# findings

scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: feda20014c18c42e
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: jose 4.15.9
message: Package discovered: jose 4.15.9
remediation: Track and scan dependencies.
raw_finding:
{"id": "0246497cf4065c27", "name": "jose", "version": "4.15.9", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:jose_project:jose:4.15.9:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/jose@4.15.9", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/jose/-/jose-4.15.9.tgz", "integrity": "sha512-1vUQX+IdDMVPj4k8kOxgUqlcK518yluMuGZwqlr44FS1ppZB/5GWh4rZG89erpOBOJjU/OBsnCVFfapsRz6nEA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: ad953d39f31a884d
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: js-beautify 1.15.4
message: Package discovered: js-beautify 1.15.4
remediation: Track and scan dependencies.
raw_finding:
{"id": "eb8b761fb0d3a989", "name": "js-beautify", "version": "1.15.4", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:js-beautify:js-beautify:1.15.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:js-beautify:js_beautify:1.15.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:js_beautify:js-beautify:1.15.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:js_beautify:js_beautify:1.15.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:js:js-beautify:1.15.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:js:js_beautify:1.15.4:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/js-beautify@1.15.4", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/js-beautify/-/js-beautify-1.15.4.tgz", "integrity": "sha512-9/KXeZUKKJwqCXUdBxFJ3vPh467OCckSBmYDwSK/EtV090K+iMJ7zx2S3HLVDIWFQdqMIsZWbnaGiba18aWhaA==", "dependencies": {"config-chain": "^1.1.13", "editorconfig": "^1.0.4", "glob": "^10.4.2", "js-cookie": "^3.0.5", "nopt": "^7.2.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: cb31e7fb1004281e
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: js-cookie 3.0.5
message: Package discovered: js-cookie 3.0.5
remediation: Track and scan dependencies.
raw_finding:
{"id": "07274f4b8a4d661e", "name": "js-cookie", "version": "3.0.5", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:js-cookie:js-cookie:3.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:js-cookie:js_cookie:3.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:js_cookie:js-cookie:3.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:js_cookie:js_cookie:3.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:js:js-cookie:3.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:js:js_cookie:3.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/js-cookie@3.0.5", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/js-cookie/-/js-cookie-3.0.5.tgz", "integrity": "sha512-cEiJEAEoIbWfCZYKWhVwFuvPX1gETRYPw6LlaTKoxD3s2AkXzkCjnp6h0V77ozyqj0jakteJ4YqDJT830+lVGw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 4db17fad932f2d8e
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: js-md5 0.8.3
message: Package discovered: js-md5 0.8.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "d30adc61a99cb3ed", "name": "js-md5", "version": "0.8.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:js-md5:js-md5:0.8.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:js-md5:js_md5:0.8.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:js_md5:js-md5:0.8.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:js_md5:js_md5:0.8.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:js:js-md5:0.8.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:js:js_md5:0.8.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/js-md5@0.8.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/js-md5/-/js-md5-0.8.3.tgz", "integrity": "sha512-qR0HB5uP6wCuRMrWPTrkMaev7MJZwJuuw4fnwAzRgP4J4/F8RwtodOKpGp4XpqsLBFzzgqIO42efFAyz2Et6KQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 88f0214bae1b08f0
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: js-tokens 4.0.0
message: Package discovered: js-tokens 4.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "132a500346fcea0c", "name": "js-tokens", "version": "4.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:js-tokens:js-tokens:4.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:js-tokens:js_tokens:4.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:js_tokens:js-tokens:4.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:js_tokens:js_tokens:4.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:js:js-tokens:4.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:js:js_tokens:4.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/js-tokens@4.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz", "integrity": "sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: d7056e806f2cd1e3
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: json-bigint 1.0.0
message: Package discovered: json-bigint 1.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "f29c1976ad3d8cb0", "name": "json-bigint", "version": "1.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:json-bigint_project:json-bigint:1.0.0:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/json-bigint@1.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/json-bigint/-/json-bigint-1.0.0.tgz", "integrity": "sha512-SiPv/8VpZuWbvLSMtTDU8hEfrZWg/mH/nV/b4o0CYbSxu1UIQPLdwKOCIyLQX+VIPO5vrLX3i8qtqFyhdPSUSQ==", "dependencies": {"bignumber.js": "^9.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 2a5374383b13cd28
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: jsonwebtoken 9.0.3
message: Package discovered: jsonwebtoken 9.0.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "2ebcc52db7d200cb", "name": "jsonwebtoken", "version": "9.0.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:auth0:jsonwebtoken:9.0.3:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/jsonwebtoken@9.0.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/jsonwebtoken/-/jsonwebtoken-9.0.3.tgz", "integrity": "sha512-MT/xP0CrubFRNLNKvxJ2BYfy53Zkm++5bX9dtuPbqAeQpTVe0MQTFhao8+Cp//EmJp244xt6Drw/GVEGCUj40g==", "dependencies": {"jws": "^4.0.1", "lodash.includes": "^4.3.0", "lodash.isboolean": "^3.0.3", "lodash.isinteger": "^4.0.4", "lodash.isnumber": "^3.0.3", "lodash.isplainobject": "^4.0.6", "lodash.isstring": "^4.0.1", "lodash.once": "^4.0.0", "ms": "^2.1.1", "semver": "^7.5.4"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 835e252fefb47867
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: jwa 2.0.1
message: Package discovered: jwa 2.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "154697ca4fb19b8b", "name": "jwa", "version": "2.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:jwa:jwa:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/jwa@2.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/jwa/-/jwa-2.0.1.tgz", "integrity": "sha512-hRF04fqJIP8Abbkq5NKGN0Bbr3JxlQ+qhZufXVr0DvujKy93ZCbXZMHDL4EOtodSbCWxOqR8MS1tXA5hwqCXDg==", "dependencies": {"buffer-equal-constant-time": "^1.0.1", "ecdsa-sig-formatter": "1.0.11", "safe-buffer": "^5.0.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 0c0a903cc4471d02
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: jwks-rsa 3.2.2
message: Package discovered: jwks-rsa 3.2.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "014369d0efdc09b2", "name": "jwks-rsa", "version": "3.2.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:jwks-rsa:jwks-rsa:3.2.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:jwks-rsa:jwks_rsa:3.2.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:jwks_rsa:jwks-rsa:3.2.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:jwks_rsa:jwks_rsa:3.2.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:jwks:jwks-rsa:3.2.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:jwks:jwks_rsa:3.2.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/jwks-rsa@3.2.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/jwks-rsa/-/jwks-rsa-3.2.2.tgz", "integrity": "sha512-BqTyEDV+lS8F2trk3A+qJnxV5Q9EqKCBJOPti3W97r7qTympCZjb7h2X6f2kc+0K3rsSTY1/6YG2eaXKoj497w==", "dependencies": {"@types/jsonwebtoken": "^9.0.4", "debug": "^4.3.4", "jose": "^4.15.4", "limiter": "^1.1.5", "lru-memoizer": "^2.2.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 5dd04dd82934e4bc
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: jws 4.0.1
message: Package discovered: jws 4.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "7fed8e7a1bc916bb", "name": "jws", "version": "4.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:jws:jws:4.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/jws@4.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/jws/-/jws-4.0.1.tgz", "integrity": "sha512-EKI/M/yqPncGUUh44xz0PxSidXFr/+r0pA70+gIYhjv+et7yxM+s29Y+VGDkovRofQem0fs7Uvf4+YmAdyRduA==", "dependencies": {"jwa": "^2.0.1", "safe-buffer": "^5.0.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: fdd5e753a1967298
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: leac 0.6.0
message: Package discovered: leac 0.6.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "9ec1624bf944fe34", "name": "leac", "version": "0.6.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:leac:leac:0.6.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/leac@0.6.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/leac/-/leac-0.6.0.tgz", "integrity": "sha512-y+SqErxb8h7nE/fiEX07jsbuhrpO9lL8eca7/Y1nuWV2moNlXhyd59iDGcRf6moVyDMbmTNzL40SUyrFU/yDpg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 63788a24cb56472a
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: lilconfig 3.1.3
message: Package discovered: lilconfig 3.1.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "a8f0bd77b399e569", "name": "lilconfig", "version": "3.1.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:lilconfig:lilconfig:3.1.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/lilconfig@3.1.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/lilconfig/-/lilconfig-3.1.3.tgz", "integrity": "sha512-/vlFKAoH5Cgt3Ie+JLhRbwOsCQePABiU3tJ1egGvyQ+33R/vcwM2Zl2QR/LzjsBeItPt3oSVXapn+m4nQDvpzw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 90dd10f1ec21efdc
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: limiter 1.1.5
message: Package discovered: limiter 1.1.5
remediation: Track and scan dependencies.
raw_finding:
{"id": "7ebb3add1191948c", "name": "limiter", "version": "1.1.5", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:limiter:limiter:1.1.5:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/limiter@1.1.5", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/limiter/-/limiter-1.1.5.tgz", "integrity": "sha512-FWWMIEOxz3GwUI4Ts/IvgVy6LPvoMPgjMdQ185nN6psJyBJ4yOpzqm695/h5umdLJg2vW3GR5iG11MAkR2AzJA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 8108350690a84b91
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: linebreak 1.1.0
message: Package discovered: linebreak 1.1.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "17b9850959841637", "name": "linebreak", "version": "1.1.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:linebreak:linebreak:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/linebreak@1.1.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/linebreak/-/linebreak-1.1.0.tgz", "integrity": "sha512-MHp03UImeVhB7XZtjd0E4n6+3xr5Dq/9xI/5FptGk5FrbDR3zagPa2DS6U8ks/3HjbKWG9Q1M2ufOzxV2qLYSQ==", "dependencies": {"base64-js": "0.0.8", "unicode-trie": "^2.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 6d22d8e100269548
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: lines-and-columns 1.2.4
message: Package discovered: lines-and-columns 1.2.4
remediation: Track and scan dependencies.
raw_finding:
{"id": "2f4d4f332c0f6687", "name": "lines-and-columns", "version": "1.2.4", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:lines-and-columns:lines-and-columns:1.2.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:lines-and-columns:lines_and_columns:1.2.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:lines_and_columns:lines-and-columns:1.2.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:lines_and_columns:lines_and_columns:1.2.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:lines-and:lines-and-columns:1.2.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:lines-and:lines_and_columns:1.2.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:lines_and:lines-and-columns:1.2.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:lines_and:lines_and_columns:1.2.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:lines:lines-and-columns:1.2.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:lines:lines_and_columns:1.2.4:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/lines-and-columns@1.2.4", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/lines-and-columns/-/lines-and-columns-1.2.4.tgz", "integrity": "sha512-7ylylesZQ/PV29jhEDl3Ufjo6ZX7gCqJr5F7PKrqc93v7fzSymt1BpwEU8nAUXs8qzzvqhbjhK5QZg6Mt/HkBg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 99a30188145ce555
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: locate-path 5.0.0
message: Package discovered: locate-path 5.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "e6b383b17df8c845", "name": "locate-path", "version": "5.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:locate-path:locate-path:5.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:locate-path:locate_path:5.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:locate_path:locate-path:5.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:locate_path:locate_path:5.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:locate:locate-path:5.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:locate:locate_path:5.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/locate-path@5.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/locate-path/-/locate-path-5.0.0.tgz", "integrity": "sha512-t7hw9pI+WvuwNJXwk5zVHpyhIqzg2qTlklJOf0mVxGSbe3Fp2VieZcduNYjaLDoy6p9uGpQEGWG87WpMKlNq8g==", "dependencies": {"p-locate": "^4.1.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 4752919bcee27237
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: lodash 4.18.1
message: Package discovered: lodash 4.18.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "ac9c211256bf6980", "name": "lodash", "version": "4.18.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:lodash:lodash:4.18.1:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/lodash@4.18.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz", "integrity": "sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 89713df98a2beb75
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: lodash.camelcase 4.3.0
message: Package discovered: lodash.camelcase 4.3.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "a5b985768ef9b9f6", "name": "lodash.camelcase", "version": "4.3.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:lodash.camelcase:lodash.camelcase:4.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/lodash.camelcase@4.3.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/lodash.camelcase/-/lodash.camelcase-4.3.0.tgz", "integrity": "sha512-TwuEnCnxbc3rAvhf/LbG7tJUDzhqXyFnv3dtzLOPgCG/hODL7WFnsbwktkD7yUV0RrreP/l1PALq/YSg6VvjlA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 4b1d67018d50050d
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: lodash.clonedeep 4.5.0
message: Package discovered: lodash.clonedeep 4.5.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "1fdd3c59e36d5b0f", "name": "lodash.clonedeep", "version": "4.5.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:lodash.clonedeep:lodash.clonedeep:4.5.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/lodash.clonedeep@4.5.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/lodash.clonedeep/-/lodash.clonedeep-4.5.0.tgz", "integrity": "sha512-H5ZhCF25riFd9uB5UCkVKo61m3S/xZk1x4wA6yp/L3RFP6Z/eHH1ymQcGLo7J3GMPfm0V/7m1tryHuGVxpqEBQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 6ee3a377a52860b5
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: lodash.defaults 4.2.0
message: Package discovered: lodash.defaults 4.2.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "59a8c664dfef6c46", "name": "lodash.defaults", "version": "4.2.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:lodash.defaults:lodash.defaults:4.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/lodash.defaults@4.2.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/lodash.defaults/-/lodash.defaults-4.2.0.tgz", "integrity": "sha512-qjxPLHd3r5DnsdGacqOMU6pb/avJzdh9tFX2ymgoZE27BmjXrNy/y4LoaiTeAb+O3gL8AfpJGtqfX/ae2leYYQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: a3b4683fdc629aef
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: lodash.includes 4.3.0
message: Package discovered: lodash.includes 4.3.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "aa93a44741b08e66", "name": "lodash.includes", "version": "4.3.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:lodash.includes:lodash.includes:4.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/lodash.includes@4.3.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/lodash.includes/-/lodash.includes-4.3.0.tgz", "integrity": "sha512-W3Bx6mdkRTGtlJISOvVD/lbqjTlPPUDTMnlXZFnVwi9NKJ6tiAk6LVdlhZMm17VZisqhKcgzpO5Wz91PCt5b0w==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: c512306c360b6fda
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: lodash.isarguments 3.1.0
message: Package discovered: lodash.isarguments 3.1.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "c84bded77fb6b828", "name": "lodash.isarguments", "version": "3.1.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:lodash.isarguments:lodash.isarguments:3.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/lodash.isarguments@3.1.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/lodash.isarguments/-/lodash.isarguments-3.1.0.tgz", "integrity": "sha512-chi4NHZlZqZD18a0imDHnZPrDeBbTtVN7GXMwuGdRH9qotxAjYs3aVLKc7zNOG9eddR5Ksd8rvFEBc9SsggPpg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: f0317f2d62f56421
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: lodash.isboolean 3.0.3
message: Package discovered: lodash.isboolean 3.0.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "df154b64f7d4588a", "name": "lodash.isboolean", "version": "3.0.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:lodash.isboolean:lodash.isboolean:3.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/lodash.isboolean@3.0.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/lodash.isboolean/-/lodash.isboolean-3.0.3.tgz", "integrity": "sha512-Bz5mupy2SVbPHURB98VAcw+aHh4vRV5IPNhILUCsOzRmsTmSQ17jIuqopAentWoehktxGd9e/hbIXq980/1QJg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 2ae1d391a80c5a72
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: lodash.isinteger 4.0.4
message: Package discovered: lodash.isinteger 4.0.4
remediation: Track and scan dependencies.
raw_finding:
{"id": "e92c8ae8d8c83e78", "name": "lodash.isinteger", "version": "4.0.4", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:lodash.isinteger:lodash.isinteger:4.0.4:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/lodash.isinteger@4.0.4", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/lodash.isinteger/-/lodash.isinteger-4.0.4.tgz", "integrity": "sha512-DBwtEWN2caHQ9/imiNeEA5ys1JoRtRfY3d7V9wkqtbycnAmTvRRmbHKDV4a0EYc678/dia0jrte4tjYwVBaZUA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 0e12d10e43707e74
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: lodash.isnumber 3.0.3
message: Package discovered: lodash.isnumber 3.0.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "32689628126e866e", "name": "lodash.isnumber", "version": "3.0.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:lodash.isnumber:lodash.isnumber:3.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/lodash.isnumber@3.0.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/lodash.isnumber/-/lodash.isnumber-3.0.3.tgz", "integrity": "sha512-QYqzpfwO3/CWf3XP+Z+tkQsfaLL/EnUlXWVkIk5FUPc4sBdTehEqZONuyRt2P67PXAk+NXmTBcc97zw9t1FQrw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: f1231b7e60dd673c
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: lodash.isplainobject 4.0.6
message: Package discovered: lodash.isplainobject 4.0.6
remediation: Track and scan dependencies.
raw_finding:
{"id": "a6b14f73240e0d01", "name": "lodash.isplainobject", "version": "4.0.6", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:lodash.isplainobject:lodash.isplainobject:4.0.6:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/lodash.isplainobject@4.0.6", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/lodash.isplainobject/-/lodash.isplainobject-4.0.6.tgz", "integrity": "sha512-oSXzaWypCMHkPC3NvBEaPHf0KsA5mvPrOPgQWDsbg8n7orZ290M0BmC/jgRZ4vcJ6DTAhjrsSYgdsW/F+MFOBA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 1ec5aad22a5b316a
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: lodash.isstring 4.0.1
message: Package discovered: lodash.isstring 4.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "f161741909d3d58f", "name": "lodash.isstring", "version": "4.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:lodash.isstring:lodash.isstring:4.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/lodash.isstring@4.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/lodash.isstring/-/lodash.isstring-4.0.1.tgz", "integrity": "sha512-0wJxfxH1wgO3GrbuP+dTTk7op+6L41QCXbGINEmD+ny/G/eCqGzxyCsh7159S+mgDDcoarnBw6PC1PS5+wUGgw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 7962026049b4f49e
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: lodash.once 4.1.1
message: Package discovered: lodash.once 4.1.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "f5ead8ead936acd7", "name": "lodash.once", "version": "4.1.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:lodash.once:lodash.once:4.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/lodash.once@4.1.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/lodash.once/-/lodash.once-4.1.1.tgz", "integrity": "sha512-Sb487aTOCr9drQVL8pIxOzVhafOjZN9UU54hiN8PU3uAiSV7lx1yYNpbNmex2PK6dSJoNTSJUUswT651yww3Mg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: cf9c5c396fa8379f
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: long 5.3.2
message: Package discovered: long 5.3.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "22165934193ce3c8", "name": "long", "version": "5.3.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "Apache-2.0", "spdxExpression": "Apache-2.0", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:long:long:5.3.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/long@5.3.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/long/-/long-5.3.2.tgz", "integrity": "sha512-mNAgZ1GmyNhD7AuqnTG3/VQ26o760+ZYBPKjPvugO8+nLbYfX6TVpJPseBvopbdY+qpZ/lKUnmEc1LeZYS3QAA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 4615c5000eb45f3d
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: loose-envify 1.4.0
message: Package discovered: loose-envify 1.4.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "01ac139389c8bf08", "name": "loose-envify", "version": "1.4.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:loose-envify:loose-envify:1.4.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:loose-envify:loose_envify:1.4.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:loose_envify:loose-envify:1.4.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:loose_envify:loose_envify:1.4.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:loose:loose-envify:1.4.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:loose:loose_envify:1.4.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/loose-envify@1.4.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz", "integrity": "sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==", "dependencies": {"js-tokens": "^3.0.0 || ^4.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 8bf9ffa72cfbe889
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: lru-cache 10.4.3
message: Package discovered: lru-cache 10.4.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "d68cb2f643232396", "name": "lru-cache", "version": "10.4.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:isaacs:lru-cache:10.4.3:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/lru-cache@10.4.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-10.4.3.tgz", "integrity": "sha512-JNAzZcXrCt42VGLuYz0zfAzDfAvJWW6AfYlDBQyDV5DClI2m5sAmK+OIO7s59XfsRsWHp02jAJrRadPRGTt6SQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: a08719993444a9bd
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: lru-cache 6.0.0
message: Package discovered: lru-cache 6.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "3a3d54b6437f39f3", "name": "lru-cache", "version": "6.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:isaacs:lru-cache:6.0.0:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/lru-cache@6.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz", "integrity": "sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==", "dependencies": {"yallist": "^4.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: fb9befbc81581725
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: lru-memoizer 2.3.0
message: Package discovered: lru-memoizer 2.3.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "adf63f866928cf12", "name": "lru-memoizer", "version": "2.3.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:lru-memoizer:lru-memoizer:2.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:lru-memoizer:lru_memoizer:2.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:lru_memoizer:lru-memoizer:2.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:lru_memoizer:lru_memoizer:2.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:lru:lru-memoizer:2.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:lru:lru_memoizer:2.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/lru-memoizer@2.3.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/lru-memoizer/-/lru-memoizer-2.3.0.tgz", "integrity": "sha512-GXn7gyHAMhO13WSKrIiNfztwxodVsP8IoZ3XfrJV4yH2x0/OeTO/FIaAHTY5YekdGgW94njfuKmyyt1E0mR6Ug==", "dependencies": {"lodash.clonedeep": "^4.5.0", "lru-cache": "6.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 03f163b26dd00375
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: lucide-react 0.376.0
message: Package discovered: lucide-react 0.376.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "9a372e50af0fe0ae", "name": "lucide-react", "version": "0.376.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:lucide-react:lucide-react:0.376.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:lucide-react:lucide_react:0.376.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:lucide_react:lucide-react:0.376.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:lucide_react:lucide_react:0.376.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:lucide:lucide-react:0.376.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:lucide:lucide_react:0.376.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/lucide-react@0.376.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/lucide-react/-/lucide-react-0.376.0.tgz", "integrity": "sha512-g91IX3ERD6yUR1TL2dsL4BkcGygpZz/EsqjAeL/kcRQV0EApIOr/9eBfKhYOVyQIcGGuotFGjF3xKLHMEz+b7g==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 0f65ff516206127f
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: math-intrinsics 1.1.0
message: Package discovered: math-intrinsics 1.1.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "87a83232f7674dbc", "name": "math-intrinsics", "version": "1.1.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:math-intrinsics:math-intrinsics:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:math-intrinsics:math_intrinsics:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:math_intrinsics:math-intrinsics:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:math_intrinsics:math_intrinsics:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:math:math-intrinsics:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:math:math_intrinsics:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/math-intrinsics@1.1.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz", "integrity": "sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 9efbed3ea63ec0cc
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: media-engine 1.0.3
message: Package discovered: media-engine 1.0.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "1dbf081258d17462", "name": "media-engine", "version": "1.0.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:media-engine:media-engine:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:media-engine:media_engine:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:media_engine:media-engine:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:media_engine:media_engine:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:media:media-engine:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:media:media_engine:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/media-engine@1.0.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/media-engine/-/media-engine-1.0.3.tgz", "integrity": "sha512-aa5tG6sDoK+k70B9iEX1NeyfT8ObCKhNDs6lJVpwF6r8vhUfuKMslIcirq6HIUYuuUYLefcEQOn9bSBOvawtwg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 6ecc4376357a6aa5
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: media-typer 0.3.0
message: Package discovered: media-typer 0.3.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "d88fe6586764efc9", "name": "media-typer", "version": "0.3.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:media-typer:media-typer:0.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:media-typer:media_typer:0.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:media_typer:media-typer:0.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:media_typer:media_typer:0.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:media:media-typer:0.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:media:media_typer:0.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/media-typer@0.3.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz", "integrity": "sha512-dq+qelQ9akHpcOl/gUVRTxVIOkAJ1wR3QAvb4RsVjS8oVoFjDGTc679wJYmUmknUF5HwMLOgb5O+a3KxfWapPQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: d32acd7a2e9bf402
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: merge-descriptors 1.0.3
message: Package discovered: merge-descriptors 1.0.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "670d71ff9d8ed75e", "name": "merge-descriptors", "version": "1.0.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:merge-descriptors:merge-descriptors:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:merge-descriptors:merge_descriptors:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:merge_descriptors:merge-descriptors:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:merge_descriptors:merge_descriptors:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:merge:merge-descriptors:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:merge:merge_descriptors:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/merge-descriptors@1.0.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.3.tgz", "integrity": "sha512-gaNvAS7TZ897/rVaZ0nMtAyxNyi/pdbjbAwUpFQpN70GqnVfOiXpeUUMKRBmzXaSQ8DdTX4/0ms62r2K+hE6mQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: b81185034826e168
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: merge2 1.4.1
message: Package discovered: merge2 1.4.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "49cc3c07a1505404", "name": "merge2", "version": "1.4.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:merge2:merge2:1.4.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/merge2@1.4.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/merge2/-/merge2-1.4.1.tgz", "integrity": "sha512-8q7VEgMJW4J8tcfVPy8g09NcQwZdbwFEqhe/WZkoIzjn/3TGDwtOCYtXGxA3O8tPzpczCCDgv+P2P5y00ZJOOg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: b23a5664e0d696ec
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: methods 1.1.2
message: Package discovered: methods 1.1.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "a17abee1ae67ac79", "name": "methods", "version": "1.1.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:methods:methods:1.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/methods@1.1.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz", "integrity": "sha512-iclAHeNqNm68zFtnZ0e+1L2yUIdvzNoauKU4WBA3VvH/vPFieF7qfRlwUZU+DA9P9bPXIS90ulxoUoCH23sV2w==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: e5492a26182452ae
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: micromatch 4.0.8
message: Package discovered: micromatch 4.0.8
remediation: Track and scan dependencies.
