.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/commander/-/commander-4.1.1.tgz", "integrity": "sha512-NOKm8xhkzAjzFx8B2v5OAHT+u5pRQc2UCa2Vq9jYL/31o2wi9mxBA7LIFs3sV5VSC49z6pEhfbMULvShKj26WA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: af21f9856150d16c
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: concat-stream 1.6.2
message: Package discovered: concat-stream 1.6.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "ee26fc9f2aa2694f", "name": "concat-stream", "version": "1.6.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:concat-stream:concat-stream:1.6.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:concat-stream:concat_stream:1.6.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:concat_stream:concat-stream:1.6.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:concat_stream:concat_stream:1.6.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:concat:concat-stream:1.6.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:concat:concat_stream:1.6.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/concat-stream@1.6.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/concat-stream/-/concat-stream-1.6.2.tgz", "integrity": "sha512-27HBghJxjiZtIk3Ycvn/4kbJk/1uZuJFfuPEns6LaEvpvG1f0hTea8lilrouyo9mVc2GWdcEZ8OLoGmSADlrCw==", "dependencies": {"buffer-from": "^1.0.0", "inherits": "^2.0.3", "readable-stream": "^2.2.2", "typedarray": "^0.0.6"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 6a853859517f2ba3
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: config-chain 1.1.13
message: Package discovered: config-chain 1.1.13
remediation: Track and scan dependencies.
raw_finding:
{"id": "f8adcbfce494f378", "name": "config-chain", "version": "1.1.13", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:config-chain:config-chain:1.1.13:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:config-chain:config_chain:1.1.13:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:config_chain:config-chain:1.1.13:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:config_chain:config_chain:1.1.13:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:config:config-chain:1.1.13:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:config:config_chain:1.1.13:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/config-chain@1.1.13", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/config-chain/-/config-chain-1.1.13.tgz", "integrity": "sha512-qj+f8APARXHrM0hraqXYb2/bOVSV4PvJQlNZ/DVj0QrmNM2q2euizkeuVckQ57J+W0mRH6Hvi+k50M4Jul2VRQ==", "dependencies": {"ini": "^1.3.4", "proto-list": "~1.2.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: aa020ae4ab2eadc3
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: content-disposition 0.5.4
message: Package discovered: content-disposition 0.5.4
remediation: Track and scan dependencies.
raw_finding:
{"id": "5a8a76bf321e2afc", "name": "content-disposition", "version": "0.5.4", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:content-disposition:content-disposition:0.5.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:content-disposition:content_disposition:0.5.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:content_disposition:content-disposition:0.5.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:content_disposition:content_disposition:0.5.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:content:content-disposition:0.5.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:content:content_disposition:0.5.4:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/content-disposition@0.5.4", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.4.tgz", "integrity": "sha512-FveZTNuGw04cxlAiWbzi6zTAL/lhehaWbTtgluJh4/E95DqMwTmha3KZN1aAWA8cFIhHzMZUvLevkw5Rqk+tSQ==", "dependencies": {"safe-buffer": "5.2.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 9a45820ffdb99ef9
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: content-type 1.0.5
message: Package discovered: content-type 1.0.5
remediation: Track and scan dependencies.
raw_finding:
{"id": "e6774efb67a1cd80", "name": "content-type", "version": "1.0.5", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:content-type:content-type:1.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:content-type:content_type:1.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:content_type:content-type:1.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:content_type:content_type:1.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:content:content-type:1.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:content:content_type:1.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/content-type@1.0.5", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz", "integrity": "sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 475f89190adc46cd
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: cookie 0.7.2
message: Package discovered: cookie 0.7.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "dabea341270367ac", "name": "cookie", "version": "0.7.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:cookie:cookie:0.7.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/cookie@0.7.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.2.tgz", "integrity": "sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 980ccdca1420305a
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: cookie-signature 1.0.7
message: Package discovered: cookie-signature 1.0.7
remediation: Track and scan dependencies.
raw_finding:
{"id": "c3cdc836e23cbee4", "name": "cookie-signature", "version": "1.0.7", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:cookie-signature_project:cookie-signature:1.0.7:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/cookie-signature@1.0.7", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.7.tgz", "integrity": "sha512-NXdYc3dLr47pBkpUCHtKSwIOQXLVn8dZEuywboCOJY/osA0wFSLlSawr3KN8qXJEyX66FcONTH8EIlVuK0yyFA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 8ea7108a43fc0ad4
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: core-util-is 1.0.3
message: Package discovered: core-util-is 1.0.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "9bfb1fb9a1cd315e", "name": "core-util-is", "version": "1.0.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:core-util-is:core-util-is:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:core-util-is:core_util_is:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:core_util_is:core-util-is:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:core_util_is:core_util_is:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:core-util:core-util-is:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:core-util:core_util_is:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:core_util:core-util-is:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:core_util:core_util_is:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:core:core-util-is:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:core:core_util_is:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/core-util-is@1.0.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.3.tgz", "integrity": "sha512-ZQBvi1DcpJ4GDqanjucZ2Hj3wEO5pZDS89BWbkcrvdxksJorwUDDZamX9ldFkp9aw2lmBDLgkObEA4DWNJ9FYQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 171e24f79e6f61b0
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: cors 2.8.6
message: Package discovered: cors 2.8.6
remediation: Track and scan dependencies.
raw_finding:
{"id": "c8f0caa18c740c23", "name": "cors", "version": "2.8.6", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:cors:cors:2.8.6:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/cors@2.8.6", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/cors/-/cors-2.8.6.tgz", "integrity": "sha512-tJtZBBHA6vjIAaF6EnIaq6laBBP9aq/Y3ouVJjEfoHbRBcHBAHYcMh/w8LDrk2PvIMMq8gmopa5D4V8RmbrxGw==", "dependencies": {"object-assign": "^4", "vary": "^1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 24841e3ab0fadbb6
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /node_modules/@ungap/structured-clone/.github/workflows/node.js.yml
title: coverallsapp/github-action master
message: Package discovered: coverallsapp/github-action master
remediation: Track and scan dependencies.
raw_finding:
{"id": "cbf693155383c51f", "name": "coverallsapp/github-action", "version": "master", "type": "github-action", "foundBy": "github-actions-usage-cataloger", "locations": [{"path": "/node_modules/@ungap/structured-clone/.github/workflows/node.js.yml", "accessPath": "/node_modules/@ungap/structured-clone/.github/workflows/node.js.yml", "annotations": {"evidence": "primary"}}], "licenses": [], "language": "", "cpes": [{"cpe": "cpe:2.3:a:coverallsapp\\/github-action:coverallsapp\\/github-action:master:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:coverallsapp\\/github-action:coverallsapp\\/github_action:master:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:coverallsapp\\/github_action:coverallsapp\\/github-action:master:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:coverallsapp\\/github_action:coverallsapp\\/github_action:master:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:coverallsapp\\/github:coverallsapp\\/github-action:master:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:coverallsapp\\/github:coverallsapp\\/github_action:master:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:github/coverallsapp/github-action@master", "metadataType": "github-actions-use-statement", "metadata": {"value": "coverallsapp/github-action@master"}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: c42474dc158d56dd
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: cross-fetch 3.2.0
message: Package discovered: cross-fetch 3.2.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "1ef521ded724ae55", "name": "cross-fetch", "version": "3.2.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:cross-fetch_project:cross-fetch:3.2.0:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/cross-fetch@3.2.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/cross-fetch/-/cross-fetch-3.2.0.tgz", "integrity": "sha512-Q+xVJLoGOeIMXZmbUK4HYk+69cQH6LudR0Vu/pRm2YlU/hDV9CiS0gKUMaWY5f2NeUH9C1nV3bsTlCo0FsTV1Q==", "dependencies": {"node-fetch": "^2.7.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: ab79d32b8583840a
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: cross-spawn 7.0.6
message: Package discovered: cross-spawn 7.0.6
remediation: Track and scan dependencies.
raw_finding:
{"id": "043761526fd95886", "name": "cross-spawn", "version": "7.0.6", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:cross-spawn:cross-spawn:7.0.6:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:cross-spawn:cross_spawn:7.0.6:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:cross_spawn:cross-spawn:7.0.6:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:cross_spawn:cross_spawn:7.0.6:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:cross:cross-spawn:7.0.6:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:cross:cross_spawn:7.0.6:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/cross-spawn@7.0.6", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz", "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==", "dependencies": {"path-key": "^3.1.0", "shebang-command": "^2.0.0", "which": "^2.0.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 8714b6edd2c6df07
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: crypto-js 4.2.0
message: Package discovered: crypto-js 4.2.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "2eb6177b3fd9fb78", "name": "crypto-js", "version": "4.2.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:crypto-js:crypto-js:4.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:crypto-js:crypto_js:4.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:crypto_js:crypto-js:4.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:crypto_js:crypto_js:4.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:crypto:crypto-js:4.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:crypto:crypto_js:4.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/crypto-js@4.2.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/crypto-js/-/crypto-js-4.2.0.tgz", "integrity": "sha512-KALDyEYgpY+Rlob/iriUtjV6d5Eq+Y191A5g4UqLAi8CyGP9N1+FdVbkc1SxKc2r4YAYqG8JzO2KGL+AizD70Q==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 5c9f6165bd9afd4d
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: cssesc 3.0.0
message: Package discovered: cssesc 3.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "7ab312baa29fde7a", "name": "cssesc", "version": "3.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:cssesc:cssesc:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/cssesc@3.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/cssesc/-/cssesc-3.0.0.tgz", "integrity": "sha512-/Tb/JcjK111nNScGob5MNtsntNM1aCNUDipB/TkwZFhyDrrE47SOx/18wF2bbjgc3ZzCSKW1T5nt5EbFoAz/Vg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: e510323d242254fb
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: csstype 3.2.3
message: Package discovered: csstype 3.2.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "7a5abc30c1904007", "name": "csstype", "version": "3.2.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:csstype:csstype:3.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/csstype@3.2.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/csstype/-/csstype-3.2.3.tgz", "integrity": "sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: bd9d3c33974e198d
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: d3-array 3.2.4
message: Package discovered: d3-array 3.2.4
remediation: Track and scan dependencies.
