@cyclonedx/cyclonedx-library 3.0.0 → 5.0.0

package/dist.web/lib.dev.js

@@ -1,13 +1,13 @@
 (function webpackUniversalModuleDefinition(root, factory) {
 	if(typeof exports === 'object' && typeof module === 'object')
-		module.exports = factory(require("packageurl-js"), require("spdx-expression-parse"));
+		module.exports = factory();
 	else if(typeof define === 'function' && define.amd)
-		define(["packageurl-js", "spdx-expression-parse"], factory);
+		define([], factory);
 	else if(typeof exports === 'object')
-		exports["CycloneDX_library"] = factory(require("packageurl-js"), require("spdx-expression-parse"));
+		exports["CycloneDX_library"] = factory();
 	else
-		root["CycloneDX_library"] = factory(root["packageurl-js"], root["spdx-expression-parse"]);
-})(self, (__WEBPACK_EXTERNAL_MODULE_packageurl_js__, __WEBPACK_EXTERNAL_MODULE_spdx_expression_parse__) => {
+		root["CycloneDX_library"] = factory();
+})(self, () => {
 return /******/ (() => { // webpackBootstrap
 /******/ 	"use strict";
 /******/ 	var __webpack_modules__ = ({
@@ -472,9 +472,51 @@ __exportStar(__webpack_require__(/*! ./componentScope */ "./src/enums/componentS
 __exportStar(__webpack_require__(/*! ./componentType */ "./src/enums/componentType.ts"), exports);
 __exportStar(__webpack_require__(/*! ./externalReferenceType */ "./src/enums/externalReferenceType.ts"), exports);
 __exportStar(__webpack_require__(/*! ./hashAlogorithm */ "./src/enums/hashAlogorithm.ts"), exports);
+__exportStar(__webpack_require__(/*! ./lifecyclePhase */ "./src/enums/lifecyclePhase.ts"), exports);
 exports.Vulnerability = __webpack_require__(/*! ./vulnerability */ "./src/enums/vulnerability/index.ts");
 
 
+/***/ }),
+
+/***/ "./src/enums/lifecyclePhase.ts":
+/*!*************************************!*\
+  !*** ./src/enums/lifecyclePhase.ts ***!
+  \*************************************/
+/***/ ((__unused_webpack_module, exports) => {
+
+
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.LifecyclePhase = void 0;
+var LifecyclePhase;
+(function (LifecyclePhase) {
+    LifecyclePhase["Design"] = "design";
+    LifecyclePhase["PreBuild"] = "pre-build";
+    LifecyclePhase["Build"] = "build";
+    LifecyclePhase["PostBuild"] = "post-build";
+    LifecyclePhase["Operations"] = "operations";
+    LifecyclePhase["Discovery"] = "discovery";
+    LifecyclePhase["Decommission"] = "decommission";
+})(LifecyclePhase || (exports.LifecyclePhase = LifecyclePhase = {}));
+
+
 /***/ }),
 
 /***/ "./src/enums/vulnerability/affectStatus.ts":
@@ -1634,6 +1676,7 @@ __exportStar(__webpack_require__(/*! ./component */ "./src/models/component.ts")
 __exportStar(__webpack_require__(/*! ./externalReference */ "./src/models/externalReference.ts"), exports);
 __exportStar(__webpack_require__(/*! ./hash */ "./src/models/hash.ts"), exports);
 __exportStar(__webpack_require__(/*! ./license */ "./src/models/license.ts"), exports);
+__exportStar(__webpack_require__(/*! ./lifecycle */ "./src/models/lifecycle.ts"), exports);
 __exportStar(__webpack_require__(/*! ./metadata */ "./src/models/metadata.ts"), exports);
 __exportStar(__webpack_require__(/*! ./organizationalContact */ "./src/models/organizationalContact.ts"), exports);
 __exportStar(__webpack_require__(/*! ./organizationalEntity */ "./src/models/organizationalEntity.ts"), exports);
@@ -1769,6 +1812,71 @@ _LicenseRepository_instances = new WeakSet(), _LicenseRepository_compareItems =
 };
 