raw_finding:
{"id": "dc31731ddf283ca7", "name": "micromatch", "version": "4.0.8", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:jonschlinkert:micromatch:4.0.8:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/micromatch@4.0.8", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/micromatch/-/micromatch-4.0.8.tgz", "integrity": "sha512-PXwfBhYu0hBCPw8Dn0E+WDYb7af3dSLVWKi3HGv84IdF4TyFoC0ysxFd0Goxw7nSv4T/PzEJQxsYsEiFCKo2BA==", "dependencies": {"braces": "^3.0.3", "picomatch": "^2.3.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: cdd82acabfa8e9e8
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: mime 1.6.0
message: Package discovered: mime 1.6.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "10b23cab35239c6d", "name": "mime", "version": "1.6.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:mime_project:mime:1.6.0:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/mime@1.6.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz", "integrity": "sha512-x0Vn8spI+wuJ1O6S7gnbaQg8Pxh4NNHb7KSINmEWKiPE4RKOplvijn+NkmYmmRgP68mc70j2EbeTFRsrswaQeg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: a724fe9397f99c40
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: mime 3.0.0
message: Package discovered: mime 3.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "438a12c55a1c15bf", "name": "mime", "version": "3.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:mime_project:mime:3.0.0:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/mime@3.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/mime/-/mime-3.0.0.tgz", "integrity": "sha512-jSCU7/VB1loIWBZe14aEYHU/+1UMEHoaO7qxCOVJOw9GgH72VAWppxNcjU+x9a2k3GSIBXNKxXQFqRvvZ7vr3A==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 1454de8382f97ba2
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: mime-db 1.52.0
message: Package discovered: mime-db 1.52.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "e010d1b3c9ab0c02", "name": "mime-db", "version": "1.52.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:mime-db:mime-db:1.52.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:mime-db:mime_db:1.52.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:mime_db:mime-db:1.52.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:mime_db:mime_db:1.52.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:mime:mime-db:1.52.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:mime:mime_db:1.52.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/mime-db@1.52.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz", "integrity": "sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: c62c037f2c05a588
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: mime-types 2.1.35
message: Package discovered: mime-types 2.1.35
remediation: Track and scan dependencies.
raw_finding:
{"id": "d035c2d2cba76761", "name": "mime-types", "version": "2.1.35", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:mime-types:mime-types:2.1.35:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:mime-types:mime_types:2.1.35:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:mime_types:mime-types:2.1.35:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:mime_types:mime_types:2.1.35:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:mime:mime-types:2.1.35:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:mime:mime_types:2.1.35:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/mime-types@2.1.35", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz", "integrity": "sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==", "dependencies": {"mime-db": "1.52.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 39275c688371843a
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: minimatch 9.0.9
message: Package discovered: minimatch 9.0.9
remediation: Track and scan dependencies.
raw_finding:
{"id": "dadb042585b0fc99", "name": "minimatch", "version": "9.0.9", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:minimatch_project:minimatch:9.0.9:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/minimatch@9.0.9", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.9.tgz", "integrity": "sha512-OBwBN9AL4dqmETlpS2zasx+vTeWclWzkblfZk7KTA5j3jeOONz/tRCnZomUyvNg83wL5Zv9Ss6HMJXAgL8R2Yg==", "dependencies": {"brace-expansion": "^2.0.2"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: fe3ea9bf939aec06
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: minimist 1.2.8
message: Package discovered: minimist 1.2.8
remediation: Track and scan dependencies.
raw_finding:
{"id": "bf8bc4c7577fa757", "name": "minimist", "version": "1.2.8", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:minimist:minimist:1.2.8:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/minimist@1.2.8", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.8.tgz", "integrity": "sha512-2yyAR8qBkN3YuheJanUpWC5U3bb5osDywNB8RzDVlDwDHbocAJveqqj1u8+SVD7jkWT4yvsHCpWqqWqAxb0zCA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 43d359d2fd9254cd
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: minipass 7.1.3
message: Package discovered: minipass 7.1.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "a4e62963fcdf0651", "name": "minipass", "version": "7.1.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "BlueOak-1.0.0", "spdxExpression": "BlueOak-1.0.0", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:minipass:minipass:7.1.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/minipass@7.1.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/minipass/-/minipass-7.1.3.tgz", "integrity": "sha512-tEBHqDnIoM/1rXME1zgka9g6Q2lcoCkxHLuc7ODJ5BxbP5d4c2Z5cGgtXAku59200Cx7diuHTOYfSBD8n6mm8A==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 371d68f8a3e92216
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: mkdirp 0.5.6
message: Package discovered: mkdirp 0.5.6
remediation: Track and scan dependencies.
raw_finding:
{"id": "4ee017b1ce1fca30", "name": "mkdirp", "version": "0.5.6", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:mkdirp:mkdirp:0.5.6:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/mkdirp@0.5.6", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.6.tgz", "integrity": "sha512-FP+p8RB8OWpF3YZBCrP5gtADmtXApB5AMLn+vdyA+PyxCjrCs00mjyUozssO33cwDeT3wNGdLxJ5M//YqtHAJw==", "dependencies": {"minimist": "^1.2.6"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 85ab0a570b2a1b2d
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: morgan 1.10.1
message: Package discovered: morgan 1.10.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "0b0e2e978d7d93f4", "name": "morgan", "version": "1.10.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:morgan_project:morgan:1.10.1:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/morgan@1.10.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/morgan/-/morgan-1.10.1.tgz", "integrity": "sha512-223dMRJtI/l25dJKWpgij2cMtywuG/WiUKXdvwfbhGKBhy1puASqXwFzmWZ7+K73vUPoR7SS2Qz2cI/g9MKw0A==", "dependencies": {"basic-auth": "~2.0.1", "debug": "2.6.9", "depd": "~2.0.0", "on-finished": "~2.3.0", "on-headers": "~1.1.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 19152fd7179a58f9
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: ms 2.0.0
message: Package discovered: ms 2.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "46f1aa86e531772d", "name": "ms", "version": "2.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:vercel:ms:2.0.0:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/ms@2.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz", "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: c6acafac62af1ee0
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: ms 2.1.3
message: Package discovered: ms 2.1.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "bb1077662b3cb7e0", "name": "ms", "version": "2.1.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/ms@2.1.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz", "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: ffedfc57a9f39743
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: multer 1.4.5-lts.2
message: Package discovered: multer 1.4.5-lts.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "775c553ab4f0a485", "name": "multer", "version": "1.4.5-lts.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:multer:multer:1.4.5-lts.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/multer@1.4.5-lts.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/multer/-/multer-1.4.5-lts.2.tgz", "integrity": "sha512-VzGiVigcG9zUAoCNU+xShztrlr1auZOlurXynNvO9GiWD1/mTBbUljOKY+qMeazBqXgRnjzeEgJI/wyjJUHg9A==", "dependencies": {"append-field": "^1.0.0", "busboy": "^1.0.0", "concat-stream": "^1.5.2", "mkdirp": "^0.5.4", "object-assign": "^4.1.1", "type-is": "^1.6.4", "xtend": "^4.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 9d7c97f3f3cb9ec0
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: mz 2.7.0
message: Package discovered: mz 2.7.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "96c78782a0a6a6e8", "name": "mz", "version": "2.7.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:mz:mz:2.7.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/mz@2.7.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/mz/-/mz-2.7.0.tgz", "integrity": "sha512-z81GNO7nnYMEhrGh9LeymoE4+Yr0Wn5McHIZMK5cfQCl+NDX08sCZgUc9/6MHni9IWuFLm1Z3HTCXu2z9fN62Q==", "dependencies": {"any-promise": "^1.0.0", "object-assign": "^4.0.1", "thenify-all": "^1.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 545c4a29aa435f71
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: nanoid 3.3.11
message: Package discovered: nanoid 3.3.11
remediation: Track and scan dependencies.
raw_finding:
{"id": "fc2d97a12d1a4dda", "name": "nanoid", "version": "3.3.11", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:nanoid_project:nanoid:3.3.11:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/nanoid@3.3.11", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.11.tgz", "integrity": "sha512-N8SpfPUnUp1bK+PMYW8qSWdl9U+wwNWI4QKxOYDy9JAro3WMX7p2OeVRF9v+347pnakNevPmiHhNmZ2HbFA76w==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 932afc2de4b38fa5
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: negotiator 0.6.3
message: Package discovered: negotiator 0.6.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "312bd96694b2eb5b", "name": "negotiator", "version": "0.6.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:negotiator:negotiator:0.6.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/negotiator@0.6.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.3.tgz", "integrity": "sha512-+EUsqGPLsM+j/zdChZjsnX51g4XrHFOIXwfnCVPGlQk/k5giakcKsuxCObBRu6DSm9opw/O6slWbJdghQM4bBg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: d346e21d42fdf73e
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: next 14.2.3
message: Package discovered: next 14.2.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "a9792237818f8415", "name": "next", "version": "14.2.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:vercel:next.js:14.2.3:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/next@14.2.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/next/-/next-14.2.3.tgz", "integrity": "sha512-dowFkFTR8v79NPJO4QsBUtxv0g9BrS/phluVpMAt2ku7H+cbcBJlopXjkWlwxrk/xGqMemr7JkGPGemPrLLX7A==", "dependencies": {"@next/env": "14.2.3", "@swc/helpers": "0.5.5", "busboy": "1.6.0", "caniuse-lite": "^1.0.30001579", "graceful-fs": "^4.2.11", "postcss": "8.4.31", "styled-jsx": "5.1.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 35dad46b81d74be4
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: node-cron 3.0.3
message: Package discovered: node-cron 3.0.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "5c4492e68f441264", "name": "node-cron", "version": "3.0.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:node-cron:node-cron:3.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:node-cron:node_cron:3.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:node_cron:node-cron:3.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:node_cron:node_cron:3.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:node:node-cron:3.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:node:node_cron:3.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/node-cron@3.0.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/node-cron/-/node-cron-3.0.3.tgz", "integrity": "sha512-dOal67//nohNgYWb+nWmg5dkFdIwDm8EpeGYMekPMrngV3637lqnX0lbUcCtgibHTz6SEz7DAIjKvKDFYCnO1A==", "dependencies": {"uuid": "8.3.2"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 5d72f54e4946a64f
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: node-fetch 2.7.0
message: Package discovered: node-fetch 2.7.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "71294da0e67ef2a3", "name": "node-fetch", "version": "2.7.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:node-fetch_project:node-fetch:2.7.0:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/node-fetch@2.7.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.7.0.tgz", "integrity": "sha512-c4FRfUm/dbcWZ7U+1Wq0AwCyFL+3nt2bEw05wfxSz+DWpWsitgmSgYmy2dQdWyKC1694ELPqMs/YzUSNozLt8A==", "dependencies": {"whatwg-url": "^5.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 2cbaa504cc478c46
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: node-forge 1.4.0
message: Package discovered: node-forge 1.4.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "c1e5f20287afef44", "name": "node-forge", "version": "1.4.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "(BSD-3-Clause OR GPL-2.0)", "spdxExpression": "(BSD-3-Clause OR GPL-2.0)", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:digitalbazaar:forge:1.4.0:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/node-forge@1.4.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/node-forge/-/node-forge-1.4.0.tgz", "integrity": "sha512-LarFH0+6VfriEhqMMcLX2F7SwSXeWwnEAJEsYm5QKWchiVYVvJyV9v7UDvUv+w5HO23ZpQTXDv/GxdDdMyOuoQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: c9ae4bba0c53507d
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: node-releases 2.0.38
message: Package discovered: node-releases 2.0.38
remediation: Track and scan dependencies.
raw_finding:
{"id": "157e4f935702d7be", "name": "node-releases", "version": "2.0.38", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:node-releases:node-releases:2.0.38:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:node-releases:node_releases:2.0.38:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:node_releases:node-releases:2.0.38:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:node_releases:node_releases:2.0.38:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:node:node-releases:2.0.38:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:node:node_releases:2.0.38:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/node-releases@2.0.38", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/node-releases/-/node-releases-2.0.38.tgz", "integrity": "sha512-3qT/88Y3FbH/Kx4szpQQ4HzUbVrHPKTLVpVocKiLfoYvw9XSGOX2FmD2d6DrXbVYyAQTF2HeF6My8jmzx7/CRw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: b468b7afcd57f5e8
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: nodemailer 6.10.1
message: Package discovered: nodemailer 6.10.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "bdc7a63994d0b28a", "name": "nodemailer", "version": "6.10.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT-0", "spdxExpression": "MIT-0", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:nodemailer:nodemailer:6.10.1:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/nodemailer@6.10.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-6.10.1.tgz", "integrity": "sha512-Z+iLaBGVaSjbIzQ4pX6XV41HrooLsQ10ZWPUehGmuantvzWoDVBnmsdUcOIDM1t+yPor5pDhVlDESgOMEGxhHA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: eca5920a6d6c920a
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: nopt 7.2.1
message: Package discovered: nopt 7.2.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "47f001cd3ecd3ee8", "name": "nopt", "version": "7.2.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:nopt:nopt:7.2.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/nopt@7.2.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/nopt/-/nopt-7.2.1.tgz", "integrity": "sha512-taM24ViiimT/XntxbPyJQzCG+p4EKOpgD3mxFwW38mGjVUrfERQOeY4EDHjdnptttfHuHQXFx+lTP08Q+mLa/w==", "dependencies": {"abbrev": "^2.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: b6fa9eec1e273eef
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: normalize-path 3.0.0
message: Package discovered: normalize-path 3.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "86c9c8fe4da1b72f", "name": "normalize-path", "version": "3.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:normalize-path:normalize-path:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:normalize-path:normalize_path:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:normalize_path:normalize-path:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:normalize_path:normalize_path:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:normalize:normalize-path:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:normalize:normalize_path:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/normalize-path@3.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/normalize-path/-/normalize-path-3.0.0.tgz", "integrity": "sha512-6eZs5Ls3WtCisHWp9S2GUy8dqkpGi4BVSz3GaqiE6ezub0512ESztXUwUB6C6IKbQkY2Pnb/mD4WYojCRwcwLA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 0c9db30b81ebd770
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: normalize-svg-path 1.1.0
message: Package discovered: normalize-svg-path 1.1.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "2e420341fd4164af", "name": "normalize-svg-path", "version": "1.1.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:normalize-svg-path:normalize-svg-path:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:normalize-svg-path:normalize_svg_path:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:normalize_svg_path:normalize-svg-path:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:normalize_svg_path:normalize_svg_path:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:normalize-svg:normalize-svg-path:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:normalize-svg:normalize_svg_path:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:normalize_svg:normalize-svg-path:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:normalize_svg:normalize_svg_path:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:normalize:normalize-svg-path:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:normalize:normalize_svg_path:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/normalize-svg-path@1.1.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/normalize-svg-path/-/normalize-svg-path-1.1.0.tgz", "integrity": "sha512-r9KHKG2UUeB5LoTouwDzBy2VxXlHsiM6fyLQvnJa0S5hrhzqElH/CH7TUGhT1fVvIYBIKf3OpY4YJ4CK+iaqHg==", "dependencies": {"svg-arc-to-cubic-bezier": "^3.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: bb2a72a38fc8e367
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: object-assign 4.1.1
message: Package discovered: object-assign 4.1.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "d7b65c8670c0c943", "name": "object-assign", "version": "4.1.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:object-assign:object-assign:4.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:object-assign:object_assign:4.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:object_assign:object-assign:4.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:object_assign:object_assign:4.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:object:object-assign:4.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:object:object_assign:4.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/object-assign@4.1.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz", "integrity": "sha512-rJgTQnkUnH1sFw8yT6VSU3zD3sWmu6sZhIseY8VX+GRu3P6F7Fu+JNDoXfklElbLJSnc3FUQHVe4cU5hj+BcUg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 7280439ae019eb34
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: object-hash 3.0.0
message: Package discovered: object-hash 3.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "f0415e28bd0fa73d", "name": "object-hash", "version": "3.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:object-hash:object-hash:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:object-hash:object_hash:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:object_hash:object-hash:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:object_hash:object_hash:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:object:object-hash:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:object:object_hash:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/object-hash@3.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/object-hash/-/object-hash-3.0.0.tgz", "integrity": "sha512-RSn9F68PjH9HqtltsSnqYC1XXoWe9Bju5+213R98cNGttag9q9yAOTzdbsqvIa7aNm5WffBZFpWYr2aWrklWAw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 570f098417dfedef
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: object-inspect 1.13.4
message: Package discovered: object-inspect 1.13.4
remediation: Track and scan dependencies.
