@cyclonedx/cyclonedx-library 9.2.0 → 9.4.0

package/dist.d/builders/index.node.d.ts

@@ -16,5 +16,13 @@ limitations under the License.
 SPDX-License-Identifier: Apache-2.0
 Copyright (c) OWASP Foundation. All Rights Reserved.
 */
-export * as FromNodePackageJson from './fromNodePackageJson.node';
+import * as _FromNodePackageJson from '../contrib/fromNodePackageJson/builders';
+/**
+ * Deprecated — Alias of {@link Contrib.FromNodePackageJson.Builders}.
+ *
+ * @deprecated This re-export location is deprecated.
+ * Import `Contrib.FromNodePackageJson.Builders` instead.
+ * The exported symbol itself is NOT deprecated - only this import path.
+ */
+export declare const FromNodePackageJson: typeof _FromNodePackageJson;
 //# sourceMappingURL=index.node.d.ts.map

package/dist.d/builders/index.node.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.node.d.ts","sourceRoot":"","sources":["../../src/builders/index.node.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF,OAAO,KAAK,mBAAmB,MAAM,4BAA4B,CAAA"}
+{"version":3,"file":"index.node.d.ts","sourceRoot":"","sources":["../../src/builders/index.node.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF,OAAO,KAAK,oBAAoB,MAAM,yCAAyC,CAAA;AAK/E;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,6BAAuB,CAAA"}

package/dist.d/contrib/bom/index.d.ts

@@ -0,0 +1,20 @@
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+export * as Utils from './utils';
+//# sourceMappingURL=index.d.ts.map

package/dist.d/contrib/bom/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/contrib/bom/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF,OAAO,KAAK,KAAK,MAAM,SAAS,CAAA"}

package/dist.d/{utils/bomUtility.d.ts → contrib/bom/utils.d.ts}

@@ -20,4 +20,4 @@ Copyright (c) OWASP Foundation. All Rights Reserved.
  * Generate valid random SerialNumbers for {@link Models.Bom.serialNumber | Models.Bom.serialNumber}.
  */
 export declare function randomSerialNumber(): string;
-//# sourceMappingURL=bomUtility.d.ts.map
+//# sourceMappingURL=utils.d.ts.map

package/dist.d/contrib/bom/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/contrib/bom/utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF;;GAEG;AACH,wBAAgB,kBAAkB,IAAK,MAAM,CAc5C"}

package/dist.d/contrib/fromNodePackageJson/_helpers/gitUrl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitUrl.d.ts","sourceRoot":"","sources":["../../../../src/contrib/fromNodePackageJson/_helpers/gitUrl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AASF;;GAEG;AACH,wBAAgB,qBAAqB,CAAE,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,GAAG,GAAG,MAAM,GAAG,SAAS,CA0B1F"}

package/dist.d/contrib/fromNodePackageJson/_helpers/packageJson.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"packageJson.d.ts","sourceRoot":"","sources":["../../../../src/contrib/fromNodePackageJson/_helpers/packageJson.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAE,IAAI,EAAE,MAAM,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAO/D"}

package/dist.d/{builders/fromNodePackageJson.node.d.ts → contrib/fromNodePackageJson/builders.d.ts}