 
+/***/ }),
+
+/***/ "./src/models/lifecycle.ts":
+/*!*********************************!*\
+  !*** ./src/models/lifecycle.ts ***!
+  \*********************************/
+/***/ (function(__unused_webpack_module, exports) {
+
+
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var _LifecycleRepository_instances, _LifecycleRepository_compareItems;
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.LifecycleRepository = exports.NamedLifecycle = void 0;
+class NamedLifecycle {
+    constructor(name, op = {}) {
+        this.name = name;
+        this.description = op.description;
+    }
+    compare(other) {
+        return this.name.localeCompare(other.name);
+    }
+}
+exports.NamedLifecycle = NamedLifecycle;
+class LifecycleRepository extends Set {
+    constructor() {
+        super(...arguments);
+        _LifecycleRepository_instances.add(this);
+    }
+    sorted() {
+        return Array.from(this).sort(__classPrivateFieldGet(this, _LifecycleRepository_instances, "m", _LifecycleRepository_compareItems));
+    }
+}
+exports.LifecycleRepository = LifecycleRepository;
+_LifecycleRepository_instances = new WeakSet(), _LifecycleRepository_compareItems = function _LifecycleRepository_compareItems(a, b) {
+    if (a.constructor === b.constructor) {
+        return a instanceof NamedLifecycle
+            ? a.compare(b)
+            : a.localeCompare(b);
+    }
+    return a.constructor.name.localeCompare(b.constructor.name);
+};
+
+
 /***/ }),
 