raw_finding:
{"id": "d16a22647e62d254", "name": "d3-array", "version": "3.2.4", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:d3-array:d3-array:3.2.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3-array:d3_array:3.2.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3_array:d3-array:3.2.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3_array:d3_array:3.2.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3:d3-array:3.2.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3:d3_array:3.2.4:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/d3-array@3.2.4", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/d3-array/-/d3-array-3.2.4.tgz", "integrity": "sha512-tdQAmyA18i4J7wprpYq8ClcxZy3SC31QMeByyCFyRt7BVHdREQZ5lpzoe5mFEYZUWe+oq8HBvk9JjpibyEV4Jg==", "dependencies": {"internmap": "1 - 2"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: fe81bed2b7c1ca62
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: d3-color 3.1.0
message: Package discovered: d3-color 3.1.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "633ef642a5395c1a", "name": "d3-color", "version": "3.1.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:d3-color:d3-color:3.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3-color:d3_color:3.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3_color:d3-color:3.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3_color:d3_color:3.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3:d3-color:3.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3:d3_color:3.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/d3-color@3.1.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/d3-color/-/d3-color-3.1.0.tgz", "integrity": "sha512-zg/chbXyeBtMQ1LbD/WSoW2DpC3I0mpmPdW+ynRTj/x2DAWYrIY7qeZIHidozwV24m4iavr15lNwIwLxRmOxhA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: d9ebb131f790b372
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: d3-ease 3.0.1
message: Package discovered: d3-ease 3.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "5c5a953bcb066b0e", "name": "d3-ease", "version": "3.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "BSD-3-Clause", "spdxExpression": "BSD-3-Clause", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:d3-ease:d3-ease:3.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3-ease:d3_ease:3.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3_ease:d3-ease:3.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3_ease:d3_ease:3.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3:d3-ease:3.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3:d3_ease:3.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/d3-ease@3.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/d3-ease/-/d3-ease-3.0.1.tgz", "integrity": "sha512-wR/XK3D3XcLIZwpbvQwQ5fK+8Ykds1ip7A2Txe0yxncXSdq1L9skcG7blcedkOX+ZcgxGAmLX1FrRGbADwzi0w==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: fe1c10f297b89c50
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: d3-format 3.1.2
message: Package discovered: d3-format 3.1.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "5199669646af57ab", "name": "d3-format", "version": "3.1.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:d3-format:d3-format:3.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3-format:d3_format:3.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3_format:d3-format:3.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3_format:d3_format:3.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3:d3-format:3.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3:d3_format:3.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/d3-format@3.1.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/d3-format/-/d3-format-3.1.2.tgz", "integrity": "sha512-AJDdYOdnyRDV5b6ArilzCPPwc1ejkHcoyFarqlPqT7zRYjhavcT3uSrqcMvsgh2CgoPbK3RCwyHaVyxYcP2Arg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: d580ebf8b65eecc5
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: d3-interpolate 3.0.1
message: Package discovered: d3-interpolate 3.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "2bcd6b2445ac379d", "name": "d3-interpolate", "version": "3.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:d3-interpolate:d3-interpolate:3.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3-interpolate:d3_interpolate:3.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3_interpolate:d3-interpolate:3.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3_interpolate:d3_interpolate:3.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3:d3-interpolate:3.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3:d3_interpolate:3.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/d3-interpolate@3.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/d3-interpolate/-/d3-interpolate-3.0.1.tgz", "integrity": "sha512-3bYs1rOD33uo8aqJfKP3JWPAibgw8Zm2+L9vBKEHJ2Rg+viTR7o5Mmv5mZcieN+FRYaAOWX5SJATX6k1PWz72g==", "dependencies": {"d3-color": "1 - 3"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 9d53314d3544b04e
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: d3-path 3.1.0
message: Package discovered: d3-path 3.1.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "63d3c4d24d9be1d5", "name": "d3-path", "version": "3.1.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:d3-path:d3-path:3.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3-path:d3_path:3.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3_path:d3-path:3.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3_path:d3_path:3.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3:d3-path:3.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3:d3_path:3.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/d3-path@3.1.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/d3-path/-/d3-path-3.1.0.tgz", "integrity": "sha512-p3KP5HCf/bvjBSSKuXid6Zqijx7wIfNW+J/maPs+iwR35at5JCbLUT0LzF1cnjbCHWhqzQTIN2Jpe8pRebIEFQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 964951e667c4c379
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: d3-scale 4.0.2
message: Package discovered: d3-scale 4.0.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "6f08c8eb1953f0ad", "name": "d3-scale", "version": "4.0.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:d3-scale:d3-scale:4.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3-scale:d3_scale:4.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3_scale:d3-scale:4.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3_scale:d3_scale:4.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3:d3-scale:4.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3:d3_scale:4.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/d3-scale@4.0.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/d3-scale/-/d3-scale-4.0.2.tgz", "integrity": "sha512-GZW464g1SH7ag3Y7hXjf8RoUuAFIqklOAq3MRl4OaWabTFJY9PN/E1YklhXLh+OQ3fM9yS2nOkCoS+WLZ6kvxQ==", "dependencies": {"d3-array": "2.10.0 - 3", "d3-format": "1 - 3", "d3-interpolate": "1.2.0 - 3", "d3-time": "2.1.1 - 3", "d3-time-format": "2 - 4"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: fdbd8e26e660bbf2
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: d3-shape 3.2.0
message: Package discovered: d3-shape 3.2.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "62919ef646dbae92", "name": "d3-shape", "version": "3.2.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:d3-shape:d3-shape:3.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3-shape:d3_shape:3.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3_shape:d3-shape:3.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3_shape:d3_shape:3.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3:d3-shape:3.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3:d3_shape:3.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/d3-shape@3.2.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/d3-shape/-/d3-shape-3.2.0.tgz", "integrity": "sha512-SaLBuwGm3MOViRq2ABk3eLoxwZELpH6zhl3FbAoJ7Vm1gofKx6El1Ib5z23NUEhF9AsGl7y+dzLe5Cw2AArGTA==", "dependencies": {"d3-path": "^3.1.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 53764226f7fa140f
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: d3-time 3.1.0
message: Package discovered: d3-time 3.1.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "809edf0f6cbf0d31", "name": "d3-time", "version": "3.1.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:d3-time:d3-time:3.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3-time:d3_time:3.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3_time:d3-time:3.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3_time:d3_time:3.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3:d3-time:3.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3:d3_time:3.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/d3-time@3.1.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/d3-time/-/d3-time-3.1.0.tgz", "integrity": "sha512-VqKjzBLejbSMT4IgbmVgDjpkYrNWUYJnbCGo874u7MMKIWsILRX+OpX/gTk8MqjpT1A/c6HY2dCA77ZN0lkQ2Q==", "dependencies": {"d3-array": "2 - 3"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: e86c38bd447bf3a0
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: d3-time-format 4.1.0
message: Package discovered: d3-time-format 4.1.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "4c75f293b12c6086", "name": "d3-time-format", "version": "4.1.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:d3-time-format:d3-time-format:4.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3-time-format:d3_time_format:4.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3_time_format:d3-time-format:4.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3_time_format:d3_time_format:4.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3-time:d3-time-format:4.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3-time:d3_time_format:4.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3_time:d3-time-format:4.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3_time:d3_time_format:4.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3:d3-time-format:4.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3:d3_time_format:4.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/d3-time-format@4.1.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/d3-time-format/-/d3-time-format-4.1.0.tgz", "integrity": "sha512-dJxPBlzC7NugB2PDLwo9Q8JiTR3M3e4/XANkreKSUxF8vvXKqm1Yfq4Q5dl8budlunRVlUUaDUgFt7eA8D6NLg==", "dependencies": {"d3-time": "1 - 3"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 014411da08f2c5cc
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: d3-timer 3.0.1
message: Package discovered: d3-timer 3.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "1f58b04c062182d6", "name": "d3-timer", "version": "3.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:d3-timer:d3-timer:3.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3-timer:d3_timer:3.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3_timer:d3-timer:3.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3_timer:d3_timer:3.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3:d3-timer:3.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:d3:d3_timer:3.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/d3-timer@3.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/d3-timer/-/d3-timer-3.0.1.tgz", "integrity": "sha512-ndfJ/JxxMd3nw31uyKoY2naivF+r29V+Lc0svZxe1JvvIRmi8hUsrMvdOwgS1o6uBHmiz91geQ0ylPP0aj1VUA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 8491d2589d2b26fe
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: dayjs 1.11.20
message: Package discovered: dayjs 1.11.20
remediation: Track and scan dependencies.
raw_finding:
{"id": "11ebb955a4940d8a", "name": "dayjs", "version": "1.11.20", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:dayjs:dayjs:1.11.20:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/dayjs@1.11.20", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/dayjs/-/dayjs-1.11.20.tgz", "integrity": "sha512-YbwwqR/uYpeoP4pu043q+LTDLFBLApUP6VxRihdfNTqu4ubqMlGDLd6ErXhEgsyvY0K6nCs7nggYumAN+9uEuQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 3e4836eb16baaf2c
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: debug 2.6.9
message: Package discovered: debug 2.6.9
remediation: Track and scan dependencies.
raw_finding:
{"id": "791d0c8d38a3b042", "name": "debug", "version": "2.6.9", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:debug_project:debug:2.6.9:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/debug@2.6.9", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz", "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==", "dependencies": {"ms": "2.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: c3870af17f8e7246
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: debug 4.4.3
message: Package discovered: debug 4.4.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "96b0606cb5228062", "name": "debug", "version": "4.4.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:debug_project:debug:4.4.3:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/debug@4.4.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz", "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==", "dependencies": {"ms": "^2.1.3"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 6cb9876ddd023a8b
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: decamelize 1.2.0
message: Package discovered: decamelize 1.2.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "56044f762e36d59b", "name": "decamelize", "version": "1.2.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:decamelize:decamelize:1.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/decamelize@1.2.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz", "integrity": "sha512-z2S+W9X73hAUUki+N+9Za2lBlun89zigOyGrsax+KUQ6wKW4ZoWpEYBkGhQjwAjjDCkWxhY0VKEhk8wzY7F5cA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 2d9026954da43a27
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: decimal.js-light 2.5.1
message: Package discovered: decimal.js-light 2.5.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "6135efdaaf1822bb", "name": "decimal.js-light", "version": "2.5.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:decimal.js-light:decimal.js-light:2.5.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:decimal.js-light:decimal.js_light:2.5.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:decimal.js_light:decimal.js-light:2.5.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:decimal.js_light:decimal.js_light:2.5.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:decimal.js:decimal.js-light:2.5.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:decimal.js:decimal.js_light:2.5.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/decimal.js-light@2.5.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/decimal.js-light/-/decimal.js-light-2.5.1.tgz", "integrity": "sha512-qIMFpTMZmny+MMIitAB6D7iVPEorVw6YQRWkvarTkT4tBeSLLiHzcwj6q0MmYSFCiVpiqPJTJEYIrpcPzVEIvg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 8e421fc3fe27aa9c
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: deepmerge 4.3.1
message: Package discovered: deepmerge 4.3.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "6fcde9d497e83e33", "name": "deepmerge", "version": "4.3.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:deepmerge:deepmerge:4.3.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/deepmerge@4.3.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/deepmerge/-/deepmerge-4.3.1.tgz", "integrity": "sha512-3sUqbMEc77XqpdNO7FRyRog+eW3ph+GYCbj+rK+uYyRMuwsVy0rMiVtPn+QJlKFvWP/1PYpapqYn0Me2knFn+A==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: bd6d6c864c2f97b9
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: delayed-stream 1.0.0
message: Package discovered: delayed-stream 1.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "c23340a58ec36159", "name": "delayed-stream", "version": "1.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:delayed-stream:delayed-stream:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:delayed-stream:delayed_stream:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:delayed_stream:delayed-stream:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:delayed_stream:delayed_stream:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:delayed:delayed-stream:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:delayed:delayed_stream:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/delayed-stream@1.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz", "integrity": "sha512-ZySD7Nf91aLB0RxL4KGrKHBXl7Eds1DAmEdcoVawXnLD7SDhpNgtuII2aAkg7a7QS41jxPSZ17p4VdGnMHk3MQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: b4af690e8812705b
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: denque 2.1.0
message: Package discovered: denque 2.1.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "b292c74570fb7df3", "name": "denque", "version": "2.1.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "Apache-2.0", "spdxExpression": "Apache-2.0", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:denque:denque:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/denque@2.1.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/denque/-/denque-2.1.0.tgz", "integrity": "sha512-HVQE3AAb/pxF8fQAoiqpvg9i3evqug3hoiwakOyZAwJm+6vZehbkYXZ0l4JxS+I3QxM97v5aaRNhj8v5oBhekw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 86dec3bfd9bed666
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: depd 2.0.0
message: Package discovered: depd 2.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "82a407fce3facea3", "name": "depd", "version": "2.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:depd:depd:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/depd@2.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz", "integrity": "sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: a7d6bc7c01ff6fdb
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: destroy 1.2.0
message: Package discovered: destroy 1.2.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "916ee50fe6c61deb", "name": "destroy", "version": "1.2.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:destroy:destroy:1.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/destroy@1.2.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/destroy/-/destroy-1.2.0.tgz", "integrity": "sha512-2sJGJTaXIIaR1w4iJSNoN0hnMY7Gpc/n8D4qSCJw8QqFWXf7cuAgnEHxBpweaVcPevC2l3KpjYCx3NypQQgaJg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: b1baa34830820f96
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: detect-libc 2.1.2
message: Package discovered: detect-libc 2.1.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "cd3c75639d40cfa6", "name": "detect-libc", "version": "2.1.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "Apache-2.0", "spdxExpression": "Apache-2.0", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:detect-libc:detect-libc:2.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:detect-libc:detect_libc:2.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:detect_libc:detect-libc:2.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:detect_libc:detect_libc:2.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:detect:detect-libc:2.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:detect:detect_libc:2.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/detect-libc@2.1.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.1.2.tgz", "integrity": "sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: d9872bdf37f54c1c
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: dfa 1.2.0
message: Package discovered: dfa 1.2.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "32140b01170f2db8", "name": "dfa", "version": "1.2.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:dfa:dfa:1.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/dfa@1.2.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/dfa/-/dfa-1.2.0.tgz", "integrity": "sha512-ED3jP8saaweFTjeGX8HQPjeC1YYyZs98jGNZx6IiBvxW7JG5v492kamAQB3m2wop07CvU/RQmzcKr6bgcC5D/Q==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 9f98c7e106363761
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: didyoumean 1.2.2
message: Package discovered: didyoumean 1.2.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "88295af7ba0997fd", "name": "didyoumean", "version": "1.2.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "Apache-2.0", "spdxExpression": "Apache-2.0", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:didyoumean:didyoumean:1.2.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/didyoumean@1.2.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/didyoumean/-/didyoumean-1.2.2.tgz", "integrity": "sha512-gxtyfqMg7GKyhQmb056K7M3xszy/myH8w+B4RT+QXBQsvAOdc3XymqDDPHx1BgPgsdAA5SIifona89YtRATDzw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 1b1c014679b0d671
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: dijkstrajs 1.0.3
message: Package discovered: dijkstrajs 1.0.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "7a3b023286e84986", "name": "dijkstrajs", "version": "1.0.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:dijkstrajs:dijkstrajs:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/dijkstrajs@1.0.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/dijkstrajs/-/dijkstrajs-1.0.3.tgz", "integrity": "sha512-qiSlmBq9+BCdCA/L46dw8Uy93mloxsPSbwnm5yrKn2vMPiy8KyAskTF6zuV/j5BMsmOGZDPs7KjU+mjb670kfA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 4fdc8b3106066f47
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: dlv 1.1.3
message: Package discovered: dlv 1.1.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "6145214b9f2f7148", "name": "dlv", "version": "1.1.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:dlv:dlv:1.1.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/dlv@1.1.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/dlv/-/dlv-1.1.3.tgz", "integrity": "sha512-+HlytyjlPKnIG8XuRG8WvmBP8xs8P71y+SKKS6ZXWoEgLuePxtDoUEiH7WkdePWrQ5JBpE6aoVqfZfJUQkjXwA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 4d01289dd001e612
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: dom-helpers 5.2.1
message: Package discovered: dom-helpers 5.2.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "22b93db9f5eba040", "name": "dom-helpers", "version": "5.2.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:dom-helpers:dom-helpers:5.2.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:dom-helpers:dom_helpers:5.2.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:dom_helpers:dom-helpers:5.2.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:dom_helpers:dom_helpers:5.2.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:dom:dom-helpers:5.2.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:dom:dom_helpers:5.2.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/dom-helpers@5.2.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/dom-helpers/-/dom-helpers-5.2.1.tgz", "integrity": "sha512-nRCa7CK3VTrM2NmGkIy4cbK7IZlgBE/PYMn55rrXefr5xXDP0LdtfPnblFDoVdcAfslJ7or6iqAUnx0CCGIWQA==", "dependencies": {"@babel/runtime": "^7.8.7", "csstype": "^3.0.2"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 594471832719edc2
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: dom-serializer 2.0.0
message: Package discovered: dom-serializer 2.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "f8e1d8922cf56c54", "name": "dom-serializer", "version": "2.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:dom-serializer:dom-serializer:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:dom-serializer:dom_serializer:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:dom_serializer:dom-serializer:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:dom_serializer:dom_serializer:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:dom:dom-serializer:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:dom:dom_serializer:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/dom-serializer@2.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-2.0.0.tgz", "integrity": "sha512-wIkAryiqt/nV5EQKqQpo3SToSOV9J0DnbJqwK7Wv/Trc92zIAYZ4FlMu+JPFW1DfGFt81ZTCGgDEabffXeLyJg==", "dependencies": {"domelementtype": "^2.3.0", "domhandler": "^5.0.2", "entities": "^4.2.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 04fd13748534548d
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: domelementtype 2.3.0
message: Package discovered: domelementtype 2.3.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "5df6e95fb09fce0c", "name": "domelementtype", "version": "2.3.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "BSD-2-Clause", "spdxExpression": "BSD-2-Clause", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:domelementtype:domelementtype:2.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/domelementtype@2.3.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/domelementtype/-/domelementtype-2.3.0.tgz", "integrity": "sha512-OLETBj6w0OsagBwdXnPdN0cnMfF9opN69co+7ZrbfPGrdpPVNBUj02spi6B1N7wChLQiPn4CSH/zJvXw56gmHw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 21e3025ed99f3f28
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: domhandler 5.0.3
message: Package discovered: domhandler 5.0.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "952037d890bc80f6", "name": "domhandler", "version": "5.0.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "BSD-2-Clause", "spdxExpression": "BSD-2-Clause", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:domhandler:domhandler:5.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/domhandler@5.0.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/domhandler/-/domhandler-5.0.3.tgz", "integrity": "sha512-cgwlv/1iFQiFnU96XXgROh8xTeetsnJiDsTc7TYCLFd9+/WNkIqPTxiM/8pSd8VIrhXGTf1Ny1q1hquVqDJB5w==", "dependencies": {"domelementtype": "^2.3.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: d6dff11bd10e354b
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: domutils 3.2.2
message: Package discovered: domutils 3.2.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "1b9db533b6297450", "name": "domutils", "version": "3.2.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "BSD-2-Clause", "spdxExpression": "BSD-2-Clause", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:domutils:domutils:3.2.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/domutils@3.2.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/domutils/-/domutils-3.2.2.tgz", "integrity": "sha512-6kZKyUajlDuqlHKVX1w7gyslj9MPIXzIFiz/rGu35uC1wMi+kMhQwGhl4lt9unC9Vb9INnY9Z3/ZA3+FhASLaw==", "dependencies": {"dom-serializer": "^2.0.0", "domelementtype": "^2.3.0", "domhandler": "^5.0.3"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 4726026d0ba78a1e
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: dunder-proto 1.0.1
message: Package discovered: dunder-proto 1.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "23d9641db70f3051", "name": "dunder-proto", "version": "1.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:dunder-proto:dunder-proto:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:dunder-proto:dunder_proto:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:dunder_proto:dunder-proto:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:dunder_proto:dunder_proto:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:dunder:dunder-proto:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:dunder:dunder_proto:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/dunder-proto@1.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz", "integrity": "sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==", "dependencies": {"call-bind-apply-helpers": "^1.0.1", "es-errors": "^1.3.0", "gopd": "^1.2.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: eae177c358a69822
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: duplexify 4.1.3
message: Package discovered: duplexify 4.1.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "91c59a4a431b283f", "name": "duplexify", "version": "4.1.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:duplexify:duplexify:4.1.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/duplexify@4.1.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/duplexify/-/duplexify-4.1.3.tgz", "integrity": "sha512-M3BmBhwJRZsSx38lZyhE53Csddgzl5R7xGJNk7CVddZD6CcmwMCH8J+7AprIrQKH7TonKxaCjcv27Qmf+sQ+oA==", "dependencies": {"end-of-stream": "^1.4.1", "inherits": "^2.0.3", "readable-stream": "^3.1.1", "stream-shift": "^1.0.2"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: d3b8cfaa5ee0e8d1
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: eastasianwidth 0.2.0
message: Package discovered: eastasianwidth 0.2.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "e7e9dd6a07994e54", "name": "eastasianwidth", "version": "0.2.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:eastasianwidth:eastasianwidth:0.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/eastasianwidth@0.2.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/eastasianwidth/-/eastasianwidth-0.2.0.tgz", "integrity": "sha512-I88TYZWc9XiYHRQ4/3c5rjjfgkjhLyW2luGIheGERbNQ6OY7yTybanSpDXZa8y7VUP9YmDcYa+eyq4ca7iLqWA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: cb63ab5ab6733afe
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: ecdsa-sig-formatter 1.0.11
message: Package discovered: ecdsa-sig-formatter 1.0.11
remediation: Track and scan dependencies.