@@ -16,18 +16,27 @@ limitations under the License.
 SPDX-License-Identifier: Apache-2.0
 Copyright (c) OWASP Foundation. All Rights Reserved.
 */
-import { ComponentType } from '../enums/componentType';
-import type * as Factories from '../factories/index.node';
-import { Component } from '../models/component';
-import { Tool } from '../models/tool';
-import type { NodePackageJson } from '../types/nodePackageJson';
+/**
+ * Node-specifics.
+ *
+ * Intended to run on normalized data structures
+ * based on [PackageJson spec](https://github.com/SchemaStore/schemastore/blob/master/src/schemas/json/package.json)
+ * and explained by [PackageJson description](https://docs.npmjs.com/cli/v9/configuring-npm/package-json).
+ * Normalization should be done downstream, for example via [`normalize-package-data`](https://www.npmjs.com/package/normalize-package-data).
+ */
+import { ComponentType } from '../../enums/componentType';
+import { Component } from '../../models/component';
+import { Tool } from '../../models/tool';
+import type { LicenseFactory } from '../license/factories';
+import type { ExternalReferenceFactory } from './factories';
+import type { NodePackageJson } from './types';
 /**
  * Node-specific ToolBuilder.
  */
 export declare class ToolBuilder {
     #private;
     constructor(extRefFactory: ToolBuilder['extRefFactory']);
-    get extRefFactory(): Factories.FromNodePackageJson.ExternalReferenceFactory;
+    get extRefFactory(): ExternalReferenceFactory;
     makeTool(data: NodePackageJson): Tool | undefined;
 }
 /**
@@ -36,8 +45,8 @@ export declare class ToolBuilder {
 export declare class ComponentBuilder {
     #private;
     constructor(extRefFactory: ComponentBuilder['extRefFactory'], licenseFactory: ComponentBuilder['licenseFactory']);
-    get extRefFactory(): Factories.FromNodePackageJson.ExternalReferenceFactory;
-    get licenseFactory(): Factories.LicenseFactory;
+    get extRefFactory(): ExternalReferenceFactory;
+    get licenseFactory(): LicenseFactory;
     makeComponent(data: NodePackageJson, type?: ComponentType): Component | undefined;
 }
-//# sourceMappingURL=fromNodePackageJson.node.d.ts.map
+//# sourceMappingURL=builders.d.ts.map

package/dist.d/contrib/fromNodePackageJson/builders.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"builders.d.ts","sourceRoot":"","sources":["../../../src/contrib/fromNodePackageJson/builders.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF;;;;;;;GAOG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AAGlD,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAA;AACxC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAE1D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAA;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAE9C;;GAEG;AACH,qBAAa,WAAW;;gBAGT,aAAa,EAAE,WAAW,CAAC,eAAe,CAAC;IAIxD,IAAI,aAAa,IAAK,wBAAwB,CAE7C;IAID,QAAQ,CAAE,IAAI,EAAE,eAAe,GAAG,IAAI,GAAG,SAAS;CAcnD;AAED;;GAEG;AACH,qBAAa,gBAAgB;;gBAKzB,aAAa,EAAE,gBAAgB,CAAC,eAAe,CAAC,EAChD,cAAc,EAAE,gBAAgB,CAAC,gBAAgB,CAAC;IAMpD,IAAI,aAAa,IAAK,wBAAwB,CAE7C;IAED,IAAI,cAAc,IAAK,cAAc,CAEpC;IAED,aAAa,CAAE,IAAI,EAAE,eAAe,EAAE,IAAI,GAAE,aAAqC,GAAG,SAAS,GAAG,SAAS;CAwD1G"}

package/dist.d/{factories/fromNodePackageJson.node.d.ts → contrib/fromNodePackageJson/factories.d.ts}

@@ -25,10 +25,10 @@ Copyright (c) OWASP Foundation. All Rights Reserved.
  * Normalization should be done downstream, for example via [`normalize-package-data`](https://www.npmjs.com/package/normalize-package-data).
  */
 import type { PackageURL } from 'packageurl-js';
-import type { Component } from '../models/component';
-import { ExternalReference } from '../models/externalReference';
-import type { NodePackageJson } from '../types/nodePackageJson';
-import { PackageUrlFactory as PlainPackageUrlFactory } from './packageUrl';
+import type { Component } from '../../models/component';
+import { ExternalReference } from '../../models/externalReference';
+import { PackageUrlFactory as PlainPackageUrlFactory } from '../packageUrl/factories';
+import type { NodePackageJson } from './types';
 /**
  * Node-specific ExternalReferenceFactory.
  */
@@ -47,4 +47,4 @@ export declare class PackageUrlFactory extends PlainPackageUrlFactory<'npm'> {
     #private;
     makeFromComponent(component: Component, sort?: boolean): PackageURL | undefined;
 }
-//# sourceMappingURL=fromNodePackageJson.node.d.ts.map
+//# sourceMappingURL=factories.d.ts.map