raw_finding:
{"id": "67701f4036faa68d", "name": "object-inspect", "version": "1.13.4", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:object-inspect:object-inspect:1.13.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:object-inspect:object_inspect:1.13.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:object_inspect:object-inspect:1.13.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:object_inspect:object_inspect:1.13.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:object:object-inspect:1.13.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:object:object_inspect:1.13.4:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/object-inspect@1.13.4", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz", "integrity": "sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 276b1e3a3b3501f5
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: on-finished 2.3.0
message: Package discovered: on-finished 2.3.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "3329ff372baa3c68", "name": "on-finished", "version": "2.3.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:on-finished:on-finished:2.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:on-finished:on_finished:2.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:on_finished:on-finished:2.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:on_finished:on_finished:2.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:on:on-finished:2.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:on:on_finished:2.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/on-finished@2.3.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/on-finished/-/on-finished-2.3.0.tgz", "integrity": "sha512-ikqdkGAAyf/X/gPhXGvfgAytDZtDbr+bkNUJ0N9h5MI/dmdgCs3l6hoHrcUv41sRKew3jIwrp4qQDXiK99Utww==", "dependencies": {"ee-first": "1.1.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 1ede69e18336ab8f
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: on-finished 2.4.1
message: Package discovered: on-finished 2.4.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "9c42ff2fa50e9c68", "name": "on-finished", "version": "2.4.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:on-finished:on-finished:2.4.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:on-finished:on_finished:2.4.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:on_finished:on-finished:2.4.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:on_finished:on_finished:2.4.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:on:on-finished:2.4.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:on:on_finished:2.4.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/on-finished@2.4.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz", "integrity": "sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg==", "dependencies": {"ee-first": "1.1.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 01ce9d2b89e4c438
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: on-headers 1.1.0
message: Package discovered: on-headers 1.1.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "c535b114447926f1", "name": "on-headers", "version": "1.1.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:on-headers:on-headers:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:on-headers:on_headers:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:on_headers:on-headers:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:on_headers:on_headers:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:on:on-headers:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:on:on_headers:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/on-headers@1.1.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/on-headers/-/on-headers-1.1.0.tgz", "integrity": "sha512-737ZY3yNnXy37FHkQxPzt4UZ2UWPWiCZWLvFZ4fu5cueciegX0zGPnrlY6bwRg4FdQOe9YU8MkmJwGhoMybl8A==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: bd9248df9b4e52cf
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: once 1.4.0
message: Package discovered: once 1.4.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "3f85171a571bc28a", "name": "once", "version": "1.4.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:once:once:1.4.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/once@1.4.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/once/-/once-1.4.0.tgz", "integrity": "sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==", "dependencies": {"wrappy": "1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 92e0060edd98f736
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: otplib 12.0.1
message: Package discovered: otplib 12.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "7b45ff9710a4aaac", "name": "otplib", "version": "12.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:otplib:otplib:12.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/otplib@12.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/otplib/-/otplib-12.0.1.tgz", "integrity": "sha512-xDGvUOQjop7RDgxTQ+o4pOol0/3xSZzawTiPKRrHnQWAy0WjhNs/5HdIDJCrqC4MBynmjXgULc6YfioaxZeFgg==", "dependencies": {"@otplib/core": "^12.0.1", "@otplib/preset-default": "^12.0.1", "@otplib/preset-v11": "^12.0.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 1061878b64866643
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: p-limit 2.3.0
message: Package discovered: p-limit 2.3.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "c6cc7a145d3e597c", "name": "p-limit", "version": "2.3.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:p-limit:p-limit:2.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:p-limit:p_limit:2.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:p_limit:p-limit:2.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:p_limit:p_limit:2.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:p:p-limit:2.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:p:p_limit:2.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/p-limit@2.3.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/p-limit/-/p-limit-2.3.0.tgz", "integrity": "sha512-//88mFWSJx8lxCzwdAABTJL2MyWB12+eIY7MDL2SqLmAkeKU9qxRvWuSyTjm3FUmpBEMuFfckAIqEaVGUDxb6w==", "dependencies": {"p-try": "^2.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 6cbc6aaefd17b7fc
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: p-limit 3.1.0
message: Package discovered: p-limit 3.1.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "bdf7b3073a60eac3", "name": "p-limit", "version": "3.1.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:p-limit:p-limit:3.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:p-limit:p_limit:3.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:p_limit:p-limit:3.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:p_limit:p_limit:3.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:p:p-limit:3.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:p:p_limit:3.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/p-limit@3.1.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/p-limit/-/p-limit-3.1.0.tgz", "integrity": "sha512-TYOanM3wGwNGsZN2cVTYPArw454xnXj5qmWF1bEoAc4+cU/ol7GVh7odevjp1FNHduHc3KZMcFduxU5Xc6uJRQ==", "dependencies": {"yocto-queue": "^0.1.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 16add8edeff36c6a
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: p-locate 4.1.0
message: Package discovered: p-locate 4.1.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "ee16619fa3035ca6", "name": "p-locate", "version": "4.1.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:p-locate:p-locate:4.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:p-locate:p_locate:4.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:p_locate:p-locate:4.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:p_locate:p_locate:4.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:p:p-locate:4.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:p:p_locate:4.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/p-locate@4.1.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/p-locate/-/p-locate-4.1.0.tgz", "integrity": "sha512-R79ZZ/0wAxKGu3oYMlz8jy/kbhsNrS7SKZ7PxEHBgJ5+F2mtFW2fK2cOtBh1cHYkQsbzFV7I+EoRKe6Yt0oK7A==", "dependencies": {"p-limit": "^2.2.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 94f4f30dde8856c2
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: p-try 2.2.0
message: Package discovered: p-try 2.2.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "ee061a11e32e10c1", "name": "p-try", "version": "2.2.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:p-try:p-try:2.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:p-try:p_try:2.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:p_try:p-try:2.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:p_try:p_try:2.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:p:p-try:2.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:p:p_try:2.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/p-try@2.2.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/p-try/-/p-try-2.2.0.tgz", "integrity": "sha512-R4nPAVTAU0B9D35/Gk3uJf/7XYbQcyohSKdvAxIRSNghFl4e71hVoGnBNQz9cWaXxO2I10KTC+3jMdvvoKw6dQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 8f14c9999630c748
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: package-json-from-dist 1.0.1
message: Package discovered: package-json-from-dist 1.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "d82606f27243dac6", "name": "package-json-from-dist", "version": "1.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "BlueOak-1.0.0", "spdxExpression": "BlueOak-1.0.0", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:package-json-from-dist:package-json-from-dist:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:package-json-from-dist:package_json_from_dist:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:package_json_from_dist:package-json-from-dist:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:package_json_from_dist:package_json_from_dist:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:package-json-from:package-json-from-dist:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:package-json-from:package_json_from_dist:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:package_json_from:package-json-from-dist:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:package_json_from:package_json_from_dist:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:package-json:package-json-from-dist:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:package-json:package_json_from_dist:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:package_json:package-json-from-dist:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:package_json:package_json_from_dist:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:package:package-json-from-dist:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:package:package_json_from_dist:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/package-json-from-dist@1.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/package-json-from-dist/-/package-json-from-dist-1.0.1.tgz", "integrity": "sha512-UEZIS3/by4OC8vL3P2dTXRETpebLI2NiI5vIrjaD/5UtrkFX/tNbwjTSRAGC/+7CAo2pIcBaRgWmcBBHcsaCIw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 09093ffb9ed76376
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: pako 0.2.9
message: Package discovered: pako 0.2.9
remediation: Track and scan dependencies.
raw_finding:
{"id": "7762d448aa187997", "name": "pako", "version": "0.2.9", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "(MIT AND Zlib)", "spdxExpression": "(MIT AND Zlib)", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}, {"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:pako:pako:0.2.9:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/pako@0.2.9", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/pako/-/pako-0.2.9.tgz", "integrity": "sha512-NUcwaKxUxWrZLpDG+z/xZaCgQITkA/Dv4V/T6bw7VON6l1Xz/VnrBqrYjZQ12TamKHzITTfOEIYUj48y2KXImA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: d21476c4aa5bcc9d
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: pako 1.0.11
message: Package discovered: pako 1.0.11
remediation: Track and scan dependencies.
raw_finding:
{"id": "8811cee431746c6d", "name": "pako", "version": "1.0.11", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "(MIT AND Zlib)", "spdxExpression": "(MIT AND Zlib)", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:pako:pako:1.0.11:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/pako@1.0.11", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/pako/-/pako-1.0.11.tgz", "integrity": "sha512-4hLB8Py4zZce5s4yd9XzopqwVv/yGNhV1Bl8NTmCq1763HeK2+EwVTv+leGeL13Dnh2wfbqowVPXCIO0z4taYw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: b50b24498bc5a2c6
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: parse-svg-path 0.1.2
message: Package discovered: parse-svg-path 0.1.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "7c5d21eaeee09ad2", "name": "parse-svg-path", "version": "0.1.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:parse-svg-path:parse-svg-path:0.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:parse-svg-path:parse_svg_path:0.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:parse_svg_path:parse-svg-path:0.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:parse_svg_path:parse_svg_path:0.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:parse-svg:parse-svg-path:0.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:parse-svg:parse_svg_path:0.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:parse_svg:parse-svg-path:0.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:parse_svg:parse_svg_path:0.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:parse:parse-svg-path:0.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:parse:parse_svg_path:0.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/parse-svg-path@0.1.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/parse-svg-path/-/parse-svg-path-0.1.2.tgz", "integrity": "sha512-JyPSBnkTJ0AI8GGJLfMXvKq42cj5c006fnLz6fXy6zfoVjJizi8BNTpu8on8ziI1cKy9d9DGNuY17Ce7wuejpQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 09bae738f1e39a33
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: parseley 0.12.1
message: Package discovered: parseley 0.12.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "22f6c66ddf9c06f1", "name": "parseley", "version": "0.12.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:parseley:parseley:0.12.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/parseley@0.12.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/parseley/-/parseley-0.12.1.tgz", "integrity": "sha512-e6qHKe3a9HWr0oMRVDTRhKce+bRO8VGQR3NyVwcjwrbhMmFCX9KszEV35+rn4AdilFAq9VPxP/Fe1wC9Qjd2lw==", "dependencies": {"leac": "^0.6.0", "peberminta": "^0.9.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 37de8d05673d8403
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: parseurl 1.3.3
message: Package discovered: parseurl 1.3.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "484c0b9a6084b4bb", "name": "parseurl", "version": "1.3.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:parseurl:parseurl:1.3.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/parseurl@1.3.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz", "integrity": "sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 4b3d2fa0f1f98ea0
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: path-exists 4.0.0
message: Package discovered: path-exists 4.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "7c130f49f1f39739", "name": "path-exists", "version": "4.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:path-exists:path-exists:4.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:path-exists:path_exists:4.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:path_exists:path-exists:4.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:path_exists:path_exists:4.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:path:path-exists:4.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:path:path_exists:4.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/path-exists@4.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/path-exists/-/path-exists-4.0.0.tgz", "integrity": "sha512-ak9Qy5Q7jYb2Wwcey5Fpvg2KoAc/ZIhLSLOSBmRmygPsGwkVVt0fZa0qrtMz+m6tJTAHfZQ8FnmB4MG4LWy7/w==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 5bb936b7686247f0
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: path-expression-matcher 1.5.0
message: Package discovered: path-expression-matcher 1.5.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "802e4db060f878e6", "name": "path-expression-matcher", "version": "1.5.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:path-expression-matcher:path-expression-matcher:1.5.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:path-expression-matcher:path_expression_matcher:1.5.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:path_expression_matcher:path-expression-matcher:1.5.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:path_expression_matcher:path_expression_matcher:1.5.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:path-expression:path-expression-matcher:1.5.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:path-expression:path_expression_matcher:1.5.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:path_expression:path-expression-matcher:1.5.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:path_expression:path_expression_matcher:1.5.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:path:path-expression-matcher:1.5.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:path:path_expression_matcher:1.5.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/path-expression-matcher@1.5.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/path-expression-matcher/-/path-expression-matcher-1.5.0.tgz", "integrity": "sha512-cbrerZV+6rvdQrrD+iGMcZFEiiSrbv9Tfdkvnusy6y0x0GKBXREFg/Y65GhIfm0tnLntThhzCnfKwp1WRjeCyQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: ffd71e909718c27d
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: path-key 3.1.1
message: Package discovered: path-key 3.1.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "f9cf628256388076", "name": "path-key", "version": "3.1.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:path-key:path-key:3.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:path-key:path_key:3.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:path_key:path-key:3.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:path_key:path_key:3.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:path:path-key:3.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:path:path_key:3.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/path-key@3.1.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz", "integrity": "sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: fbb7614ee3db4371
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: path-parse 1.0.7
message: Package discovered: path-parse 1.0.7
remediation: Track and scan dependencies.
raw_finding:
{"id": "9cf335be710ffc91", "name": "path-parse", "version": "1.0.7", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:path-parse_project:path-parse:1.0.7:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/path-parse@1.0.7", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.7.tgz", "integrity": "sha512-LDJzPVEEEPR+y48z93A0Ed0yXb8pAByGWo/k5YYdYgpY2/2EsOsksJrq7lOHxryrVOn1ejG6oAp8ahvOIQD8sw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 135178fee69fc7b7
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: path-scurry 1.11.1
message: Package discovered: path-scurry 1.11.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "f605927959537dfd", "name": "path-scurry", "version": "1.11.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "BlueOak-1.0.0", "spdxExpression": "BlueOak-1.0.0", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:path-scurry:path-scurry:1.11.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:path-scurry:path_scurry:1.11.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:path_scurry:path-scurry:1.11.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:path_scurry:path_scurry:1.11.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:path:path-scurry:1.11.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:path:path_scurry:1.11.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/path-scurry@1.11.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/path-scurry/-/path-scurry-1.11.1.tgz", "integrity": "sha512-Xa4Nw17FS9ApQFJ9umLiJS4orGjm7ZzwUrwamcGQuHSzDyth9boKDaycYdDcZDuqYATXw4HFXgaqWTctW/v1HA==", "dependencies": {"lru-cache": "^10.2.0", "minipass": "^5.0.0 || ^6.0.2 || ^7.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: ad5632f7c396e60c
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: path-to-regexp 0.1.13
message: Package discovered: path-to-regexp 0.1.13
remediation: Track and scan dependencies.
raw_finding:
{"id": "e6c60d0f52ae43b7", "name": "path-to-regexp", "version": "0.1.13", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:path-to-regexp:path-to-regexp:0.1.13:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:path-to-regexp:path_to_regexp:0.1.13:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:path_to_regexp:path-to-regexp:0.1.13:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:path_to_regexp:path_to_regexp:0.1.13:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:path-to:path-to-regexp:0.1.13:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:path-to:path_to_regexp:0.1.13:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:path_to:path-to-regexp:0.1.13:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:path_to:path_to_regexp:0.1.13:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:path:path-to-regexp:0.1.13:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:path:path_to_regexp:0.1.13:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/path-to-regexp@0.1.13", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.13.tgz", "integrity": "sha512-A/AGNMFN3c8bOlvV9RreMdrv7jsmF9XIfDeCd87+I8RNg6s78BhJxMu69NEMHBSJFxKidViTEdruRwEk/WIKqA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: c2433fd071fcfad6
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: peberminta 0.9.0
message: Package discovered: peberminta 0.9.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "f3acb6a3529e1191", "name": "peberminta", "version": "0.9.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:peberminta:peberminta:0.9.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/peberminta@0.9.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/peberminta/-/peberminta-0.9.0.tgz", "integrity": "sha512-XIxfHpEuSJbITd1H3EeQwpcZbTLHc+VVr8ANI9t5sit565tsI4/xK3KWTUFE2e6QiangUkh3B0jihzmGnNrRsQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: bd0577c6ddbc7f17
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: picocolors 1.1.1
message: Package discovered: picocolors 1.1.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "9b208867cdc8b323", "name": "picocolors", "version": "1.1.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:picocolors:picocolors:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/picocolors@1.1.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz", "integrity": "sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 2e6faecb84cf8a8b
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: picomatch 2.3.2
message: Package discovered: picomatch 2.3.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "0c0ba7fcf7a893f6", "name": "picomatch", "version": "2.3.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:jonschlinkert:picomatch:2.3.2:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/picomatch@2.3.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.2.tgz", "integrity": "sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 44e51885407159f3
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: picomatch 4.0.4
message: Package discovered: picomatch 4.0.4
remediation: Track and scan dependencies.
raw_finding:
{"id": "09943c54769c1f79", "name": "picomatch", "version": "4.0.4", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:jonschlinkert:picomatch:4.0.4:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/picomatch@4.0.4", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.4.tgz", "integrity": "sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: b7793733f0a92625
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: pify 2.3.0
message: Package discovered: pify 2.3.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "93c54feee38dbf96", "name": "pify", "version": "2.3.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:pify:pify:2.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/pify@2.3.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/pify/-/pify-2.3.0.tgz", "integrity": "sha512-udgsAY+fTnvv7kI7aaxbqwWNb0AHiB0qBO89PZKPkoTmGOgdbrHDKD+0B2X4uTfJ/FT1R09r9gTsjUjNJotuog==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 0b578240afa70fcd
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: pirates 4.0.7
message: Package discovered: pirates 4.0.7
remediation: Track and scan dependencies.
raw_finding:
{"id": "47481e92080dd044", "name": "pirates", "version": "4.0.7", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:pirates:pirates:4.0.7:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/pirates@4.0.7", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/pirates/-/pirates-4.0.7.tgz", "integrity": "sha512-TfySrs/5nm8fQJDcBDuUng3VOUKsd7S+zqvbOTiGXHfxX4wK31ard+hoNuvkicM/2YFzlpDgABOevKSsB4G/FA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 72750f8253cdf631
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: png-js 2.0.0
message: Package discovered: png-js 2.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "7a0a81fa01919ffb", "name": "png-js", "version": "2.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:png-js:png-js:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:png-js:png_js:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:png_js:png-js:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:png_js:png_js:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:png:png-js:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:png:png_js:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/png-js@2.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/png-js/-/png-js-2.0.0.tgz", "integrity": "sha512-GdzJuUMc6ZSpxFJWVxtOH1bzYHym+TOnveqUjb+VJIbZWbZzyiRGFiKhbiielfpYbgMlhHVhsJ0FTazfuRFkMA==", "dependencies": {"fflate": "^0.8.2"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 017b0d73e37dad2f
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: pngjs 5.0.0
message: Package discovered: pngjs 5.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "33a77729322028df", "name": "pngjs", "version": "5.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:pngjs:pngjs:5.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/pngjs@5.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/pngjs/-/pngjs-5.0.0.tgz", "integrity": "sha512-40QW5YalBNfQo5yRYmiw7Yz6TKKVr3h6970B2YE+3fQpsWcrbj1PzJgxeJ19DRQjhMbKPIuMY8rFaXc8moolVw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 6c2c21065eca2894
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: postcss 8.4.31
message: Package discovered: postcss 8.4.31
remediation: Track and scan dependencies.
raw_finding:
{"id": "a519bffcd9b56c6d", "name": "postcss", "version": "8.4.31", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:postcss:postcss:8.4.31:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/postcss@8.4.31", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/postcss/-/postcss-8.4.31.tgz", "integrity": "sha512-PS08Iboia9mts/2ygV3eLpY5ghnUcfLV/EXTOW1E2qYxJKGGBUtNjN76FYHnMs36RmARn41bC0AZmn+rR0OVpQ==", "dependencies": {"nanoid": "^3.3.6", "picocolors": "^1.0.0", "source-map-js": "^1.0.2"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 87700f6dfcbe47e2
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: postcss 8.5.12
message: Package discovered: postcss 8.5.12
remediation: Track and scan dependencies.