raw_finding:
{"id": "4ed0ded14e893339", "name": "ecdsa-sig-formatter", "version": "1.0.11", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "Apache-2.0", "spdxExpression": "Apache-2.0", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:ecdsa-sig-formatter:ecdsa-sig-formatter:1.0.11:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ecdsa-sig-formatter:ecdsa_sig_formatter:1.0.11:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ecdsa_sig_formatter:ecdsa-sig-formatter:1.0.11:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ecdsa_sig_formatter:ecdsa_sig_formatter:1.0.11:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ecdsa-sig:ecdsa-sig-formatter:1.0.11:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ecdsa-sig:ecdsa_sig_formatter:1.0.11:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ecdsa_sig:ecdsa-sig-formatter:1.0.11:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ecdsa_sig:ecdsa_sig_formatter:1.0.11:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ecdsa:ecdsa-sig-formatter:1.0.11:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ecdsa:ecdsa_sig_formatter:1.0.11:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/ecdsa-sig-formatter@1.0.11", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/ecdsa-sig-formatter/-/ecdsa-sig-formatter-1.0.11.tgz", "integrity": "sha512-nagl3RYrbNv6kQkeJIpt6NJZy8twLB/2vtz6yN9Z4vRKHN4/QZJIEbqohALSgwKdnksuY3k5Addp5lg8sVoVcQ==", "dependencies": {"safe-buffer": "^5.0.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 3d3ef9aed82705e2
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: editorconfig 1.0.7
message: Package discovered: editorconfig 1.0.7
remediation: Track and scan dependencies.
raw_finding:
{"id": "122ede063714b5b3", "name": "editorconfig", "version": "1.0.7", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:editorconfig:editorconfig:1.0.7:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/editorconfig@1.0.7", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/editorconfig/-/editorconfig-1.0.7.tgz", "integrity": "sha512-e0GOtq/aTQhVdNyDU9e02+wz9oDDM+SIOQxWME2QRjzRX5yyLAuHDE+0aE8vHb9XRC8XD37eO2u57+F09JqFhw==", "dependencies": {"@one-ini/wasm": "0.1.1", "commander": "^10.0.0", "minimatch": "^9.0.1", "semver": "^7.5.3"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 9669afa378e5a35f
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: ee-first 1.1.1
message: Package discovered: ee-first 1.1.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "e40c9e2062507e8a", "name": "ee-first", "version": "1.1.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:ee-first:ee-first:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ee-first:ee_first:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ee_first:ee-first:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ee_first:ee_first:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ee:ee-first:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ee:ee_first:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/ee-first@1.1.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz", "integrity": "sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 04d3ce47ab6baf5d
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: electron-to-chromium 1.5.345
message: Package discovered: electron-to-chromium 1.5.345
remediation: Track and scan dependencies.
raw_finding:
{"id": "dc02d9fca5801675", "name": "electron-to-chromium", "version": "1.5.345", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:electron-to-chromium:electron-to-chromium:1.5.345:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:electron-to-chromium:electron_to_chromium:1.5.345:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:electron_to_chromium:electron-to-chromium:1.5.345:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:electron_to_chromium:electron_to_chromium:1.5.345:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:electron-to:electron-to-chromium:1.5.345:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:electron-to:electron_to_chromium:1.5.345:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:electron_to:electron-to-chromium:1.5.345:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:electron_to:electron_to_chromium:1.5.345:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:electron:electron-to-chromium:1.5.345:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:electron:electron_to_chromium:1.5.345:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/electron-to-chromium@1.5.345", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.5.345.tgz", "integrity": "sha512-F9JXQGiMrz6yVNPI2qOVPvB9HzjH5cGzhs8oJ6A28V5L/YnzN/0KsuiibqF+F1Fd9qxFzD1BUnYSd8JfULxTwg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: d03ffa53b9f68b04
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: emoji-regex 10.6.0
message: Package discovered: emoji-regex 10.6.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "20a2cf9e55a512fb", "name": "emoji-regex", "version": "10.6.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:emoji-regex:emoji-regex:10.6.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:emoji-regex:emoji_regex:10.6.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:emoji_regex:emoji-regex:10.6.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:emoji_regex:emoji_regex:10.6.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:emoji:emoji-regex:10.6.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:emoji:emoji_regex:10.6.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/emoji-regex@10.6.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-10.6.0.tgz", "integrity": "sha512-toUI84YS5YmxW219erniWD0CIVOo46xGKColeNQRgOzDorgBi1v4D71/OFzgD9GO2UGKIv1C3Sp8DAn0+j5w7A==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 40ac25fe3302f6ab
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: emoji-regex 8.0.0
message: Package discovered: emoji-regex 8.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "6d4a27855f2a5940", "name": "emoji-regex", "version": "8.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:emoji-regex:emoji-regex:8.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:emoji-regex:emoji_regex:8.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:emoji_regex:emoji-regex:8.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:emoji_regex:emoji_regex:8.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:emoji:emoji-regex:8.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:emoji:emoji_regex:8.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/emoji-regex@8.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz", "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 2e49a0ba02ec88d9
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: emoji-regex 9.2.2
message: Package discovered: emoji-regex 9.2.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "6d104925e5745212", "name": "emoji-regex", "version": "9.2.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:emoji-regex:emoji-regex:9.2.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:emoji-regex:emoji_regex:9.2.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:emoji_regex:emoji-regex:9.2.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:emoji_regex:emoji_regex:9.2.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:emoji:emoji-regex:9.2.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:emoji:emoji_regex:9.2.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/emoji-regex@9.2.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-9.2.2.tgz", "integrity": "sha512-L18DaJsXSUk2+42pv8mLs5jJT2hqFkFE4j21wOmgbUqsZ2hL72NsUU785g9RXgo3s0ZNgVl42TiHp3ZtOv/Vyg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: dd09559c2dcfbb7e
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: encodeurl 2.0.0
message: Package discovered: encodeurl 2.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "c88c25f6c6e59773", "name": "encodeurl", "version": "2.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:encodeurl:encodeurl:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/encodeurl@2.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/encodeurl/-/encodeurl-2.0.0.tgz", "integrity": "sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: aefcf9a0415c9a67
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: end-of-stream 1.4.5
message: Package discovered: end-of-stream 1.4.5
remediation: Track and scan dependencies.
raw_finding:
{"id": "2e1781643534e89c", "name": "end-of-stream", "version": "1.4.5", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:end-of-stream:end-of-stream:1.4.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:end-of-stream:end_of_stream:1.4.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:end_of_stream:end-of-stream:1.4.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:end_of_stream:end_of_stream:1.4.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:end-of:end-of-stream:1.4.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:end-of:end_of_stream:1.4.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:end_of:end-of-stream:1.4.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:end_of:end_of_stream:1.4.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:end:end-of-stream:1.4.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:end:end_of_stream:1.4.5:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/end-of-stream@1.4.5", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.5.tgz", "integrity": "sha512-ooEGc6HP26xXq/N+GCGOT0JKCLDGrq2bQUZrQ7gyrJiZANJ/8YDTxTpQBXGMn+WbIQXNVpyWymm7KYVICQnyOg==", "dependencies": {"once": "^1.4.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 8a726054b0a99ad6
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: engine.io 6.6.7
message: Package discovered: engine.io 6.6.7
remediation: Track and scan dependencies.
raw_finding:
{"id": "560e37438ce30be1", "name": "engine.io", "version": "6.6.7", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:socket:engine.io:6.6.7:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/engine.io@6.6.7", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/engine.io/-/engine.io-6.6.7.tgz", "integrity": "sha512-DgOngfDKM2EviOH3Mr9m7ks1q8roetLy/IMmYthAYzbpInMbYc/GS+fWFA3rl1gvwKVsQrVV61fo5emD1y3OJQ==", "dependencies": {"@types/cors": "^2.8.12", "@types/node": ">=10.0.0", "@types/ws": "^8.5.12", "accepts": "~1.3.4", "base64id": "2.0.0", "cookie": "~0.7.2", "cors": "~2.8.5", "debug": "~4.4.1", "engine.io-parser": "~5.2.1", "ws": "~8.18.3"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 765ac1332452cd05
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: engine.io-client 6.6.4
message: Package discovered: engine.io-client 6.6.4
remediation: Track and scan dependencies.
