@cyclonedx/cyclonedx-library 9.2.0 → 9.4.0

package/dist.web/lib.dev.js

@@ -287,6 +287,614 @@ class OptPlugError extends Error {
 exports.OptPlugError = OptPlugError;
 
 
+/***/ }),
+
+/***/ "./src/contrib/bom/index.ts":
+/*!**********************************!*\
+  !*** ./src/contrib/bom/index.ts ***!
+  \**********************************/
+/***/ (function(__unused_webpack_module, exports, __webpack_require__) {
+
+
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.Utils = void 0;
+exports.Utils = __importStar(__webpack_require__(/*! ./utils */ "./src/contrib/bom/utils.ts"));
+
+
+/***/ }),
+
+/***/ "./src/contrib/bom/utils.ts":
+/*!**********************************!*\
+  !*** ./src/contrib/bom/utils.ts ***!
+  \**********************************/
+/***/ ((__unused_webpack_module, exports) => {
+
+
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.randomSerialNumber = randomSerialNumber;
+function randomSerialNumber() {
+    const b = [
+        Math.round(Math.random() * 0xFFFF),
+        Math.round(Math.random() * 0xFFFF),
+        Math.round(Math.random() * 0xFFFF),
+        Math.round(Math.random() * 0x0FFF) | 0x4000,
+        Math.round(Math.random() * 0x3FFF) | 0x8000,
+        Math.round(Math.random() * 0xFFFF),
+        Math.round(Math.random() * 0xFFFF),
+        Math.round(Math.random() * 0xFFFF)
+    ].map(n => n.toString(16).padStart(4, '0'));
+    return `urn:uuid:${b[0]}${b[1]}-${b[2]}-${b[3]}-${b[4]}-${b[5]}${b[6]}${b[7]}`;
+}
+
+
+/***/ }),
+
+/***/ "./src/contrib/fromNodePackageJson/types.ts":
+/*!**************************************************!*\
+  !*** ./src/contrib/fromNodePackageJson/types.ts ***!
+  \**************************************************/
+/***/ ((__unused_webpack_module, exports) => {
+
+
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.isNodePackageJson = isNodePackageJson;
+exports.assertNodePackageJson = assertNodePackageJson;
+function isNodePackageJson(value) {
+    throw new Error('Not implemented');
+}
+function assertNodePackageJson(value) {
+    throw new Error('Not implemented');
+}
+
+
+/***/ }),
+
+/***/ "./src/contrib/index.common.ts":
+/*!*************************************!*\
+  !*** ./src/contrib/index.common.ts ***!
+  \*************************************/
+/***/ (function(__unused_webpack_module, exports, __webpack_require__) {
+
+
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.PackageUrl = exports.Bom = void 0;
+exports.Bom = __importStar(__webpack_require__(/*! ./bom */ "./src/contrib/bom/index.ts"));
+exports.PackageUrl = __importStar(__webpack_require__(/*! ./packageUrl */ "./src/contrib/packageUrl/index.ts"));
+
+
+/***/ }),
+
+/***/ "./src/contrib/index.web.ts":
+/*!**********************************!*\
+  !*** ./src/contrib/index.web.ts ***!
+  \**********************************/
+/***/ (function(__unused_webpack_module, exports, __webpack_require__) {
+
+
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.License = void 0;
+__exportStar(__webpack_require__(/*! ./index.common */ "./src/contrib/index.common.ts"), exports);
+exports.License = __importStar(__webpack_require__(/*! ./license/index.web */ "./src/contrib/license/index.web.ts"));
+
+
+/***/ }),
+
+/***/ "./src/contrib/license/factories.ts":
+/*!******************************************!*\
+  !*** ./src/contrib/license/factories.ts ***!
+  \******************************************/
+/***/ ((__unused_webpack_module, exports, __webpack_require__) => {
+
+
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.LicenseFactory = void 0;
+const license_1 = __webpack_require__(/*! ../../models/license */ "./src/models/license.ts");
+const spdx_1 = __webpack_require__(/*! ../../spdx */ "./src/spdx.ts");
+class LicenseFactory {
+    makeFromString(value) {
+        try {
+            return this.makeSpdxLicense(value);
+        }
+        catch {
+        }
+        try {
+            return this.makeExpression(value);
+        }
+        catch {
+        }
+        return this.makeNamedLicense(value);
+    }
+    makeExpression(value) {
+        const expression = String(value);
+        if ((0, spdx_1.isValidSpdxLicenseExpression)(expression)) {
+            return new license_1.LicenseExpression(expression);
+        }
+        throw new RangeError('Invalid SPDX license expression');