raw_finding:
{"id": "588683a1923c27d7", "name": "postcss", "version": "8.5.12", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:postcss:postcss:8.5.12:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/postcss@8.5.12", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.12.tgz", "integrity": "sha512-W62t/Se6rA0Az3DfCL0AqJwXuKwBeYg6nOaIgzP+xZ7N5BFCI7DYi1qs6ygUYT6rvfi6t9k65UMLJC+PHZpDAA==", "dependencies": {"nanoid": "^3.3.11", "picocolors": "^1.1.1", "source-map-js": "^1.2.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: f6953879c586ae44
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: postcss-import 15.1.0
message: Package discovered: postcss-import 15.1.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "9f2c64d652651310", "name": "postcss-import", "version": "15.1.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:postcss-import:postcss-import:15.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss-import:postcss_import:15.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss_import:postcss-import:15.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss_import:postcss_import:15.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss:postcss-import:15.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss:postcss_import:15.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/postcss-import@15.1.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/postcss-import/-/postcss-import-15.1.0.tgz", "integrity": "sha512-hpr+J05B2FVYUAXHeK1YyI267J/dDDhMU6B6civm8hSY1jYJnBXxzKDKDswzJmtLHryrjhnDjqqp/49t8FALew==", "dependencies": {"postcss-value-parser": "^4.0.0", "read-cache": "^1.0.0", "resolve": "^1.1.7"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 49a05cdffa8a7ef9
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: postcss-js 4.1.0
message: Package discovered: postcss-js 4.1.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "9feba814d6f9cb30", "name": "postcss-js", "version": "4.1.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:postcss-js:postcss-js:4.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss-js:postcss_js:4.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss_js:postcss-js:4.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss_js:postcss_js:4.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss:postcss-js:4.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss:postcss_js:4.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/postcss-js@4.1.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/postcss-js/-/postcss-js-4.1.0.tgz", "integrity": "sha512-oIAOTqgIo7q2EOwbhb8UalYePMvYoIeRY2YKntdpFQXNosSu3vLrniGgmH9OKs/qAkfoj5oB3le/7mINW1LCfw==", "dependencies": {"camelcase-css": "^2.0.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 92ac10dec31ee632
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: postcss-load-config 6.0.1
message: Package discovered: postcss-load-config 6.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "07fb83a013bf4ef4", "name": "postcss-load-config", "version": "6.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:postcss-load-config:postcss-load-config:6.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss-load-config:postcss_load_config:6.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss_load_config:postcss-load-config:6.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss_load_config:postcss_load_config:6.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss-load:postcss-load-config:6.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss-load:postcss_load_config:6.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss_load:postcss-load-config:6.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss_load:postcss_load_config:6.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss:postcss-load-config:6.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss:postcss_load_config:6.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/postcss-load-config@6.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/postcss-load-config/-/postcss-load-config-6.0.1.tgz", "integrity": "sha512-oPtTM4oerL+UXmx+93ytZVN82RrlY/wPUV8IeDxFrzIjXOLF1pN+EmKPLbubvKHT2HC20xXsCAH2Z+CKV6Oz/g==", "dependencies": {"lilconfig": "^3.1.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: a302d705f049e265
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: postcss-nested 6.2.0
message: Package discovered: postcss-nested 6.2.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "16f11e75cb882477", "name": "postcss-nested", "version": "6.2.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:postcss-nested:postcss-nested:6.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss-nested:postcss_nested:6.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss_nested:postcss-nested:6.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss_nested:postcss_nested:6.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss:postcss-nested:6.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss:postcss_nested:6.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/postcss-nested@6.2.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/postcss-nested/-/postcss-nested-6.2.0.tgz", "integrity": "sha512-HQbt28KulC5AJzG+cZtj9kvKB93CFCdLvog1WFLf1D+xmMvPGlBstkpTEZfK5+AN9hfJocyBFCNiqyS48bpgzQ==", "dependencies": {"postcss-selector-parser": "^6.1.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 002cf57b0b0dcab6
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: postcss-selector-parser 6.1.2
message: Package discovered: postcss-selector-parser 6.1.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "f7f4c134629f3b3a", "name": "postcss-selector-parser", "version": "6.1.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:postcss-selector-parser:postcss-selector-parser:6.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss-selector-parser:postcss_selector_parser:6.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss_selector_parser:postcss-selector-parser:6.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss_selector_parser:postcss_selector_parser:6.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss-selector:postcss-selector-parser:6.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss-selector:postcss_selector_parser:6.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss_selector:postcss-selector-parser:6.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss_selector:postcss_selector_parser:6.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss:postcss-selector-parser:6.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss:postcss_selector_parser:6.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/postcss-selector-parser@6.1.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-6.1.2.tgz", "integrity": "sha512-Q8qQfPiZ+THO/3ZrOrO0cJJKfpYCagtMUkXbnEfmgUjwXg6z/WBeOyS9APBBPCTSiDV+s4SwQGu8yFsiMRIudg==", "dependencies": {"cssesc": "^3.0.0", "util-deprecate": "^1.0.2"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 738a4e319226bde2
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: postcss-value-parser 4.2.0
message: Package discovered: postcss-value-parser 4.2.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "d70570520f43a33c", "name": "postcss-value-parser", "version": "4.2.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:postcss-value-parser:postcss-value-parser:4.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss-value-parser:postcss_value_parser:4.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss_value_parser:postcss-value-parser:4.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss_value_parser:postcss_value_parser:4.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss-value:postcss-value-parser:4.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss-value:postcss_value_parser:4.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss_value:postcss-value-parser:4.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss_value:postcss_value_parser:4.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss:postcss-value-parser:4.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:postcss:postcss_value_parser:4.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/postcss-value-parser@4.2.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/postcss-value-parser/-/postcss-value-parser-4.2.0.tgz", "integrity": "sha512-1NNCs6uurfkVbeXG4S8JFT9t19m45ICnif8zWLd5oPSZ50QnwMfK+H3jv408d4jw/7Bttv5axS5IiHoLaVNHeQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: f330341278522955
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: prisma 5.22.0
message: Package discovered: prisma 5.22.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "f76e4353403c9c3d", "name": "prisma", "version": "5.22.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "Apache-2.0", "spdxExpression": "Apache-2.0", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:prisma:prisma:5.22.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/prisma@5.22.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/prisma/-/prisma-5.22.0.tgz", "integrity": "sha512-vtpjW3XuYCSnMsNVBjLMNkTj6OZbudcPPTPYHqX0CJfpcdWciI1dM8uHETwmDxxiqEwCIE6WvXucWUetJgfu/A==", "dependencies": {"@prisma/engines": "5.22.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 9fc67df1307075e9
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: process-nextick-args 2.0.1
message: Package discovered: process-nextick-args 2.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "da765da41b164754", "name": "process-nextick-args", "version": "2.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:process-nextick-args:process-nextick-args:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:process-nextick-args:process_nextick_args:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:process_nextick_args:process-nextick-args:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:process_nextick_args:process_nextick_args:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:process-nextick:process-nextick-args:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:process-nextick:process_nextick_args:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:process_nextick:process-nextick-args:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:process_nextick:process_nextick_args:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:process:process-nextick-args:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:process:process_nextick_args:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/process-nextick-args@2.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-2.0.1.tgz", "integrity": "sha512-3ouUOpQhtgrbOa17J7+uxOTpITYWaGP7/AhoR3+A+/1e9skrzelGi/dXzEYyvbxubEF6Wn2ypscTKiKJFFn1ag==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: b351d49072943449
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: prop-types 15.8.1
message: Package discovered: prop-types 15.8.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "2485766b0114da33", "name": "prop-types", "version": "15.8.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:prop-types:prop-types:15.8.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:prop-types:prop_types:15.8.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:prop_types:prop-types:15.8.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:prop_types:prop_types:15.8.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:prop:prop-types:15.8.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:prop:prop_types:15.8.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/prop-types@15.8.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/prop-types/-/prop-types-15.8.1.tgz", "integrity": "sha512-oj87CgZICdulUohogVAR7AjlC0327U4el4L6eAvOqCeudMDVU0NThNaV+b9Df4dXgSP1gXMTnPdhfe/2qDH5cg==", "dependencies": {"loose-envify": "^1.4.0", "object-assign": "^4.1.1", "react-is": "^16.13.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: acadb8b8517c78d3
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: proto-list 1.2.4
message: Package discovered: proto-list 1.2.4
remediation: Track and scan dependencies.
raw_finding:
{"id": "685c0e3e50c6553a", "name": "proto-list", "version": "1.2.4", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:proto-list:proto-list:1.2.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:proto-list:proto_list:1.2.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:proto_list:proto-list:1.2.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:proto_list:proto_list:1.2.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:proto:proto-list:1.2.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:proto:proto_list:1.2.4:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/proto-list@1.2.4", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/proto-list/-/proto-list-1.2.4.tgz", "integrity": "sha512-vtK/94akxsTMhe0/cbfpR+syPuszcuwhqVjJq26CuNDgFGj682oRBXOP5MJpv2r7JtE8MsiepGIqvvOTBwn2vA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 44c7a82b0c4aafcf
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: proto3-json-serializer 2.0.2
message: Package discovered: proto3-json-serializer 2.0.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "5add12638aea166c", "name": "proto3-json-serializer", "version": "2.0.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "Apache-2.0", "spdxExpression": "Apache-2.0", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:proto3-json-serializer:proto3-json-serializer:2.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:proto3-json-serializer:proto3_json_serializer:2.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:proto3_json_serializer:proto3-json-serializer:2.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:proto3_json_serializer:proto3_json_serializer:2.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:proto3-json:proto3-json-serializer:2.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:proto3-json:proto3_json_serializer:2.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:proto3_json:proto3-json-serializer:2.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:proto3_json:proto3_json_serializer:2.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:proto3:proto3-json-serializer:2.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:proto3:proto3_json_serializer:2.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/proto3-json-serializer@2.0.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/proto3-json-serializer/-/proto3-json-serializer-2.0.2.tgz", "integrity": "sha512-SAzp/O4Yh02jGdRc+uIrGoe87dkN/XtwxfZ4ZyafJHymd79ozp5VG5nyZ7ygqPM5+cpLDjjGnYFUkngonyDPOQ==", "dependencies": {"protobufjs": "^7.2.5"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: f337eadf0901e415
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: protobufjs 7.5.6
message: Package discovered: protobufjs 7.5.6
remediation: Track and scan dependencies.
raw_finding:
{"id": "a5b5323abf9aae9f", "name": "protobufjs", "version": "7.5.6", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "BSD-3-Clause", "spdxExpression": "BSD-3-Clause", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:protobufjs_project:protobufjs:7.5.6:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/protobufjs@7.5.6", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/protobufjs/-/protobufjs-7.5.6.tgz", "integrity": "sha512-M71sTMB146U3u0di3yup8iM+zv8yPRNQVr1KK4tyBitl3qFvEGucq/rGDRShD2rsJhtN02RJaJ7j5X5hmy8SJg==", "dependencies": {"@protobufjs/aspromise": "^1.1.2", "@protobufjs/base64": "^1.1.2", "@protobufjs/codegen": "^2.0.5", "@protobufjs/eventemitter": "^1.1.0", "@protobufjs/fetch": "^1.1.0", "@protobufjs/float": "^1.0.2", "@protobufjs/inquire": "^1.1.1", "@protobufjs/path": "^1.1.2", "@protobufjs/pool": "^1.1.0", "@protobufjs/utf8": "^1.1.1", "@types/node": ">=13.7.0", "long": "^5.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: d4455e8054d4e780
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: proxy-addr 2.0.7
message: Package discovered: proxy-addr 2.0.7
remediation: Track and scan dependencies.
raw_finding:
{"id": "ce10aea6db36304a", "name": "proxy-addr", "version": "2.0.7", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:proxy-addr:proxy-addr:2.0.7:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:proxy-addr:proxy_addr:2.0.7:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:proxy_addr:proxy-addr:2.0.7:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:proxy_addr:proxy_addr:2.0.7:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:proxy:proxy-addr:2.0.7:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:proxy:proxy_addr:2.0.7:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/proxy-addr@2.0.7", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz", "integrity": "sha512-llQsMLSUDUPT44jdrU/O37qlnifitDP+ZwrmmZcoSKyLKvtZxpyV0n2/bD/N4tBAAZ/gJEdZU7KMraoK1+XYAg==", "dependencies": {"forwarded": "0.2.0", "ipaddr.js": "1.9.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 4788b4003cbe678a
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: proxy-from-env 2.1.0
message: Package discovered: proxy-from-env 2.1.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "d0670890e90b35a8", "name": "proxy-from-env", "version": "2.1.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:proxy-from-env:proxy-from-env:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:proxy-from-env:proxy_from_env:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:proxy_from_env:proxy-from-env:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:proxy_from_env:proxy_from_env:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:proxy-from:proxy-from-env:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:proxy-from:proxy_from_env:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:proxy_from:proxy-from-env:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:proxy_from:proxy_from_env:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:proxy:proxy-from-env:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:proxy:proxy_from_env:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/proxy-from-env@2.1.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-2.1.0.tgz", "integrity": "sha512-cJ+oHTW1VAEa8cJslgmUZrc+sjRKgAKl3Zyse6+PV38hZe/V6Z14TbCuXcan9F9ghlz4QrFr2c92TNF82UkYHA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 6d2187ed4d7bb00d
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: qrcode 1.5.4
message: Package discovered: qrcode 1.5.4
remediation: Track and scan dependencies.
raw_finding:
{"id": "9616afcfad81bbcd", "name": "qrcode", "version": "1.5.4", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:qrcode:qrcode:1.5.4:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/qrcode@1.5.4", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/qrcode/-/qrcode-1.5.4.tgz", "integrity": "sha512-1ca71Zgiu6ORjHqFBDpnSMTR2ReToX4l1Au1VFLyVeBTFavzQnv5JxMFr3ukHVKpSrSA2MCk0lNJSykjUfz7Zg==", "dependencies": {"dijkstrajs": "^1.0.1", "pngjs": "^5.0.0", "yargs": "^15.3.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: cd93e60074e9daeb
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: qs 6.14.2
message: Package discovered: qs 6.14.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "baa7b01807110a4c", "name": "qs", "version": "6.14.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "BSD-3-Clause", "spdxExpression": "BSD-3-Clause", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:qs_project:qs:6.14.2:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/qs@6.14.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/qs/-/qs-6.14.2.tgz", "integrity": "sha512-V/yCWTTF7VJ9hIh18Ugr2zhJMP01MY7c5kh4J870L7imm6/DIzBsNLTXzMwUA3yZ5b/KBqLx8Kp3uRvd7xSe3Q==", "dependencies": {"side-channel": "^1.1.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 4d4da368c4cb9e85
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: qs 6.15.1
message: Package discovered: qs 6.15.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "994fc27bb4c175c9", "name": "qs", "version": "6.15.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "BSD-3-Clause", "spdxExpression": "BSD-3-Clause", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:qs_project:qs:6.15.1:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/qs@6.15.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/qs/-/qs-6.15.1.tgz", "integrity": "sha512-6YHEFRL9mfgcAvql/XhwTvf5jKcOiiupt2FiJxHkiX1z4j7WL8J/jRHYLluORvc1XxB5rV20KoeK00gVJamspg==", "dependencies": {"side-channel": "^1.1.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 53a30fbc709808bd
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: queue 6.0.2
message: Package discovered: queue 6.0.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "3d2cabf593c9f69a", "name": "queue", "version": "6.0.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:queue:queue:6.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/queue@6.0.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/queue/-/queue-6.0.2.tgz", "integrity": "sha512-iHZWu+q3IdFZFX36ro/lKBkSvfkztY5Y7HMiPlOUjhupPcG2JMfst2KKEpu5XndviX/3UhFbRngUPNKtgvtZiA==", "dependencies": {"inherits": "~2.0.3"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: ef5b9014e52d743a
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: queue-microtask 1.2.3
message: Package discovered: queue-microtask 1.2.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "254ae16d84fc4780", "name": "queue-microtask", "version": "1.2.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:queue-microtask:queue-microtask:1.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:queue-microtask:queue_microtask:1.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:queue_microtask:queue-microtask:1.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:queue_microtask:queue_microtask:1.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:queue:queue-microtask:1.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:queue:queue_microtask:1.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/queue-microtask@1.2.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/queue-microtask/-/queue-microtask-1.2.3.tgz", "integrity": "sha512-NuaNSa6flKT5JaSYQzJok04JzTL1CA6aGhv5rfLW3PgqA+M2ChpZQnAC8h8i4ZFkBS8X5RqkDBHA7r4hej3K9A==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: cbdbab233debac3e
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: range-parser 1.2.1
message: Package discovered: range-parser 1.2.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "4bcca27d3d8ccfdd", "name": "range-parser", "version": "1.2.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:range-parser:range-parser:1.2.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:range-parser:range_parser:1.2.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:range_parser:range-parser:1.2.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:range_parser:range_parser:1.2.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:range:range-parser:1.2.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:range:range_parser:1.2.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/range-parser@1.2.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz", "integrity": "sha512-Hrgsx+orqoygnmhFbKaHE6c296J+HTAQXoxEF6gNupROmmGJRoyzfG3ccAveqCBrwr/2yxQ5BVd/GTl5agOwSg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 7d9cd0e4ae47337e
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: raw-body 2.5.3
message: Package discovered: raw-body 2.5.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "62bf6c85ca605f5a", "name": "raw-body", "version": "2.5.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:raw-body:raw-body:2.5.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:raw-body:raw_body:2.5.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:raw_body:raw-body:2.5.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:raw_body:raw_body:2.5.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:raw:raw-body:2.5.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:raw:raw_body:2.5.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/raw-body@2.5.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.3.tgz", "integrity": "sha512-s4VSOf6yN0rvbRZGxs8Om5CWj6seneMwK3oDb4lWDH0UPhWcxwOWw5+qk24bxq87szX1ydrwylIOp2uG1ojUpA==", "dependencies": {"bytes": "~3.1.2", "http-errors": "~2.0.1", "iconv-lite": "~0.4.24", "unpipe": "~1.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: aa3b52d55574a475
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: react 18.3.1
message: Package discovered: react 18.3.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "405f6eb700866b5f", "name": "react", "version": "18.3.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:react:react:18.3.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/react@18.3.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/react/-/react-18.3.1.tgz", "integrity": "sha512-wS+hAgJShR0KhEvPJArfuPVN1+Hz1t0Y6n5jLrGQbkb4urgPE/0Rve+1kMB1v/oWgHgm4WIcV+i7F2pTVj+2iQ==", "dependencies": {"loose-envify": "^1.1.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 36e9f0b5d3cd995c
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: react-dom 18.3.1
message: Package discovered: react-dom 18.3.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "98bcef2cdcc9941a", "name": "react-dom", "version": "18.3.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:react-dom:react-dom:18.3.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react-dom:react_dom:18.3.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react_dom:react-dom:18.3.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react_dom:react_dom:18.3.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react:react-dom:18.3.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react:react_dom:18.3.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/react-dom@18.3.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/react-dom/-/react-dom-18.3.1.tgz", "integrity": "sha512-5m4nQKp+rZRb09LNH59GM4BxTh9251/ylbKIbpe7TpGxfJ+9kv6BLkLBXIjjspbgbnIBNqlI23tRnTWT0snUIw==", "dependencies": {"loose-envify": "^1.1.0", "scheduler": "^0.23.2"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 19cfc2419956329b
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: react-is 16.13.1
message: Package discovered: react-is 16.13.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "0db53ea4a0e10790", "name": "react-is", "version": "16.13.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:react-is:react-is:16.13.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react-is:react_is:16.13.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react_is:react-is:16.13.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react_is:react_is:16.13.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react:react-is:16.13.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react:react_is:16.13.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/react-is@16.13.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/react-is/-/react-is-16.13.1.tgz", "integrity": "sha512-24e6ynE2H+OKt4kqsOvNd8kBpV65zoxbA4BVsEOB3ARVWQki/DHzaUoC5KuON/BiccDaCCTZBuOcfZs70kR8bQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 320c91417fe22e47
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: react-is 18.3.1
message: Package discovered: react-is 18.3.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "756017d5bfb89c54", "name": "react-is", "version": "18.3.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:react-is:react-is:18.3.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react-is:react_is:18.3.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react_is:react-is:18.3.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react_is:react_is:18.3.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react:react-is:18.3.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react:react_is:18.3.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/react-is@18.3.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/react-is/-/react-is-18.3.1.tgz", "integrity": "sha512-/LLMVyas0ljjAtoYiPqYiL8VWXzUUdThrmU5+n20DZv+a+ClRoevUzw5JxU+Ieh5/c87ytoTBV9G1FiKfNJdmg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: e00babcb3a543f4c
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: react-promise-suspense 0.3.4
message: Package discovered: react-promise-suspense 0.3.4
remediation: Track and scan dependencies.
raw_finding:
{"id": "74a57b2250b339b3", "name": "react-promise-suspense", "version": "0.3.4", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:react-promise-suspense:react-promise-suspense:0.3.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react-promise-suspense:react_promise_suspense:0.3.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react_promise_suspense:react-promise-suspense:0.3.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react_promise_suspense:react_promise_suspense:0.3.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react-promise:react-promise-suspense:0.3.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react-promise:react_promise_suspense:0.3.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react_promise:react-promise-suspense:0.3.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react_promise:react_promise_suspense:0.3.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react:react-promise-suspense:0.3.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react:react_promise_suspense:0.3.4:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/react-promise-suspense@0.3.4", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/react-promise-suspense/-/react-promise-suspense-0.3.4.tgz", "integrity": "sha512-I42jl7L3Ze6kZaq+7zXWSunBa3b1on5yfvUW6Eo/3fFOj6dZ5Bqmcd264nJbTK/gn1HjjILAjSwnZbV4RpSaNQ==", "dependencies": {"fast-deep-equal": "^2.0.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 45e27e6a5bb4b37b
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: react-smooth 4.0.4
message: Package discovered: react-smooth 4.0.4
remediation: Track and scan dependencies.
raw_finding:
{"id": "646f82a1b8ded3b2", "name": "react-smooth", "version": "4.0.4", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:react-smooth:react-smooth:4.0.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react-smooth:react_smooth:4.0.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react_smooth:react-smooth:4.0.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react_smooth:react_smooth:4.0.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react:react-smooth:4.0.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react:react_smooth:4.0.4:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/react-smooth@4.0.4", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/react-smooth/-/react-smooth-4.0.4.tgz", "integrity": "sha512-gnGKTpYwqL0Iii09gHobNolvX4Kiq4PKx6eWBCYYix+8cdw+cGo3do906l1NBPKkSWx1DghC1dlWG9L2uGd61Q==", "dependencies": {"fast-equals": "^5.0.1", "prop-types": "^15.8.1", "react-transition-group": "^4.4.5"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 8e8ac167acac7b76
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: react-transition-group 4.4.5
message: Package discovered: react-transition-group 4.4.5
remediation: Track and scan dependencies.