raw_finding:
{"id": "930ef4784cebfb4a", "name": "engine.io-client", "version": "6.6.4", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:socket:engine.io-client:6.6.4:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/engine.io-client@6.6.4", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/engine.io-client/-/engine.io-client-6.6.4.tgz", "integrity": "sha512-+kjUJnZGwzewFDw951CDWcwj35vMNf2fcj7xQWOctq1F2i1jkDdVvdFG9kM/BEChymCH36KgjnW0NsL58JYRxw==", "dependencies": {"@socket.io/component-emitter": "~3.1.0", "debug": "~4.4.1", "engine.io-parser": "~5.2.1", "ws": "~8.18.3", "xmlhttprequest-ssl": "~2.1.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: b2a7fb31422c2427
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: engine.io-parser 5.2.3
message: Package discovered: engine.io-parser 5.2.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "b307d9bc2f957b2d", "name": "engine.io-parser", "version": "5.2.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:engine.io-parser:engine.io-parser:5.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:engine.io-parser:engine.io_parser:5.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:engine.io_parser:engine.io-parser:5.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:engine.io_parser:engine.io_parser:5.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:engine.io:engine.io-parser:5.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:engine.io:engine.io_parser:5.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/engine.io-parser@5.2.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/engine.io-parser/-/engine.io-parser-5.2.3.tgz", "integrity": "sha512-HqD3yTBfnBxIrbnM1DoD6Pcq8NECnh8d4As1Qgh0z5Gg3jRRIqijury0CL3ghu/edArpUYiYqQiDUQBIs4np3Q==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 6de5b5b314bb1d48
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: entities 4.5.0
message: Package discovered: entities 4.5.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "3c365deec0186b44", "name": "entities", "version": "4.5.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "BSD-2-Clause", "spdxExpression": "BSD-2-Clause", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:entities:entities:4.5.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/entities@4.5.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/entities/-/entities-4.5.0.tgz", "integrity": "sha512-V0hjH4dGPh9Ao5p0MoRY6BVqtwCjhz6vI5LT8AJ55H+4g9/4vbHx1I54fS0XuclLhDHArPQCiMjDxjaL8fPxhw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 9ebfe3f940205a55
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: es-define-property 1.0.1
message: Package discovered: es-define-property 1.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "198a07fe3b41a7bb", "name": "es-define-property", "version": "1.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:es-define-property:es-define-property:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:es-define-property:es_define_property:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:es_define_property:es-define-property:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:es_define_property:es_define_property:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:es-define:es-define-property:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:es-define:es_define_property:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:es_define:es-define-property:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:es_define:es_define_property:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:es:es-define-property:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:es:es_define_property:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/es-define-property@1.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz", "integrity": "sha512-e3nRfgfUZ4rNGL232gUgX06QNyyez04KdjFrF+LTRoOXmrOgFKDg4BCdsjW8EnT69eqdYGmRpJwiPVYNrCaW3g==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: ce987dda52f0c354
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: es-errors 1.3.0
message: Package discovered: es-errors 1.3.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "524e10cb2d7467ea", "name": "es-errors", "version": "1.3.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:es-errors:es-errors:1.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:es-errors:es_errors:1.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:es_errors:es-errors:1.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:es_errors:es_errors:1.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:es:es-errors:1.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:es:es_errors:1.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/es-errors@1.3.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz", "integrity": "sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 8e3c7c80273d6fd7
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: es-object-atoms 1.1.1
message: Package discovered: es-object-atoms 1.1.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "fa7ef7424a021d69", "name": "es-object-atoms", "version": "1.1.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:es-object-atoms:es-object-atoms:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:es-object-atoms:es_object_atoms:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:es_object_atoms:es-object-atoms:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:es_object_atoms:es_object_atoms:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:es-object:es-object-atoms:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:es-object:es_object_atoms:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:es_object:es-object-atoms:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:es_object:es_object_atoms:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:es:es-object-atoms:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:es:es_object_atoms:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/es-object-atoms@1.1.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.1.tgz", "integrity": "sha512-FGgH2h8zKNim9ljj7dankFPcICIK9Cp5bm+c2gQSYePhpaG5+esrLODihIorn+Pe6FGJzWhXQotPv73jTaldXA==", "dependencies": {"es-errors": "^1.3.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: cdf746578205af98
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: es-set-tostringtag 2.1.0
message: Package discovered: es-set-tostringtag 2.1.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "8f498e19379b53ea", "name": "es-set-tostringtag", "version": "2.1.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:es-set-tostringtag:es-set-tostringtag:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:es-set-tostringtag:es_set_tostringtag:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:es_set_tostringtag:es-set-tostringtag:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:es_set_tostringtag:es_set_tostringtag:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:es-set:es-set-tostringtag:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:es-set:es_set_tostringtag:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:es_set:es-set-tostringtag:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:es_set:es_set_tostringtag:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:es:es-set-tostringtag:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:es:es_set_tostringtag:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/es-set-tostringtag@2.1.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/es-set-tostringtag/-/es-set-tostringtag-2.1.0.tgz", "integrity": "sha512-j6vWzfrGVfyXxge+O0x5sh6cvxAog0a/4Rdd2K36zCMV5eJ+/+tOAngRO8cODMNWbVRdVlmGZQL2YS3yR8bIUA==", "dependencies": {"es-errors": "^1.3.0", "get-intrinsic": "^1.2.6", "has-tostringtag": "^1.0.2", "hasown": "^2.0.2"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 3d860225864c56d0
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: escalade 3.2.0
message: Package discovered: escalade 3.2.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "2a58ccd5fc44a7b2", "name": "escalade", "version": "3.2.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:escalade:escalade:3.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/escalade@3.2.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/escalade/-/escalade-3.2.0.tgz", "integrity": "sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 2f35769c64d37fb5
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: escape-html 1.0.3
message: Package discovered: escape-html 1.0.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "94fc6050cdb348bc", "name": "escape-html", "version": "1.0.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:escape-html:escape-html:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:escape-html:escape_html:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:escape_html:escape-html:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:escape_html:escape_html:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:escape:escape-html:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:escape:escape_html:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/escape-html@1.0.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz", "integrity": "sha512-NiSupZ4OeuGwr68lGIeym/ksIZMJodUGOSCZ/FSnTxcrekbvqrgdUxlJOMpijaKZVjAJrWrGs/6Jy8OMuyj9ow==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: b31fcb4e8c7ac0d8
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: etag 1.8.1
message: Package discovered: etag 1.8.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "4ddb33d9fc7b6ece", "name": "etag", "version": "1.8.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:etag:etag:1.8.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/etag@1.8.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz", "integrity": "sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 643445c96492a454
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: event-target-shim 5.0.1
message: Package discovered: event-target-shim 5.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "419bcd6d1f4e7103", "name": "event-target-shim", "version": "5.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:event-target-shim:event-target-shim:5.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:event-target-shim:event_target_shim:5.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:event_target_shim:event-target-shim:5.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:event_target_shim:event_target_shim:5.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:event-target:event-target-shim:5.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:event-target:event_target_shim:5.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:event_target:event-target-shim:5.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:event_target:event_target_shim:5.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:event:event-target-shim:5.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:event:event_target_shim:5.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/event-target-shim@5.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/event-target-shim/-/event-target-shim-5.0.1.tgz", "integrity": "sha512-i/2XbnSz/uxRCU6+NdVJgKWDTM427+MqYbkQzD321DuCQJUqOuJKIA0IM2+W2xtYHdKOmZ4dR6fExsd4SXL+WQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: df7be298e5b5835f
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: eventemitter3 4.0.7
message: Package discovered: eventemitter3 4.0.7
remediation: Track and scan dependencies.
raw_finding:
{"id": "2bf11b6ac833063c", "name": "eventemitter3", "version": "4.0.7", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:eventemitter3:eventemitter3:4.0.7:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/eventemitter3@4.0.7", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/eventemitter3/-/eventemitter3-4.0.7.tgz", "integrity": "sha512-8guHBZCwKnFhYdHr2ysuRWErTwhoN2X8XELRlrRwpmfeY2jjuUN4taQMsULKUVo1K4DvZl+0pgfyoysHxvmvEw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 8f3c29afa2938d65
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: events 3.3.0
message: Package discovered: events 3.3.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "bca3d6fcf9ecc55d", "name": "events", "version": "3.3.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:events:events:3.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/events@3.3.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/events/-/events-3.3.0.tgz", "integrity": "sha512-mQw+2fkQbALzQ7V0MY0IqdnXNOeTtP4r0lN9z7AAawCXgqea7bDii20AYrIBrFd/Hx0M2Ocz6S111CaFkUcb0Q==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 42a06b319afe7e6e
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: express 4.22.1
message: Package discovered: express 4.22.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "7bcabe4027921ced", "name": "express", "version": "4.22.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:openjsf:express:4.22.1:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/express@4.22.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/express/-/express-4.22.1.tgz", "integrity": "sha512-F2X8g9P1X7uCPZMA3MVf9wcTqlyNp7IhH5qPCI0izhaOIYXaW9L535tGA3qmjRzpH+bZczqq7hVKxTR4NWnu+g==", "dependencies": {"accepts": "~1.3.8", "array-flatten": "1.1.1", "body-parser": "~1.20.3", "content-disposition": "~0.5.4", "content-type": "~1.0.4", "cookie": "~0.7.1", "cookie-signature": "~1.0.6", "debug": "2.6.9", "depd": "2.0.0", "encodeurl": "~2.0.0", "escape-html": "~1.0.3", "etag": "~1.8.1", "finalhandler": "~1.3.1", "fresh": "~0.5.2", "http-errors": "~2.0.0", "merge-descriptors": "1.0.3", "methods": "~1.1.2", "on-finished": "~2.4.1", "parseurl": "~1.3.3", "path-to-regexp": "~0.1.12", "proxy-addr": "~2.0.7", "qs": "~6.14.0", "range-parser": "~1.2.1", "safe-buffer": "5.2.1", "send": "~0.19.0", "serve-static": "~1.16.2", "setprototypeof": "1.2.0", "statuses": "~2.0.1", "type-is": "~1.6.18", "utils-merge": "1.0.1", "vary": "~1.1.2"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: ba97090edfd08e19
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: express-rate-limit 8.5.1
message: Package discovered: express-rate-limit 8.5.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "41f99f3613a4245b", "name": "express-rate-limit", "version": "8.5.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:express-rate-limit:express-rate-limit:8.5.1:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/express-rate-limit@8.5.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.5.1.tgz", "integrity": "sha512-5O6KYmyJEpuPJV5hNTXKbAHWRqrzyu+OI3vUnSd2kXFubIVpG7ezpgxQy76Zo5GQZtrQBg86hF+CM/NX+cioiQ==", "dependencies": {"ip-address": "^10.2.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: f780fc7a8f12c92d
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: extend 3.0.2
message: Package discovered: extend 3.0.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "c7f94791a09e5a4e", "name": "extend", "version": "3.0.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:extend_project:extend:3.0.2:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/extend@3.0.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/extend/-/extend-3.0.2.tgz", "integrity": "sha512-fjquC59cD7CyW6urNXK0FBufkZcoiGG80wTuPujX590cB5Ttln20E2UB4S/WARVqhXffZl2LNgS+gQdPIIim/g==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 9507c5e5a8d55fc3
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: farmhash-modern 1.1.0
message: Package discovered: farmhash-modern 1.1.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "2efb607597053214", "name": "farmhash-modern", "version": "1.1.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:farmhash-modern:farmhash-modern:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:farmhash-modern:farmhash_modern:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:farmhash_modern:farmhash-modern:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:farmhash_modern:farmhash_modern:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:farmhash:farmhash-modern:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:farmhash:farmhash_modern:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/farmhash-modern@1.1.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/farmhash-modern/-/farmhash-modern-1.1.0.tgz", "integrity": "sha512-6ypT4XfgqJk/F3Yuv4SX26I3doUjt0GTG4a+JgWxXQpxXzTBq8fPUeGHfcYMMDPHJHm3yPOSjaeBwBGAHWXCdA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 7b51b4692c5fdf0a
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: fast-deep-equal 2.0.1
message: Package discovered: fast-deep-equal 2.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "18c3431d6798a7cd", "name": "fast-deep-equal", "version": "2.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:fast-deep-equal:fast-deep-equal:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast-deep-equal:fast_deep_equal:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast_deep_equal:fast-deep-equal:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast_deep_equal:fast_deep_equal:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast-deep:fast-deep-equal:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast-deep:fast_deep_equal:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast_deep:fast-deep-equal:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast_deep:fast_deep_equal:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast:fast-deep-equal:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast:fast_deep_equal:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/fast-deep-equal@2.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-2.0.1.tgz", "integrity": "sha512-bCK/2Z4zLidyB4ReuIsvALH6w31YfAQDmXMqMx6FyfHqvBxtjC0eRumeSu4Bs3XtXwpyIywtSTrVT99BxY1f9w==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: df8671df2c12ad48
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: fast-deep-equal 3.1.3
message: Package discovered: fast-deep-equal 3.1.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "5dcd27213b9411fd", "name": "fast-deep-equal", "version": "3.1.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:fast-deep-equal:fast-deep-equal:3.1.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast-deep-equal:fast_deep_equal:3.1.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast_deep_equal:fast-deep-equal:3.1.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast_deep_equal:fast_deep_equal:3.1.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast-deep:fast-deep-equal:3.1.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast-deep:fast_deep_equal:3.1.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast_deep:fast-deep-equal:3.1.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast_deep:fast_deep_equal:3.1.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast:fast-deep-equal:3.1.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast:fast_deep_equal:3.1.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/fast-deep-equal@3.1.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz", "integrity": "sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: f137c47d21c65abc
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: fast-equals 5.4.0
message: Package discovered: fast-equals 5.4.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "fea7469744f21377", "name": "fast-equals", "version": "5.4.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:fast-equals:fast-equals:5.4.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast-equals:fast_equals:5.4.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast_equals:fast-equals:5.4.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast_equals:fast_equals:5.4.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast:fast-equals:5.4.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast:fast_equals:5.4.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/fast-equals@5.4.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/fast-equals/-/fast-equals-5.4.0.tgz", "integrity": "sha512-jt2DW/aNFNwke7AUd+Z+e6pz39KO5rzdbbFCg2sGafS4mk13MI7Z8O5z9cADNn5lhGODIgLwug6TZO2ctf7kcw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: c3d9f6c04405728e
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: fast-glob 3.3.3
message: Package discovered: fast-glob 3.3.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "756085ffd4026f3c", "name": "fast-glob", "version": "3.3.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:fast-glob:fast-glob:3.3.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast-glob:fast_glob:3.3.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast_glob:fast-glob:3.3.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast_glob:fast_glob:3.3.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast:fast-glob:3.3.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast:fast_glob:3.3.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/fast-glob@3.3.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/fast-glob/-/fast-glob-3.3.3.tgz", "integrity": "sha512-7MptL8U0cqcFdzIzwOTHoilX9x5BrNqye7Z/LuC7kCMRio1EMSyqRK3BEAUD7sXRq4iT4AzTVuZdhgQ2TCvYLg==", "dependencies": {"@nodelib/fs.stat": "^2.0.2", "@nodelib/fs.walk": "^1.2.3", "glob-parent": "^5.1.2", "merge2": "^1.3.0", "micromatch": "^4.0.8"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: c31f574684b9f10b
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: fast-xml-builder 1.1.5
message: Package discovered: fast-xml-builder 1.1.5
remediation: Track and scan dependencies.
raw_finding:
{"id": "b198a6d2f9894f68", "name": "fast-xml-builder", "version": "1.1.5", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:fast-xml-builder:fast-xml-builder:1.1.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast-xml-builder:fast_xml_builder:1.1.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast_xml_builder:fast-xml-builder:1.1.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast_xml_builder:fast_xml_builder:1.1.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast-xml:fast-xml-builder:1.1.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast-xml:fast_xml_builder:1.1.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast_xml:fast-xml-builder:1.1.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast_xml:fast_xml_builder:1.1.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast:fast-xml-builder:1.1.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fast:fast_xml_builder:1.1.5:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/fast-xml-builder@1.1.5", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/fast-xml-builder/-/fast-xml-builder-1.1.5.tgz", "integrity": "sha512-4TJn/8FKLeslLAH3dnohXqE3QSoxkhvaMzepOIZytwJXZO69Bfz0HBdDHzOTOon6G59Zrk6VQ2bEiv1t61rfkA==", "dependencies": {"path-expression-matcher": "^1.1.3"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: b4dd20a63e4dfb25
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: fast-xml-parser 5.7.2
message: Package discovered: fast-xml-parser 5.7.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "03ef00f42507be2f", "name": "fast-xml-parser", "version": "5.7.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:naturalintelligence:fast-xml-parser:5.7.2:*:*:*:*:*:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/fast-xml-parser@5.7.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/fast-xml-parser/-/fast-xml-parser-5.7.2.tgz", "integrity": "sha512-P7oW7tLbYnhOLQk/Gv7cZgzgMPP/XN03K02/Jy6Y/NHzyIAIpxuZIM/YqAkfiXFPxA2CTm7NtCijK9EDu09u2w==", "dependencies": {"@nodable/entities": "^2.1.0", "fast-xml-builder": "^1.1.5", "path-expression-matcher": "^1.5.0", "strnum": "^2.2.3"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 0cdc7a6cc314eb50
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: fastq 1.20.1
message: Package discovered: fastq 1.20.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "32597e8bd5ad1e0f", "name": "fastq", "version": "1.20.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:fastq:fastq:1.20.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/fastq@1.20.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/fastq/-/fastq-1.20.1.tgz", "integrity": "sha512-GGToxJ/w1x32s/D2EKND7kTil4n8OVk/9mycTc4VDza13lOvpUZTGX3mFSCtV9ksdGBVzvsyAVLM6mHFThxXxw==", "dependencies": {"reusify": "^1.0.4"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 98eadb7c6959fda9
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: faye-websocket 0.11.4
message: Package discovered: faye-websocket 0.11.4
remediation: Track and scan dependencies.