package/dist.d/contrib/fromNodePackageJson/factories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"factories.d.ts","sourceRoot":"","sources":["../../../src/contrib/fromNodePackageJson/factories.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAM/C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAA;AAElE,OAAO,EAAE,iBAAiB,IAAI,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AAErF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAG9C;;GAEG;AACH,qBAAa,wBAAwB;IACnC,sBAAsB,CAAE,IAAI,EAAE,eAAe,GAAG,iBAAiB,EAAE;IAWnE,OAAO,CAAE,IAAI,EAAE,eAAe,GAAG,iBAAiB,GAAG,SAAS;IAuB9D,YAAY,CAAE,IAAI,EAAE,eAAe,GAAG,iBAAiB,GAAG,SAAS;IAUnE,gBAAgB,CAAE,IAAI,EAAE,eAAe,GAAG,iBAAiB,GAAG,SAAS;IAiBvE,QAAQ,CAAC,IAAI,EAAE,eAAe,GAAG,iBAAiB,GAAG,SAAS;CAwB/D;AAED;;;GAGG;AACH,qBAAa,iBAAkB,SAAQ,sBAAsB,CAAC,KAAK,CAAC;;IAEzD,iBAAiB,CAAE,SAAS,EAAE,SAAS,EAAE,IAAI,GAAE,OAAe,GAAG,UAAU,GAAG,SAAS;CA8CjG"}

package/dist.d/contrib/fromNodePackageJson/index.node.d.ts

@@ -0,0 +1,31 @@
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+/**
+ * Node-specifics.
+ *
+ * Intended to run on normalized data structures
+ * based on [PackageJson spec](https://github.com/SchemaStore/schemastore/blob/master/src/schemas/json/package.json)
+ * and explained by [PackageJson description](https://docs.npmjs.com/cli/v9/configuring-npm/package-json).
+ * Normalization should be done downstream, for example via [`normalize-package-data`](https://www.npmjs.com/package/normalize-package-data).
+ */
+export * as Builders from './builders';
+export * as Factories from './factories';
+export * as Types from './types';
+export * as Utils from './utils';
+//# sourceMappingURL=index.node.d.ts.map

package/dist.d/contrib/fromNodePackageJson/index.node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.node.d.ts","sourceRoot":"","sources":["../../../src/contrib/fromNodePackageJson/index.node.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF;;;;;;;GAOG;AAEH,OAAO,KAAK,QAAQ,MAAM,YAAY,CAAA;AACtC,OAAO,KAAK,SAAS,MAAM,aAAa,CAAA;AACxC,OAAO,KAAK,KAAK,MAAM,SAAS,CAAA;AAChC,OAAO,KAAK,KAAK,MAAM,SAAS,CAAA"}

package/dist.d/{types/nodePackageJson.d.ts → contrib/fromNodePackageJson/types.d.ts}

@@ -66,4 +66,4 @@ export declare function isNodePackageJson(value: any): value is NodePackageJson;
  * @alpha
  */
 export declare function assertNodePackageJson(value: any): asserts value is NodePackageJson;
-//# sourceMappingURL=nodePackageJson.d.ts.map
+//# sourceMappingURL=types.d.ts.map

package/dist.d/contrib/fromNodePackageJson/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/contrib/fromNodePackageJson/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,KAAK,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,GAAG,CAAC,EAAE,MAAM,CAAA;KACb,CAAC,CAAA;IACF,MAAM,CAAC,EAAE,MAAM,GAAG;QAChB,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAA;IACD,IAAI,CAAC,EAAE,MAAM,GAAG;QACd,GAAG,CAAC,EAAE,MAAM,CAAA;KACb,CAAA;IACD,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,UAAU,CAAC,EAAE,MAAM,GAAG;QACpB,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,GAAG,CAAC,EAAE,MAAM,CAAA;QACZ,SAAS,CAAC,EAAE,MAAM,CAAA;KACnB,CAAA;IAED,IAAI,CAAC,EAAE,GAAG,CAAA;CACX;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAE,KAAK,EAAE,GAAG,GAAG,KAAK,IAAI,eAAe,CAOvE;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAE,KAAK,EAAE,GAAG,GAAG,OAAO,CAAC,KAAK,IAAI,eAAe,CAOnF"}

package/dist.d/{utils/npmjsUtility.node.d.ts → contrib/fromNodePackageJson/utils.d.ts}