+    }
+    makeDisjunctive(value) {
+        try {
+            return this.makeSpdxLicense(value);
+        }
+        catch {
+            return this.makeNamedLicense(value);
+        }
+    }
+    makeSpdxLicense(value) {
+        const fixed = (0, spdx_1.fixupSpdxId)(String(value));
+        if (undefined === fixed) {
+            throw new RangeError('Unsupported SPDX license ID');
+        }
+        return new license_1.SpdxLicense(fixed);
+    }
+    makeNamedLicense(value) {
+        return new license_1.NamedLicense(String(value));
+    }
+}
+exports.LicenseFactory = LicenseFactory;
+
+
+/***/ }),
+
+/***/ "./src/contrib/license/index.common.ts":
+/*!*********************************************!*\
+  !*** ./src/contrib/license/index.common.ts ***!
+  \*********************************************/
+/***/ (function(__unused_webpack_module, exports, __webpack_require__) {
+
+
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.Factories = void 0;
+exports.Factories = __importStar(__webpack_require__(/*! ./factories */ "./src/contrib/license/factories.ts"));
+
+
+/***/ }),
+
+/***/ "./src/contrib/license/index.web.ts":
+/*!******************************************!*\
+  !*** ./src/contrib/license/index.web.ts ***!
+  \******************************************/
+/***/ (function(__unused_webpack_module, exports, __webpack_require__) {
+
+
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+__exportStar(__webpack_require__(/*! ./index.common */ "./src/contrib/license/index.common.ts"), exports);
+
+
+/***/ }),
+
+/***/ "./src/contrib/packageUrl/factories.ts":
+/*!*********************************************!*\
+  !*** ./src/contrib/packageUrl/factories.ts ***!
+  \*********************************************/
+/***/ ((__unused_webpack_module, exports, __webpack_require__) => {
+
+
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.PackageUrlFactory = void 0;
+const packageurl_js_1 = __webpack_require__(/*! packageurl-js */ "packageurl-js");
+const externalReferenceType_1 = __webpack_require__(/*! ../../enums/externalReferenceType */ "./src/enums/externalReferenceType.ts");
+class PackageUrlFactory {
+    #type;
+    constructor(type) {
+        this.#type = type;
+    }
+    get type() {
+        return this.#type;
+    }
+    makeFromComponent(component, sort = false) {
+        const qualifiers = {};
+        qualifiers.__proto__ = null;
+        let subpath = undefined;
+        const extRefs = sort
+            ? component.externalReferences.sorted()
+            : component.externalReferences;
+        for (const extRef of extRefs) {
+            const url = extRef.url.toString();
+            if (url.length <= 0) {
+                continue;
+            }
+            switch (extRef.type) {
+                case externalReferenceType_1.ExternalReferenceType.VCS:
+                    [qualifiers[packageurl_js_1.PurlQualifierNames.VcsUrl], subpath] = url.split('#', 2);
+                    break;
+                case externalReferenceType_1.ExternalReferenceType.Distribution:
+                    qualifiers[packageurl_js_1.PurlQualifierNames.DownloadUrl] = url;
+                    break;
+            }
+        }
+        const hashes = component.hashes;
+        if (hashes.size > 0) {
+            qualifiers[packageurl_js_1.PurlQualifierNames.Checksum] = Array.from(sort
+                ? hashes.sorted()
+                : hashes, ([hashAlgo, hashCont]) => `${hashAlgo.toLowerCase()}:${hashCont.toLowerCase()}`).join(',');
+        }
+        try {
+            return new packageurl_js_1.PackageURL(this.#type, component.group, component.name, component.version, qualifiers, subpath);
+        }
+        catch {
+            return undefined;
+        }
+    }
+}
+exports.PackageUrlFactory = PackageUrlFactory;
+
+
+/***/ }),
+
+/***/ "./src/contrib/packageUrl/index.ts":
+/*!*****************************************!*\
+  !*** ./src/contrib/packageUrl/index.ts ***!
+  \*****************************************/
+/***/ (function(__unused_webpack_module, exports, __webpack_require__) {
+
+
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.Factories = void 0;
+exports.Factories = __importStar(__webpack_require__(/*! ./factories */ "./src/contrib/packageUrl/factories.ts"));
+
+
 /***/ }),
 