 /***/ "./src/models/metadata.ts":
@@ -1798,11 +1906,13 @@ Copyright (c) OWASP Foundation. All Rights Reserved.
 */
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.Metadata = void 0;
+const lifecycle_1 = __webpack_require__(/*! ./lifecycle */ "./src/models/lifecycle.ts");
 const organizationalContact_1 = __webpack_require__(/*! ./organizationalContact */ "./src/models/organizationalContact.ts");
 const tool_1 = __webpack_require__(/*! ./tool */ "./src/models/tool.ts");
 class Metadata {
     constructor(op = {}) {
         this.timestamp = op.timestamp;
+        this.lifecycles = op.lifecycles ?? new lifecycle_1.LifecycleRepository();
         this.tools = op.tools ?? new tool_1.ToolRepository();
         this.authors = op.authors ?? new organizationalContact_1.OrganizationalContactRepository();
         this.component = op.component;
@@ -2887,7 +2997,7 @@ var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (
 };
 var _Factory_spec, _BomNormalizer_instances, _BomNormalizer_isEligibleSerialNumber, _ComponentEvidenceNormalizer_instances, _ComponentEvidenceNormalizer_normalizeCopyright, _LicenseNormalizer_instances, _LicenseNormalizer_normalizeNamedLicense, _LicenseNormalizer_normalizeSpdxLicense, _LicenseNormalizer_normalizeLicenseExpression, _DependencyGraphNormalizer_instances, _DependencyGraphNormalizer_normalizeDependency, _VulnerabilityAffectedVersionNormalizer_instances, _VulnerabilityAffectedVersionNormalizer_normalizeAffectedSingleVersion, _VulnerabilityAffectedVersionNormalizer_normalizeAffectedVersionRange;
 Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.VulnerabilityAnalysisNormalizer = exports.VulnerabilityAffectedVersionNormalizer = exports.VulnerabilityAffectNormalizer = exports.VulnerabilityCreditsNormalizer = exports.VulnerabilityAdvisoryNormalizer = exports.VulnerabilityRatingNormalizer = exports.VulnerabilityReferenceNormalizer = exports.VulnerabilitySourceNormalizer = exports.VulnerabilityNormalizer = exports.DependencyGraphNormalizer = exports.PropertyNormalizer = exports.AttachmentNormalizer = exports.ExternalReferenceNormalizer = exports.SWIDNormalizer = exports.LicenseNormalizer = exports.ComponentEvidenceNormalizer = exports.ComponentNormalizer = exports.OrganizationalEntityNormalizer = exports.OrganizationalContactNormalizer = exports.HashNormalizer = exports.ToolNormalizer = exports.MetadataNormalizer = exports.BomNormalizer = exports.Factory = void 0;
+exports.VulnerabilityAnalysisNormalizer = exports.VulnerabilityAffectedVersionNormalizer = exports.VulnerabilityAffectNormalizer = exports.VulnerabilityCreditsNormalizer = exports.VulnerabilityAdvisoryNormalizer = exports.VulnerabilityRatingNormalizer = exports.VulnerabilityReferenceNormalizer = exports.VulnerabilitySourceNormalizer = exports.VulnerabilityNormalizer = exports.DependencyGraphNormalizer = exports.PropertyNormalizer = exports.AttachmentNormalizer = exports.ExternalReferenceNormalizer = exports.SWIDNormalizer = exports.LicenseNormalizer = exports.ComponentEvidenceNormalizer = exports.ComponentNormalizer = exports.OrganizationalEntityNormalizer = exports.OrganizationalContactNormalizer = exports.HashNormalizer = exports.ToolNormalizer = exports.LifecycleNormalizer = exports.MetadataNormalizer = exports.BomNormalizer = exports.Factory = void 0;
 const notUndefined_1 = __webpack_require__(/*! ../../_helpers/notUndefined */ "./src/_helpers/notUndefined.ts");
 const tree_1 = __webpack_require__(/*! ../../_helpers/tree */ "./src/_helpers/tree.ts");
 const Models = __webpack_require__(/*! ../../models */ "./src/models/index.ts");
@@ -2914,6 +3024,9 @@ class Factory {
     makeForComponentEvidence() {
         return new ComponentEvidenceNormalizer(this);
     }
+    makeForLifecycle() {
+        return new LifecycleNormalizer(this);
+    }
     makeForTool() {
         return new ToolNormalizer(this);
     }
@@ -3025,6 +3138,9 @@ class MetadataNormalizer extends BaseJsonNormalizer {
         const orgEntityNormalizer = this._factory.makeForOrganizationalEntity();
         return {
             timestamp: data.timestamp?.toISOString(),
+            lifecycles: this._factory.spec.supportsMetadataLifecycles && data.lifecycles.size > 0
+                ? this._factory.makeForLifecycle().normalizeIterable(data.lifecycles, options)
+                : undefined,