raw_finding:
{"id": "15c7effc6183b848", "name": "react-transition-group", "version": "4.4.5", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "BSD-3-Clause", "spdxExpression": "BSD-3-Clause", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:react-transition-group:react-transition-group:4.4.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react-transition-group:react_transition_group:4.4.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react_transition_group:react-transition-group:4.4.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react_transition_group:react_transition_group:4.4.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react-transition:react-transition-group:4.4.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react-transition:react_transition_group:4.4.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react_transition:react-transition-group:4.4.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react_transition:react_transition_group:4.4.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react:react-transition-group:4.4.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:react:react_transition_group:4.4.5:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/react-transition-group@4.4.5", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/react-transition-group/-/react-transition-group-4.4.5.tgz", "integrity": "sha512-pZcd1MCJoiKiBR2NRxeCRg13uCXbydPnmB4EOeRrY7480qNWO8IIgQG6zlDkm6uRMsURXPuKq0GWtiM59a5Q6g==", "dependencies": {"@babel/runtime": "^7.5.5", "dom-helpers": "^5.0.1", "loose-envify": "^1.4.0", "prop-types": "^15.6.2"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 0cce3cd1fd3c13cf
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: read-cache 1.0.0
message: Package discovered: read-cache 1.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "5f64d7de79050a02", "name": "read-cache", "version": "1.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:read-cache:read-cache:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:read-cache:read_cache:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:read_cache:read-cache:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:read_cache:read_cache:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:read:read-cache:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:read:read_cache:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/read-cache@1.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/read-cache/-/read-cache-1.0.0.tgz", "integrity": "sha512-Owdv/Ft7IjOgm/i0xvNDZ1LrRANRfew4b2prF3OWMQLxLfu3bS8FVhCsrSCMK4lR56Y9ya+AThoTpDCTxCmpRA==", "dependencies": {"pify": "^2.3.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: c7ae55737c4393af
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: readable-stream 2.3.8
message: Package discovered: readable-stream 2.3.8
remediation: Track and scan dependencies.
raw_finding:
{"id": "deca1a198ab80d23", "name": "readable-stream", "version": "2.3.8", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:readable-stream:readable-stream:2.3.8:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:readable-stream:readable_stream:2.3.8:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:readable_stream:readable-stream:2.3.8:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:readable_stream:readable_stream:2.3.8:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:readable:readable-stream:2.3.8:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:readable:readable_stream:2.3.8:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/readable-stream@2.3.8", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.8.tgz", "integrity": "sha512-8p0AUk4XODgIewSi0l8Epjs+EVnWiK7NoDIEGU0HhE7+ZyY8D1IMY7odu5lRrFXGg71L15KG8QrPmum45RTtdA==", "dependencies": {"core-util-is": "~1.0.0", "inherits": "~2.0.3", "isarray": "~1.0.0", "process-nextick-args": "~2.0.0", "safe-buffer": "~5.1.1", "string_decoder": "~1.1.1", "util-deprecate": "~1.0.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 303fe49ee8d1f69a
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: readable-stream 3.6.2
message: Package discovered: readable-stream 3.6.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "066e44c97461677f", "name": "readable-stream", "version": "3.6.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:readable-stream:readable-stream:3.6.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:readable-stream:readable_stream:3.6.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:readable_stream:readable-stream:3.6.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:readable_stream:readable_stream:3.6.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:readable:readable-stream:3.6.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:readable:readable_stream:3.6.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/readable-stream@3.6.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz", "integrity": "sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==", "dependencies": {"inherits": "^2.0.3", "string_decoder": "^1.1.1", "util-deprecate": "^1.0.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 9230ea38673dd70b
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: readdirp 3.6.0
message: Package discovered: readdirp 3.6.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "beb5f9a5d33de00e", "name": "readdirp", "version": "3.6.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:readdirp:readdirp:3.6.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/readdirp@3.6.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/readdirp/-/readdirp-3.6.0.tgz", "integrity": "sha512-hOS089on8RduqdbhvQ5Z37A0ESjsqz6qnRcffsMU3495FuTdqSm+7bhJ29JvIOsBDEEnan5DPu9t3To9VRlMzA==", "dependencies": {"picomatch": "^2.2.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: ec316d1c56cfd200
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: recharts 2.15.4
message: Package discovered: recharts 2.15.4
remediation: Track and scan dependencies.
raw_finding:
{"id": "98e64f0b2bbef0ce", "name": "recharts", "version": "2.15.4", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:recharts:recharts:2.15.4:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/recharts@2.15.4", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/recharts/-/recharts-2.15.4.tgz", "integrity": "sha512-UT/q6fwS3c1dHbXv2uFgYJ9BMFHu3fwnd7AYZaEQhXuYQ4hgsxLvsUXzGdKeZrW5xopzDCvuA2N41WJ88I7zIw==", "dependencies": {"clsx": "^2.0.0", "eventemitter3": "^4.0.1", "lodash": "^4.17.21", "react-is": "^18.3.1", "react-smooth": "^4.0.4", "recharts-scale": "^0.4.4", "tiny-invariant": "^1.3.1", "victory-vendor": "^36.6.8"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 249969671e277623
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: recharts-scale 0.4.5
message: Package discovered: recharts-scale 0.4.5
remediation: Track and scan dependencies.
raw_finding:
{"id": "b982e93a08325fbd", "name": "recharts-scale", "version": "0.4.5", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:recharts-scale:recharts-scale:0.4.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:recharts-scale:recharts_scale:0.4.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:recharts_scale:recharts-scale:0.4.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:recharts_scale:recharts_scale:0.4.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:recharts:recharts-scale:0.4.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:recharts:recharts_scale:0.4.5:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/recharts-scale@0.4.5", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/recharts-scale/-/recharts-scale-0.4.5.tgz", "integrity": "sha512-kivNFO+0OcUNu7jQquLXAxz1FIwZj8nrj+YkOKc5694NbjCvcT6aSZiIzNzd2Kul4o4rTto8QVR9lMNtxD4G1w==", "dependencies": {"decimal.js-light": "^2.4.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 0c07927a54487fe7
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: redis-errors 1.2.0
message: Package discovered: redis-errors 1.2.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "c6c6f81fb8ed6f43", "name": "redis-errors", "version": "1.2.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:redis-errors:redis-errors:1.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:redis-errors:redis_errors:1.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:redis_errors:redis-errors:1.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:redis_errors:redis_errors:1.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:redis:redis-errors:1.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:redis:redis_errors:1.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/redis-errors@1.2.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/redis-errors/-/redis-errors-1.2.0.tgz", "integrity": "sha512-1qny3OExCf0UvUV/5wpYKf2YwPcOqXzkwKKSmKHiE6ZMQs5heeE/c8eXK+PNllPvmjgAbfnsbpkGZWy8cBpn9w==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 38d5b601f3f165a4
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: redis-parser 3.0.0
message: Package discovered: redis-parser 3.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "d5b8e01dbe4fdde4", "name": "redis-parser", "version": "3.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:redis-parser:redis-parser:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:redis-parser:redis_parser:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:redis_parser:redis-parser:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:redis_parser:redis_parser:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:redis:redis-parser:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:redis:redis_parser:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/redis-parser@3.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/redis-parser/-/redis-parser-3.0.0.tgz", "integrity": "sha512-DJnGAeenTdpMEH6uAJRK/uiyEIH9WVsUmoLwzudwGJUwZPp80PDBWPHXSAGNPwNvIXAbe7MSUB1zQFugFml66A==", "dependencies": {"redis-errors": "^1.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 73e41b20b413651d
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: rentaldrivego 1.0.0
message: Package discovered: rentaldrivego 1.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "784a87ea0f6f2516", "name": "rentaldrivego", "version": "1.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:rentaldrivego:rentaldrivego:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/rentaldrivego@1.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "", "integrity": "", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 7ebb1ff31601df05
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: require-directory 2.1.1
message: Package discovered: require-directory 2.1.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "ae03eb850b2a6844", "name": "require-directory", "version": "2.1.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:require-directory:require-directory:2.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:require-directory:require_directory:2.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:require_directory:require-directory:2.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:require_directory:require_directory:2.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:require:require-directory:2.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:require:require_directory:2.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/require-directory@2.1.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz", "integrity": "sha512-fGxEI7+wsG9xrvdjsrlmL22OMTTiHRwAMroiEeMgq8gzoLC/PQr7RsRDSTLUg/bZAZtF+TVIkHc6/4RIKrui+Q==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: ae7e8898d2f0d0c8
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: require-from-string 2.0.2
message: Package discovered: require-from-string 2.0.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "f7f7aa302949d36c", "name": "require-from-string", "version": "2.0.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:require-from-string:require-from-string:2.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:require-from-string:require_from_string:2.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:require_from_string:require-from-string:2.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:require_from_string:require_from_string:2.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:require-from:require-from-string:2.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:require-from:require_from_string:2.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:require_from:require-from-string:2.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:require_from:require_from_string:2.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:require:require-from-string:2.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:require:require_from_string:2.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/require-from-string@2.0.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz", "integrity": "sha512-Xf0nWe6RseziFMu+Ap9biiUbmplq6S9/p+7w7YXP/JBHhrUDDUhwa+vANyubuqfZWTveU//DYVGsDG7RKL/vEw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 2d09a802d546535f
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: require-main-filename 2.0.0
message: Package discovered: require-main-filename 2.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "791f53dc42a97604", "name": "require-main-filename", "version": "2.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:require-main-filename:require-main-filename:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:require-main-filename:require_main_filename:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:require_main_filename:require-main-filename:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:require_main_filename:require_main_filename:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:require-main:require-main-filename:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:require-main:require_main_filename:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:require_main:require-main-filename:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:require_main:require_main_filename:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:require:require-main-filename:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:require:require_main_filename:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/require-main-filename@2.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/require-main-filename/-/require-main-filename-2.0.0.tgz", "integrity": "sha512-NKN5kMDylKuldxYLSUfrbo5Tuzh4hd+2E8NPPX02mZtn1VuREQToYe/ZdlJy+J3uCpfaiGF05e7B8W0iXbQHmg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: b3700e9b1b03966b
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: resend 3.5.0
message: Package discovered: resend 3.5.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "c52cdc280efaa4d0", "name": "resend", "version": "3.5.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:resend:resend:3.5.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/resend@3.5.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/resend/-/resend-3.5.0.tgz", "integrity": "sha512-bKu4LhXSecP6krvhfDzyDESApYdNfjirD5kykkT1xO0Cj9TKSiGh5Void4pGTs3Am+inSnp4dg0B5XzdwHBJOQ==", "dependencies": {"@react-email/render": "0.0.16"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 7be6d0329d7fce71
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: resolve 1.22.12
message: Package discovered: resolve 1.22.12
remediation: Track and scan dependencies.
raw_finding:
{"id": "2e445c7ed78482c1", "name": "resolve", "version": "1.22.12", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:resolve:resolve:1.22.12:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/resolve@1.22.12", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/resolve/-/resolve-1.22.12.tgz", "integrity": "sha512-TyeJ1zif53BPfHootBGwPRYT1RUt6oGWsaQr8UyZW/eAm9bKoijtvruSDEmZHm92CwS9nj7/fWttqPCgzep8CA==", "dependencies": {"es-errors": "^1.3.0", "is-core-module": "^2.16.1", "path-parse": "^1.0.7", "supports-preserve-symlinks-flag": "^1.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 3f98609d8855980b
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: restructure 3.0.2
message: Package discovered: restructure 3.0.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "05272d1e7e2ad4be", "name": "restructure", "version": "3.0.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:restructure:restructure:3.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/restructure@3.0.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/restructure/-/restructure-3.0.2.tgz", "integrity": "sha512-gSfoiOEA0VPE6Tukkrr7I0RBdE0s7H1eFCDBk05l1KIQT1UIKNc5JZy6jdyW6eYH3aR3g5b3PuL77rq0hvwtAw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: b7f5c38e4c9ed33f
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: retry 0.13.1
message: Package discovered: retry 0.13.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "b8be0fab008ab183", "name": "retry", "version": "0.13.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:retry:retry:0.13.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/retry@0.13.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/retry/-/retry-0.13.1.tgz", "integrity": "sha512-XQBQ3I8W1Cge0Seh+6gjj03LbmRFWuoszgK9ooCpwYIrhhoO80pfq4cUkU5DkknwfOfFteRwlZ56PYOGYyFWdg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: b8976a72aaa61b4d
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: retry-request 7.0.2
message: Package discovered: retry-request 7.0.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "672814322994feff", "name": "retry-request", "version": "7.0.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:retry-request:retry-request:7.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:retry-request:retry_request:7.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:retry_request:retry-request:7.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:retry_request:retry_request:7.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:retry:retry-request:7.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:retry:retry_request:7.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/retry-request@7.0.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/retry-request/-/retry-request-7.0.2.tgz", "integrity": "sha512-dUOvLMJ0/JJYEn8NrpOaGNE7X3vpI5XlZS/u0ANjqtcZVKnIxP7IgCFwrKTxENw29emmwug53awKtaMm4i9g5w==", "dependencies": {"@types/request": "^2.48.8", "extend": "^3.0.2", "teeny-request": "^9.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 0d600ce535ab6bd3
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: reusify 1.1.0
message: Package discovered: reusify 1.1.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "456353a253e18966", "name": "reusify", "version": "1.1.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:reusify:reusify:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/reusify@1.1.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/reusify/-/reusify-1.1.0.tgz", "integrity": "sha512-g6QUff04oZpHs0eG5p83rFLhHeV00ug/Yf9nZM6fLeUrPguBTkTQOdpAWWspMh55TZfVQDPaN3NQJfbVRAxdIw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 3a557f6b562fa305
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: run-parallel 1.2.0
message: Package discovered: run-parallel 1.2.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "ca5a4d8be889885f", "name": "run-parallel", "version": "1.2.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:run-parallel:run-parallel:1.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:run-parallel:run_parallel:1.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:run_parallel:run-parallel:1.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:run_parallel:run_parallel:1.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:run:run-parallel:1.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:run:run_parallel:1.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/run-parallel@1.2.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/run-parallel/-/run-parallel-1.2.0.tgz", "integrity": "sha512-5l4VyZR86LZ/lDxZTR6jqL8AFE2S0IFLMP26AbjsLVADxHdhB/c0GUsH+y39UfCi3dzz8OlQuPmnaJOMoDHQBA==", "dependencies": {"queue-microtask": "^1.2.2"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 0d59c1e836c63d4a
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: safe-buffer 5.1.2
message: Package discovered: safe-buffer 5.1.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "36d9a8484ed180a6", "name": "safe-buffer", "version": "5.1.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:safe-buffer:safe_buffer:5.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:safe_buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:safe_buffer:safe_buffer:5.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:safe:safe-buffer:5.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:safe:safe_buffer:5.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/safe-buffer@5.1.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz", "integrity": "sha512-Gd2UZBJDkXlY7GbJxfsE8/nvKkUEU1G38c1siN6QP6a9PT9MmHB8GnpscSmMJSoF8LOIrt8ud/wPtojys4G6+g==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 982541a2a19fdc52
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: safe-buffer 5.2.1
message: Package discovered: safe-buffer 5.2.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "28135efb01cb74b9", "name": "safe-buffer", "version": "5.2.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.2.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:safe-buffer:safe_buffer:5.2.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:safe_buffer:safe-buffer:5.2.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:safe_buffer:safe_buffer:5.2.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:safe:safe-buffer:5.2.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:safe:safe_buffer:5.2.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/safe-buffer@5.2.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz", "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 186ed2340219a99c
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: safer-buffer 2.1.2
message: Package discovered: safer-buffer 2.1.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "bc8acb243e9d9464", "name": "safer-buffer", "version": "2.1.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:safer-buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:safer-buffer:safer_buffer:2.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:safer_buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:safer_buffer:safer_buffer:2.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:safer:safer-buffer:2.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:safer:safer_buffer:2.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/safer-buffer@2.1.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz", "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 2ab87631c01bfc3f
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: scheduler 0.17.0
message: Package discovered: scheduler 0.17.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "e689757d7bf8470d", "name": "scheduler", "version": "0.17.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:scheduler:scheduler:0.17.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/scheduler@0.17.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/scheduler/-/scheduler-0.17.0.tgz", "integrity": "sha512-7rro8Io3tnCPuY4la/NuI5F2yfESpnfZyT6TtkXnSWVkcu0BCDJ+8gk5ozUaFaxpIyNuWAPXrH0yFcSi28fnDA==", "dependencies": {"loose-envify": "^1.1.0", "object-assign": "^4.1.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: bbbd7dd6a8a5a506
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: scheduler 0.23.2
message: Package discovered: scheduler 0.23.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "d0ebbd8a4bc7ada1", "name": "scheduler", "version": "0.23.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:scheduler:scheduler:0.23.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/scheduler@0.23.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/scheduler/-/scheduler-0.23.2.tgz", "integrity": "sha512-UOShsPwz7NrMUqhR6t0hWjFduvOzbtv7toDH1/hIrfRNIDBnnBWd0CwJTGvTpngVlmwGCdP9/Zl/tVrDqcuYzQ==", "dependencies": {"loose-envify": "^1.1.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 613adae5df8a79db
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: scmp 2.1.0
message: Package discovered: scmp 2.1.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "607830ce210254e3", "name": "scmp", "version": "2.1.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "BSD-3-Clause", "spdxExpression": "BSD-3-Clause", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:scmp:scmp:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/scmp@2.1.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/scmp/-/scmp-2.1.0.tgz", "integrity": "sha512-o/mRQGk9Rcer/jEEw/yw4mwo3EU/NvYvp577/Btqrym9Qy5/MdWGBqipbALgd2lrdWTJ5/gqDusxfnQBxOxT2Q==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 186e8c930a60e0f6
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: selderee 0.11.0
message: Package discovered: selderee 0.11.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "a6fb1c756dcd04fc", "name": "selderee", "version": "0.11.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:selderee:selderee:0.11.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/selderee@0.11.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/selderee/-/selderee-0.11.0.tgz", "integrity": "sha512-5TF+l7p4+OsnP8BCCvSyZiSPc4x4//p5uPwK8TCnVPJYRmU2aYKMpOXvw8zM5a5JvuuCGN1jmsMwuU2W02ukfA==", "dependencies": {"parseley": "^0.12.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 809205930987a974
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: semver 7.7.4
message: Package discovered: semver 7.7.4
remediation: Track and scan dependencies.
raw_finding:
{"id": "dc47801cc9b2ec78", "name": "semver", "version": "7.7.4", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:npmjs:semver:7.7.4:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/semver@7.7.4", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/semver/-/semver-7.7.4.tgz", "integrity": "sha512-vFKC2IEtQnVhpT78h1Yp8wzwrf8CM+MzKMHGJZfBtzhZNycRFnXsHk6E5TxIkkMsgNS7mdX3AGB7x2QM2di4lA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 67469cce48d87167
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: send 0.19.2
message: Package discovered: send 0.19.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "1d81dd407a94f88a", "name": "send", "version": "0.19.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:send_project:send:0.19.2:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/send@0.19.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/send/-/send-0.19.2.tgz", "integrity": "sha512-VMbMxbDeehAxpOtWJXlcUS5E8iXh6QmN+BkRX1GARS3wRaXEEgzCcB10gTQazO42tpNIya8xIyNx8fll1OFPrg==", "dependencies": {"debug": "2.6.9", "depd": "2.0.0", "destroy": "1.2.0", "encodeurl": "~2.0.0", "escape-html": "~1.0.3", "etag": "~1.8.1", "fresh": "~0.5.2", "http-errors": "~2.0.1", "mime": "1.6.0", "ms": "2.1.3", "on-finished": "~2.4.1", "range-parser": "~1.2.1", "statuses": "~2.0.2"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 3a3b9a5d9af10f0c
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: serve-static 1.16.3
message: Package discovered: serve-static 1.16.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "0a7cfe5561f2b18b", "name": "serve-static", "version": "1.16.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:serve-static:serve-static:1.16.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:serve-static:serve_static:1.16.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:serve_static:serve-static:1.16.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:serve_static:serve_static:1.16.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:serve:serve-static:1.16.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:serve:serve_static:1.16.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/serve-static@1.16.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/serve-static/-/serve-static-1.16.3.tgz", "integrity": "sha512-x0RTqQel6g5SY7Lg6ZreMmsOzncHFU7nhnRWkKgWuMTu5NN0DR5oruckMqRvacAN9d5w6ARnRBXl9xhDCgfMeA==", "dependencies": {"encodeurl": "~2.0.0", "escape-html": "~1.0.3", "parseurl": "~1.3.3", "send": "~0.19.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: aaaf7e5ff977361c
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: set-blocking 2.0.0
message: Package discovered: set-blocking 2.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "afe02a75a981b13d", "name": "set-blocking", "version": "2.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:set-blocking:set-blocking:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:set-blocking:set_blocking:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:set_blocking:set-blocking:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:set_blocking:set_blocking:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:set:set-blocking:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:set:set_blocking:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/set-blocking@2.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz", "integrity": "sha512-KiKBS8AnWGEyLzofFfmvKwpdPzqiy16LvQfK3yv/fVH7Bj13/wl3JSR1J+rfgRE9q7xUJK4qvgS8raSOeLUehw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 506518f9c8ac4766
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: setprototypeof 1.2.0
message: Package discovered: setprototypeof 1.2.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "fc983ad918ad063a", "name": "setprototypeof", "version": "1.2.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:setprototypeof:setprototypeof:1.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/setprototypeof@1.2.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz", "integrity": "sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: fdeea92c74bf39fa
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: sharp 0.34.5
message: Package discovered: sharp 0.34.5
remediation: Track and scan dependencies.
