@cyclonedx/cyclonedx-library 9.2.0 → 9.4.0

package/dist.web/lib.js

@@ -1,3 +1,3 @@
 /*! For license information please see lib.js.LICENSE.txt */
-!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.CycloneDX_library=t():e.CycloneDX_library=t()}(self,()=>(()=>{"use strict";var e={48:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.isNotUndefined=function(e){return void 0!==e}},94:function(e,t,r){var n,o=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),i=this&&this.__setModuleDefault||(Object.create?function(e,t){Object.defineProperty(e,"default",{enumerable:!0,value:t})}:function(e,t){e.default=t}),s=this&&this.__exportStar||function(e,t){for(var r in e)"default"===r||Object.prototype.hasOwnProperty.call(t,r)||o(t,e,r)},a=this&&this.__importStar||(n=function(e){return n=Object.getOwnPropertyNames||function(e){var t=[];for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[t.length]=r);return t},n(e)},function(e){if(e&&e.__esModule)return e;var t={};if(null!=e)for(var r=n(e),s=0;s<r.length;s++)"default"!==r[s]&&o(t,e,r[s]);return i(t,e),t});Object.defineProperty(t,"__esModule",{value:!0}),t.XML=t.JSON=t.Types=void 0,s(r(7676),t),s(r(8070),t),t.Types=a(r(8440)),s(r(8352),t),t.JSON=a(r(4212)),s(r(8127),t),t.XML=a(r(1007)),s(r(4889),t)},204:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.XmlSerializer=void 0;const n=r(48),o=r(4889);class i extends o.XmlBaseSerializer{_serialize(e,{space:t}={}){const r=this.#e(e);return(new XMLSerializer).serializeToString(r)}#e(e){const t=document.implementation.createDocument(null,null);return t.appendChild(this.#t(e,t,null)),t}#r(e){const t=(e.namespace??e.attributes?.xmlns)?.toString()??"";return t.length>0?t:null}#t(e,t,r){const o=this.#r(e)??r,i=t.createElementNS(o,e.name);return(0,n.isNotUndefined)(e.attributes)&&this.#n(i,e.attributes),(0,n.isNotUndefined)(e.children)&&this.#o(i,e.children,o),i}#n(e,t){for(const[r,o]of Object.entries(t))(0,n.isNotUndefined)(o)&&"xmlns"!==r&&e.setAttribute(r,`${o}`)}#o(e,t,r=null){if(void 0===t)return;if("string"==typeof t||"number"==typeof t)return void(e.textContent=t.toString());const n=e.ownerDocument;for(const o of t)"element"===o.type&&e.appendChild(this.#t(o,n,r))}}t.XmlSerializer=i},382:function(e,t,r){var n=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),o=this&&this.__exportStar||function(e,t){for(var r in e)"default"===r||Object.prototype.hasOwnProperty.call(t,r)||n(t,e,r)};Object.defineProperty(t,"__esModule",{value:!0}),o(r(656),t),o(r(4196),t),o(r(2971),t)},608:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.isCPE=function(e){return"string"==typeof e&&r.test(e)};const r=/^([c][pP][eE]:\/[AHOaho]?(:[A-Za-z0-9\._\-~%]*){0,6})$|^(cpe:2\.3:[aho\*\-](:(((\?*|\*?)([a-zA-Z0-9\-\._]|(\\[\\\*\?!"#$$%&'\(\)\+,\/:;<=>@\[\]\^`\{\|}~]))+(\?*|\*?))|[\*\-])){5}(:(([a-zA-Z]{2,3}(-([a-zA-Z]{2}|[0-9]{3}))?)|[\*\-]))(:(((\?*|\*?)([a-zA-Z0-9\-\._]|(\\[\\\*\?!"#$$%&'\(\)\+,\/:;<=>@\[\]\^`\{\|}~]))+(\?*|\*?))|[\*\-])){4})$/},625:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.Source=void 0,t.Source=class{name;url;constructor(e={}){this.name=e.name,this.url=e.url}compare(e){return(this.url?.toString()??"").localeCompare(e.url?.toString()??"")