carrot-scan
Version:
Command-line tool for detecting vulnerabilities in files and directories.
1,643 lines • 43.9 kB
text/xml
<bom xmlns="http://cyclonedx.org/schema/bom/1.4" version="1">
<components>
<component type="library">
<name>@cyclonedx/bom</name>
<version>4.1.0</version>
<licenses>
<license><id>Apache-2.0</id></license>
</licenses>
</component>
<component type="library">
<name>@cyclonedx/cyclonedx-library</name>
<version>8.4.0</version>
<licenses>
<license><id>Apache-2.0</id></license>
</licenses>
</component>
<component type="library">
<name>@cyclonedx/cyclonedx-npm</name>
<version>4.0.0</version>
<licenses>
<license><id>Apache-2.0</id></license>
</licenses>
</component>
<component type="library">
<name>@cyclonedx/yarn-plugin-cyclonedx</name>
<version>3.1.0</version>
<licenses>
<license><id>Apache-2.0</id></license>
</licenses>
</component>
<component type="library">
<name>@isaacs/cliui</name>
<version>8.0.2</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>@isaacs/fs-minipass</name>
<version>4.0.1</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>@npmcli/agent</name>
<version>3.0.0</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>@npmcli/fs</name>
<version>3.1.1</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>@npmcli/fs</name>
<version>4.0.0</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>@oozcitak/dom</name>
<version>1.15.10</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>@oozcitak/infra</name>
<version>1.0.8</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>@oozcitak/url</name>
<version>1.0.4</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>@oozcitak/util</name>
<version>8.3.8</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>@pkgjs/parseargs</name>
<version>0.11.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>@types/sarif</name>
<version>2.1.7</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>abbrev</name>
<version>2.0.0</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>abbrev</name>
<version>3.0.1</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>agent-base</name>
<version>7.1.3</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>ajv-formats-draft2019</name>
<version>1.6.1</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>ajv-formats</name>
<version>3.0.1</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>ajv</name>
<version>8.17.1</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>ansi-regex</name>
<version>5.0.1</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>ansi-regex</name>
<version>6.1.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>ansi-styles</name>
<version>4.3.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>ansi-styles</name>
<version>6.2.1</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>argparse</name>
<version>1.0.10</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>array-find-index</name>
<version>1.0.2</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>asap</name>
<version>2.0.6</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>balanced-match</name>
<version>1.0.2</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>base64-js</name>
<version>1.5.1</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>bindings</name>
<version>1.5.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>bl</name>
<version>4.1.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>brace-expansion</name>
<version>1.1.12</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>brace-expansion</name>
<version>2.0.2</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>buffer</name>
<version>5.7.1</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>cacache</name>
<version>19.0.1</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>carrot-scan-cli</name>
<version>0.1.0</version>
<licenses>
<license><id>UNKNOWN</id></license>
</licenses>
</component>
<component type="library">
<name>chalk</name>
<version>4.1.2</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>chownr</name>
<version>1.1.4</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>chownr</name>
<version>3.0.0</version>
<licenses>
<license><id>BlueOak-1.0.0</id></license>
</licenses>
</component>
<component type="library">
<name>color-convert</name>
<version>2.0.1</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>color-name</name>
<version>1.1.4</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>commander</name>
<version>11.1.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>commander</name>
<version>14.0.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>commander</name>
<version>2.20.3</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>concat-map</name>
<version>0.0.1</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>cross-spawn</name>
<version>7.0.6</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>cyclonedx-bom</name>
<version>0.0.9</version>
<licenses>
<license><id>Apache-2.0</id></license>
</licenses>
</component>
<component type="library">
<name>data-uri-to-buffer</name>
<version>4.0.1</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>debug</name>
<version>4.4.1</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>debuglog</name>
<version>1.0.1</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>decompress-response</name>
<version>6.0.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>deep-extend</name>
<version>0.6.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>detect-libc</name>
<version>2.0.4</version>
<licenses>
<license><id>Apache-2.0</id></license>
</licenses>
</component>
<component type="library">
<name>dezalgo</name>
<version>1.0.4</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>discontinuous-range</name>
<version>1.0.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>eastasianwidth</name>
<version>0.2.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>emoji-regex</name>