raw_finding:
{"id": "5a9d4671ef023c43", "name": "faye-websocket", "version": "0.11.4", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "Apache-2.0", "spdxExpression": "Apache-2.0", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:faye-websocket:faye-websocket:0.11.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:faye-websocket:faye_websocket:0.11.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:faye_websocket:faye-websocket:0.11.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:faye_websocket:faye_websocket:0.11.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:faye:faye-websocket:0.11.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:faye:faye_websocket:0.11.4:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/faye-websocket@0.11.4", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/faye-websocket/-/faye-websocket-0.11.4.tgz", "integrity": "sha512-CzbClwlXAuiRQAlUyfqPgvPoNKTckTPGfwZV4ZdAhVcP2lh9KUxJg2b5GkE7XbjKQ3YJnQ9z6D9ntLAlB+tP8g==", "dependencies": {"websocket-driver": ">=0.5.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 64d0cebc4ed83cee
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: fdir 6.5.0
message: Package discovered: fdir 6.5.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "4d9064c107e69a4e", "name": "fdir", "version": "6.5.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:fdir:fdir:6.5.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/fdir@6.5.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/fdir/-/fdir-6.5.0.tgz", "integrity": "sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 7b56dfc5637424f2
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: fflate 0.8.2
message: Package discovered: fflate 0.8.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "ad8b63b86fd3ee37", "name": "fflate", "version": "0.8.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:fflate:fflate:0.8.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/fflate@0.8.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/fflate/-/fflate-0.8.2.tgz", "integrity": "sha512-cPJU47OaAoCbg0pBvzsgpTPhmhqI5eJjh/JIu8tPj5q+T7iLvW/JAYUqmE7KOB4R1ZyEhzBaIQpQpardBF5z8A==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: d2d1a258c47b4e8a
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: fill-range 7.1.1
message: Package discovered: fill-range 7.1.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "adf22420cd3811ab", "name": "fill-range", "version": "7.1.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:fill-range:fill-range:7.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fill-range:fill_range:7.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fill_range:fill-range:7.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fill_range:fill_range:7.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fill:fill-range:7.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:fill:fill_range:7.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/fill-range@7.1.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/fill-range/-/fill-range-7.1.1.tgz", "integrity": "sha512-YsGpe3WHLK8ZYi4tWDg2Jy3ebRz2rXowDxnld4bkQB00cc/1Zw9AWnC0i9ztDJitivtQvaI9KaLyKrc+hBW0yg==", "dependencies": {"to-regex-range": "^5.0.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 0d132a7f95881c19
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: finalhandler 1.3.2
message: Package discovered: finalhandler 1.3.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "257d2278606af57b", "name": "finalhandler", "version": "1.3.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:finalhandler:finalhandler:1.3.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/finalhandler@1.3.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.3.2.tgz", "integrity": "sha512-aA4RyPcd3badbdABGDuTXCMTtOneUCAYH/gxoYRTZlIJdF0YPWuGqiAsIrhNnnqdXGswYk6dGujem4w80UJFhg==", "dependencies": {"debug": "2.6.9", "encodeurl": "~2.0.0", "escape-html": "~1.0.3", "on-finished": "~2.4.1", "parseurl": "~1.3.3", "statuses": "~2.0.2", "unpipe": "~1.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: a37c455231ce6925
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: find-up 4.1.0
message: Package discovered: find-up 4.1.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "dde504db4cea8c91", "name": "find-up", "version": "4.1.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:find-up:find-up:4.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:find-up:find_up:4.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:find_up:find-up:4.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:find_up:find_up:4.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:find:find-up:4.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:find:find_up:4.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/find-up@4.1.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/find-up/-/find-up-4.1.0.tgz", "integrity": "sha512-PpOwAdQ/YlXQ2vj8a3h8IipDuYRi3wceVQQGYWxNINccq40Anw7BlsEXCMbt1Zt+OLA6Fq9suIpIWD0OsnISlw==", "dependencies": {"locate-path": "^5.0.0", "path-exists": "^4.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 6285de3b3f3c2477
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: firebase-admin 12.7.0
message: Package discovered: firebase-admin 12.7.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "01aea657af389bb4", "name": "firebase-admin", "version": "12.7.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "Apache-2.0", "spdxExpression": "Apache-2.0", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:firebase-admin:firebase-admin:12.7.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:firebase-admin:firebase_admin:12.7.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:firebase_admin:firebase-admin:12.7.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:firebase_admin:firebase_admin:12.7.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:firebase:firebase-admin:12.7.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:firebase:firebase_admin:12.7.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/firebase-admin@12.7.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/firebase-admin/-/firebase-admin-12.7.0.tgz", "integrity": "sha512-raFIrOyTqREbyXsNkSHyciQLfv8AUZazehPaQS1lZBSCDYW74FYXU0nQZa3qHI4K+hawohlDbywZ4+qce9YNxA==", "dependencies": {"@fastify/busboy": "^3.0.0", "@firebase/database-compat": "1.0.8", "@firebase/database-types": "1.0.5", "@types/node": "^22.0.1", "farmhash-modern": "^1.1.0", "jsonwebtoken": "^9.0.0", "jwks-rsa": "^3.1.0", "node-forge": "^1.3.1", "uuid": "^10.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: a972164b3d990123
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: follow-redirects 1.16.0
message: Package discovered: follow-redirects 1.16.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "a8847fd98501e6bd", "name": "follow-redirects", "version": "1.16.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:follow-redirects:follow_redirects:1.16.0:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/follow-redirects@1.16.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.16.0.tgz", "integrity": "sha512-y5rN/uOsadFT/JfYwhxRS5R7Qce+g3zG97+JrtFZlC9klX/W5hD7iiLzScI4nZqUS7DNUdhPgw4xI8W2LuXlUw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: a2e20f1dd4ff167a
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: fontkit 2.0.4
message: Package discovered: fontkit 2.0.4
remediation: Track and scan dependencies.
raw_finding:
{"id": "83c2ace663a40ea8", "name": "fontkit", "version": "2.0.4", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:fontkit:fontkit:2.0.4:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/fontkit@2.0.4", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/fontkit/-/fontkit-2.0.4.tgz", "integrity": "sha512-syetQadaUEDNdxdugga9CpEYVaQIxOwk7GlwZWWZ19//qW4zE5bknOKeMBDYAASwnpaSHKJITRLMF9m1fp3s6g==", "dependencies": {"@swc/helpers": "^0.5.12", "brotli": "^1.3.2", "clone": "^2.1.2", "dfa": "^1.2.0", "fast-deep-equal": "^3.1.3", "restructure": "^3.0.0", "tiny-inflate": "^1.0.3", "unicode-properties": "^1.4.0", "unicode-trie": "^2.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 0277ddadc8ca9fad
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: foreground-child 3.3.1
message: Package discovered: foreground-child 3.3.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "be5a9ebbd8259fbe", "name": "foreground-child", "version": "3.3.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:foreground-child:foreground-child:3.3.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:foreground-child:foreground_child:3.3.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:foreground_child:foreground-child:3.3.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:foreground_child:foreground_child:3.3.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:foreground:foreground-child:3.3.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:foreground:foreground_child:3.3.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/foreground-child@3.3.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/foreground-child/-/foreground-child-3.3.1.tgz", "integrity": "sha512-gIXjKqtFuWEgzFRJA9WCQeSJLZDjgJUOMCMzxtvFq/37KojM1BFGufqsCy0r4qSQmYLsZYMeyRqzIWOMup03sw==", "dependencies": {"cross-spawn": "^7.0.6", "signal-exit": "^4.0.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: f31639275e9af4b4
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: form-data 2.5.5
message: Package discovered: form-data 2.5.5
remediation: Track and scan dependencies.
raw_finding:
{"id": "cccf1222c38fa883", "name": "form-data", "version": "2.5.5", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:form-data:form-data:2.5.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:form-data:form_data:2.5.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:form_data:form-data:2.5.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:form_data:form_data:2.5.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:form:form-data:2.5.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:form:form_data:2.5.5:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/form-data@2.5.5", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/form-data/-/form-data-2.5.5.tgz", "integrity": "sha512-jqdObeR2rxZZbPSGL+3VckHMYtu+f9//KXBsVny6JSX/pa38Fy+bGjuG8eW/H6USNQWhLi8Num++cU2yOCNz4A==", "dependencies": {"asynckit": "^0.4.0", "combined-stream": "^1.0.8", "es-set-tostringtag": "^2.1.0", "hasown": "^2.0.2", "mime-types": "^2.1.35", "safe-buffer": "^5.2.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: f04370c9bd4302d0
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: form-data 4.0.5
message: Package discovered: form-data 4.0.5
remediation: Track and scan dependencies.
raw_finding:
{"id": "fb8802f2379acb63", "name": "form-data", "version": "4.0.5", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:form-data:form-data:4.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:form-data:form_data:4.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:form_data:form-data:4.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:form_data:form_data:4.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:form:form-data:4.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:form:form_data:4.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/form-data@4.0.5", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.5.tgz", "integrity": "sha512-8RipRLol37bNs2bhoV67fiTEvdTrbMUYcFTiy3+wuuOnUog2QBHCZWXDRijWQfAkhBj2Uf5UnVaiWwA5vdd82w==", "dependencies": {"asynckit": "^0.4.0", "combined-stream": "^1.0.8", "es-set-tostringtag": "^2.1.0", "hasown": "^2.0.2", "mime-types": "^2.1.12"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 309869a00f00319d
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: forwarded 0.2.0
message: Package discovered: forwarded 0.2.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "e972502f7a8ea944", "name": "forwarded", "version": "0.2.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:forwarded_project:forwarded:0.2.0:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/forwarded@0.2.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz", "integrity": "sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: f433c70fa1fc6314
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: fraction.js 5.3.4
message: Package discovered: fraction.js 5.3.4
remediation: Track and scan dependencies.
raw_finding:
{"id": "f45608cb782e3ae1", "name": "fraction.js", "version": "5.3.4", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:fraction.js:fraction.js:5.3.4:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/fraction.js@5.3.4", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/fraction.js/-/fraction.js-5.3.4.tgz", "integrity": "sha512-1X1NTtiJphryn/uLQz3whtY6jK3fTqoE3ohKs0tT+Ujr1W59oopxmoEh7Lu5p6vBaPbgoM0bzveAW4Qi5RyWDQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 9a535c2456d85e31
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: fresh 0.5.2
message: Package discovered: fresh 0.5.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "7908a3419570e85d", "name": "fresh", "version": "0.5.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:fresh_project:fresh:0.5.2:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/fresh@0.5.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz", "integrity": "sha512-zJ2mQYM18rEFOudeV4GShTGIQ7RbzA7ozbU9I/XBpm7kqgMywgmylMwXHxZJmkVoYkna9d2pVXVXPdYTP9ej8Q==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 2b4f03d780920bbf
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: fsevents 2.3.3
message: Package discovered: fsevents 2.3.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "585a401b2834ec08", "name": "fsevents", "version": "2.3.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:fsevents:fsevents:2.3.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/fsevents@2.3.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz", "integrity": "sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: ed6c41b4eae5b77e
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: function-bind 1.1.2
message: Package discovered: function-bind 1.1.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "a9db1e71931f56ac", "name": "function-bind", "version": "1.1.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:function-bind:function-bind:1.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:function-bind:function_bind:1.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:function_bind:function-bind:1.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:function_bind:function_bind:1.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:function:function-bind:1.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:function:function_bind:1.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/function-bind@1.1.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz", "integrity": "sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 1567b7d3e95e72e5
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: functional-red-black-tree 1.0.1
message: Package discovered: functional-red-black-tree 1.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "06c01b9cd08a3446", "name": "functional-red-black-tree", "version": "1.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:functional-red-black-tree:functional-red-black-tree:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:functional-red-black-tree:functional_red_black_tree:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:functional_red_black_tree:functional-red-black-tree:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:functional_red_black_tree:functional_red_black_tree:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:functional-red-black:functional-red-black-tree:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:functional-red-black:functional_red_black_tree:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:functional_red_black:functional-red-black-tree:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:functional_red_black:functional_red_black_tree:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:functional-red:functional-red-black-tree:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:functional-red:functional_red_black_tree:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:functional_red:functional-red-black-tree:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:functional_red:functional_red_black_tree:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:functional:functional-red-black-tree:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:functional:functional_red_black_tree:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/functional-red-black-tree@1.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/functional-red-black-tree/-/functional-red-black-tree-1.0.1.tgz", "integrity": "sha512-dsKNQNdj6xA3T+QlADDA7mOSlX0qiMINjn0cgr+eGHGsbSHzTabcIogz2+p/iqP1Xs6EP/sS2SbqH+brGTbq0g==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 2d3340f07fdb7b3f
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: gaxios 6.7.1
message: Package discovered: gaxios 6.7.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "9d900b217a57abee", "name": "gaxios", "version": "6.7.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "Apache-2.0", "spdxExpression": "Apache-2.0", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:gaxios:gaxios:6.7.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/gaxios@6.7.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/gaxios/-/gaxios-6.7.1.tgz", "integrity": "sha512-LDODD4TMYx7XXdpwxAVRAIAuB0bzv0s+ywFonY46k126qzQHT9ygyoa9tncmOiQmmDrik65UYsEkv3lbfqQ3yQ==", "dependencies": {"extend": "^3.0.2", "https-proxy-agent": "^7.0.1", "is-stream": "^2.0.0", "node-fetch": "^2.6.9", "uuid": "^9.0.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 88029de581a160cb
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: gcp-metadata 6.1.1
message: Package discovered: gcp-metadata 6.1.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "aa3886c02ba5c2c5", "name": "gcp-metadata", "version": "6.1.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "Apache-2.0", "spdxExpression": "Apache-2.0", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:gcp-metadata:gcp-metadata:6.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:gcp-metadata:gcp_metadata:6.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:gcp_metadata:gcp-metadata:6.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:gcp_metadata:gcp_metadata:6.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:gcp:gcp-metadata:6.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:gcp:gcp_metadata:6.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/gcp-metadata@6.1.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/gcp-metadata/-/gcp-metadata-6.1.1.tgz", "integrity": "sha512-a4tiq7E0/5fTjxPAaH4jpjkSv/uCaU2p5KC6HVGrvl0cDjA8iBZv4vv1gyzlmK0ZUKqwpOyQMKzZQe3lTit77A==", "dependencies": {"gaxios": "^6.1.1", "google-logging-utils": "^0.0.2", "json-bigint": "^1.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: c4a7ba3815d4fc91
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: get-caller-file 2.0.5
message: Package discovered: get-caller-file 2.0.5
remediation: Track and scan dependencies.