             tools: data.tools.size > 0
                 ? this._factory.makeForTool().normalizeIterable(data.tools, options)
                 : undefined,
@@ -3044,6 +3160,19 @@ class MetadataNormalizer extends BaseJsonNormalizer {
     }
 }
 exports.MetadataNormalizer = MetadataNormalizer;
+class LifecycleNormalizer extends BaseJsonNormalizer {
+    normalize(data, options) {
+        return data instanceof Models.NamedLifecycle
+            ? { name: data.name, description: data.description }
+            : { phase: data };
+    }
+    normalizeIterable(data, options) {
+        return (options.sortLists ?? false
+            ? data.sorted()
+            : Array.from(data)).map(lc => this.normalize(lc, options));
+    }
+}
+exports.LifecycleNormalizer = LifecycleNormalizer;
 class ToolNormalizer extends BaseJsonNormalizer {
     normalize(data, options) {
         return {
@@ -3780,7 +3909,7 @@ var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (
 };
 var _Factory_spec, _BomNormalizer_instances, _BomNormalizer_isEligibleSerialNumber, _LicenseNormalizer_instances, _LicenseNormalizer_normalizeNamedLicense, _LicenseNormalizer_normalizeSpdxLicense, _LicenseNormalizer_normalizeLicenseExpression, _DependencyGraphNormalizer_instances, _DependencyGraphNormalizer_normalizeDependency, _VulnerabilityAffectedVersionNormalizer_instances, _VulnerabilityAffectedVersionNormalizer_normalizeAffectedSingleVersion, _VulnerabilityAffectedVersionNormalizer_normalizeAffectedVersionRange;
 Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.VulnerabilityAffectedVersionNormalizer = exports.VulnerabilityAffectNormalizer = exports.VulnerabilityAnalysisNormalizer = exports.VulnerabilityCreditsNormalizer = exports.VulnerabilityAdvisoryNormalizer = exports.VulnerabilityRatingNormalizer = exports.VulnerabilityReferenceNormalizer = exports.VulnerabilitySourceNormalizer = exports.VulnerabilityNormalizer = exports.DependencyGraphNormalizer = exports.PropertyNormalizer = exports.AttachmentNormalizer = exports.ExternalReferenceNormalizer = exports.SWIDNormalizer = exports.LicenseNormalizer = exports.ComponentEvidenceNormalizer = exports.ComponentNormalizer = exports.OrganizationalEntityNormalizer = exports.OrganizationalContactNormalizer = exports.HashNormalizer = exports.ToolNormalizer = exports.MetadataNormalizer = exports.BomNormalizer = exports.Factory = void 0;
+exports.VulnerabilityAffectedVersionNormalizer = exports.VulnerabilityAffectNormalizer = exports.VulnerabilityAnalysisNormalizer = exports.VulnerabilityCreditsNormalizer = exports.VulnerabilityAdvisoryNormalizer = exports.VulnerabilityRatingNormalizer = exports.VulnerabilityReferenceNormalizer = exports.VulnerabilitySourceNormalizer = exports.VulnerabilityNormalizer = exports.DependencyGraphNormalizer = exports.PropertyNormalizer = exports.AttachmentNormalizer = exports.ExternalReferenceNormalizer = exports.SWIDNormalizer = exports.LicenseNormalizer = exports.ComponentEvidenceNormalizer = exports.ComponentNormalizer = exports.OrganizationalEntityNormalizer = exports.OrganizationalContactNormalizer = exports.HashNormalizer = exports.ToolNormalizer = exports.LifecycleNormalizer = exports.MetadataNormalizer = exports.BomNormalizer = exports.Factory = void 0;
 const notUndefined_1 = __webpack_require__(/*! ../../_helpers/notUndefined */ "./src/_helpers/notUndefined.ts");
 const tree_1 = __webpack_require__(/*! ../../_helpers/tree */ "./src/_helpers/tree.ts");
 const Models = __webpack_require__(/*! ../../models */ "./src/models/index.ts");
@@ -3801,6 +3930,9 @@ class Factory {
     makeForMetadata() {
         return new MetadataNormalizer(this);
     }
+    makeForLifecycle() {
+        return new LifecycleNormalizer(this);
+    }
     makeForComponent() {
         return new ComponentNormalizer(this);
     }
@@ -3934,6 +4066,13 @@ _BomNormalizer_instances = new WeakSet(), _BomNormalizer_isEligibleSerialNumber
 class MetadataNormalizer extends BaseXmlNormalizer {
     normalize(data, options, elementName) {
         const orgEntityNormalizer = this._factory.makeForOrganizationalEntity();
+        const lifecycles = this._factory.spec.supportsMetadataLifecycles && data.lifecycles.size > 0
+            ? {
+                type: 'element',
+                name: 'lifecycles',