@@ -16,7 +16,7 @@ limitations under the License.
 SPDX-License-Identifier: Apache-2.0
 Copyright (c) OWASP Foundation. All Rights Reserved.
 */
-import { HashAlgorithm } from '../enums/hashAlogorithm';
+import { HashAlgorithm } from '../../enums/hashAlogorithm';
 /**
  * @throws {@link RangeError} if value is unparsable
  */
@@ -26,4 +26,4 @@ export declare function parsePackageIntegrity(integrity: string): [HashAlgorithm
  * @see {@link https://github.com/package-url/purl-spec/blob/master/PURL-TYPES.rst#npm}
  */
 export declare const defaultRegistryMatcher: RegExp;
-//# sourceMappingURL=npmjsUtility.node.d.ts.map
+//# sourceMappingURL=utils.d.ts.map

package/dist.d/contrib/fromNodePackageJson/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/contrib/fromNodePackageJson/utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF,OAAO,EAAC,aAAa,EAAC,MAAM,4BAA4B,CAAA;AAgDxD;;GAEG;AACH,wBAAgB,qBAAqB,CAAE,SAAS,EAAE,MAAM,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,CAWjF;AAGD;;;GAGG;AACH,eAAO,MAAM,sBAAsB,QAA6C,CAAA"}

package/dist.d/contrib/index.common.d.ts

@@ -0,0 +1,24 @@
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+/**
+ * Some features in this library are marked as contrib. These are community-provided extensions and are not part of the official standard. They are optional and may evolve independently from the core.
+ */
+export * as Bom from './bom';
+export * as PackageUrl from './packageUrl';
+//# sourceMappingURL=index.common.d.ts.map

package/dist.d/contrib/index.common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.common.d.ts","sourceRoot":"","sources":["../../src/contrib/index.common.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF;;GAEG;AAEH,OAAO,KAAK,GAAG,MAAM,OAAO,CAAA;AAC5B,OAAO,KAAK,UAAU,MAAM,cAAc,CAAA"}

package/dist.d/contrib/index.node.d.ts

@@ -0,0 +1,25 @@
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+/**
+ * Some features in this library are marked as contrib. These are community-provided extensions and are not part of the official standard. They are optional and may evolve independently from the core.
+ */
+export * from './index.common';
+export * as FromNodePackageJson from './fromNodePackageJson/index.node';
+export * as License from './license/index.node';
+//# sourceMappingURL=index.node.d.ts.map

package/dist.d/contrib/index.node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.node.d.ts","sourceRoot":"","sources":["../../src/contrib/index.node.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF;;GAEG;AAEH,cAAc,gBAAgB,CAAA;AAI9B,OAAO,KAAK,mBAAmB,MAAM,kCAAkC,CAAA;AACvE,OAAO,KAAK,OAAO,MAAM,sBAAsB,CAAA"}

package/dist.d/contrib/index.web.d.ts

@@ -0,0 +1,24 @@
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+/**
+ * Some features in this library are marked as contrib. These are community-provided extensions and are not part of the official standard. They are optional and may evolve independently from the core.
+ */
+export * from './index.common';
+export * as License from './license/index.web';
+//# sourceMappingURL=index.web.d.ts.map

package/dist.d/contrib/index.web.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.web.d.ts","sourceRoot":"","sources":["../../src/contrib/index.web.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF;;GAEG;AAEH,cAAc,gBAAgB,CAAA;AAI9B,OAAO,KAAK,OAAO,MAAM,qBAAqB,CAAA"}

package/dist.d/contrib/license/_helpers/mime.node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mime.node.d.ts","sourceRoot":"","sources":["../../../../src/contrib/license/_helpers/mime.node.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAIF,KAAK,QAAQ,GAAG,MAAM,CAAA;AA8BtB,wBAAgB,2BAA2B,CAAE,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAKnF"}

package/dist.d/{factories/license.d.ts → contrib/license/factories.d.ts}

@@ -16,8 +16,8 @@ limitations under the License.
 SPDX-License-Identifier: Apache-2.0
 Copyright (c) OWASP Foundation. All Rights Reserved.
 */
-import type { DisjunctiveLicense, License } from '../models/license';
-import { LicenseExpression, NamedLicense, SpdxLicense } from '../models/license';
+import type { DisjunctiveLicense, License } from '../../models/license';
+import { LicenseExpression, NamedLicense, SpdxLicense } from '../../models/license';
 export declare class LicenseFactory {
     makeFromString(value: string): License;
     /**
@@ -31,4 +31,4 @@ export declare class LicenseFactory {
     makeSpdxLicense(value: string | any): SpdxLicense;
     makeNamedLicense(value: string | any): NamedLicense;
 }
-//# sourceMappingURL=license.d.ts.map
+//# sourceMappingURL=factories.d.ts.map