<version>8.0.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>emoji-regex</name>
<version>9.2.2</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>encoding</name>
<version>0.1.13</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>end-of-stream</name>
<version>1.4.5</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>env-paths</name>
<version>2.2.1</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>err-code</name>
<version>2.0.3</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>esprima</name>
<version>4.0.1</version>
<licenses>
<license><id>BSD-2-Clause</id></license>
</licenses>
</component>
<component type="library">
<name>expand-template</name>
<version>2.0.3</version>
<licenses>
<license><id>(MIT OR WTFPL)</id></license>
</licenses>
</component>
<component type="library">
<name>exponential-backoff</name>
<version>3.1.2</version>
<licenses>
<license><id>Apache-2.0</id></license>
</licenses>
</component>
<component type="library">
<name>extend</name>
<version>3.0.2</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>fast-deep-equal</name>
<version>3.1.3</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>fast-uri</name>
<version>3.0.6</version>
<licenses>
<license><id>BSD-3-Clause</id></license>
</licenses>
</component>
<component type="library">
<name>fdir</name>
<version>6.4.6</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>fetch-blob</name>
<version>3.2.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>file-uri-to-path</name>
<version>1.0.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>foreground-child</name>
<version>3.3.1</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>formdata-polyfill</name>
<version>4.0.10</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>fs-constants</name>
<version>1.0.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>fs-extra</name>
<version>11.3.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>fs-minipass</name>
<version>3.0.3</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>fs.realpath</name>
<version>1.0.0</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>function-bind</name>
<version>1.1.2</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>github-from-package</name>
<version>0.0.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>glob</name>
<version>10.4.5</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>glob</name>
<version>7.2.3</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>graceful-fs</name>
<version>4.2.11</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>has-flag</name>
<version>4.0.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>hasown</name>
<version>2.0.2</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>hosted-git-info</name>
<version>2.8.9</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>hosted-git-info</name>
<version>6.1.3</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>hosted-git-info</name>
<version>8.1.0</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>http-cache-semantics</name>
<version>4.2.0</version>
<licenses>
<license><id>BSD-2-Clause</id></license>
</licenses>
</component>
<component type="library">
<name>http-proxy-agent</name>
<version>7.0.2</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>https-proxy-agent</name>
<version>7.0.6</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>iconv-lite</name>
<version>0.6.3</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>ieee754</name>
<version>1.2.1</version>
<licenses>
<license><id>BSD-3-Clause</id></license>
</licenses>
</component>
<component type="library">
<name>imurmurhash</name>
<version>0.1.4</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>inflight</name>
<version>1.0.6</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>inherits</name>
<version>2.0.4</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>ini</name>
<version>1.3.8</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>ip-address</name>
<version>9.0.5</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>is-core-module</name>
<version>2.16.1</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>is-fullwidth-code-point</name>
<version>3.0.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>isexe</name>
<version>2.0.0</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>isexe</name>
<version>3.1.1</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>jackspeak</name>
<version>3.4.3</version>
<licenses>
<license><id>BlueOak-1.0.0</id></license>
</licenses>
</component>
<component type="library">
<name>js-yaml</name>
<version>3.14.1</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>jsbn</name>
<version>1.1.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>json-parse-even-better-errors</name>
<version>2.3.1</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>json-parse-even-better-errors</name>
<version>3.0.2</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>json-schema-traverse</name>
<version>1.0.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>jsonfile</name>
<version>6.1.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>libxmljs2</name>
<version>0.37.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>license-checker-rseidelsohn</name>
<version>4.4.2</version>
<licenses>
<license><id>BSD-3-Clause</id></license>
</licenses>
</component>
<component type="library">
<name>lodash.clonedeep</name>
<version>4.5.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>lru-cache</name>
<version>10.4.3</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>lru-cache</name>
<version>7.18.3</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>make-fetch-happen</name>
<version>14.0.3</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>mimic-response</name>
<version>3.1.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>minimatch</name>
<version>3.1.2</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>minimatch</name>