+                children: this._factory.makeForLifecycle().normalizeIterable(data.lifecycles, options, 'lifecycle')
+            }
+            : undefined;
         const tools = data.tools.size > 0
             ? {
                 type: 'element',
@@ -3953,6 +4092,7 @@ class MetadataNormalizer extends BaseXmlNormalizer {
             name: elementName,
             children: [
                 makeOptionalDateTimeElement(data.timestamp, 'timestamp'),
+                lifecycles,
                 tools,
                 authors,
                 data.component === undefined
@@ -3969,6 +4109,32 @@ class MetadataNormalizer extends BaseXmlNormalizer {
     }
 }
 exports.MetadataNormalizer = MetadataNormalizer;
+class LifecycleNormalizer extends BaseXmlNormalizer {
+    normalize(data, options, elementName) {
+        return data instanceof Models.NamedLifecycle
+            ? {
+                type: 'element',
+                name: elementName,
+                children: [
+                    makeTextElement(data.name, 'name'),
+                    makeOptionalTextElement(data.description, 'description')
+                ].filter(notUndefined_1.isNotUndefined)
+            }
+            : {
+                type: 'element',
+                name: elementName,
+                children: [
+                    makeTextElement(data, 'phase')
+                ]
+            };
+    }
+    normalizeIterable(data, options, elementName) {
+        return (options.sortLists ?? false
+            ? data.sorted()
+            : Array.from(data)).map(t => this.normalize(t, options, elementName));
+    }
+}
+exports.LifecycleNormalizer = LifecycleNormalizer;
 class ToolNormalizer extends BaseXmlNormalizer {
     normalize(data, options, elementName) {
         const hashes = data.hashes.size > 0
@@ -5011,7 +5177,7 @@ var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (
     if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
     return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
 };
-var _Spec_version, _Spec_formats, _Spec_componentTypes, _Spec_hashAlgorithms, _Spec_hashValuePattern, _Spec_externalReferenceTypes, _Spec_vulnerabilityRatingMethods, _Spec_supportsDependencyGraph, _Spec_supportsToolReferences, _Spec_requiresComponentVersion, _Spec_supportsProperties, _Spec_supportsVulnerabilities, _Spec_supportsComponentEvidence;
+var _Spec_version, _Spec_formats, _Spec_componentTypes, _Spec_hashAlgorithms, _Spec_hashValuePattern, _Spec_externalReferenceTypes, _Spec_vulnerabilityRatingMethods, _Spec_supportsDependencyGraph, _Spec_supportsToolReferences, _Spec_requiresComponentVersion, _Spec_supportsProperties, _Spec_supportsVulnerabilities, _Spec_supportsComponentEvidence, _Spec_supportsMetadataLifecycles;
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.SpecVersionDict = exports.Spec1dot5 = exports.Spec1dot4 = exports.Spec1dot3 = exports.Spec1dot2 = exports.UnsupportedFormatError = exports.Format = exports.Version = void 0;
 const enums_1 = __webpack_require__(/*! ./enums */ "./src/enums/index.ts");
@@ -5033,7 +5199,7 @@ class UnsupportedFormatError extends Error {
 }
 exports.UnsupportedFormatError = UnsupportedFormatError;
 class Spec {
-    constructor(version, formats, componentTypes, hashAlgorithms, hashValuePattern, externalReferenceTypes, supportsDependencyGraph, supportsToolReferences, requiresComponentVersion, supportsProperties, supportsVulnerabilities, vulnerabilityRatingMethods, supportsComponentEvidence) {
+    constructor(version, formats, componentTypes, hashAlgorithms, hashValuePattern, externalReferenceTypes, supportsDependencyGraph, supportsToolReferences, requiresComponentVersion, supportsProperties, supportsVulnerabilities, vulnerabilityRatingMethods, supportsComponentEvidence, supportsMetadataLifecycles) {
         _Spec_version.set(this, void 0);
         _Spec_formats.set(this, void 0);
         _Spec_componentTypes.set(this, void 0);
@@ -5047,6 +5213,7 @@ class Spec {
         _Spec_supportsProperties.set(this, void 0);
         _Spec_supportsVulnerabilities.set(this, void 0);
         _Spec_supportsComponentEvidence.set(this, void 0);
+        _Spec_supportsMetadataLifecycles.set(this, void 0);
         __classPrivateFieldSet(this, _Spec_version, version, "f");
         __classPrivateFieldSet(this, _Spec_formats, new Set(formats), "f");