||(this.name??"").localeCompare(e.name??"")}}},656:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.SpecVersionDict=t.Spec1dot7=t.Spec1dot6=t.Spec1dot5=t.Spec1dot4=t.Spec1dot3=t.Spec1dot2=void 0;const n=r(5866),o=r(3321),i=r(1525),s=r(5486),a=r(1699),l=r(4196);t.Spec1dot2=Object.freeze(new a._Spec(l.Version.v1dot2,[l.Format.XML,l.Format.JSON],[n.ComponentType.Application,n.ComponentType.Framework,n.ComponentType.Library,n.ComponentType.Container,n.ComponentType.OperatingSystem,n.ComponentType.Device,n.ComponentType.Firmware,n.ComponentType.File],[i.HashAlgorithm.MD5,i.HashAlgorithm["SHA-1"],i.HashAlgorithm["SHA-256"],i.HashAlgorithm["SHA-384"],i.HashAlgorithm["SHA-512"],i.HashAlgorithm["SHA3-256"],i.HashAlgorithm["SHA3-384"],i.HashAlgorithm["SHA3-512"],i.HashAlgorithm["BLAKE2b-256"],i.HashAlgorithm["BLAKE2b-384"],i.HashAlgorithm["BLAKE2b-512"],i.HashAlgorithm.BLAKE3],/^([a-fA-F0-9]{32})$|^([a-fA-F0-9]{40})$|^([a-fA-F0-9]{64})$|^([a-fA-F0-9]{96})$|^([a-fA-F0-9]{128})$/,[o.ExternalReferenceType.VCS,o.ExternalReferenceType.IssueTracker,o.ExternalReferenceType.Website,o.ExternalReferenceType.Advisories,o.ExternalReferenceType.BOM,o.ExternalReferenceType.MailingList,o.ExternalReferenceType.Social,o.ExternalReferenceType.Chat,o.ExternalReferenceType.Documentation,o.ExternalReferenceType.Support,o.ExternalReferenceType.Distribution,o.ExternalReferenceType.License,o.ExternalReferenceType.BuildMeta,o.ExternalReferenceType.BuildSystem,o.ExternalReferenceType.Other],!0,!1,!0,!1,!1,[],!1,!1,!1,!1,!1,!1,!0,!1)),t.Spec1dot3=Object.freeze(new a._Spec(l.Version.v1dot3,[l.Format.XML,l.Format.JSON],[n.ComponentType.Application,n.ComponentType.Framework,n.ComponentType.Library,n.ComponentType.Container,n.ComponentType.OperatingSystem,n.ComponentType.Device,n.ComponentType.Firmware,n.ComponentType.File],[i.HashAlgorithm.MD5,i.HashAlgorithm["SHA-1"],i.HashAlgorithm["SHA-256"],i.HashAlgorithm["SHA-384"],i.HashAlgorithm["SHA-512"],i.HashAlgorithm["SHA3-256"],i.HashAlgorithm["SHA3-384"],i.HashAlgorithm["SHA3-512"],i.HashAlgorithm["BLAKE2b-256"],i.HashAlgorithm["BLAKE2b-384"],i.HashAlgorithm["BLAKE2b-512"],i.HashAlgorithm.BLAKE3],/^([a-fA-F0-9]{32})$|^([a-fA-F0-9]{40})$|^([a-fA-F0-9]{64})$|^([a-fA-F0-9]{96})$|^([a-fA-F0-9]{128})$/,[o.ExternalReferenceType.VCS,o.ExternalReferenceType.IssueTracker,o.ExternalReferenceType.Website,o.ExternalReferenceType.Advisories,o.ExternalReferenceType.BOM,o.ExternalReferenceType.MailingList,o.ExternalReferenceType.Social,o.ExternalReferenceType.Chat,o.ExternalReferenceType.Documentation,o.ExternalReferenceType.Support,o.ExternalReferenceType.Distribution,o.ExternalReferenceType.License,o.ExternalReferenceType.BuildMeta,o.ExternalReferenceType.BuildSystem,o.ExternalReferenceType.Other],!0,!1,!0,!0,!1,[],!0,!1,!0,!0,!0,!1,!0,!1)),t.Spec1dot4=Object.freeze(new