raw_finding:
{"id": "adc0dd4bf4f30c10", "name": "get-caller-file", "version": "2.0.5", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:get-caller-file:get-caller-file:2.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:get-caller-file:get_caller_file:2.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:get_caller_file:get-caller-file:2.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:get_caller_file:get_caller_file:2.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:get-caller:get-caller-file:2.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:get-caller:get_caller_file:2.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:get_caller:get-caller-file:2.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:get_caller:get_caller_file:2.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:get:get-caller-file:2.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:get:get_caller_file:2.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/get-caller-file@2.0.5", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-2.0.5.tgz", "integrity": "sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: fcd2d596421aca4c
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: get-intrinsic 1.3.0
message: Package discovered: get-intrinsic 1.3.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "338eac46e71d483e", "name": "get-intrinsic", "version": "1.3.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:get-intrinsic:get-intrinsic:1.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:get-intrinsic:get_intrinsic:1.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:get_intrinsic:get-intrinsic:1.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:get_intrinsic:get_intrinsic:1.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:get:get-intrinsic:1.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:get:get_intrinsic:1.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/get-intrinsic@1.3.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz", "integrity": "sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ==", "dependencies": {"call-bind-apply-helpers": "^1.0.2", "es-define-property": "^1.0.1", "es-errors": "^1.3.0", "es-object-atoms": "^1.1.1", "function-bind": "^1.1.2", "get-proto": "^1.0.1", "gopd": "^1.2.0", "has-symbols": "^1.1.0", "hasown": "^2.0.2", "math-intrinsics": "^1.1.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 13f511e3eb23bc5c
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: get-proto 1.0.1
message: Package discovered: get-proto 1.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "64572c87855a75b1", "name": "get-proto", "version": "1.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:get-proto:get-proto:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:get-proto:get_proto:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:get_proto:get-proto:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:get_proto:get_proto:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:get:get-proto:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:get:get_proto:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/get-proto@1.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz", "integrity": "sha512-sTSfBjoXBp89JvIKIefqw7U2CCebsc74kiY6awiGogKtoSGbgjYE/G/+l9sF3MWFPNc9IcoOC4ODfKHfxFmp0g==", "dependencies": {"dunder-proto": "^1.0.1", "es-object-atoms": "^1.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 9565869711547f61
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /node_modules/@esbuild/darwin-arm64/bin/esbuild
title: github.com/evanw/esbuild v0.0.0-20240609211631-fc37c2fa9de2
message: Package discovered: github.com/evanw/esbuild v0.0.0-20240609211631-fc37c2fa9de2
remediation: Track and scan dependencies.
raw_finding:
{"id": "0b617a8d86aea060", "name": "github.com/evanw/esbuild", "version": "v0.0.0-20240609211631-fc37c2fa9de2", "type": "go-module", "foundBy": "go-module-binary-cataloger", "locations": [{"path": "/node_modules/@esbuild/darwin-arm64/bin/esbuild", "accessPath": "/node_modules/@esbuild/darwin-arm64/bin/esbuild", "annotations": {"evidence": "primary"}}], "licenses": [], "language": "go", "cpes": [{"cpe": "cpe:2.3:a:evanw:esbuild:v0.0.0-20240609211631-fc37c2fa9de2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:golang/github.com/evanw/esbuild@v0.0.0-20240609211631-fc37c2fa9de2", "metadataType": "go-module-buildinfo-entry", "metadata": {"goBuildSettings": [{"key": "-buildmode", "value": "exe"}, {"key": "-compiler", "value": "gc"}, {"key": "-trimpath", "value": "true"}, {"key": "CGO_ENABLED", "value": "0"}, {"key": "GOARCH", "value": "arm64"}, {"key": "GOOS", "value": "darwin"}, {"key": "vcs", "value": "git"}, {"key": "vcs.revision", "value": "fc37c2fa9de2ad77476a6d4a8f1516196b90187e"}, {"key": "vcs.time", "value": "2024-06-09T21:16:31Z"}, {"key": "vcs.modified", "value": "false"}], "goCompiledVersion": "go1.20.12", "architecture": "arm64", "mainModule": "github.com/evanw/esbuild", "goCryptoSettings": ["standard-crypto"]}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 701c2b7f153ed08a
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /node_modules/esbuild/bin/esbuild
title: github.com/evanw/esbuild v0.0.0-20240609211631-fc37c2fa9de2
message: Package discovered: github.com/evanw/esbuild v0.0.0-20240609211631-fc37c2fa9de2
remediation: Track and scan dependencies.
raw_finding:
{"id": "0dc26b5347e8f4df", "name": "github.com/evanw/esbuild", "version": "v0.0.0-20240609211631-fc37c2fa9de2", "type": "go-module", "foundBy": "go-module-binary-cataloger", "locations": [{"path": "/node_modules/esbuild/bin/esbuild", "accessPath": "/node_modules/esbuild/bin/esbuild", "annotations": {"evidence": "primary"}}], "licenses": [], "language": "go", "cpes": [{"cpe": "cpe:2.3:a:evanw:esbuild:v0.0.0-20240609211631-fc37c2fa9de2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:golang/github.com/evanw/esbuild@v0.0.0-20240609211631-fc37c2fa9de2", "metadataType": "go-module-buildinfo-entry", "metadata": {"goBuildSettings": [{"key": "-buildmode", "value": "exe"}, {"key": "-compiler", "value": "gc"}, {"key": "-trimpath", "value": "true"}, {"key": "CGO_ENABLED", "value": "0"}, {"key": "GOARCH", "value": "arm64"}, {"key": "GOOS", "value": "darwin"}, {"key": "vcs", "value": "git"}, {"key": "vcs.revision", "value": "fc37c2fa9de2ad77476a6d4a8f1516196b90187e"}, {"key": "vcs.time", "value": "2024-06-09T21:16:31Z"}, {"key": "vcs.modified", "value": "false"}], "goCompiledVersion": "go1.20.12", "architecture": "arm64", "mainModule": "github.com/evanw/esbuild", "goCryptoSettings": ["standard-crypto"]}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 0bd7d35ef088b0fd
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: glob 10.5.0
message: Package discovered: glob 10.5.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "8da722cb9983d6b3", "name": "glob", "version": "10.5.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:isaacs:glob:10.5.0:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/glob@10.5.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/glob/-/glob-10.5.0.tgz", "integrity": "sha512-DfXN8DfhJ7NH3Oe7cFmu3NCu1wKbkReJ8TorzSAFbSKrlNaQSKfIzqYqVY8zlbs2NLBbWpRiU52GX2PbaBVNkg==", "dependencies": {"foreground-child": "^3.1.0", "jackspeak": "^3.1.2", "minimatch": "^9.0.4", "minipass": "^7.1.2", "package-json-from-dist": "^1.0.0", "path-scurry": "^1.11.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 282a3bcad6a151e3
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: glob-parent 5.1.2
message: Package discovered: glob-parent 5.1.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "e9e84f484cfaf367", "name": "glob-parent", "version": "5.1.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:gulpjs:glob-parent:5.1.2:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/glob-parent@5.1.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/glob-parent/-/glob-parent-5.1.2.tgz", "integrity": "sha512-AOIgSQCepiJYwP3ARnGx+5VnTu2HBYdzbGP45eLw1vr3zB3vZLeyed1sC9hnbcOc9/SrMyM5RPQrkGz4aS9Zow==", "dependencies": {"is-glob": "^4.0.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 4709c0ff6455a8d2
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: glob-parent 6.0.2
message: Package discovered: glob-parent 6.0.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "1644b4942c7696f6", "name": "glob-parent", "version": "6.0.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:gulpjs:glob-parent:6.0.2:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/glob-parent@6.0.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/glob-parent/-/glob-parent-6.0.2.tgz", "integrity": "sha512-XxwI8EOhVQgWp6iDL+3b0r86f4d6AX6zSU55HfB4ydCEuXLXc5FcYeOu+nnGftS4TEju/11rt4KJPTMgbfmv4A==", "dependencies": {"is-glob": "^4.0.3"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 0dbbd23e15d1e62b
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /node_modules/@esbuild/darwin-arm64/bin/esbuild
title: golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8
message: Package discovered: golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8
remediation: Track and scan dependencies.
raw_finding:
{"id": "7890a665ce9e5849", "name": "golang.org/x/sys", "version": "v0.0.0-20220715151400-c0bba94af5f8", "type": "go-module", "foundBy": "go-module-binary-cataloger", "locations": [{"path": "/node_modules/@esbuild/darwin-arm64/bin/esbuild", "accessPath": "/node_modules/@esbuild/darwin-arm64/bin/esbuild", "annotations": {"evidence": "primary"}}], "licenses": [], "language": "go", "cpes": [{"cpe": "cpe:2.3:a:golang:x\\/sys:v0.0.0-20220715151400-c0bba94af5f8:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:golang/golang.org/x/sys@v0.0.0-20220715151400-c0bba94af5f8", "metadataType": "go-module-buildinfo-entry", "metadata": {"goCompiledVersion": "go1.20.12", "architecture": "arm64", "h1Digest": "h1:0A+M6Uqn+Eje4kHMK80dtF3JCXC4ykBgQG4Fe06QRhQ=", "mainModule": "github.com/evanw/esbuild", "goCryptoSettings": ["standard-crypto"]}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 5c6e328f37ad400d
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /node_modules/esbuild/bin/esbuild
title: golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8
message: Package discovered: golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8
remediation: Track and scan dependencies.
raw_finding:
{"id": "839067488ff020a0", "name": "golang.org/x/sys", "version": "v0.0.0-20220715151400-c0bba94af5f8", "type": "go-module", "foundBy": "go-module-binary-cataloger", "locations": [{"path": "/node_modules/esbuild/bin/esbuild", "accessPath": "/node_modules/esbuild/bin/esbuild", "annotations": {"evidence": "primary"}}], "licenses": [], "language": "go", "cpes": [{"cpe": "cpe:2.3:a:golang:x\\/sys:v0.0.0-20220715151400-c0bba94af5f8:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:golang/golang.org/x/sys@v0.0.0-20220715151400-c0bba94af5f8", "metadataType": "go-module-buildinfo-entry", "metadata": {"goCompiledVersion": "go1.20.12", "architecture": "arm64", "h1Digest": "h1:0A+M6Uqn+Eje4kHMK80dtF3JCXC4ykBgQG4Fe06QRhQ=", "mainModule": "github.com/evanw/esbuild", "goCryptoSettings": ["standard-crypto"]}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 59d2bd18fdd1d561
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: google-auth-library 9.15.1
message: Package discovered: google-auth-library 9.15.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "4fb04863a4dacd73", "name": "google-auth-library", "version": "9.15.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "Apache-2.0", "spdxExpression": "Apache-2.0", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:google-auth-library:google-auth-library:9.15.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:google-auth-library:google_auth_library:9.15.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:google_auth_library:google-auth-library:9.15.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:google_auth_library:google_auth_library:9.15.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:google-auth:google-auth-library:9.15.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:google-auth:google_auth_library:9.15.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:google_auth:google-auth-library:9.15.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:google_auth:google_auth_library:9.15.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:google:google-auth-library:9.15.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:google:google_auth_library:9.15.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/google-auth-library@9.15.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/google-auth-library/-/google-auth-library-9.15.1.tgz", "integrity": "sha512-Jb6Z0+nvECVz+2lzSMt9u98UsoakXxA2HGHMCxh+so3n90XgYWkq5dur19JAJV7ONiJY22yBTyJB1TSkvPq9Ng==", "dependencies": {"base64-js": "^1.3.0", "ecdsa-sig-formatter": "^1.0.11", "gaxios": "^6.1.1", "gcp-metadata": "^6.1.0", "gtoken": "^7.0.0", "jws": "^4.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: f744ca691ff58390
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: google-gax 4.6.1
message: Package discovered: google-gax 4.6.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "3344aade71052029", "name": "google-gax", "version": "4.6.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "Apache-2.0", "spdxExpression": "Apache-2.0", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:google-gax:google-gax:4.6.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:google-gax:google_gax:4.6.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:google_gax:google-gax:4.6.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:google_gax:google_gax:4.6.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:google:google-gax:4.6.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:google:google_gax:4.6.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/google-gax@4.6.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/google-gax/-/google-gax-4.6.1.tgz", "integrity": "sha512-V6eky/xz2mcKfAd1Ioxyd6nmA61gao3n01C+YeuIwu3vzM9EDR6wcVzMSIbLMDXWeoi9SHYctXuKYC5uJUT3eQ==", "dependencies": {"@grpc/grpc-js": "^1.10.9", "@grpc/proto-loader": "^0.7.13", "@types/long": "^4.0.0", "abort-controller": "^3.0.0", "duplexify": "^4.0.0", "google-auth-library": "^9.3.0", "node-fetch": "^2.7.0", "object-hash": "^3.0.0", "proto3-json-serializer": "^2.0.2", "protobufjs": "^7.3.2", "retry-request": "^7.0.0", "uuid": "^9.0.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 38ca80e4adb1c1ba
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: google-logging-utils 0.0.2
message: Package discovered: google-logging-utils 0.0.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "c45a9f7f7c5a1d26", "name": "google-logging-utils", "version": "0.0.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "Apache-2.0", "spdxExpression": "Apache-2.0", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:google-logging-utils:google-logging-utils:0.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:google-logging-utils:google_logging_utils:0.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:google_logging_utils:google-logging-utils:0.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:google_logging_utils:google_logging_utils:0.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:google-logging:google-logging-utils:0.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:google-logging:google_logging_utils:0.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:google_logging:google-logging-utils:0.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:google_logging:google_logging_utils:0.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:google:google-logging-utils:0.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:google:google_logging_utils:0.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/google-logging-utils@0.0.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/google-logging-utils/-/google-logging-utils-0.0.2.tgz", "integrity": "sha512-NEgUnEcBiP5HrPzufUkBzJOD/Sxsco3rLNo1F1TNf7ieU8ryUzBhqba8r756CjLX7rn3fHl6iLEwPYuqpoKgQQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: bb6c934fdca5487f
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: gopd 1.2.0
message: Package discovered: gopd 1.2.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "2f2433574e565258", "name": "gopd", "version": "1.2.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:gopd:gopd:1.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/gopd@1.2.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz", "integrity": "sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 30861bd8904bacc9
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: graceful-fs 4.2.11
message: Package discovered: graceful-fs 4.2.11
remediation: Track and scan dependencies.