package/dist.d/contrib/license/factories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"factories.d.ts","sourceRoot":"","sources":["../../../src/contrib/license/factories.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF,OAAO,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AACvE,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAGnF,qBAAa,cAAc;IACzB,cAAc,CAAE,KAAK,EAAE,MAAM,GAAG,OAAO;IAgBvC;;OAEG;IACH,cAAc,CAAE,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,iBAAiB;IAQvD,eAAe,CAAE,KAAK,EAAE,MAAM,GAAG,kBAAkB;IAQnD;;OAEG;IACH,eAAe,CAAE,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,WAAW;IASlD,gBAAgB,CAAE,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,YAAY;CAGrD"}

package/dist.d/contrib/license/index.common.d.ts

@@ -0,0 +1,20 @@
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+export * as Factories from './factories';
+//# sourceMappingURL=index.common.d.ts.map

package/dist.d/contrib/license/index.common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.common.d.ts","sourceRoot":"","sources":["../../../src/contrib/license/index.common.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF,OAAO,KAAK,SAAS,MAAM,aAAa,CAAA"}

package/dist.d/contrib/license/index.node.d.ts

@@ -0,0 +1,21 @@
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+export * from './index.common';
+export * as Utils from './utils.node';
+//# sourceMappingURL=index.node.d.ts.map

package/dist.d/contrib/license/index.node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.node.d.ts","sourceRoot":"","sources":["../../../src/contrib/license/index.node.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF,cAAc,gBAAgB,CAAA;AAI9B,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA"}

package/dist.d/contrib/license/index.web.d.ts

@@ -0,0 +1,20 @@
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+export * from './index.common';
+//# sourceMappingURL=index.web.d.ts.map

package/dist.d/contrib/license/index.web.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.web.d.ts","sourceRoot":"","sources":["../../../src/contrib/license/index.web.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF,cAAc,gBAAgB,CAAA"}

package/dist.d/{utils/licenseUtility.node.d.ts → contrib/license/utils.node.d.ts}

@@ -23,7 +23,7 @@ Copyright (c) OWASP Foundation. All Rights Reserved.
  * @module
  */
 import type { Stats } from 'node:fs';
-import { Attachment } from '../models/attachment';
+import { Attachment } from '../../models/attachment';
 export interface FsUtils<P extends string> {
     readdirSync: (path: P) => P[];
     readFileSync: (path: P) => Buffer;
@@ -52,4 +52,4 @@ export declare class LicenseEvidenceGatherer<P extends string = string> {
     });
     getFileAttachments(prefixPath: P, onError?: ErrorReporter): Generator<FileAttachment<P>>;
 }
-//# sourceMappingURL=licenseUtility.node.d.ts.map
+//# sourceMappingURL=utils.node.d.ts.map

package/dist.d/contrib/license/utils.node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.node.d.ts","sourceRoot":"","sources":["../../../src/contrib/license/utils.node.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAA;AAGpC,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAA;AAGpD,MAAM,WAAW,OAAO,CAAC,CAAC,SAAS,MAAM;IACvC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC,KAAM,CAAC,EAAE,CAAA;IAC9B,YAAY,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,MAAM,CAAA;IACjC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,KAAK,CAAA;CAC7B;AAED,MAAM,WAAW,SAAS,CAAC,CAAC,SAAS,MAAM;IACzC,IAAI,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,CAAA;CAC3B;AAED,MAAM,WAAW,cAAc,CAAC,CAAC,SAAS,MAAM;IAC9C,QAAQ,EAAE,CAAC,CAAA;IACX,IAAI,EAAE,CAAC,CAAA;IACP,IAAI,EAAE,UAAU,CAAA;CACjB;AAID,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,EAAC,KAAK,KAAK,GAAG,CAAA;AAE5C,qBAAa,uBAAuB,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM;;IAK5D;;;;;OAKG;gBACU,OAAO,GAAE;QAAE,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAA;KAAO;IAQjE,kBAAkB,CAAE,UAAU,EAAE,CAAC,EAAE,OAAO,GAAE,aAAoB,GAAG,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;CA6BlG"}