a._Spec(l.Version.v1dot4,[l.Format.XML,l.Format.JSON],[n.ComponentType.Application,n.ComponentType.Framework,n.ComponentType.Library,n.ComponentType.Container,n.ComponentType.OperatingSystem,n.ComponentType.Device,n.ComponentType.Firmware,n.ComponentType.File],[i.HashAlgorithm.MD5,i.HashAlgorithm["SHA-1"],i.HashAlgorithm["SHA-256"],i.HashAlgorithm["SHA-384"],i.HashAlgorithm["SHA-512"],i.HashAlgorithm["SHA3-256"],i.HashAlgorithm["SHA3-384"],i.HashAlgorithm["SHA3-512"],i.HashAlgorithm["BLAKE2b-256"],i.HashAlgorithm["BLAKE2b-384"],i.HashAlgorithm["BLAKE2b-512"],i.HashAlgorithm.BLAKE3],/^([a-fA-F0-9]{32})$|^([a-fA-F0-9]{40})$|^([a-fA-F0-9]{64})$|^([a-fA-F0-9]{96})$|^([a-fA-F0-9]{128})$/,[o.ExternalReferenceType.VCS,o.ExternalReferenceType.IssueTracker,o.ExternalReferenceType.Website,o.ExternalReferenceType.Advisories,o.ExternalReferenceType.BOM,o.ExternalReferenceType.MailingList,o.ExternalReferenceType.Social,o.ExternalReferenceType.Chat,o.ExternalReferenceType.Documentation,o.ExternalReferenceType.Support,o.ExternalReferenceType.Distribution,o.ExternalReferenceType.License,o.ExternalReferenceType.BuildMeta,o.ExternalReferenceType.BuildSystem,o.ExternalReferenceType.ReleaseNotes,o.ExternalReferenceType.Other],!0,!0,!1,!0,!0,[s.RatingMethod.CVSSv2,s.RatingMethod.CVSSv3,s.RatingMethod.CVSSv31,s.RatingMethod.OWASP,s.RatingMethod.Other],!0,!1,!0,!0,!0,!1,!0,!1)),t.Spec1dot5=Object.freeze(new a._Spec(l.Version.v1dot5,[l.Format.XML,l.Format.JSON],[n.ComponentType.Application,n.ComponentType.Framework,n.ComponentType.Library,n.ComponentType.Container,n.ComponentType.Platform,n.ComponentType.OperatingSystem,n.ComponentType.Device,n.ComponentType.DeviceDriver,n.ComponentType.Firmware,n.ComponentType.File,n.ComponentType.MachineLearningModel,n.ComponentType.Data],[i.HashAlgorithm.MD5,i.HashAlgorithm["SHA-1"],i.HashAlgorithm["SHA-256"],i.HashAlgorithm["SHA-384"],i.HashAlgorithm["SHA-512"],i.HashAlgorithm["SHA3-256"],i.HashAlgorithm["SHA3-384"],i.HashAlgorithm["SHA3-512"],i.HashAlgorithm["BLAKE2b-256"],i.HashAlgorithm["BLAKE2b-384"],i.HashAlgorithm["BLAKE2b-512"],i.HashAlgorithm.BLAKE3],/^([a-fA-F0-9]{32})$|^([a-fA-F0-9]{40})$|^([a-fA-F0-9]{64})$|^([a-fA-F0-9]{96})$|^([a-fA-F0-9]{128})$/,[o.ExternalReferenceType.VCS,o.ExternalReferenceType.IssueTracker,o.ExternalReferenceType.Website,o.ExternalReferenceType.Advisories,o.ExternalReferenceType.BOM,o.ExternalReferenceType.MailingList,o.ExternalReferenceType.Social,o.ExternalReferenceType.Chat,o.ExternalReferenceType.Documentation,o.ExternalReferenceType.Support,o.ExternalReferenceType.Distribution,o.ExternalReferenceType.DistributionIntake,o.ExternalReferenceType.License,o.ExternalReferenceType.BuildMeta,o.ExternalReferenceType.BuildSystem,o.ExternalReferenceType.ReleaseNotes,o.ExternalReferenceType.SecurityContact,o.ExternalReferenceType.ModelCard,o.ExternalReferenceType.Log,o.ExternalReferenceType.Configuration,o.ExternalReferenceType.Evidence,o.ExternalReferenceType.Formulation,o.ExternalReferenceType.Attestation,o.ExternalReferenceType.ThreatModel,o.ExternalReferenceType.AdversaryModel,o.ExternalReferenceType.RiskAssessment,o.ExternalReferenceType.VulnerabilityAssertion,o.ExternalReferenceType.ExploitabilityStatement,o.ExternalReferenceType.PentestReport,o.ExternalReferenceType.StaticAnalysisReport,o.ExternalReferenceType.DynamicAnalysisReport,o.ExternalReferenceType.RuntimeAnalysisReport,o.ExternalReferenceType.ComponentAnalysisReport,o.ExternalReferenceType.MaturityReport,o.ExternalReferenceType.CertificationReport,o.ExternalReferenceType.CodifiedInfrastructure,o.ExternalReferenceType.QualityMetrics,o.ExternalReferenceType.POAM,o.ExternalReferenceType.Other],!0,!0,!1,!0,!0,[s.RatingMethod.CVSSv2,s.RatingMethod.CVSSv3,s.RatingMethod.CVSSv31,s.RatingMethod.CVSSv4,s.RatingMethod.OWASP,s.RatingMethod.SSVC,s.RatingMethod.Other],!0,!0,!0,!0,!0,!1,!0,!0)),t.Spec1dot6=Object.freeze(new