raw_finding:
{"id": "45319b4c36cfb339", "name": "graceful-fs", "version": "4.2.11", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:graceful-fs:graceful-fs:4.2.11:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:graceful-fs:graceful_fs:4.2.11:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:graceful_fs:graceful-fs:4.2.11:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:graceful_fs:graceful_fs:4.2.11:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:graceful:graceful-fs:4.2.11:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:graceful:graceful_fs:4.2.11:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/graceful-fs@4.2.11", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.11.tgz", "integrity": "sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: a916a255ccf430d7
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: gtoken 7.1.0
message: Package discovered: gtoken 7.1.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "fe4d11ddc8ba95f7", "name": "gtoken", "version": "7.1.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:gtoken:gtoken:7.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/gtoken@7.1.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/gtoken/-/gtoken-7.1.0.tgz", "integrity": "sha512-pCcEwRi+TKpMlxAQObHDQ56KawURgyAf6jtIY046fJ5tIv3zDe/LEIubckAO8fj6JnAxLdmWkUfNyulQ2iKdEw==", "dependencies": {"gaxios": "^6.0.0", "jws": "^4.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: d28454794acf7740
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: has-symbols 1.1.0
message: Package discovered: has-symbols 1.1.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "fcd80b2c54be3c8f", "name": "has-symbols", "version": "1.1.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:has-symbols:has-symbols:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:has-symbols:has_symbols:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:has_symbols:has-symbols:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:has_symbols:has_symbols:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:has:has-symbols:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:has:has_symbols:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/has-symbols@1.1.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz", "integrity": "sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: f33597863ab8f3be
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: has-tostringtag 1.0.2
message: Package discovered: has-tostringtag 1.0.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "7749e9981a33e1c1", "name": "has-tostringtag", "version": "1.0.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:has-tostringtag:has-tostringtag:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:has-tostringtag:has_tostringtag:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:has_tostringtag:has-tostringtag:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:has_tostringtag:has_tostringtag:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:has:has-tostringtag:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:has:has_tostringtag:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/has-tostringtag@1.0.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/has-tostringtag/-/has-tostringtag-1.0.2.tgz", "integrity": "sha512-NqADB8VjPFLM2V0VvHUewwwsw0ZWBaIdgo+ieHtK3hasLz4qeCRjYcqfB6AQrBggRKppKF8L52/VqdVsO47Dlw==", "dependencies": {"has-symbols": "^1.0.3"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 96e286f1b1295263
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: hasown 2.0.3
message: Package discovered: hasown 2.0.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "6f96b80a7d603954", "name": "hasown", "version": "2.0.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:hasown:hasown:2.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/hasown@2.0.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.3.tgz", "integrity": "sha512-ej4AhfhfL2Q2zpMmLo7U1Uv9+PyhIZpgQLGT1F9miIGmiCJIoCgSmczFdrc97mWT4kVY72KA+WnnhJ5pghSvSg==", "dependencies": {"function-bind": "^1.1.2"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: e883502c6fb5e040
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: helmet 7.2.0
message: Package discovered: helmet 7.2.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "ad14b3d3d950e009", "name": "helmet", "version": "7.2.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:helmet:helmet:7.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/helmet@7.2.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/helmet/-/helmet-7.2.0.tgz", "integrity": "sha512-ZRiwvN089JfMXokizgqEPXsl2Guk094yExfoDXR0cBYWxtBbaSww/w+vT4WEJsBW2iTUi1GgZ6swmoug3Oy4Xw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 5ce7a5c301b19471
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: hsl-to-hex 1.0.0
message: Package discovered: hsl-to-hex 1.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "5912401178cdcd30", "name": "hsl-to-hex", "version": "1.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:hsl-to-hex:hsl-to-hex:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:hsl-to-hex:hsl_to_hex:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:hsl_to_hex:hsl-to-hex:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:hsl_to_hex:hsl_to_hex:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:hsl-to:hsl-to-hex:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:hsl-to:hsl_to_hex:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:hsl_to:hsl-to-hex:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:hsl_to:hsl_to_hex:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:hsl:hsl-to-hex:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:hsl:hsl_to_hex:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/hsl-to-hex@1.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/hsl-to-hex/-/hsl-to-hex-1.0.0.tgz", "integrity": "sha512-K6GVpucS5wFf44X0h2bLVRDsycgJmf9FF2elg+CrqD8GcFU8c6vYhgXn8NjUkFCwj+xDFb70qgLbTUm6sxwPmA==", "dependencies": {"hsl-to-rgb-for-reals": "^1.1.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 342f7c75e7dae76e
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: hsl-to-rgb-for-reals 1.1.1
message: Package discovered: hsl-to-rgb-for-reals 1.1.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "52590567976abaf8", "name": "hsl-to-rgb-for-reals", "version": "1.1.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:hsl-to-rgb-for-reals:hsl-to-rgb-for-reals:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:hsl-to-rgb-for-reals:hsl_to_rgb_for_reals:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:hsl_to_rgb_for_reals:hsl-to-rgb-for-reals:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:hsl_to_rgb_for_reals:hsl_to_rgb_for_reals:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:hsl-to-rgb-for:hsl-to-rgb-for-reals:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:hsl-to-rgb-for:hsl_to_rgb_for_reals:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:hsl_to_rgb_for:hsl-to-rgb-for-reals:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:hsl_to_rgb_for:hsl_to_rgb_for_reals:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:hsl-to-rgb:hsl-to-rgb-for-reals:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:hsl-to-rgb:hsl_to_rgb_for_reals:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:hsl_to_rgb:hsl-to-rgb-for-reals:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:hsl_to_rgb:hsl_to_rgb_for_reals:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:hsl-to:hsl-to-rgb-for-reals:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:hsl-to:hsl_to_rgb_for_reals:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:hsl_to:hsl-to-rgb-for-reals:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:hsl_to:hsl_to_rgb_for_reals:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:hsl:hsl-to-rgb-for-reals:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:hsl:hsl_to_rgb_for_reals:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/hsl-to-rgb-for-reals@1.1.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/hsl-to-rgb-for-reals/-/hsl-to-rgb-for-reals-1.1.1.tgz", "integrity": "sha512-LgOWAkrN0rFaQpfdWBQlv/VhkOxb5AsBjk6NQVx4yEzWS923T07X0M1Y0VNko2H52HeSpZrZNNMJ0aFqsdVzQg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 9e434aef3ca36a26
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: html-entities 2.6.0
message: Package discovered: html-entities 2.6.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "4d1e475b46ee4f29", "name": "html-entities", "version": "2.6.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:html-entities:html-entities:2.6.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:html-entities:html_entities:2.6.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:html_entities:html-entities:2.6.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:html_entities:html_entities:2.6.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:html:html-entities:2.6.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:html:html_entities:2.6.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/html-entities@2.6.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/html-entities/-/html-entities-2.6.0.tgz", "integrity": "sha512-kig+rMn/QOVRvr7c86gQ8lWXq+Hkv6CbAH1hLu+RG338StTpE8Z0b44SDVaqVu7HGKf27frdmUYEs9hTUX/cLQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 73fec784f0f7a1eb
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: html-to-text 9.0.5
message: Package discovered: html-to-text 9.0.5
remediation: Track and scan dependencies.
raw_finding:
{"id": "41ee91a75a779a86", "name": "html-to-text", "version": "9.0.5", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:html-to-text:html-to-text:9.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:html-to-text:html_to_text:9.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:html_to_text:html-to-text:9.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:html_to_text:html_to_text:9.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:html-to:html-to-text:9.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:html-to:html_to_text:9.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:html_to:html-to-text:9.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:html_to:html_to_text:9.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:html:html-to-text:9.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:html:html_to_text:9.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/html-to-text@9.0.5", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/html-to-text/-/html-to-text-9.0.5.tgz", "integrity": "sha512-qY60FjREgVZL03vJU6IfMV4GDjGBIoOyvuFdpBDIX9yTlDw0TjxVBQp+P8NvpdIXNJvfWBTNul7fsAQJq2FNpg==", "dependencies": {"@selderee/plugin-htmlparser2": "^0.11.0", "deepmerge": "^4.3.1", "dom-serializer": "^2.0.0", "htmlparser2": "^8.0.2", "selderee": "^0.11.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: c43d43edb7287d6e
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: htmlparser2 8.0.2
message: Package discovered: htmlparser2 8.0.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "4a5b4c89e570771b", "name": "htmlparser2", "version": "8.0.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:htmlparser2:htmlparser2:8.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/htmlparser2@8.0.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-8.0.2.tgz", "integrity": "sha512-GYdjWKDkbRLkZ5geuHs5NY1puJ+PXwP7+fHPRz06Eirsb9ugf6d8kkXav6ADhcODhFFPMIXyxkxSuMf3D6NCFA==", "dependencies": {"domelementtype": "^2.3.0", "domhandler": "^5.0.3", "domutils": "^3.0.1", "entities": "^4.4.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: f927a519c85962f3
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: http-errors 2.0.1
message: Package discovered: http-errors 2.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "bf2c5c4cccddf639", "name": "http-errors", "version": "2.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:http-errors:http-errors:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:http-errors:http_errors:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:http_errors:http-errors:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:http_errors:http_errors:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:http:http-errors:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:http:http_errors:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/http-errors@2.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.1.tgz", "integrity": "sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==", "dependencies": {"depd": "~2.0.0", "inherits": "~2.0.4", "setprototypeof": "~1.2.0", "statuses": "~2.0.2", "toidentifier": "~1.0.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: af32118f21902d1f
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: http-parser-js 0.5.10
message: Package discovered: http-parser-js 0.5.10
remediation: Track and scan dependencies.
raw_finding:
{"id": "b85e63dfe0c1efe8", "name": "http-parser-js", "version": "0.5.10", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:http-parser-js:http-parser-js:0.5.10:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:http-parser-js:http_parser_js:0.5.10:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:http_parser_js:http-parser-js:0.5.10:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:http_parser_js:http_parser_js:0.5.10:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:http-parser:http-parser-js:0.5.10:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:http-parser:http_parser_js:0.5.10:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:http_parser:http-parser-js:0.5.10:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:http_parser:http_parser_js:0.5.10:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:http:http-parser-js:0.5.10:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:http:http_parser_js:0.5.10:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/http-parser-js@0.5.10", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/http-parser-js/-/http-parser-js-0.5.10.tgz", "integrity": "sha512-Pysuw9XpUq5dVc/2SMHpuTY01RFl8fttgcyunjL7eEMhGM3cI4eOmiCycJDVCo/7O7ClfQD3SaI6ftDzqOXYMA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 2fd1314214cea39c
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: http-proxy-agent 5.0.0
message: Package discovered: http-proxy-agent 5.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "91bc09c317f85f97", "name": "http-proxy-agent", "version": "5.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:http-proxy-agent:http-proxy-agent:5.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:http-proxy-agent:http_proxy_agent:5.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:http_proxy_agent:http-proxy-agent:5.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:http_proxy_agent:http_proxy_agent:5.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:http-proxy:http-proxy-agent:5.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:http-proxy:http_proxy_agent:5.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:http_proxy:http-proxy-agent:5.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:http_proxy:http_proxy_agent:5.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:http:http-proxy-agent:5.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:http:http_proxy_agent:5.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/http-proxy-agent@5.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/http-proxy-agent/-/http-proxy-agent-5.0.0.tgz", "integrity": "sha512-n2hY8YdoRE1i7r6M0w9DIw5GgZN0G25P8zLCRQ8rjXtTU3vsNFBI/vWK/UIeE6g5MUUz6avwAPXmL6Fy9D/90w==", "dependencies": {"@tootallnate/once": "2", "agent-base": "6", "debug": "4"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: d375a13b9232535f
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: https-proxy-agent 5.0.1
message: Package discovered: https-proxy-agent 5.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "ac843d04db23cee1", "name": "https-proxy-agent", "version": "5.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:https-proxy-agent_project:https-proxy-agent:5.0.1:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/https-proxy-agent@5.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz", "integrity": "sha512-dFcAjpTQFgoLMzC2VwU+C/CbS7uRL0lWmxDITmqm7C+7F0Odmj6s9l6alZc6AELXhrnggM2CeWSXHGOdX2YtwA==", "dependencies": {"agent-base": "6", "debug": "4"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 56bdc5dcaf0f0066
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: https-proxy-agent 7.0.6
message: Package discovered: https-proxy-agent 7.0.6
remediation: Track and scan dependencies.