raw_finding:
{"id": "f96d5af8de184f83", "name": "sharp", "version": "0.34.5", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "Apache-2.0", "spdxExpression": "Apache-2.0", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:sharp_project:sharp:0.34.5:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/sharp@0.34.5", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/sharp/-/sharp-0.34.5.tgz", "integrity": "sha512-Ou9I5Ft9WNcCbXrU9cMgPBcCK8LiwLqcbywW3t4oDV37n1pzpuNLsYiAV8eODnjbtQlSDwZ2cUEeQz4E54Hltg==", "dependencies": {"@img/colour": "^1.0.0", "detect-libc": "^2.1.2", "semver": "^7.7.3"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: a0d820679cbb3cb7
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: shebang-command 2.0.0
message: Package discovered: shebang-command 2.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "14d8b5cbe6162ddd", "name": "shebang-command", "version": "2.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:shebang-command:shebang-command:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:shebang-command:shebang_command:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:shebang_command:shebang-command:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:shebang_command:shebang_command:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:shebang:shebang-command:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:shebang:shebang_command:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/shebang-command@2.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz", "integrity": "sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==", "dependencies": {"shebang-regex": "^3.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: f5b7b8efb70e19a9
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: shebang-regex 3.0.0
message: Package discovered: shebang-regex 3.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "b86e26fe1fc6c7c9", "name": "shebang-regex", "version": "3.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:shebang-regex:shebang-regex:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:shebang-regex:shebang_regex:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:shebang_regex:shebang-regex:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:shebang_regex:shebang_regex:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:shebang:shebang-regex:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:shebang:shebang_regex:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/shebang-regex@3.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz", "integrity": "sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 6b555e361c3642d5
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: side-channel 1.1.0
message: Package discovered: side-channel 1.1.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "a236188908f1e843", "name": "side-channel", "version": "1.1.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:side-channel:side-channel:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:side-channel:side_channel:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:side_channel:side-channel:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:side_channel:side_channel:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:side:side-channel:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:side:side_channel:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/side-channel@1.1.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.0.tgz", "integrity": "sha512-ZX99e6tRweoUXqR+VBrslhda51Nh5MTQwou5tnUDgbtyM0dBgmhEDtWGP/xbKn6hqfPRHujUNwz5fy/wbbhnpw==", "dependencies": {"es-errors": "^1.3.0", "object-inspect": "^1.13.3", "side-channel-list": "^1.0.0", "side-channel-map": "^1.0.1", "side-channel-weakmap": "^1.0.2"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 890b23d99b8d3706
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: side-channel-list 1.0.1
message: Package discovered: side-channel-list 1.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "2e4a230ff21329f1", "name": "side-channel-list", "version": "1.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:side-channel-list:side-channel-list:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:side-channel-list:side_channel_list:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:side_channel_list:side-channel-list:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:side_channel_list:side_channel_list:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:side-channel:side-channel-list:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:side-channel:side_channel_list:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:side_channel:side-channel-list:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:side_channel:side_channel_list:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:side:side-channel-list:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:side:side_channel_list:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/side-channel-list@1.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.1.tgz", "integrity": "sha512-mjn/0bi/oUURjc5Xl7IaWi/OJJJumuoJFQJfDDyO46+hBWsfaVM65TBHq2eoZBhzl9EchxOijpkbRC8SVBQU0w==", "dependencies": {"es-errors": "^1.3.0", "object-inspect": "^1.13.4"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 6043652240bb3202
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: side-channel-map 1.0.1
message: Package discovered: side-channel-map 1.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "36c9d18daa63eabd", "name": "side-channel-map", "version": "1.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:side-channel-map:side-channel-map:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:side-channel-map:side_channel_map:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:side_channel_map:side-channel-map:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:side_channel_map:side_channel_map:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:side-channel:side-channel-map:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:side-channel:side_channel_map:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:side_channel:side-channel-map:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:side_channel:side_channel_map:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:side:side-channel-map:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:side:side_channel_map:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/side-channel-map@1.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz", "integrity": "sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA==", "dependencies": {"call-bound": "^1.0.2", "es-errors": "^1.3.0", "get-intrinsic": "^1.2.5", "object-inspect": "^1.13.3"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 6c276e4fe79d17b1
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: side-channel-weakmap 1.0.2
message: Package discovered: side-channel-weakmap 1.0.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "3a35b0f8b53bc97a", "name": "side-channel-weakmap", "version": "1.0.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:side-channel-weakmap:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:side-channel-weakmap:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:side_channel_weakmap:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:side_channel_weakmap:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:side-channel:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:side-channel:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:side_channel:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:side_channel:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:side:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:side:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/side-channel-weakmap@1.0.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz", "integrity": "sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A==", "dependencies": {"call-bound": "^1.0.2", "es-errors": "^1.3.0", "get-intrinsic": "^1.2.5", "object-inspect": "^1.13.3", "side-channel-map": "^1.0.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 8acef3cde3b7b132
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: signal-exit 4.1.0
message: Package discovered: signal-exit 4.1.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "a63ea3d2efb32143", "name": "signal-exit", "version": "4.1.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:signal-exit:signal-exit:4.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:signal-exit:signal_exit:4.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:signal_exit:signal-exit:4.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:signal_exit:signal_exit:4.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:signal:signal-exit:4.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:signal:signal_exit:4.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/signal-exit@4.1.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-4.1.0.tgz", "integrity": "sha512-bzyZ1e88w9O1iNJbKnOlvYTrWPDl46O1bG0D3XInv+9tkPrxrN8jUUTiFlDkkmKWgn1M6CfIA13SuGqOa9Korw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 9476a789ac7d80fb
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: simple-swizzle 0.2.4
message: Package discovered: simple-swizzle 0.2.4
remediation: Track and scan dependencies.
raw_finding:
{"id": "cef7b2b2b70b3db8", "name": "simple-swizzle", "version": "0.2.4", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:simple-swizzle:simple-swizzle:0.2.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:simple-swizzle:simple_swizzle:0.2.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:simple_swizzle:simple-swizzle:0.2.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:simple_swizzle:simple_swizzle:0.2.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:simple:simple-swizzle:0.2.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:simple:simple_swizzle:0.2.4:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/simple-swizzle@0.2.4", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/simple-swizzle/-/simple-swizzle-0.2.4.tgz", "integrity": "sha512-nAu1WFPQSMNr2Zn9PGSZK9AGn4t/y97lEm+MXTtUDwfP0ksAIX4nO+6ruD9Jwut4C49SB1Ws+fbXsm/yScWOHw==", "dependencies": {"is-arrayish": "^0.3.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: ff9098f7bbabdf5b
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: socket.io 4.8.3
message: Package discovered: socket.io 4.8.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "5cc521e50bb4314d", "name": "socket.io", "version": "4.8.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:socket:socket.io:4.8.3:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/socket.io@4.8.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/socket.io/-/socket.io-4.8.3.tgz", "integrity": "sha512-2Dd78bqzzjE6KPkD5fHZmDAKRNe3J15q+YHDrIsy9WEkqttc7GY+kT9OBLSMaPbQaEd0x1BjcmtMtXkfpc+T5A==", "dependencies": {"accepts": "~1.3.4", "base64id": "~2.0.0", "cors": "~2.8.5", "debug": "~4.4.1", "engine.io": "~6.6.0", "socket.io-adapter": "~2.5.2", "socket.io-parser": "~4.2.4"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: a08d32cd24a38070
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: socket.io-adapter 2.5.6
message: Package discovered: socket.io-adapter 2.5.6
remediation: Track and scan dependencies.
raw_finding:
{"id": "423a38d81e2dc8e3", "name": "socket.io-adapter", "version": "2.5.6", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:socket.io-adapter:socket.io-adapter:2.5.6:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:socket.io-adapter:socket.io_adapter:2.5.6:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:socket.io_adapter:socket.io-adapter:2.5.6:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:socket.io_adapter:socket.io_adapter:2.5.6:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:socket.io:socket.io-adapter:2.5.6:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:socket.io:socket.io_adapter:2.5.6:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/socket.io-adapter@2.5.6", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/socket.io-adapter/-/socket.io-adapter-2.5.6.tgz", "integrity": "sha512-DkkO/dz7MGln0dHn5bmN3pPy+JmywNICWrJqVWiVOyvXjWQFIv9c2h24JrQLLFJ2aQVQf/Cvl1vblnd4r2apLQ==", "dependencies": {"debug": "~4.4.1", "ws": "~8.18.3"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 126bbc6e6f7db2d9
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: socket.io-client 4.8.3
message: Package discovered: socket.io-client 4.8.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "ecd3152d103ea0f9", "name": "socket.io-client", "version": "4.8.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:socket.io-client:socket.io-client:4.8.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:socket.io-client:socket.io_client:4.8.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:socket.io_client:socket.io-client:4.8.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:socket.io_client:socket.io_client:4.8.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:socket.io:socket.io-client:4.8.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:socket.io:socket.io_client:4.8.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/socket.io-client@4.8.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/socket.io-client/-/socket.io-client-4.8.3.tgz", "integrity": "sha512-uP0bpjWrjQmUt5DTHq9RuoCBdFJF10cdX9X+a368j/Ft0wmaVgxlrjvK3kjvgCODOMMOz9lcaRzxmso0bTWZ/g==", "dependencies": {"@socket.io/component-emitter": "~3.1.0", "debug": "~4.4.1", "engine.io-client": "~6.6.1", "socket.io-parser": "~4.2.4"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 4e07aea60237064a
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: socket.io-parser 4.2.6
message: Package discovered: socket.io-parser 4.2.6
remediation: Track and scan dependencies.
raw_finding:
{"id": "f9190921d6308e46", "name": "socket.io-parser", "version": "4.2.6", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:socket:socket.io-parser:4.2.6:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/socket.io-parser@4.2.6", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/socket.io-parser/-/socket.io-parser-4.2.6.tgz", "integrity": "sha512-asJqbVBDsBCJx0pTqw3WfesSY0iRX+2xzWEWzrpcH7L6fLzrhyF8WPI8UaeM4YCuDfpwA/cgsdugMsmtz8EJeg==", "dependencies": {"@socket.io/component-emitter": "~3.1.0", "debug": "~4.4.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 1381d8de85a9f426
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: source-map-js 1.2.1
message: Package discovered: source-map-js 1.2.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "ef14348a3e7aef73", "name": "source-map-js", "version": "1.2.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "BSD-3-Clause", "spdxExpression": "BSD-3-Clause", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:source-map-js:source-map-js:1.2.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:source-map-js:source_map_js:1.2.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:source_map_js:source-map-js:1.2.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:source_map_js:source_map_js:1.2.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:source-map:source-map-js:1.2.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:source-map:source_map_js:1.2.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:source_map:source-map-js:1.2.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:source_map:source_map_js:1.2.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:source:source-map-js:1.2.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:source:source_map_js:1.2.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/source-map-js@1.2.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.1.tgz", "integrity": "sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 8a8949f600357d51
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: standard-as-callback 2.1.0
message: Package discovered: standard-as-callback 2.1.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "ae42b44f62499323", "name": "standard-as-callback", "version": "2.1.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:standard-as-callback:standard-as-callback:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:standard-as-callback:standard_as_callback:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:standard_as_callback:standard-as-callback:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:standard_as_callback:standard_as_callback:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:standard-as:standard-as-callback:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:standard-as:standard_as_callback:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:standard_as:standard-as-callback:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:standard_as:standard_as_callback:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:standard:standard-as-callback:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:standard:standard_as_callback:2.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/standard-as-callback@2.1.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/standard-as-callback/-/standard-as-callback-2.1.0.tgz", "integrity": "sha512-qoRRSyROncaz1z0mvYqIE4lCd9p2R90i6GxW3uZv5ucSu8tU7B5HXUP1gG8pVZsYNVaXjk8ClXHPttLyxAL48A==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 4830d30cd7a05603
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: statuses 2.0.2
message: Package discovered: statuses 2.0.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "7442cb30a409bd68", "name": "statuses", "version": "2.0.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:statuses:statuses:2.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/statuses@2.0.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.2.tgz", "integrity": "sha512-DvEy55V3DB7uknRo+4iOGT5fP1slR8wQohVdknigZPMpMstaKJQWhwiYBACJE3Ul2pTnATihhBYnRhZQHGBiRw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: fce9dfc2e720150a
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /node_modules/@esbuild/darwin-arm64/bin/esbuild
title: stdlib go1.20.12
message: Package discovered: stdlib go1.20.12
remediation: Track and scan dependencies.
raw_finding:
{"id": "755a3e00c5f656c9", "name": "stdlib", "version": "go1.20.12", "type": "go-module", "foundBy": "go-module-binary-cataloger", "locations": [{"path": "/node_modules/@esbuild/darwin-arm64/bin/esbuild", "accessPath": "/node_modules/@esbuild/darwin-arm64/bin/esbuild", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "BSD-3-Clause", "spdxExpression": "BSD-3-Clause", "type": "declared", "urls": [], "locations": []}], "language": "go", "cpes": [{"cpe": "cpe:2.3:a:golang:go:1.20.12:-:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:golang/stdlib@1.20.12", "metadataType": "go-module-buildinfo-entry", "metadata": {"goCompiledVersion": "go1.20.12", "architecture": ""}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 684726e125b93b59
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /node_modules/esbuild/bin/esbuild
title: stdlib go1.20.12
message: Package discovered: stdlib go1.20.12
remediation: Track and scan dependencies.
raw_finding:
{"id": "e9a4a6eb4de31a0f", "name": "stdlib", "version": "go1.20.12", "type": "go-module", "foundBy": "go-module-binary-cataloger", "locations": [{"path": "/node_modules/esbuild/bin/esbuild", "accessPath": "/node_modules/esbuild/bin/esbuild", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "BSD-3-Clause", "spdxExpression": "BSD-3-Clause", "type": "declared", "urls": [], "locations": []}], "language": "go", "cpes": [{"cpe": "cpe:2.3:a:golang:go:1.20.12:-:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:golang/stdlib@1.20.12", "metadataType": "go-module-buildinfo-entry", "metadata": {"goCompiledVersion": "go1.20.12", "architecture": ""}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 12c7b9072b4ac0c3
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: stream-events 1.0.5
message: Package discovered: stream-events 1.0.5
remediation: Track and scan dependencies.
raw_finding:
{"id": "d6075f31d1f26f1b", "name": "stream-events", "version": "1.0.5", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:stream-events:stream-events:1.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:stream-events:stream_events:1.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:stream_events:stream-events:1.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:stream_events:stream_events:1.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:stream:stream-events:1.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:stream:stream_events:1.0.5:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/stream-events@1.0.5", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/stream-events/-/stream-events-1.0.5.tgz", "integrity": "sha512-E1GUzBSgvct8Jsb3v2X15pjzN1tYebtbLaMg+eBOUOAxgbLoSbT2NS91ckc5lJD1KfLjId+jXJRgo0qnV5Nerg==", "dependencies": {"stubs": "^3.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 42a667b9f8ef2c86
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: stream-shift 1.0.3
message: Package discovered: stream-shift 1.0.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "1acff9076c855611", "name": "stream-shift", "version": "1.0.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:stream-shift:stream-shift:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:stream-shift:stream_shift:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:stream_shift:stream-shift:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:stream_shift:stream_shift:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:stream:stream-shift:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:stream:stream_shift:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/stream-shift@1.0.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/stream-shift/-/stream-shift-1.0.3.tgz", "integrity": "sha512-76ORR0DO1o1hlKwTbi/DM3EXWGf3ZJYO8cXX5RJwnul2DEg2oyoZyjLNoQM8WsvZiFKCRfC1O0J7iCvie3RZmQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 89e93178704235e4
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: streamsearch 1.1.0
message: Package discovered: streamsearch 1.1.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "c7163598759ab751", "name": "streamsearch", "version": "1.1.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:streamsearch:streamsearch:1.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/streamsearch@1.1.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/streamsearch/-/streamsearch-1.1.0.tgz", "integrity": "sha512-Mcc5wHehp9aXz1ax6bZUyY5afg9u2rv5cqQI3mRrYkGC8rW2hM02jWuwjtL++LS5qinSyhj2QfLyNsuc+VsExg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: d28f82c740f787aa
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: string-width 4.2.3
message: Package discovered: string-width 4.2.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "6c7ed5b8c0bd71e8", "name": "string-width", "version": "4.2.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:string-width:string-width:4.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:string-width:string_width:4.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:string_width:string-width:4.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:string_width:string_width:4.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:string:string-width:4.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:string:string_width:4.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/string-width@4.2.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz", "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==", "dependencies": {"emoji-regex": "^8.0.0", "is-fullwidth-code-point": "^3.0.0", "strip-ansi": "^6.0.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: a6a2288a986748af
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: string-width 5.1.2
message: Package discovered: string-width 5.1.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "303a44f8f6ca903e", "name": "string-width", "version": "5.1.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:string-width:string-width:5.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:string-width:string_width:5.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:string_width:string-width:5.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:string_width:string_width:5.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:string:string-width:5.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:string:string_width:5.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/string-width@5.1.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/string-width/-/string-width-5.1.2.tgz", "integrity": "sha512-HnLOCR3vjcY8beoNLtcjZ5/nxn2afmME6lhrDrebokqMap+XbeW8n9TXpPDOqdGK5qcI3oT0GKTW6wC7EMiVqA==", "dependencies": {"eastasianwidth": "^0.2.0", "emoji-regex": "^9.2.2", "strip-ansi": "^7.0.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: d318d3d155c6a9dd
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: string_decoder 1.1.1
message: Package discovered: string_decoder 1.1.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "829e7f04cb28f180", "name": "string_decoder", "version": "1.1.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:string-decoder:string-decoder:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:string-decoder:string_decoder:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:string_decoder:string-decoder:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:string_decoder:string_decoder:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:string:string-decoder:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:string:string_decoder:1.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/string_decoder@1.1.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz", "integrity": "sha512-n/ShnvDi6FHbbVfviro+WojiFzv+s8MPMHBczVePfUpDJLwoLT0ht1l4YwBCbi8pJAveEEdnkHyPyTP/mzRfwg==", "dependencies": {"safe-buffer": "~5.1.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 42e775567d560303
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: string_decoder 1.3.0
message: Package discovered: string_decoder 1.3.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "31e1990d6adabf2b", "name": "string_decoder", "version": "1.3.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:string-decoder:string-decoder:1.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:string-decoder:string_decoder:1.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:string_decoder:string-decoder:1.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:string_decoder:string_decoder:1.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:string:string-decoder:1.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:string:string_decoder:1.3.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/string_decoder@1.3.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz", "integrity": "sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA==", "dependencies": {"safe-buffer": "~5.2.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 611033baae4657b2
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: strip-ansi 6.0.1
message: Package discovered: strip-ansi 6.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "e47d9046945afbeb", "name": "strip-ansi", "version": "6.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:strip-ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:strip-ansi:strip_ansi:6.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:strip_ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:strip_ansi:strip_ansi:6.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:strip:strip-ansi:6.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:strip:strip_ansi:6.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/strip-ansi@6.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz", "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==", "dependencies": {"ansi-regex": "^5.0.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: ca95150df82b38c3
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: strip-ansi 7.2.0
message: Package discovered: strip-ansi 7.2.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "efdaea275ca01865", "name": "strip-ansi", "version": "7.2.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:strip-ansi:strip-ansi:7.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:strip-ansi:strip_ansi:7.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:strip_ansi:strip-ansi:7.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:strip_ansi:strip_ansi:7.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:strip:strip-ansi:7.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:strip:strip_ansi:7.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/strip-ansi@7.2.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-7.2.0.tgz", "integrity": "sha512-yDPMNjp4WyfYBkHnjIRLfca1i6KMyGCtsVgoKe/z1+6vukgaENdgGBZt+ZmKPc4gavvEZ5OgHfHdrazhgNyG7w==", "dependencies": {"ansi-regex": "^6.2.2"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 680b8434591c36cc
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: strnum 2.2.3
message: Package discovered: strnum 2.2.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "9368f059f77a6fca", "name": "strnum", "version": "2.2.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:strnum:strnum:2.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/strnum@2.2.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/strnum/-/strnum-2.2.3.tgz", "integrity": "sha512-oKx6RUCuHfT3oyVjtnrmn19H1SiCqgJSg+54XqURKp5aCMbrXrhLjRN9TjuwMjiYstZ0MzDrHqkGZ5dFTKd+zg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 71b1b284c1af24b8
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: stubs 3.0.0
message: Package discovered: stubs 3.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "10401a0421b092a3", "name": "stubs", "version": "3.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:stubs:stubs:3.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/stubs@3.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/stubs/-/stubs-3.0.0.tgz", "integrity": "sha512-PdHt7hHUJKxvTCgbKX9C1V/ftOcjJQgz8BZwNfV5c4B6dcGqlpelTbJ999jBGZ2jYiPAwcX5dP6oBwVlBlUbxw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: a4561300304da31c
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: styled-jsx 5.1.1
message: Package discovered: styled-jsx 5.1.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "b71f2c964dcb79d3", "name": "styled-jsx", "version": "5.1.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:styled-jsx:styled-jsx:5.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:styled-jsx:styled_jsx:5.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:styled_jsx:styled-jsx:5.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:styled_jsx:styled_jsx:5.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:styled:styled-jsx:5.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:styled:styled_jsx:5.1.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/styled-jsx@5.1.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/styled-jsx/-/styled-jsx-5.1.1.tgz", "integrity": "sha512-pW7uC1l4mBZ8ugbiZrcIsiIvVx1UmTfw7UkC3Um2tmfUq9Bhk8IiyEIPl6F8agHgjzku6j0xQEZbfA5uSgSaCw==", "dependencies": {"client-only": "0.0.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: d085117a189c2037
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: sucrase 3.35.1
message: Package discovered: sucrase 3.35.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "302884898f3a35c4", "name": "sucrase", "version": "3.35.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:sucrase:sucrase:3.35.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/sucrase@3.35.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/sucrase/-/sucrase-3.35.1.tgz", "integrity": "sha512-DhuTmvZWux4H1UOnWMB3sk0sbaCVOoQZjv8u1rDoTV0HTdGem9hkAZtl4JZy8P2z4Bg0nT+YMeOFyVr4zcG5Tw==", "dependencies": {"@jridgewell/gen-mapping": "^0.3.2", "commander": "^4.0.0", "lines-and-columns": "^1.1.6", "mz": "^2.7.0", "pirates": "^4.0.1", "tinyglobby": "^0.2.11", "ts-interface-checker": "^0.1.9"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 57ae1f3ed312e075
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: supports-preserve-symlinks-flag 1.0.0
message: Package discovered: supports-preserve-symlinks-flag 1.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "cb6982ee071dbb85", "name": "supports-preserve-symlinks-flag", "version": "1.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:supports-preserve-symlinks-flag:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:supports-preserve-symlinks-flag:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:supports_preserve_symlinks_flag:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:supports_preserve_symlinks_flag:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:supports-preserve-symlinks:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:supports-preserve-symlinks:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:supports_preserve_symlinks:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:supports_preserve_symlinks:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:supports-preserve:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:supports-preserve:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:supports_preserve:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:supports_preserve:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:supports:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:supports:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/supports-preserve-symlinks-flag@1.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/supports-preserve-symlinks-flag/-/supports-preserve-symlinks-flag-1.0.0.tgz", "integrity": "sha512-ot0WnXS9fgdkgIcePe6RHNk1WA8+muPa6cSjeR3V8K27q9BB1rTE3R1p7Hv0z1ZyAc8s6Vvv8DIyWf681MAt0w==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 7b659eb857ace717
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: svg-arc-to-cubic-bezier 3.2.0
message: Package discovered: svg-arc-to-cubic-bezier 3.2.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "03465a3bffd322b9", "name": "svg-arc-to-cubic-bezier", "version": "3.2.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:svg-arc-to-cubic-bezier:svg-arc-to-cubic-bezier:3.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:svg-arc-to-cubic-bezier:svg_arc_to_cubic_bezier:3.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:svg_arc_to_cubic_bezier:svg-arc-to-cubic-bezier:3.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:svg_arc_to_cubic_bezier:svg_arc_to_cubic_bezier:3.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:svg-arc-to-cubic:svg-arc-to-cubic-bezier:3.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:svg-arc-to-cubic:svg_arc_to_cubic_bezier:3.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:svg_arc_to_cubic:svg-arc-to-cubic-bezier:3.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:svg_arc_to_cubic:svg_arc_to_cubic_bezier:3.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:svg-arc-to:svg-arc-to-cubic-bezier:3.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:svg-arc-to:svg_arc_to_cubic_bezier:3.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:svg_arc_to:svg-arc-to-cubic-bezier:3.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:svg_arc_to:svg_arc_to_cubic_bezier:3.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:svg-arc:svg-arc-to-cubic-bezier:3.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:svg-arc:svg_arc_to_cubic_bezier:3.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:svg_arc:svg-arc-to-cubic-bezier:3.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:svg_arc:svg_arc_to_cubic_bezier:3.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:svg:svg-arc-to-cubic-bezier:3.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:svg:svg_arc_to_cubic_bezier:3.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/svg-arc-to-cubic-bezier@3.2.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/svg-arc-to-cubic-bezier/-/svg-arc-to-cubic-bezier-3.2.0.tgz", "integrity": "sha512-djbJ/vZKZO+gPoSDThGNpKDO+o+bAeA4XQKovvkNCqnIS2t+S4qnLAGQhyyrulhCFRl1WWzAp0wUDV8PpTVU3g==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 0702fc96b298768b
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: tailwindcss 3.4.19
message: Package discovered: tailwindcss 3.4.19
remediation: Track and scan dependencies.