         __classPrivateFieldSet(this, _Spec_componentTypes, new Set(componentTypes), "f");
@@ -5060,6 +5227,7 @@ class Spec {
         __classPrivateFieldSet(this, _Spec_supportsVulnerabilities, supportsVulnerabilities, "f");
         __classPrivateFieldSet(this, _Spec_vulnerabilityRatingMethods, new Set(vulnerabilityRatingMethods), "f");
         __classPrivateFieldSet(this, _Spec_supportsComponentEvidence, supportsComponentEvidence, "f");
+        __classPrivateFieldSet(this, _Spec_supportsMetadataLifecycles, supportsMetadataLifecycles, "f");
     }
     get version() {
         return __classPrivateFieldGet(this, _Spec_version, "f");
@@ -5101,8 +5269,11 @@ class Spec {
     get supportsComponentEvidence() {
         return __classPrivateFieldGet(this, _Spec_supportsComponentEvidence, "f");
     }
+    get supportsMetadataLifecycles() {
+        return __classPrivateFieldGet(this, _Spec_supportsMetadataLifecycles, "f");
+    }
 }
-_Spec_version = new WeakMap(), _Spec_formats = new WeakMap(), _Spec_componentTypes = new WeakMap(), _Spec_hashAlgorithms = new WeakMap(), _Spec_hashValuePattern = new WeakMap(), _Spec_externalReferenceTypes = new WeakMap(), _Spec_vulnerabilityRatingMethods = new WeakMap(), _Spec_supportsDependencyGraph = new WeakMap(), _Spec_supportsToolReferences = new WeakMap(), _Spec_requiresComponentVersion = new WeakMap(), _Spec_supportsProperties = new WeakMap(), _Spec_supportsVulnerabilities = new WeakMap(), _Spec_supportsComponentEvidence = new WeakMap();
+_Spec_version = new WeakMap(), _Spec_formats = new WeakMap(), _Spec_componentTypes = new WeakMap(), _Spec_hashAlgorithms = new WeakMap(), _Spec_hashValuePattern = new WeakMap(), _Spec_externalReferenceTypes = new WeakMap(), _Spec_vulnerabilityRatingMethods = new WeakMap(), _Spec_supportsDependencyGraph = new WeakMap(), _Spec_supportsToolReferences = new WeakMap(), _Spec_requiresComponentVersion = new WeakMap(), _Spec_supportsProperties = new WeakMap(), _Spec_supportsVulnerabilities = new WeakMap(), _Spec_supportsComponentEvidence = new WeakMap(), _Spec_supportsMetadataLifecycles = new WeakMap();
 exports.Spec1dot2 = Object.freeze(new Spec(Version.v1dot2, [
     Format.XML,
     Format.JSON
@@ -5144,7 +5315,7 @@ exports.Spec1dot2 = Object.freeze(new Spec(Version.v1dot2, [
     enums_1.ExternalReferenceType.BuildMeta,
     enums_1.ExternalReferenceType.BuildSystem,
     enums_1.ExternalReferenceType.Other
-], true, false, true, false, false, [], false));
+], true, false, true, false, false, [], false, false));
 exports.Spec1dot3 = Object.freeze(new Spec(Version.v1dot3, [
     Format.XML,
     Format.JSON
@@ -5186,7 +5357,7 @@ exports.Spec1dot3 = Object.freeze(new Spec(Version.v1dot3, [
     enums_1.ExternalReferenceType.BuildMeta,
     enums_1.ExternalReferenceType.BuildSystem,
     enums_1.ExternalReferenceType.Other
-], true, false, true, true, false, [], true));
+], true, false, true, true, false, [], true, false));
 exports.Spec1dot4 = Object.freeze(new Spec(Version.v1dot4, [
     Format.XML,
     Format.JSON
@@ -5235,7 +5406,7 @@ exports.Spec1dot4 = Object.freeze(new Spec(Version.v1dot4, [
     enums_1.Vulnerability.RatingMethod.CVSSv31,
     enums_1.Vulnerability.RatingMethod.OWASP,
     enums_1.Vulnerability.RatingMethod.Other
-], true));
+], true, false));
 exports.Spec1dot5 = Object.freeze(new Spec(Version.v1dot5, [
     Format.XML,
     Format.JSON
@@ -5313,7 +5484,7 @@ exports.Spec1dot5 = Object.freeze(new Spec(Version.v1dot5, [
     enums_1.Vulnerability.RatingMethod.OWASP,
     enums_1.Vulnerability.RatingMethod.SSVC,
     enums_1.Vulnerability.RatingMethod.Other
-], true));
+], true, true));
 exports.SpecVersionDict = Object.freeze({
     [Version.v1dot5]: exports.Spec1dot5,
     [Version.v1dot4]: exports.Spec1dot4,
@@ -5762,7 +5933,7 @@ Object.defineProperty(exports, "__esModule", ({ value: true }));
   \********************************/
 /***/ ((module) => {
 
-module.exports = __WEBPACK_EXTERNAL_MODULE_packageurl_js__;
+module.exports = require("packageurl-js");
 
 /***/ }),
 
@@ -5772,7 +5943,7 @@ module.exports = __WEBPACK_EXTERNAL_MODULE_packageurl_js__;
   \****************************************/
 /***/ ((module) => {
 
-module.exports = __WEBPACK_EXTERNAL_MODULE_spdx_expression_parse__;
+module.exports = require("spdx-expression-parse");
 
 /***/ }),