raw_finding:
{"id": "2d10e944bb8687bf", "name": "https-proxy-agent", "version": "7.0.6", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:https-proxy-agent_project:https-proxy-agent:7.0.6:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/https-proxy-agent@7.0.6", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-7.0.6.tgz", "integrity": "sha512-vK9P5/iUfdl95AI+JVyUuIcVtd4ofvtrOr3HNtM2yxC9bnMbEdp3x01OhQNnjb8IJYi38VlTE3mBXwcfvywuSw==", "dependencies": {"agent-base": "^7.1.2", "debug": "4"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: eedb1c984540056e
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: hyphen 1.14.1
message: Package discovered: hyphen 1.14.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "0cfa30ecdd760351", "name": "hyphen", "version": "1.14.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:hyphen:hyphen:1.14.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/hyphen@1.14.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/hyphen/-/hyphen-1.14.1.tgz", "integrity": "sha512-kvL8xYl5QMTh+LwohVN72ciOxC0OEV79IPdJSTwEXok9y9QHebXGdFgrED4sWfiax/ODx++CAMk3hMy4XPJPOw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 233f854a4d966408
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: iconv-lite 0.4.24
message: Package discovered: iconv-lite 0.4.24
remediation: Track and scan dependencies.
raw_finding:
{"id": "3ce09826a837d25b", "name": "iconv-lite", "version": "0.4.24", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:iconv-lite:iconv-lite:0.4.24:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:iconv-lite:iconv_lite:0.4.24:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:iconv_lite:iconv-lite:0.4.24:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:iconv_lite:iconv_lite:0.4.24:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:iconv:iconv-lite:0.4.24:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:iconv:iconv_lite:0.4.24:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/iconv-lite@0.4.24", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz", "integrity": "sha512-v3MXnZAcvnywkTUEZomIActle7RXXeedOR31wwl7VlyoXO4Qi9arvSenNQWne1TcRwhCL1HwLI21bEqdpj8/rA==", "dependencies": {"safer-buffer": ">= 2.1.2 < 3"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: a2d6f15d605131f9
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: inherits 2.0.4
message: Package discovered: inherits 2.0.4
remediation: Track and scan dependencies.
raw_finding:
{"id": "911374ff7f37ba7f", "name": "inherits", "version": "2.0.4", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:inherits:inherits:2.0.4:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/inherits@2.0.4", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz", "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 6970e7e10ca27673
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: ini 1.3.8
message: Package discovered: ini 1.3.8
remediation: Track and scan dependencies.
raw_finding:
{"id": "29aeb86d59c0f085", "name": "ini", "version": "1.3.8", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:ini_project:ini:1.3.8:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/ini@1.3.8", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/ini/-/ini-1.3.8.tgz", "integrity": "sha512-JV/yugV2uzW5iMRSiZAyDtQd+nxtUnjeLt0acNdw98kKLrvuRVyB80tsREOE7yvGVgalhZ6RNXCmEHkUKBKxew==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 9c64ace1b439e4fe
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: internmap 2.0.3
message: Package discovered: internmap 2.0.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "da7b570ddddf2064", "name": "internmap", "version": "2.0.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:internmap:internmap:2.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/internmap@2.0.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/internmap/-/internmap-2.0.3.tgz", "integrity": "sha512-5Hh7Y1wQbvY5ooGgPbDaL5iYLAPzMTUrjMulskHLH6wnv/A+1q5rgEaiuqEjB+oxGXIVZs1FF+R/KPN3ZSQYYg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: f4c9c2133d427419
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: ioredis 5.10.1
message: Package discovered: ioredis 5.10.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "0c5e141c3ee662a0", "name": "ioredis", "version": "5.10.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:ioredis:ioredis:5.10.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/ioredis@5.10.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/ioredis/-/ioredis-5.10.1.tgz", "integrity": "sha512-HuEDBTI70aYdx1v6U97SbNx9F1+svQKBDo30o0b9fw055LMepzpOOd0Ccg9Q6tbqmBSJaMuY0fB7yw9/vjBYCA==", "dependencies": {"@ioredis/commands": "1.5.1", "cluster-key-slot": "^1.1.0", "debug": "^4.3.4", "denque": "^2.1.0", "lodash.defaults": "^4.2.0", "lodash.isarguments": "^3.1.0", "redis-errors": "^1.2.0", "redis-parser": "^3.0.0", "standard-as-callback": "^2.1.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: af1cc3d21ce4d415
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: ip-address 10.2.0
message: Package discovered: ip-address 10.2.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "25abf70855373b85", "name": "ip-address", "version": "10.2.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:ip-address:ip-address:10.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ip-address:ip_address:10.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ip_address:ip-address:10.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ip_address:ip_address:10.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ip:ip-address:10.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ip:ip_address:10.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/ip-address@10.2.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.2.0.tgz", "integrity": "sha512-/+S6j4E9AHvW9SWMSEY9Xfy66O5PWvVEJ08O0y5JGyEKQpojb0K0GKpz/v5HJ/G0vi3D2sjGK78119oXZeE0qA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 5ea31e6ac67f4d75
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: ipaddr.js 1.9.1
message: Package discovered: ipaddr.js 1.9.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "c7a7f0ed243b0857", "name": "ipaddr.js", "version": "1.9.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:ipaddr.js:ipaddr.js:1.9.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/ipaddr.js@1.9.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz", "integrity": "sha512-0KI/607xoxSToH7GjN1FfSbLoU0+btTicjsQSWQlh/hZykN8KpmMf7uYwPW3R+akZ6R/w18ZlXSHBYXiYUPO3g==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: fae14e02f5662aa3
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: is-arrayish 0.3.4
message: Package discovered: is-arrayish 0.3.4
remediation: Track and scan dependencies.
raw_finding:
{"id": "88ac3450fc3712b8", "name": "is-arrayish", "version": "0.3.4", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:is-arrayish:is-arrayish:0.3.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is-arrayish:is_arrayish:0.3.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is_arrayish:is-arrayish:0.3.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is_arrayish:is_arrayish:0.3.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is:is-arrayish:0.3.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is:is_arrayish:0.3.4:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/is-arrayish@0.3.4", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/is-arrayish/-/is-arrayish-0.3.4.tgz", "integrity": "sha512-m6UrgzFVUYawGBh1dUsWR5M2Clqic9RVXC/9f8ceNlv2IcO9j9J/z8UoCLPqtsPBFNzEpfR3xftohbfqDx8EQA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: f590fee2d4fea15c
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: is-binary-path 2.1.0
message: Package discovered: is-binary-path 2.1.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "12d3bfff6ef69b2c", "name": "is-binary-path", "version": "2.1.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:is-binary-path:is-binary-path:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is-binary-path:is_binary_path:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is_binary_path:is-binary-path:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is_binary_path:is_binary_path:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is-binary:is-binary-path:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is-binary:is_binary_path:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is_binary:is-binary-path:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is_binary:is_binary_path:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is:is-binary-path:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is:is_binary_path:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/is-binary-path@2.1.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/is-binary-path/-/is-binary-path-2.1.0.tgz", "integrity": "sha512-ZMERYes6pDydyuGidse7OsHxtbI7WVeUEozgR/g7rd0xUimYNlvZRE/K2MgZTjWy725IfelLeVcEM97mmtRGXw==", "dependencies": {"binary-extensions": "^2.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 3e8a78c5009c1819
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: is-core-module 2.16.1
message: Package discovered: is-core-module 2.16.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "9f592f96ab7392ec", "name": "is-core-module", "version": "2.16.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:is-core-module:is-core-module:2.16.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is-core-module:is_core_module:2.16.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is_core_module:is-core-module:2.16.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is_core_module:is_core_module:2.16.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is-core:is-core-module:2.16.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is-core:is_core_module:2.16.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is_core:is-core-module:2.16.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is_core:is_core_module:2.16.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is:is-core-module:2.16.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is:is_core_module:2.16.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/is-core-module@2.16.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/is-core-module/-/is-core-module-2.16.1.tgz", "integrity": "sha512-UfoeMA6fIJ8wTYFEUjelnaGI67v6+N7qXJEvQuIGa99l4xsCruSYOVSQ0uPANn4dAzm8lkYPaKLrrijLq7x23w==", "dependencies": {"hasown": "^2.0.2"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: bb2d7c3406b84981
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: is-extglob 2.1.1
message: Package discovered: is-extglob 2.1.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "b2879743f62f2c47", "name": "is-extglob", "version": "2.1.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:is-extglob:is-extglob:2.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is-extglob:is_extglob:2.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is_extglob:is-extglob:2.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is_extglob:is_extglob:2.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is:is-extglob:2.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is:is_extglob:2.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/is-extglob@2.1.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz", "integrity": "sha512-SbKbANkN603Vi4jEZv49LeVJMn4yGwsbzZworEoyEiutsN3nJYdbO36zfhGJ6QEDpOZIFkDtnq5JRxmvl3jsoQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 437e0c6e090c00f1
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: is-fullwidth-code-point 3.0.0
message: Package discovered: is-fullwidth-code-point 3.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "8a7d27e13373f9f8", "name": "is-fullwidth-code-point", "version": "3.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is-fullwidth-code-point:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is_fullwidth_code_point:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is_fullwidth_code_point:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is-fullwidth-code:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is-fullwidth-code:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is_fullwidth_code:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is_fullwidth_code:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is-fullwidth:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is-fullwidth:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is_fullwidth:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is_fullwidth:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/is-fullwidth-code-point@3.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz", "integrity": "sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 8b982d6ae21c367b
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: is-glob 4.0.3
message: Package discovered: is-glob 4.0.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "6a2e0a343ed2b45b", "name": "is-glob", "version": "4.0.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:is-glob:is-glob:4.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is-glob:is_glob:4.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is_glob:is-glob:4.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is_glob:is_glob:4.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is:is-glob:4.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is:is_glob:4.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/is-glob@4.0.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/is-glob/-/is-glob-4.0.3.tgz", "integrity": "sha512-xelSayHH36ZgE7ZWhli7pW34hNbNl8Ojv5KVmkJD4hBdD3th8Tfk9vYasLM+mXWOZhFkgZfxhLSnrwRr4elSSg==", "dependencies": {"is-extglob": "^2.1.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: f5c20bc28d065782
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: is-number 7.0.0
message: Package discovered: is-number 7.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "19d61645d0264090", "name": "is-number", "version": "7.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:is-number:is-number:7.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is-number:is_number:7.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is_number:is-number:7.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is_number:is_number:7.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is:is-number:7.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is:is_number:7.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/is-number@7.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz", "integrity": "sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 1ec1886de995b530
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: is-stream 2.0.1
message: Package discovered: is-stream 2.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "0d47a7f43264d12f", "name": "is-stream", "version": "2.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:is-stream:is-stream:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is-stream:is_stream:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is_stream:is-stream:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is_stream:is_stream:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is:is-stream:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is:is_stream:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/is-stream@2.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/is-stream/-/is-stream-2.0.1.tgz", "integrity": "sha512-hFoiJiTl63nn+kstHGBtewWSKnQLpyb155KHheA1l39uvtO9nWIop1p3udqPcUd/xbF1VLMO4n7OI6p7RbngDg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: cd8dbd159ce77812
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: is-url 1.2.4
message: Package discovered: is-url 1.2.4
remediation: Track and scan dependencies.
raw_finding:
{"id": "0055323086e6dbe0", "name": "is-url", "version": "1.2.4", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:is-url:is-url:1.2.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is-url:is_url:1.2.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is_url:is-url:1.2.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is_url:is_url:1.2.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is:is-url:1.2.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:is:is_url:1.2.4:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/is-url@1.2.4", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/is-url/-/is-url-1.2.4.tgz", "integrity": "sha512-ITvGim8FhRiYe4IQ5uHSkj7pVaPDrCTkNd3yq3cV7iZAcJdHTUMPMEHcqSOy9xZ9qFenQCvi+2wjH9a1nXqHww==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 25f78dcaa669e646
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: isarray 1.0.0
message: Package discovered: isarray 1.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "14ac0fadd6b69d11", "name": "isarray", "version": "1.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:isarray:isarray:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/isarray@1.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz", "integrity": "sha512-VLghIWNM6ELQzo7zwmcg0NmTVyWKYjvIeM83yjp0wRDTmUnrM678fQbcKBo6n2CJEF0szoG//ytg+TKla89ALQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: b4f550816fd1d6a8
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: isexe 2.0.0
message: Package discovered: isexe 2.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "18556628c2ed871d", "name": "isexe", "version": "2.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:isexe:isexe:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/isexe@2.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz", "integrity": "sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 399923db78bd2f5d
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: jackspeak 3.4.3
message: Package discovered: jackspeak 3.4.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "668b76a592331d7f", "name": "jackspeak", "version": "3.4.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "BlueOak-1.0.0", "spdxExpression": "BlueOak-1.0.0", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:jackspeak:jackspeak:3.4.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/jackspeak@3.4.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/jackspeak/-/jackspeak-3.4.3.tgz", "integrity": "sha512-OGlZQpz2yfahA/Rd1Y8Cd9SIEsqvXkLVoSw/cgwhnhFMDbsQFeZYoJJ7bIZBS9BcamUW96asq/npPWugM+RQBw==", "dependencies": {"@isaacs/cliui": "^8.0.2"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: c7be600d2bcad0a1
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: jay-peg 1.1.1
message: Package discovered: jay-peg 1.1.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "c5304af01a3223ed", "name": "jay-peg", "version": "1.1.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:jay-peg:jay-peg:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:jay-peg:jay_peg:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:jay_peg:jay-peg:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:jay_peg:jay_peg:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:jay:jay-peg:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:jay:jay_peg:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/jay-peg@1.1.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/jay-peg/-/jay-peg-1.1.1.tgz", "integrity": "sha512-D62KEuBxz/ip2gQKOEhk/mx14o7eiFRaU+VNNSP4MOiIkwb/D6B3G1Mfas7C/Fit8EsSV2/IWjZElx/Gs6A4ww==", "dependencies": {"restructure": "^3.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 5b403253da2d4e5e
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: jiti 1.21.7
message: Package discovered: jiti 1.21.7
remediation: Track and scan dependencies.
raw_finding:
{"id": "a3b57ee8874ce4dc", "name": "jiti", "version": "1.21.7", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:jiti:jiti:1.21.7:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/jiti@1.21.7", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/jiti/-/jiti-1.21.7.tgz", "integrity": "sha512-/imKNG4EbWNrVjoNC/1H5/9GFy+tqjGBHCaSsN+P2RnPqjsLmv6UD3Ej+Kj8nBWaRAwyk7kK5ZUc+OEatnTR3A==", "dependencies": null}}