raw_finding:
{"id": "4180007fa4dbcaa3", "name": "tailwindcss", "version": "3.4.19", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:tailwindcss:tailwindcss:3.4.19:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/tailwindcss@3.4.19", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/tailwindcss/-/tailwindcss-3.4.19.tgz", "integrity": "sha512-3ofp+LL8E+pK/JuPLPggVAIaEuhvIz4qNcf3nA1Xn2o/7fb7s/TYpHhwGDv1ZU3PkBluUVaF8PyCHcm48cKLWQ==", "dependencies": {"@alloc/quick-lru": "^5.2.0", "arg": "^5.0.2", "chokidar": "^3.6.0", "didyoumean": "^1.2.2", "dlv": "^1.1.3", "fast-glob": "^3.3.2", "glob-parent": "^6.0.2", "is-glob": "^4.0.3", "jiti": "^1.21.7", "lilconfig": "^3.1.3", "micromatch": "^4.0.8", "normalize-path": "^3.0.0", "object-hash": "^3.0.0", "picocolors": "^1.1.1", "postcss": "^8.4.47", "postcss-import": "^15.1.0", "postcss-js": "^4.0.1", "postcss-load-config": "^4.0.2 || ^5.0 || ^6.0", "postcss-nested": "^6.2.0", "postcss-selector-parser": "^6.1.2", "resolve": "^1.22.8", "sucrase": "^3.35.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 1167979aa3e3af06
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: teeny-request 9.0.0
message: Package discovered: teeny-request 9.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "5100f72eed8a2178", "name": "teeny-request", "version": "9.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "Apache-2.0", "spdxExpression": "Apache-2.0", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:teeny-request:teeny-request:9.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:teeny-request:teeny_request:9.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:teeny_request:teeny-request:9.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:teeny_request:teeny_request:9.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:teeny:teeny-request:9.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:teeny:teeny_request:9.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/teeny-request@9.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/teeny-request/-/teeny-request-9.0.0.tgz", "integrity": "sha512-resvxdc6Mgb7YEThw6G6bExlXKkv6+YbuzGg9xuXxSgxJF7Ozs+o8Y9+2R3sArdWdW8nOokoQb1yrpFB0pQK2g==", "dependencies": {"http-proxy-agent": "^5.0.0", "https-proxy-agent": "^5.0.0", "node-fetch": "^2.6.9", "stream-events": "^1.0.5", "uuid": "^9.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: b4e9549620686503
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: thenify 3.3.1
message: Package discovered: thenify 3.3.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "9fd87e687c3b74ca", "name": "thenify", "version": "3.3.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:thenify:thenify:3.3.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/thenify@3.3.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/thenify/-/thenify-3.3.1.tgz", "integrity": "sha512-RVZSIV5IG10Hk3enotrhvz0T9em6cyHBLkH/YAZuKqd8hRkKhSfCGIcP2KUY0EPxndzANBmNllzWPwak+bheSw==", "dependencies": {"any-promise": "^1.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: a439c679c65c98cd
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: thenify-all 1.6.0
message: Package discovered: thenify-all 1.6.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "845b1699e3aa7533", "name": "thenify-all", "version": "1.6.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:thenify-all:thenify-all:1.6.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:thenify-all:thenify_all:1.6.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:thenify_all:thenify-all:1.6.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:thenify_all:thenify_all:1.6.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:thenify:thenify-all:1.6.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:thenify:thenify_all:1.6.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/thenify-all@1.6.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/thenify-all/-/thenify-all-1.6.0.tgz", "integrity": "sha512-RNxQH/qI8/t3thXJDwcstUO4zeqo64+Uy/+sNVRBx4Xn2OX+OZ9oP+iJnNFqplFra2ZUVeKCSa2oVWi3T4uVmA==", "dependencies": {"thenify": ">= 3.1.0 < 4"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: e5c0090ac7c6baa4
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: thirty-two 1.0.2
message: Package discovered: thirty-two 1.0.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "f3444a348db654fb", "name": "thirty-two", "version": "1.0.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:thirty-two:thirty-two:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:thirty-two:thirty_two:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:thirty_two:thirty-two:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:thirty_two:thirty_two:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:thirty:thirty-two:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:thirty:thirty_two:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/thirty-two@1.0.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/thirty-two/-/thirty-two-1.0.2.tgz", "integrity": "sha512-OEI0IWCe+Dw46019YLl6V10Us5bi574EvlJEOcAkB29IzQ/mYD1A6RyNHLjZPiHCmuodxvgF6U+vZO1L15lxVA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: ed31df7df590fd3e
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: tiny-inflate 1.0.3
message: Package discovered: tiny-inflate 1.0.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "8a9f89a30def4776", "name": "tiny-inflate", "version": "1.0.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:tiny-inflate:tiny-inflate:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:tiny-inflate:tiny_inflate:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:tiny_inflate:tiny-inflate:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:tiny_inflate:tiny_inflate:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:tiny:tiny-inflate:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:tiny:tiny_inflate:1.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/tiny-inflate@1.0.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/tiny-inflate/-/tiny-inflate-1.0.3.tgz", "integrity": "sha512-pkY1fj1cKHb2seWDy0B16HeWyczlJA9/WW3u3c4z/NiWDsO3DOU5D7nhTLE9CF0yXv/QZFY7sEJmj24dK+Rrqw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 99c39b0d16665208
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: tiny-invariant 1.3.3
message: Package discovered: tiny-invariant 1.3.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "509a74e9f8ec9c11", "name": "tiny-invariant", "version": "1.3.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:tiny-invariant:tiny-invariant:1.3.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:tiny-invariant:tiny_invariant:1.3.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:tiny_invariant:tiny-invariant:1.3.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:tiny_invariant:tiny_invariant:1.3.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:tiny:tiny-invariant:1.3.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:tiny:tiny_invariant:1.3.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/tiny-invariant@1.3.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/tiny-invariant/-/tiny-invariant-1.3.3.tgz", "integrity": "sha512-+FbBPE1o9QAYvviau/qC5SE3caw21q3xkvWKBtja5vgqOWIHHJ3ioaq1VPfn/Szqctz2bU/oYeKd9/z5BL+PVg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: e99ae3502724aa2b
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: tinyglobby 0.2.16
message: Package discovered: tinyglobby 0.2.16
remediation: Track and scan dependencies.
raw_finding:
{"id": "ea1b10e091012c4d", "name": "tinyglobby", "version": "0.2.16", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:tinyglobby:tinyglobby:0.2.16:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/tinyglobby@0.2.16", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.16.tgz", "integrity": "sha512-pn99VhoACYR8nFHhxqix+uvsbXineAasWm5ojXoN8xEwK5Kd3/TrhNn1wByuD52UxWRLy8pu+kRMniEi6Eq9Zg==", "dependencies": {"fdir": "^6.5.0", "picomatch": "^4.0.4"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 098e9c86e46e996b
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: to-regex-range 5.0.1
message: Package discovered: to-regex-range 5.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "32aacf96124c437a", "name": "to-regex-range", "version": "5.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:to-regex-range:to-regex-range:5.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:to-regex-range:to_regex_range:5.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:to_regex_range:to-regex-range:5.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:to_regex_range:to_regex_range:5.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:to-regex:to-regex-range:5.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:to-regex:to_regex_range:5.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:to_regex:to-regex-range:5.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:to_regex:to_regex_range:5.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:to:to-regex-range:5.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:to:to_regex_range:5.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/to-regex-range@5.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-5.0.1.tgz", "integrity": "sha512-65P7iz6X5yEr1cwcgvQxbbIw7Uk3gOy5dIdtZ4rDveLqhrdJP+Li/Hx6tyK0NEb+2GCyneCMJiGqrADCSNk8sQ==", "dependencies": {"is-number": "^7.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: eba377c5cfb24e56
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: toidentifier 1.0.1
message: Package discovered: toidentifier 1.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "ce376bb248c7ffa1", "name": "toidentifier", "version": "1.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:toidentifier:toidentifier:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/toidentifier@1.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz", "integrity": "sha512-o5sSPKEkg/DIQNmH43V0/uerLrpzVedkUh8tGNvaeXpfpuwjKenlSox/2O/BTlZUtEe+JG7s5YhEz608PlAHRA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 332c86a1be157c00
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: tr46 0.0.3
message: Package discovered: tr46 0.0.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "44b5fbfc3cffc498", "name": "tr46", "version": "0.0.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:tr46:tr46:0.0.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/tr46@0.0.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz", "integrity": "sha512-N3WMsuqV66lT30CrXNbEjx4GEwlow3v6rr4mCcv6prnfwhS01rkgyFdjPNBYd9br7LpXV1+Emh01fHnq2Gdgrw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 975e90d4d26bc8ab
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: ts-interface-checker 0.1.13
message: Package discovered: ts-interface-checker 0.1.13
remediation: Track and scan dependencies.
raw_finding:
{"id": "4b85ef460bf1550e", "name": "ts-interface-checker", "version": "0.1.13", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "Apache-2.0", "spdxExpression": "Apache-2.0", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:ts-interface-checker:ts-interface-checker:0.1.13:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ts-interface-checker:ts_interface_checker:0.1.13:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ts_interface_checker:ts-interface-checker:0.1.13:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ts_interface_checker:ts_interface_checker:0.1.13:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ts-interface:ts-interface-checker:0.1.13:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ts-interface:ts_interface_checker:0.1.13:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ts_interface:ts-interface-checker:0.1.13:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ts_interface:ts_interface_checker:0.1.13:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ts:ts-interface-checker:0.1.13:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:ts:ts_interface_checker:0.1.13:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/ts-interface-checker@0.1.13", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/ts-interface-checker/-/ts-interface-checker-0.1.13.tgz", "integrity": "sha512-Y/arvbn+rrz3JCKl9C4kVNfTfSm2/mEp5FSz5EsZSANGPSlQrpRI5M4PKF+mJnE52jOO90PnPSc3Ur3bTQw0gA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: ef69db02aad9ddba
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: tslib 2.4.1
message: Package discovered: tslib 2.4.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "a41a6d4fcfaa1c57", "name": "tslib", "version": "2.4.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "0BSD", "spdxExpression": "0BSD", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:tslib:tslib:2.4.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/tslib@2.4.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/tslib/-/tslib-2.4.1.tgz", "integrity": "sha512-tGyy4dAjRIEwI7BzsB0lynWgOpfqjUdq91XXAlIWD2OwKBH7oCl/GZG/HT4BOHrTlPMOASlMQ7veyTqpmRcrNA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 15d8d07e284b7f66
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: tslib 2.8.1
message: Package discovered: tslib 2.8.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "732c6f5be784c8f2", "name": "tslib", "version": "2.8.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "0BSD", "spdxExpression": "0BSD", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:tslib:tslib:2.8.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/tslib@2.8.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/tslib/-/tslib-2.8.1.tgz", "integrity": "sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: d407f6f6881f51f1
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: twilio 5.13.1
message: Package discovered: twilio 5.13.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "b26b672319df2e47", "name": "twilio", "version": "5.13.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:twilio:twilio:5.13.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/twilio@5.13.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/twilio/-/twilio-5.13.1.tgz", "integrity": "sha512-sT+PkhptF4Mf7t8eXFFvPQx4w5VHnBIPXbltGPMFRe+R2GxfRdMuFbuNA/cEm0aQR6LFQOn33+fhClg+TjRVqQ==", "dependencies": {"axios": "^1.13.5", "dayjs": "^1.11.9", "https-proxy-agent": "^5.0.0", "jsonwebtoken": "^9.0.3", "qs": "^6.14.1", "scmp": "^2.1.0", "xmlbuilder": "^13.0.2"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 1b446cdccc9a93b0
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: type-is 1.6.18
message: Package discovered: type-is 1.6.18
remediation: Track and scan dependencies.
raw_finding:
{"id": "a8ca97010550105a", "name": "type-is", "version": "1.6.18", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:type-is:type-is:1.6.18:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:type-is:type_is:1.6.18:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:type_is:type-is:1.6.18:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:type_is:type_is:1.6.18:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:type:type-is:1.6.18:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:type:type_is:1.6.18:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/type-is@1.6.18", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/type-is/-/type-is-1.6.18.tgz", "integrity": "sha512-TkRKr9sUTxEH8MdfuCSP7VizJyzRNMjj2J2do2Jr3Kym598JVdEksuzPQCnlFPW4ky9Q+iA+ma9BGm06XQBy8g==", "dependencies": {"media-typer": "0.3.0", "mime-types": "~2.1.24"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: a01b70906be81bf9
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: typedarray 0.0.6
message: Package discovered: typedarray 0.0.6
remediation: Track and scan dependencies.
raw_finding:
{"id": "e635ba578a775ab5", "name": "typedarray", "version": "0.0.6", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:typedarray:typedarray:0.0.6:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/typedarray@0.0.6", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/typedarray/-/typedarray-0.0.6.tgz", "integrity": "sha512-/aCDEGatGvZ2BIk+HmLf4ifCJFwvKFNb9/JeZPMulfgFracn9QFcAf5GO8B/mweUjSoblS5In0cWhqpfs/5PQA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 730b4341f8da3a62
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: undici-types 6.21.0
message: Package discovered: undici-types 6.21.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "9968e425c772df9f", "name": "undici-types", "version": "6.21.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:undici-types:undici-types:6.21.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:undici-types:undici_types:6.21.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:undici_types:undici-types:6.21.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:undici_types:undici_types:6.21.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:undici:undici-types:6.21.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:undici:undici_types:6.21.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/undici-types@6.21.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.21.0.tgz", "integrity": "sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: a49eb5c706dbb178
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: unicode-properties 1.4.1
message: Package discovered: unicode-properties 1.4.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "541fbe3121e73dce", "name": "unicode-properties", "version": "1.4.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:unicode-properties:unicode-properties:1.4.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:unicode-properties:unicode_properties:1.4.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:unicode_properties:unicode-properties:1.4.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:unicode_properties:unicode_properties:1.4.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:unicode:unicode-properties:1.4.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:unicode:unicode_properties:1.4.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/unicode-properties@1.4.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/unicode-properties/-/unicode-properties-1.4.1.tgz", "integrity": "sha512-CLjCCLQ6UuMxWnbIylkisbRj31qxHPAurvena/0iwSVbQ2G1VY5/HjV0IRabOEbDHlzZlRdCrD4NhB0JtU40Pg==", "dependencies": {"base64-js": "^1.3.0", "unicode-trie": "^2.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: d33b9ca7e3f48cc1
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: unicode-trie 2.0.0
message: Package discovered: unicode-trie 2.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "aac566dbf0b492ea", "name": "unicode-trie", "version": "2.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:unicode-trie:unicode-trie:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:unicode-trie:unicode_trie:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:unicode_trie:unicode-trie:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:unicode_trie:unicode_trie:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:unicode:unicode-trie:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:unicode:unicode_trie:2.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/unicode-trie@2.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/unicode-trie/-/unicode-trie-2.0.0.tgz", "integrity": "sha512-x7bc76x0bm4prf1VLg79uhAzKw8DVboClSN5VxJuQ+LKDOVEW9CdH+VY7SP+vX7xCYQqzzgQpFqz15zeLvAtZQ==", "dependencies": {"pako": "^0.2.5", "tiny-inflate": "^1.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 4121fde58e5100ef
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: unpipe 1.0.0
message: Package discovered: unpipe 1.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "294cc6dab10e14ff", "name": "unpipe", "version": "1.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:unpipe:unpipe:1.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/unpipe@1.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz", "integrity": "sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 0c87db67edbd6edf
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: update-browserslist-db 1.2.3
message: Package discovered: update-browserslist-db 1.2.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "7776752fe1d43a3e", "name": "update-browserslist-db", "version": "1.2.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:update-browserslist-db:update-browserslist-db:1.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:update-browserslist-db:update_browserslist_db:1.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:update_browserslist_db:update-browserslist-db:1.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:update_browserslist_db:update_browserslist_db:1.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:update-browserslist:update-browserslist-db:1.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:update-browserslist:update_browserslist_db:1.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:update_browserslist:update-browserslist-db:1.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:update_browserslist:update_browserslist_db:1.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:update:update-browserslist-db:1.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:update:update_browserslist_db:1.2.3:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/update-browserslist-db@1.2.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/update-browserslist-db/-/update-browserslist-db-1.2.3.tgz", "integrity": "sha512-Js0m9cx+qOgDxo0eMiFGEueWztz+d4+M3rGlmKPT+T4IS/jP4ylw3Nwpu6cpTTP8R1MAC1kF4VbdLt3ARf209w==", "dependencies": {"escalade": "^3.2.0", "picocolors": "^1.1.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 1ae47d19bb25f29a
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: util-deprecate 1.0.2
message: Package discovered: util-deprecate 1.0.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "aac5900c84ec45ff", "name": "util-deprecate", "version": "1.0.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:util-deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:util-deprecate:util_deprecate:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:util_deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:util_deprecate:util_deprecate:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:util:util-deprecate:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:util:util_deprecate:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/util-deprecate@1.0.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz", "integrity": "sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: ea9355f8957e8bab
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: utils-merge 1.0.1
message: Package discovered: utils-merge 1.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "4f715b1e9b38109a", "name": "utils-merge", "version": "1.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:utils-merge:utils-merge:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:utils-merge:utils_merge:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:utils_merge:utils-merge:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:utils_merge:utils_merge:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:utils:utils-merge:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:utils:utils_merge:1.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/utils-merge@1.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.1.tgz", "integrity": "sha512-pMZTvIkT1d+TFGvDOqodOclx0QWkkgi6Tdoa8gC8ffGAAqz9pzPTZWAybbsHHoED/ztMtkv/VoYTYyShUn81hA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 236364fea165c402
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: uuid 10.0.0
message: Package discovered: uuid 10.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "21b622d3d64a2c86", "name": "uuid", "version": "10.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:uuid:uuid:10.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/uuid@10.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/uuid/-/uuid-10.0.0.tgz", "integrity": "sha512-8XkAphELsDnEGrDxUOHB3RGvXz6TeuYSGEZBOjtTtPm2lwhGBjLgOzLHB63IUWfBpNucQjND6d3AOudO+H3RWQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 2fb790bc55d11030
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: uuid 8.3.2
message: Package discovered: uuid 8.3.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "8cf0c19ede45d1bc", "name": "uuid", "version": "8.3.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:uuid:uuid:8.3.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/uuid@8.3.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/uuid/-/uuid-8.3.2.tgz", "integrity": "sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 3e2f0913d0055c91
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: uuid 9.0.1
message: Package discovered: uuid 9.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "0bd59342bab05265", "name": "uuid", "version": "9.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:uuid:uuid:9.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/uuid@9.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/uuid/-/uuid-9.0.1.tgz", "integrity": "sha512-b+1eJOlsR9K8HJpow9Ok3fiWOWSIcIzXodvv0rQjVoOVNpWMpxf1wZNpt4y9h10odCNrqnYp1OBzRktckBe3sA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 4e3576c544465abd
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: vary 1.1.2
message: Package discovered: vary 1.1.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "2fc27b955ce3ef5d", "name": "vary", "version": "1.1.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:vary:vary:1.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/vary@1.1.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz", "integrity": "sha512-BNGbWLfd0eUPabhkXUVm0j8uuvREyTh5ovRa/dyow/BqAbZJyC+5fU+IzQOzmAKzYqYRAISoRhdQr3eIZ/PXqg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 60e43c65d8e9a8e6
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: victory-vendor 36.9.2
message: Package discovered: victory-vendor 36.9.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "14c55cee8eb4e77f", "name": "victory-vendor", "version": "36.9.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT AND ISC", "spdxExpression": "MIT AND ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:victory-vendor:victory-vendor:36.9.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:victory-vendor:victory_vendor:36.9.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:victory_vendor:victory-vendor:36.9.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:victory_vendor:victory_vendor:36.9.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:victory:victory-vendor:36.9.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:victory:victory_vendor:36.9.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/victory-vendor@36.9.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/victory-vendor/-/victory-vendor-36.9.2.tgz", "integrity": "sha512-PnpQQMuxlwYdocC8fIJqVXvkeViHYzotI+NJrCuav0ZYFoq912ZHBk3mCeuj+5/VpodOjPe1z0Fk2ihgzlXqjQ==", "dependencies": {"@types/d3-array": "^3.0.3", "@types/d3-ease": "^3.0.0", "@types/d3-interpolate": "^3.0.1", "@types/d3-scale": "^4.0.2", "@types/d3-shape": "^3.1.0", "@types/d3-time": "^3.0.0", "@types/d3-timer": "^3.0.0", "d3-array": "^3.1.6", "d3-ease": "^3.0.1", "d3-interpolate": "^3.0.1", "d3-scale": "^4.0.2", "d3-shape": "^3.1.0", "d3-time": "^3.0.0", "d3-timer": "^3.0.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: a846a040ec49fd72
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: vite-compatible-readable-stream 3.6.1
message: Package discovered: vite-compatible-readable-stream 3.6.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "874d0721c00b1770", "name": "vite-compatible-readable-stream", "version": "3.6.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:vite-compatible-readable-stream:vite-compatible-readable-stream:3.6.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:vite-compatible-readable-stream:vite_compatible_readable_stream:3.6.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:vite_compatible_readable_stream:vite-compatible-readable-stream:3.6.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:vite_compatible_readable_stream:vite_compatible_readable_stream:3.6.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:vite-compatible-readable:vite-compatible-readable-stream:3.6.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:vite-compatible-readable:vite_compatible_readable_stream:3.6.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:vite_compatible_readable:vite-compatible-readable-stream:3.6.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:vite_compatible_readable:vite_compatible_readable_stream:3.6.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:vite-compatible:vite-compatible-readable-stream:3.6.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:vite-compatible:vite_compatible_readable_stream:3.6.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:vite_compatible:vite-compatible-readable-stream:3.6.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:vite_compatible:vite_compatible_readable_stream:3.6.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:vite:vite-compatible-readable-stream:3.6.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:vite:vite_compatible_readable_stream:3.6.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/vite-compatible-readable-stream@3.6.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/vite-compatible-readable-stream/-/vite-compatible-readable-stream-3.6.1.tgz", "integrity": "sha512-t20zYkrSf868+j/p31cRIGN28Phrjm3nRSLR2fyc2tiWi4cZGVdv68yNlwnIINTkMTmPoMiSlc0OadaO7DXZaQ==", "dependencies": {"inherits": "^2.0.3", "string_decoder": "^1.1.1", "util-deprecate": "^1.0.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: c6d0b110f80cc969
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: webidl-conversions 3.0.1
message: Package discovered: webidl-conversions 3.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "770e2f7ad3b1c524", "name": "webidl-conversions", "version": "3.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "BSD-2-Clause", "spdxExpression": "BSD-2-Clause", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:webidl-conversions:webidl-conversions:3.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:webidl-conversions:webidl_conversions:3.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:webidl_conversions:webidl-conversions:3.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:webidl_conversions:webidl_conversions:3.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:webidl:webidl-conversions:3.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:webidl:webidl_conversions:3.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/webidl-conversions@3.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz", "integrity": "sha512-2JAn3z8AR6rjK8Sm8orRC0h/bcl/DqL7tRPdGZ4I1CjdF+EaMLmYxBHyXuKL849eucPFhvBoxMsflfOb8kxaeQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: c76cb0d14c517e35
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: websocket-driver 0.7.4
message: Package discovered: websocket-driver 0.7.4
remediation: Track and scan dependencies.