package/dist.d/{factories/packageUrl.d.ts → contrib/packageUrl/factories.d.ts}

@@ -17,11 +17,11 @@ SPDX-License-Identifier: Apache-2.0
 Copyright (c) OWASP Foundation. All Rights Reserved.
 */
 import { PackageURL } from 'packageurl-js';
-import type { Component } from '../models/component';
+import type { Component } from '../../models/component';
 export declare class PackageUrlFactory<PurlType extends PackageURL['type'] = PackageURL['type']> {
     #private;
     constructor(type: PurlType);
     get type(): PurlType;
     makeFromComponent(component: Component, sort?: boolean): PackageURL | undefined;
 }
-//# sourceMappingURL=packageUrl.d.ts.map
+//# sourceMappingURL=factories.d.ts.map

package/dist.d/contrib/packageUrl/factories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"factories.d.ts","sourceRoot":"","sources":["../../../src/contrib/packageUrl/factories.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF,OAAO,EAAE,UAAU,EAAsB,MAAM,eAAe,CAAA;AAG9D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AAEvD,qBAAa,iBAAiB,CAAC,QAAQ,SAAS,UAAU,CAAC,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC;;gBAGxE,IAAI,EAAE,QAAQ;IAI3B,IAAI,IAAI,IAAK,QAAQ,CAEpB;IAGD,iBAAiB,CAAE,SAAS,EAAE,SAAS,EAAE,IAAI,GAAE,OAAe,GAAG,UAAU,GAAG,SAAS;CAuDxF"}

package/dist.d/contrib/packageUrl/index.d.ts

@@ -0,0 +1,20 @@
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+export * as Factories from './factories';
+//# sourceMappingURL=index.d.ts.map

package/dist.d/contrib/packageUrl/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/contrib/packageUrl/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF,OAAO,KAAK,SAAS,MAAM,aAAa,CAAA"}

package/dist.d/factories/index.common.d.ts

@@ -16,6 +16,22 @@ limitations under the License.
 SPDX-License-Identifier: Apache-2.0
 Copyright (c) OWASP Foundation. All Rights Reserved.
 */
-export * from './license';
-export * from './packageUrl';
+import { LicenseFactory as _LicenseFactory } from '../contrib/license/factories';
+import { PackageUrlFactory as _PackageUrlFactory } from '../contrib/packageUrl/factories';
+/**
+ * Deprecated — Alias of {@link Contrib.License.Factories.LicenseFactory}.
+ *
+ * @deprecated This re-export location is deprecated.
+ * Import `Contrib.License.Factories.LicenseFactory` instead.
+ * The exported symbol itself is NOT deprecated - only this import path.
+ */
+export declare const LicenseFactory: typeof _LicenseFactory;
+/**
+ * Deprecated — Alias of {@link Contrib.PackageUrl.Factories.PackageUrlFactory}.
+ *
+ * @deprecated This re-export location is deprecated.
+ * Import `Contrib.PackageUrl.Factories.PackageUrlFactory` instead.
+ * The exported symbol itself is NOT deprecated - only this import path.
+ */
+export declare const PackageUrlFactory: typeof _PackageUrlFactory;
 //# sourceMappingURL=index.common.d.ts.map

package/dist.d/factories/index.common.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.common.d.ts","sourceRoot":"","sources":["../../src/factories/index.common.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAIF,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA"}
+{"version":3,"file":"index.common.d.ts","sourceRoot":"","sources":["../../src/factories/index.common.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF,OAAO,EAAC,cAAc,IAAI,eAAe,EAAC,MAAM,8BAA8B,CAAA;AAC9E,OAAO,EAAC,iBAAiB,IAAI,kBAAkB,EAAC,MAAM,iCAAiC,CAAA;AAKvF;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,wBAAkB,CAAA;AAE7C;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,2BAAqB,CAAA"}