<version>9.0.5</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>minimist</name>
<version>1.2.8</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>minipass-collect</name>
<version>2.0.1</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>minipass-fetch</name>
<version>4.0.1</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>minipass-flush</name>
<version>1.0.5</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>minipass-pipeline</name>
<version>1.2.4</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>minipass-sized</name>
<version>1.0.3</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>minipass</name>
<version>3.3.6</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>minipass</name>
<version>7.1.2</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>minizlib</name>
<version>3.0.2</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>mkdirp-classic</name>
<version>0.5.3</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>mkdirp</name>
<version>1.0.4</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>mkdirp</name>
<version>3.0.1</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>moo</name>
<version>0.5.2</version>
<licenses>
<license><id>BSD-3-Clause</id></license>
</licenses>
</component>
<component type="library">
<name>ms</name>
<version>2.1.3</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>nan</name>
<version>2.22.2</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>napi-build-utils</name>
<version>2.0.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>nearley</name>
<version>2.20.1</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>negotiator</name>
<version>1.0.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>node-abi</name>
<version>3.75.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>node-domexception</name>
<version>1.0.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>node-fetch</name>
<version>3.3.2</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>node-gyp</name>
<version>11.2.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>node-sarif-builder</name>
<version>3.2.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>nopt</name>
<version>7.2.1</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>nopt</name>
<version>8.1.0</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>normalize-package-data</name>
<version>2.5.0</version>
<licenses>
<license><id>BSD-2-Clause</id></license>
</licenses>
</component>
<component type="library">
<name>normalize-package-data</name>
<version>5.0.0</version>
<licenses>
<license><id>BSD-2-Clause</id></license>
</licenses>
</component>
<component type="library">
<name>normalize-package-data</name>
<version>7.0.0</version>
<licenses>
<license><id>BSD-2-Clause</id></license>
</licenses>
</component>
<component type="library">
<name>npm-normalize-package-bin</name>
<version>1.0.1</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>npm-normalize-package-bin</name>
<version>3.0.1</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>once</name>
<version>1.4.0</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>p-limit</name>
<version>6.2.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>p-map</name>
<version>7.0.3</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>package-json-from-dist</name>
<version>1.0.1</version>
<licenses>
<license><id>BlueOak-1.0.0</id></license>
</licenses>
</component>
<component type="library">
<name>packageurl-js</name>
<version>2.0.1</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>path-is-absolute</name>
<version>1.0.1</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>path-key</name>
<version>3.1.1</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>path-parse</name>
<version>1.0.7</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>path-scurry</name>
<version>1.11.1</version>
<licenses>
<license><id>BlueOak-1.0.0</id></license>
</licenses>
</component>
<component type="library">
<name>picomatch</name>
<version>4.0.2</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>prebuild-install</name>
<version>7.1.3</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>proc-log</name>
<version>5.0.0</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>promise-retry</name>
<version>2.0.1</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>pump</name>
<version>3.0.3</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>punycode</name>
<version>2.3.1</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>railroad-diagrams</name>
<version>1.0.0</version>
<licenses>
<license><id>CC0-1.0</id></license>
</licenses>
</component>
<component type="library">
<name>randexp</name>
<version>0.4.6</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>rc</name>
<version>1.2.8</version>
<licenses>
<license><id>(BSD-2-Clause OR MIT OR Apache-2.0)</id></license>
</licenses>
</component>
<component type="library">
<name>read-installed-packages</name>
<version>2.0.1</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>read-installed</name>
<version>4.0.3</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>read-package-json</name>
<version>2.1.2</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>read-package-json</name>
<version>6.0.4</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>readable-stream</name>
<version>3.6.2</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>readdir-scoped-modules</name>
<version>1.1.0</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>require-from-string</name>
<version>2.0.2</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>resolve</name>
<version>1.22.10</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>ret</name>
<version>0.1.15</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>retry</name>
<version>0.12.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>safe-buffer</name>