 /***/ "./src/enums/attachmentEncoding.ts":
@@ -988,7 +1596,7 @@ var Severity;
 /*!***************************************!*\
   !*** ./src/factories/index.common.ts ***!
   \***************************************/
-/***/ (function(__unused_webpack_module, exports, __webpack_require__) {
+/***/ ((__unused_webpack_module, exports, __webpack_require__) => {
 
 
 /*!
@@ -1009,23 +1617,12 @@ limitations under the License.
 SPDX-License-Identifier: Apache-2.0
 Copyright (c) OWASP Foundation. All Rights Reserved.
 */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
 Object.defineProperty(exports, "__esModule", ({ value: true }));
-__exportStar(__webpack_require__(/*! ./license */ "./src/factories/license.ts"), exports);
-__exportStar(__webpack_require__(/*! ./packageUrl */ "./src/factories/packageUrl.ts"), exports);
+exports.PackageUrlFactory = exports.LicenseFactory = void 0;
+const factories_1 = __webpack_require__(/*! ../contrib/license/factories */ "./src/contrib/license/factories.ts");
+const factories_2 = __webpack_require__(/*! ../contrib/packageUrl/factories */ "./src/contrib/packageUrl/factories.ts");
+exports.LicenseFactory = factories_1.LicenseFactory;
+exports.PackageUrlFactory = factories_2.PackageUrlFactory;
 
 
 /***/ }),
@@ -1073,157 +1670,6 @@ Object.defineProperty(exports, "__esModule", ({ value: true }));
 __exportStar(__webpack_require__(/*! ./index.common */ "./src/factories/index.common.ts"), exports);
 