package/dist.d/factories/index.node.d.ts

@@ -16,6 +16,14 @@ limitations under the License.
 SPDX-License-Identifier: Apache-2.0
 Copyright (c) OWASP Foundation. All Rights Reserved.
 */
+import * as _FromNodePackageJson from '../contrib/fromNodePackageJson/factories';
 export * from './index.common';
-export * as FromNodePackageJson from './fromNodePackageJson.node';
+/**
+ * Deprecated — Alias of {@link Contrib.FromNodePackageJson.Factories}.
+ *
+ * @deprecated This re-export location is deprecated.
+ * Import `Contrib.FromNodePackageJson.Factories` instead.
+ * The exported symbol itself is NOT deprecated - only this import path.
+ */
+export declare const FromNodePackageJson: typeof _FromNodePackageJson;
 //# sourceMappingURL=index.node.d.ts.map

package/dist.d/factories/index.node.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.node.d.ts","sourceRoot":"","sources":["../../src/factories/index.node.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF,cAAc,gBAAgB,CAAA;AAI9B,OAAO,KAAK,mBAAmB,MAAM,4BAA4B,CAAA"}
+{"version":3,"file":"index.node.d.ts","sourceRoot":"","sources":["../../src/factories/index.node.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF,OAAO,KAAK,oBAAoB,MAAM,0CAA0C,CAAA;AAEhF,cAAc,gBAAgB,CAAA;AAM9B;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,6BAAuB,CAAA"}

package/dist.d/index.node.d.ts

@@ -17,9 +17,13 @@ SPDX-License-Identifier: Apache-2.0
 Copyright (c) OWASP Foundation. All Rights Reserved.
 */
 export * from './index.common';
+/** @deprecated next */
 export * as Builders from './builders/index.node';
+export * as Contrib from './contrib/index.node';
+/** @deprecated next */
 export * as Factories from './factories/index.node';
 export * as Serialize from './serialize/index.node';
+/** @deprecated next */
 export * as Utils from './utils/index.node';
 export * as Validation from './validation/index.node';
 //# sourceMappingURL=index.node.d.ts.map

package/dist.d/index.node.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.node.d.ts","sourceRoot":"","sources":["../src/index.node.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAMF,cAAc,gBAAgB,CAAA;AAI9B,OAAO,KAAK,QAAQ,MAAM,uBAAuB,CAAA;AACjD,OAAO,KAAK,SAAS,MAAM,wBAAwB,CAAA;AACnD,OAAO,KAAK,SAAS,MAAM,wBAAwB,CAAA;AACnD,OAAO,KAAK,KAAK,MAAM,oBAAoB,CAAA;AAC3C,OAAO,KAAK,UAAU,MAAM,yBAAyB,CAAA"}
+{"version":3,"file":"index.node.d.ts","sourceRoot":"","sources":["../src/index.node.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAMF,cAAc,gBAAgB,CAAA;AAI9B,uBAAuB;AACvB,OAAO,KAAK,QAAQ,MAAM,uBAAuB,CAAA;AACjD,OAAO,KAAK,OAAO,MAAM,sBAAsB,CAAA;AAC/C,uBAAuB;AACvB,OAAO,KAAK,SAAS,MAAM,wBAAwB,CAAA;AACnD,OAAO,KAAK,SAAS,MAAM,wBAAwB,CAAA;AACnD,uBAAuB;AACvB,OAAO,KAAK,KAAK,MAAM,oBAAoB,CAAA;AAC3C,OAAO,KAAK,UAAU,MAAM,yBAAyB,CAAA"}

package/dist.d/index.web.d.ts

@@ -17,8 +17,11 @@ SPDX-License-Identifier: Apache-2.0
 Copyright (c) OWASP Foundation. All Rights Reserved.
 */
 export * from './index.common';
+export * as Contrib from './contrib/index.web';
+/** @deprecated next */
 export * as Factories from './factories/index.web';
 export * as Serialize from './serialize/index.web';
+/** @deprecated next */
 export * as Utils from './utils/index.web';
 export * as Validation from './validation/index.web';
 //# sourceMappingURL=index.web.d.ts.map