raw_finding:
{"id": "944bd0667b1458ca", "name": "websocket-driver", "version": "0.7.4", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "Apache-2.0", "spdxExpression": "Apache-2.0", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:websocket-driver:websocket-driver:0.7.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:websocket-driver:websocket_driver:0.7.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:websocket_driver:websocket-driver:0.7.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:websocket_driver:websocket_driver:0.7.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:websocket:websocket-driver:0.7.4:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:websocket:websocket_driver:0.7.4:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/websocket-driver@0.7.4", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/websocket-driver/-/websocket-driver-0.7.4.tgz", "integrity": "sha512-b17KeDIQVjvb0ssuSDF2cYXSg2iztliJ4B9WdsuB6J952qCPKmnVq4DyW5motImXHDC1cBT/1UezrJVsKw5zjg==", "dependencies": {"http-parser-js": ">=0.5.1", "safe-buffer": ">=5.1.0", "websocket-extensions": ">=0.1.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: bb5b0fea2c384fe7
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: websocket-extensions 0.1.4
message: Package discovered: websocket-extensions 0.1.4
remediation: Track and scan dependencies.
raw_finding:
{"id": "6844e064384011a8", "name": "websocket-extensions", "version": "0.1.4", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "Apache-2.0", "spdxExpression": "Apache-2.0", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:websocket-extensions_project:websocket-extensions:0.1.4:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/websocket-extensions@0.1.4", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/websocket-extensions/-/websocket-extensions-0.1.4.tgz", "integrity": "sha512-OqedPIGOfsDlo31UNwYbCFMSaO9m9G/0faIHj5/dZFDMFqPTcx6UwqyOy3COEaEOg/9VsGIpdqn62W5KhoKSpg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: c0ee8f2bbf5fd4e3
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: whatwg-url 5.0.0
message: Package discovered: whatwg-url 5.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "0827d54a7a5ea1e5", "name": "whatwg-url", "version": "5.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:whatwg-url:whatwg-url:5.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:whatwg-url:whatwg_url:5.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:whatwg_url:whatwg-url:5.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:whatwg_url:whatwg_url:5.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:whatwg:whatwg-url:5.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:whatwg:whatwg_url:5.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/whatwg-url@5.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz", "integrity": "sha512-saE57nupxk6v3HY35+jzBwYa0rKSy0XR8JSxZPwgLr7ys0IBzhGviA1/TUGJLmSVqs8pb9AnvICXEuOHLprYTw==", "dependencies": {"tr46": "~0.0.3", "webidl-conversions": "^3.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 10cad46c067a700f
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: which 2.0.2
message: Package discovered: which 2.0.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "414763db2a64d1aa", "name": "which", "version": "2.0.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:which:which:2.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/which@2.0.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/which/-/which-2.0.2.tgz", "integrity": "sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA==", "dependencies": {"isexe": "^2.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 20ac7377e7b68a5f
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: which-module 2.0.1
message: Package discovered: which-module 2.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "e9c9cc83bf436fd2", "name": "which-module", "version": "2.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:which-module:which-module:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:which-module:which_module:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:which_module:which-module:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:which_module:which_module:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:which:which-module:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:which:which_module:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/which-module@2.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/which-module/-/which-module-2.0.1.tgz", "integrity": "sha512-iBdZ57RDvnOR9AGBhML2vFZf7h8vmBjhoaZqODJBFWHVtKkDmKuHai3cx5PgVMrX5YDNp27AofYbAwctSS+vhQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 9ffab25d563bb6a3
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: wrap-ansi 6.2.0
message: Package discovered: wrap-ansi 6.2.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "1fadca0371d5cfaf", "name": "wrap-ansi", "version": "6.2.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:wrap-ansi:wrap-ansi:6.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:wrap-ansi:wrap_ansi:6.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:wrap_ansi:wrap-ansi:6.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:wrap_ansi:wrap_ansi:6.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:wrap:wrap-ansi:6.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:wrap:wrap_ansi:6.2.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/wrap-ansi@6.2.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-6.2.0.tgz", "integrity": "sha512-r6lPcBGxZXlIcymEu7InxDMhdW0KDxpLgoFLcguasxCaJ/SOIZwINatK9KY/tf+ZrlywOKU0UDj3ATXUBfxJXA==", "dependencies": {"ansi-styles": "^4.0.0", "string-width": "^4.1.0", "strip-ansi": "^6.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 8455272704618757
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: wrap-ansi 7.0.0
message: Package discovered: wrap-ansi 7.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "336621830c576ca4", "name": "wrap-ansi", "version": "7.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:wrap-ansi:wrap-ansi:7.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:wrap-ansi:wrap_ansi:7.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:wrap_ansi:wrap-ansi:7.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:wrap_ansi:wrap_ansi:7.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:wrap:wrap-ansi:7.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:wrap:wrap_ansi:7.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/wrap-ansi@7.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz", "integrity": "sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==", "dependencies": {"ansi-styles": "^4.0.0", "string-width": "^4.1.0", "strip-ansi": "^6.0.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 686325d7e763de93
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: wrap-ansi 8.1.0
message: Package discovered: wrap-ansi 8.1.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "49a7c54fcd626265", "name": "wrap-ansi", "version": "8.1.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:wrap-ansi:wrap-ansi:8.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:wrap-ansi:wrap_ansi:8.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:wrap_ansi:wrap-ansi:8.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:wrap_ansi:wrap_ansi:8.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:wrap:wrap-ansi:8.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:wrap:wrap_ansi:8.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/wrap-ansi@8.1.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-8.1.0.tgz", "integrity": "sha512-si7QWI6zUMq56bESFvagtmzMdGOtoxfR+Sez11Mobfc7tm+VkUckk9bW2UeffTGVUbOksxmSw0AA2gs8g71NCQ==", "dependencies": {"ansi-styles": "^6.1.0", "string-width": "^5.0.1", "strip-ansi": "^7.0.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 20b8ef0a2e52c375
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: wrappy 1.0.2
message: Package discovered: wrappy 1.0.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "3d054461229ae629", "name": "wrappy", "version": "1.0.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:wrappy:wrappy:1.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/wrappy@1.0.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz", "integrity": "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: d249fddb72dddcbc
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: ws 8.18.3
message: Package discovered: ws 8.18.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "20d4f853542f41c9", "name": "ws", "version": "8.18.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:ws_project:ws:8.18.3:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/ws@8.18.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/ws/-/ws-8.18.3.tgz", "integrity": "sha512-PEIGCY5tSlUt50cqyMXfCzX+oOPqN0vuGqWzbcJ2xvnkzkq46oOpz7dQaTDBdfICb4N14+GARUDw2XV2N4tvzg==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: c71da5915aeb2537
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: xmlbuilder 13.0.2
message: Package discovered: xmlbuilder 13.0.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "0872acd31442749a", "name": "xmlbuilder", "version": "13.0.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:xmlbuilder:xmlbuilder:13.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/xmlbuilder@13.0.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/xmlbuilder/-/xmlbuilder-13.0.2.tgz", "integrity": "sha512-Eux0i2QdDYKbdbA6AM6xE4m6ZTZr4G4xF9kahI2ukSEMCzwce2eX9WlTI5J3s+NU7hpasFsr8hWIONae7LluAQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: fd4707cd0572bee3
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: xmlhttprequest-ssl 2.1.2
message: Package discovered: xmlhttprequest-ssl 2.1.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "9551f10f27f0ee2d", "name": "xmlhttprequest-ssl", "version": "2.1.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:xmlhttprequest-ssl:xmlhttprequest-ssl:2.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:xmlhttprequest-ssl:xmlhttprequest_ssl:2.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:xmlhttprequest_ssl:xmlhttprequest-ssl:2.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:xmlhttprequest_ssl:xmlhttprequest_ssl:2.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:xmlhttprequest:xmlhttprequest-ssl:2.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:xmlhttprequest:xmlhttprequest_ssl:2.1.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/xmlhttprequest-ssl@2.1.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/xmlhttprequest-ssl/-/xmlhttprequest-ssl-2.1.2.tgz", "integrity": "sha512-TEU+nJVUUnA4CYJFLvK5X9AOeH4KvDvhIfm0vV1GaQRtchnG0hgK5p8hw/xjv8cunWYCsiPCSDzObPyhEwq3KQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: a5a624f94f45bfc0
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: xtend 4.0.2
message: Package discovered: xtend 4.0.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "6f2d4b5e4aa5bc10", "name": "xtend", "version": "4.0.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:xtend:xtend:4.0.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/xtend@4.0.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/xtend/-/xtend-4.0.2.tgz", "integrity": "sha512-LKYU1iAXJXUgAXn9URjiu+MWhyUXHsvfp7mcuYm9dSUKK0/CjtrUwFAxD82/mCWbtLsGjFIad0wIsod4zrTAEQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 5d318a2cd2d1309b
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: y18n 4.0.3
message: Package discovered: y18n 4.0.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "f92fb588898c98cc", "name": "y18n", "version": "4.0.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:y18n_project:y18n:4.0.3:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/y18n@4.0.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/y18n/-/y18n-4.0.3.tgz", "integrity": "sha512-JKhqTOwSrqNA1NY5lSztJ1GrBiUodLMmIZuLiDaMRJ+itFd+ABVE8XBjOvIWL+rSqNDC74LCSFmlb/U4UZ4hJQ==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: ff7837262c7a0506
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: y18n 5.0.8
message: Package discovered: y18n 5.0.8
remediation: Track and scan dependencies.
raw_finding:
{"id": "17090a29739955b3", "name": "y18n", "version": "5.0.8", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:y18n_project:y18n:5.0.8:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/y18n@5.0.8", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/y18n/-/y18n-5.0.8.tgz", "integrity": "sha512-0pfFzegeDWJHJIAmTLRP2DwHjdF5s7jo9tuztdQxAhINCdvS+3nGINqPd00AphqJR/0LhANUS6/+7SCb98YOfA==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 20985a40c61069a1
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: yallist 4.0.0
message: Package discovered: yallist 4.0.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "c85ae4ebdc6284ae", "name": "yallist", "version": "4.0.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/yallist@4.0.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz", "integrity": "sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 71c51c3c7b12c140
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: yargs 15.4.1
message: Package discovered: yargs 15.4.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "bbb181fdab2eb6da", "name": "yargs", "version": "15.4.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:yargs:yargs:15.4.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/yargs@15.4.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/yargs/-/yargs-15.4.1.tgz", "integrity": "sha512-aePbxDmcYW++PaqBsJ+HYUFwCdv4LVvdnhBy78E57PIor8/OVvhMrADFFEDh8DHDFRv/O9i3lPhsENjO7QX0+A==", "dependencies": {"cliui": "^6.0.0", "decamelize": "^1.2.0", "find-up": "^4.1.0", "get-caller-file": "^2.0.1", "require-directory": "^2.1.1", "require-main-filename": "^2.0.0", "set-blocking": "^2.0.0", "string-width": "^4.2.0", "which-module": "^2.0.0", "y18n": "^4.0.0", "yargs-parser": "^18.1.2"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 96fe97c2b6d8795a
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: yargs 17.7.2
message: Package discovered: yargs 17.7.2
remediation: Track and scan dependencies.
raw_finding:
{"id": "c2726c8cb18290f2", "name": "yargs", "version": "17.7.2", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:yargs:yargs:17.7.2:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/yargs@17.7.2", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/yargs/-/yargs-17.7.2.tgz", "integrity": "sha512-7dSzzRQ++CKnNI/krKnYRV7JKKPUXMEh61soaHKg9mrWEhzFWhFnxPxGl+69cD1Ou63C13NUPCnmIcrvqCuM6w==", "dependencies": {"cliui": "^8.0.1", "escalade": "^3.1.1", "get-caller-file": "^2.0.5", "require-directory": "^2.1.1", "string-width": "^4.2.3", "y18n": "^5.0.5", "yargs-parser": "^21.1.1"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: ee09b685d8bedc8a
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: yargs-parser 18.1.3
message: Package discovered: yargs-parser 18.1.3
remediation: Track and scan dependencies.
raw_finding:
{"id": "385fd2e9c795bcc7", "name": "yargs-parser", "version": "18.1.3", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:yargs:yargs-parser:18.1.3:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/yargs-parser@18.1.3", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-18.1.3.tgz", "integrity": "sha512-o50j0JeToy/4K6OZcaQmW6lyXXKhq7csREXcDwk2omFPJEwUNOVtJKvmDr9EI1fAJZUyZcRF7kxGBWmRXudrCQ==", "dependencies": {"camelcase": "^5.0.0", "decamelize": "^1.2.0"}}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: a4ff6cebec5b0be4
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: yargs-parser 21.1.1
message: Package discovered: yargs-parser 21.1.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "95c25d265eed6eaf", "name": "yargs-parser", "version": "21.1.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "ISC", "spdxExpression": "ISC", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:yargs:yargs-parser:21.1.1:*:*:*:*:node.js:*:*", "source": "nvd-cpe-dictionary"}], "purl": "pkg:npm/yargs-parser@21.1.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-21.1.1.tgz", "integrity": "sha512-tVpsJW7DdjecAiFpbIB1e3qxIQsE6NoPc5/eTdrbbIC4h0LVsWhnoa3g+m2HclBIujHzsxZ4VJVA+GUuc2/LBw==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 14bd34194369a5c5
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: yocto-queue 0.1.0
message: Package discovered: yocto-queue 0.1.0
remediation: Track and scan dependencies.
raw_finding:
{"id": "813268dedfe3539f", "name": "yocto-queue", "version": "0.1.0", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:yocto-queue:yocto-queue:0.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:yocto-queue:yocto_queue:0.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:yocto_queue:yocto-queue:0.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:yocto_queue:yocto_queue:0.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:yocto:yocto-queue:0.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:yocto:yocto_queue:0.1.0:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/yocto-queue@0.1.0", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/yocto-queue/-/yocto-queue-0.1.0.tgz", "integrity": "sha512-rVksvsnNCdJ/ohGc6xgPwyN8eheCxsiLM8mxuE/t/mOVqJewPuO1miLpTHQiRgTKCLexL4MeAFVagts7HmNZ2Q==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 16bb4d5a9e7dc8d3
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: yoga-layout 2.0.1
message: Package discovered: yoga-layout 2.0.1
remediation: Track and scan dependencies.
raw_finding:
{"id": "579e04e050802ec1", "name": "yoga-layout", "version": "2.0.1", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:yoga-layout:yoga-layout:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:yoga-layout:yoga_layout:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:yoga_layout:yoga-layout:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:yoga_layout:yoga_layout:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:yoga:yoga-layout:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}, {"cpe": "cpe:2.3:a:yoga:yoga_layout:2.0.1:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/yoga-layout@2.0.1", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/yoga-layout/-/yoga-layout-2.0.1.tgz", "integrity": "sha512-tT/oChyDXelLo2A+UVnlW9GU7CsvFMaEnd9kVFsaiCQonFAXd3xrHhkLYu+suwwosrAEQ746xBU+HvYtm1Zs2Q==", "dependencies": null}}


scan_id: e3871164-db77-4f5c-8e2a-e19e51144658
fingerprint: 6ac3ad6fac7a8b51
severity: INFO
tool: syft
tool_version: unknown
rule_id: SBOM.PACKAGE
path: /package-lock.json
title: zod 3.25.76
message: Package discovered: zod 3.25.76
remediation: Track and scan dependencies.
raw_finding:
{"id": "c30d59c73bdda635", "name": "zod", "version": "3.25.76", "type": "npm", "foundBy": "javascript-lock-cataloger", "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}], "licenses": [{"value": "MIT", "spdxExpression": "MIT", "type": "declared", "urls": [], "locations": [{"path": "/package-lock.json", "accessPath": "/package-lock.json", "annotations": {"evidence": "primary"}}]}], "language": "javascript", "cpes": [{"cpe": "cpe:2.3:a:zod:zod:3.25.76:*:*:*:*:*:*:*", "source": "syft-generated"}], "purl": "pkg:npm/zod@3.25.76", "metadataType": "javascript-npm-package-lock-entry", "metadata": {"resolved": "https://registry.npmjs.org/zod/-/zod-3.25.76.tgz", "integrity": "sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ==", "dependencies": null}}