<version>5.2.1</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>safer-buffer</name>
<version>2.1.2</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>sbom</name>
<version>1.0.0</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>schemes</name>
<version>1.4.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>semver</name>
<version>5.7.2</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>semver</name>
<version>7.7.2</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>shebang-command</name>
<version>2.0.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>shebang-regex</name>
<version>3.0.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>signal-exit</name>
<version>4.1.0</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>simple-concat</name>
<version>1.0.1</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>simple-get</name>
<version>4.0.1</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>slide</name>
<version>1.1.6</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>smart-buffer</name>
<version>4.2.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>smtp-address-parser</name>
<version>1.1.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>socks-proxy-agent</name>
<version>8.0.5</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>socks</name>
<version>2.8.5</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>spdx-compare</name>
<version>1.0.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>spdx-correct</name>
<version>3.2.0</version>
<licenses>
<license><id>Apache-2.0</id></license>
</licenses>
</component>
<component type="library">
<name>spdx-exceptions</name>
<version>2.5.0</version>
<licenses>
<license><id>CC-BY-3.0</id></license>
</licenses>
</component>
<component type="library">
<name>spdx-expression-parse</name>
<version>3.0.1</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>spdx-expression-parse</name>
<version>4.0.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>spdx-license-ids</name>
<version>3.0.21</version>
<licenses>
<license><id>CC0-1.0</id></license>
</licenses>
</component>
<component type="library">
<name>spdx-ranges</name>
<version>2.1.1</version>
<licenses>
<license><id>(MIT AND CC-BY-3.0)</id></license>
</licenses>
</component>
<component type="library">
<name>spdx-satisfies</name>
<version>5.0.1</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>sprintf-js</name>
<version>1.0.3</version>
<licenses>
<license><id>BSD-3-Clause</id></license>
</licenses>
</component>
<component type="library">
<name>sprintf-js</name>
<version>1.1.3</version>
<licenses>
<license><id>BSD-3-Clause</id></license>
</licenses>
</component>
<component type="library">
<name>ssri</name>
<version>12.0.0</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>string-width</name>
<version>4.2.3</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>string-width</name>
<version>5.1.2</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>string_decoder</name>
<version>1.3.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>strip-ansi</name>
<version>6.0.1</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>strip-ansi</name>
<version>7.1.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>strip-json-comments</name>
<version>2.0.1</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>supports-color</name>
<version>7.2.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>supports-preserve-symlinks-flag</name>
<version>1.0.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>tar-fs</name>
<version>2.1.3</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>tar-stream</name>
<version>2.2.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>tar</name>
<version>7.4.3</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>tinyglobby</name>
<version>0.2.14</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>treeify</name>
<version>1.1.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>tunnel-agent</name>
<version>0.6.0</version>
<licenses>
<license><id>Apache-2.0</id></license>
</licenses>
</component>
<component type="library">
<name>unique-filename</name>
<version>4.0.0</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>unique-slug</name>
<version>5.0.0</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>universalify</name>
<version>2.0.1</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>uri-js</name>
<version>4.4.1</version>
<licenses>
<license><id>BSD-2-Clause</id></license>
</licenses>
</component>
<component type="library">
<name>util-deprecate</name>
<version>1.0.2</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>util-extend</name>
<version>1.0.3</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>validate-npm-package-license</name>
<version>3.0.4</version>
<licenses>
<license><id>Apache-2.0</id></license>
</licenses>
</component>
<component type="library">
<name>web-streams-polyfill</name>
<version>3.3.3</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>which</name>
<version>2.0.2</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>which</name>
<version>5.0.0</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>wrap-ansi</name>
<version>7.0.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>wrap-ansi</name>
<version>8.1.0</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>wrappy</name>
<version>1.0.2</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>xmlbuilder2</name>
<version>3.1.1</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
<component type="library">
<name>yallist</name>
<version>4.0.0</version>
<licenses>
<license><id>ISC</id></license>
</licenses>
</component>
<component type="library">
<name>yallist</name>
<version>5.0.0</version>
<licenses>
<license><id>BlueOak-1.0.0</id></license>
</licenses>
</component>
<component type="library">
<name>yocto-queue</name>
<version>1.2.1</version>
<licenses>
<license><id>MIT</id></license>
</licenses>
</component>
</components>
</bom>