package/dist.d/index.web.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.web.d.ts","sourceRoot":"","sources":["../src/index.web.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF,cAAc,gBAAgB,CAAA;AAI9B,OAAO,KAAK,SAAS,MAAM,uBAAuB,CAAA;AAClD,OAAO,KAAK,SAAS,MAAM,uBAAuB,CAAA;AAClD,OAAO,KAAK,KAAK,MAAM,mBAAmB,CAAA;AAC1C,OAAO,KAAK,UAAU,MAAM,wBAAwB,CAAA"}
+{"version":3,"file":"index.web.d.ts","sourceRoot":"","sources":["../src/index.web.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF,cAAc,gBAAgB,CAAA;AAI9B,OAAO,KAAK,OAAO,MAAM,qBAAqB,CAAA;AAC9C,uBAAuB;AACvB,OAAO,KAAK,SAAS,MAAM,uBAAuB,CAAA;AAClD,OAAO,KAAK,SAAS,MAAM,uBAAuB,CAAA;AAClD,uBAAuB;AACvB,OAAO,KAAK,KAAK,MAAM,mBAAmB,CAAA;AAC1C,OAAO,KAAK,UAAU,MAAM,wBAAwB,CAAA"}

package/dist.d/types/index.d.ts

@@ -16,9 +16,33 @@ limitations under the License.
 SPDX-License-Identifier: Apache-2.0
 Copyright (c) OWASP Foundation. All Rights Reserved.
 */
+import { assertNodePackageJson as _assertNodePackageJson, isNodePackageJson as _isNodePackageJson, type NodePackageJson as _NodePackageJson } from '../contrib/fromNodePackageJson/types';
 export * from './cpe';
 export * from './cwe';
 export * from './integer';
 export * from './mimeType';
-export * from './nodePackageJson';
+/**
+ * Deprecated — Alias of {@link Contrib.FromNodePackageJson.Types.NodePackageJson}.
+ *
+ * @deprecated This re-export location is deprecated.
+ * Import `Contrib.FromNodePackageJson.Types.NodePackageJson` instead.
+ * The exported symbol itself is NOT deprecated - only this import path.
+ */
+export type NodePackageJson = _NodePackageJson;
+/**
+ * Deprecated — Alias of {@link Contrib.FromNodePackageJson.Types.assertNodePackageJson}.
+ *
+ * @deprecated This re-export location is deprecated.
+ * Import `Contrib.FromNodePackageJson.Types.assertNodePackageJson` instead.
+ * The exported symbol itself is NOT deprecated - only this import path.
+ */
+export declare const assertNodePackageJson: typeof _assertNodePackageJson;
+/**
+ * Deprecated — Alias of {@link Contrib.FromNodePackageJson.Types.isNodePackageJson}.
+ *
+ * @deprecated This re-export location is deprecated.
+ * Import `Contrib.FromNodePackageJson.Types.isNodePackageJson` instead.
+ * The exported symbol itself is NOT deprecated - only this import path.
+ */
+export declare const isNodePackageJson: typeof _isNodePackageJson;
 //# sourceMappingURL=index.d.ts.map

package/dist.d/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF,cAAc,OAAO,CAAA;AACrB,cAAc,OAAO,CAAA;AACrB,cAAc,WAAW,CAAA;AACzB,cAAc,YAAY,CAAA;AAG1B,cAAc,mBAAmB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF,OAAO,EACL,qBAAqB,IAAI,sBAAsB,EAC/C,iBAAiB,IAAI,kBAAkB,EACvC,KAAK,eAAe,IAAI,gBAAgB,EACzC,MAAM,sCAAsC,CAAA;AAG7C,cAAc,OAAO,CAAA;AACrB,cAAc,OAAO,CAAA;AACrB,cAAc,WAAW,CAAA;AACzB,cAAc,YAAY,CAAA;AAI1B;;;;;;GAMG;AACH,MAAM,MAAM,eAAe,GAAG,gBAAgB,CAAA;AAE9C;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,+BAAyB,CAAA;AAE3D;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,2BAAqB,CAAA"}

package/dist.d/utils/index.common.d.ts

@@ -16,5 +16,13 @@ limitations under the License.
 SPDX-License-Identifier: Apache-2.0
 Copyright (c) OWASP Foundation. All Rights Reserved.
 */
-export * as BomUtility from './bomUtility';
+import * as _BomUtils from '../contrib/bom/utils';
+/**
+ * Deprecated — Alias of {@link Contrib.Bom.Utils}.
+ *
+ * @deprecated This re-export location is deprecated.
+ * Import `Contrib.Bom.Utils` instead.
+ * The exported symbol itself is NOT deprecated - only this import path.
+ */
+export declare const BomUtility: typeof _BomUtils;
 //# sourceMappingURL=index.common.d.ts.map