 
-/***/ }),
-
-/***/ "./src/factories/license.ts":
-/*!**********************************!*\
-  !*** ./src/factories/license.ts ***!
-  \**********************************/
-/***/ ((__unused_webpack_module, exports, __webpack_require__) => {
-
-
-/*!
-This file is part of CycloneDX JavaScript Library.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-   http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-
-SPDX-License-Identifier: Apache-2.0
-Copyright (c) OWASP Foundation. All Rights Reserved.
-*/
-Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.LicenseFactory = void 0;
-const license_1 = __webpack_require__(/*! ../models/license */ "./src/models/license.ts");
-const spdx_1 = __webpack_require__(/*! ../spdx */ "./src/spdx.ts");
-class LicenseFactory {
-    makeFromString(value) {
-        try {
-            return this.makeSpdxLicense(value);
-        }
-        catch {
-        }
-        try {
-            return this.makeExpression(value);
-        }
-        catch {
-        }
-        return this.makeNamedLicense(value);
-    }
-    makeExpression(value) {
-        const expression = String(value);
-        if ((0, spdx_1.isValidSpdxLicenseExpression)(expression)) {
-            return new license_1.LicenseExpression(expression);
-        }
-        throw new RangeError('Invalid SPDX license expression');
-    }
-    makeDisjunctive(value) {
-        try {
-            return this.makeSpdxLicense(value);
-        }
-        catch {
-            return this.makeNamedLicense(value);
-        }
-    }
-    makeSpdxLicense(value) {
-        const fixed = (0, spdx_1.fixupSpdxId)(String(value));
-        if (undefined === fixed) {
-            throw new RangeError('Unsupported SPDX license ID');
-        }
-        return new license_1.SpdxLicense(fixed);
-    }
-    makeNamedLicense(value) {
-        return new license_1.NamedLicense(String(value));
-    }
-}
-exports.LicenseFactory = LicenseFactory;
-
-
-/***/ }),
-
-/***/ "./src/factories/packageUrl.ts":
-/*!*************************************!*\
-  !*** ./src/factories/packageUrl.ts ***!
-  \*************************************/
-/***/ ((__unused_webpack_module, exports, __webpack_require__) => {
-
-
-/*!
-This file is part of CycloneDX JavaScript Library.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-   http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-
-SPDX-License-Identifier: Apache-2.0
-Copyright (c) OWASP Foundation. All Rights Reserved.
-*/
-Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.PackageUrlFactory = void 0;
-const packageurl_js_1 = __webpack_require__(/*! packageurl-js */ "packageurl-js");
-const externalReferenceType_1 = __webpack_require__(/*! ../enums/externalReferenceType */ "./src/enums/externalReferenceType.ts");
-class PackageUrlFactory {
-    #type;
-    constructor(type) {
-        this.#type = type;
-    }
-    get type() {
-        return this.#type;
-    }
-    makeFromComponent(component, sort = false) {
-        const qualifiers = {};
-        qualifiers.__proto__ = null;
-        let subpath = undefined;
-        const extRefs = sort
-            ? component.externalReferences.sorted()
-            : component.externalReferences;
-        for (const extRef of extRefs) {
-            const url = extRef.url.toString();
-            if (url.length <= 0) {
-                continue;
-            }
-            switch (extRef.type) {
-                case externalReferenceType_1.ExternalReferenceType.VCS:
-                    [qualifiers[packageurl_js_1.PurlQualifierNames.VcsUrl], subpath] = url.split('#', 2);
-                    break;
-                case externalReferenceType_1.ExternalReferenceType.Distribution:
-                    qualifiers[packageurl_js_1.PurlQualifierNames.DownloadUrl] = url;
-                    break;
-            }
-        }
-        const hashes = component.hashes;
-        if (hashes.size > 0) {
-            qualifiers[packageurl_js_1.PurlQualifierNames.Checksum] = Array.from(sort
-                ? hashes.sorted()
-                : hashes, ([hashAlgo, hashCont]) => `${hashAlgo.toLowerCase()}:${hashCont.toLowerCase()}`).join(',');
-        }
-        try {
-            return new packageurl_js_1.PackageURL(this.#type, component.group, component.name, component.version, qualifiers, subpath);
-        }
-        catch {
-            return undefined;
-        }
-    }
-}
-exports.PackageUrlFactory = PackageUrlFactory;
-
-
 /***/ }),
 
 /***/ "./src/index.common.ts":
@@ -1357,8 +1803,9 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.Validation = exports.Utils = exports.Serialize = exports.Factories = void 0;
+exports.Validation = exports.Utils = exports.Serialize = exports.Factories = exports.Contrib = void 0;
 __exportStar(__webpack_require__(/*! ./index.common */ "./src/index.common.ts"), exports);
+exports.Contrib = __importStar(__webpack_require__(/*! ./contrib/index.web */ "./src/contrib/index.web.ts"));
 exports.Factories = __importStar(__webpack_require__(/*! ./factories/index.web */ "./src/factories/index.web.ts"));
 exports.Serialize = __importStar(__webpack_require__(/*! ./serialize/index.web */ "./src/serialize/index.web.ts"));
 exports.Utils = __importStar(__webpack_require__(/*! ./utils/index.web */ "./src/utils/index.web.ts"));
@@ -6657,11 +7104,14 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.isNodePackageJson = exports.assertNodePackageJson = void 0;
+const types_1 = __webpack_require__(/*! ../contrib/fromNodePackageJson/types */ "./src/contrib/fromNodePackageJson/types.ts");
 __exportStar(__webpack_require__(/*! ./cpe */ "./src/types/cpe.ts"), exports);
 __exportStar(__webpack_require__(/*! ./cwe */ "./src/types/cwe.ts"), exports);
 __exportStar(__webpack_require__(/*! ./integer */ "./src/types/integer.ts"), exports);
 __exportStar(__webpack_require__(/*! ./mimeType */ "./src/types/mimeType.ts"), exports);
-__exportStar(__webpack_require__(/*! ./nodePackageJson */ "./src/types/nodePackageJson.ts"), exports);
+exports.assertNodePackageJson = types_1.assertNodePackageJson;
+exports.isNodePackageJson = types_1.isNodePackageJson;
 
 
 /***/ }),
@@ -6744,88 +7194,6 @@ function isMimeType(value) {
 }
 
 
-/***/ }),
-
-/***/ "./src/types/nodePackageJson.ts":
-/*!**************************************!*\
-  !*** ./src/types/nodePackageJson.ts ***!
-  \**************************************/
-/***/ ((__unused_webpack_module, exports) => {
-
-
-/*!
-This file is part of CycloneDX JavaScript Library.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-   http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-
-SPDX-License-Identifier: Apache-2.0
-Copyright (c) OWASP Foundation. All Rights Reserved.
-*/
-Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.isNodePackageJson = isNodePackageJson;
-exports.assertNodePackageJson = assertNodePackageJson;
-function isNodePackageJson(value) {
-    throw new Error('Not implemented');
-}
-function assertNodePackageJson(value) {
-    throw new Error('Not implemented');
-}
-
-
-/***/ }),
-
-/***/ "./src/utils/bomUtility.ts":
-/*!*********************************!*\
-  !*** ./src/utils/bomUtility.ts ***!
-  \*********************************/
-/***/ ((__unused_webpack_module, exports) => {
-
-
-/*!
-This file is part of CycloneDX JavaScript Library.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-   http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-
-SPDX-License-Identifier: Apache-2.0
-Copyright (c) OWASP Foundation. All Rights Reserved.
-*/
-Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.randomSerialNumber = randomSerialNumber;
-function randomSerialNumber() {
-    const b = [
-        Math.round(Math.random() * 0xFFFF),
-        Math.round(Math.random() * 0xFFFF),
-        Math.round(Math.random() * 0xFFFF),
-        Math.round(Math.random() * 0x0FFF) | 0x4000,
-        Math.round(Math.random() * 0x3FFF) | 0x8000,
-        Math.round(Math.random() * 0xFFFF),
-        Math.round(Math.random() * 0xFFFF),
-        Math.round(Math.random() * 0xFFFF)
-    ].map(n => n.toString(16).padStart(4, '0'));
-    return `urn:uuid:${b[0]}${b[1]}-${b[2]}-${b[3]}-${b[4]}-${b[5]}${b[6]}${b[7]}`;
-}
-
-
 /***/ }),
 
 /***/ "./src/utils/index.common.ts":
@@ -6888,7 +7256,8 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.BomUtility = void 0;
-exports.BomUtility = __importStar(__webpack_require__(/*! ./bomUtility */ "./src/utils/bomUtility.ts"));
+const _BomUtils = __importStar(__webpack_require__(/*! ../contrib/bom/utils */ "./src/contrib/bom/utils.ts"));
+exports.BomUtility = _BomUtils;
 
 
 /***/ }),