a._Spec(l.Version.v1dot6,[l.Format.XML,l.Format.JSON],[n.ComponentType.Application,n.ComponentType.Framework,n.ComponentType.Library,n.ComponentType.Container,n.ComponentType.Platform,n.ComponentType.OperatingSystem,n.ComponentType.Device,n.ComponentType.DeviceDriver,n.ComponentType.Firmware,n.ComponentType.File,n.ComponentType.MachineLearningModel,n.ComponentType.Data,n.ComponentType.CryptographicAsset],[i.HashAlgorithm.MD5,i.HashAlgorithm["SHA-1"],i.HashAlgorithm["SHA-256"],i.HashAlgorithm["SHA-384"],i.HashAlgorithm["SHA-512"],i.HashAlgorithm["SHA3-256"],i.HashAlgorithm["SHA3-384"],i.HashAlgorithm["SHA3-512"],i.HashAlgorithm["BLAKE2b-256"],i.HashAlgorithm["BLAKE2b-384"],i.HashAlgorithm["BLAKE2b-512"],i.HashAlgorithm.BLAKE3],/^([a-fA-F0-9]{32})$|^([a-fA-F0-9]{40})$|^([a-fA-F0-9]{64})$|^([a-fA-F0-9]{96})$|^([a-fA-F0-9]{128})$/,[o.ExternalReferenceType.VCS,o.ExternalReferenceType.IssueTracker,o.ExternalReferenceType.Website,o.ExternalReferenceType.Advisories,o.ExternalReferenceType.BOM,o.ExternalReferenceType.MailingList,o.ExternalReferenceType.Social,o.ExternalReferenceType.Chat,o.ExternalReferenceType.Documentation,o.ExternalReferenceType.Support,o.ExternalReferenceType.SourceDistribution,o.ExternalReferenceType.Distribution,o.ExternalReferenceType.DistributionIntake,o.ExternalReferenceType.License,o.ExternalReferenceType.BuildMeta,o.ExternalReferenceType.BuildSystem,o.ExternalReferenceType.ReleaseNotes,o.ExternalReferenceType.SecurityContact,o.ExternalReferenceType.ModelCard,o.ExternalReferenceType.Log,o.ExternalReferenceType.Configuration,o.ExternalReferenceType.Evidence,o.ExternalReferenceType.Formulation,o.ExternalReferenceType.Attestation,o.ExternalReferenceType.ThreatModel,o.ExternalReferenceType.AdversaryModel,o.ExternalReferenceType.RiskAssessment,o.ExternalReferenceType.VulnerabilityAssertion,o.ExternalReferenceType.ExploitabilityStatement,o.ExternalReferenceType.PentestReport,o.ExternalReferenceType.StaticAnalysisReport,o.ExternalReferenceType.DynamicAnalysisReport,o.ExternalReferenceType.RuntimeAnalysisReport,o.ExternalReferenceType.ComponentAnalysisReport,o.ExternalReferenceType.MaturityReport,o.ExternalReferenceType.CertificationReport,o.ExternalReferenceType.CodifiedInfrastructure,o.ExternalReferenceType.QualityMetrics,o.ExternalReferenceType.POAM,o.ExternalReferenceType.ElectronicSignature,o.ExternalReferenceType.DigitalSignature,o.ExternalReferenceType.RFC9116,o.ExternalReferenceType.Other],!0,!0,!1,!0,!0,[s.RatingMethod.CVSSv2,s.RatingMethod.CVSSv3,s.RatingMethod.CVSSv31,s.RatingMethod.CVSSv4,s.RatingMethod.OWASP,s.RatingMethod.SSVC,s.RatingMethod.Other],!0,!0,!0,!0,!0,!0,!0,!0)),t.Spec1dot7=Object.freeze(new a._Spec(l.Version.v1dot7,[l.Format.XML,l.Format.JSON],[n.ComponentType.Application,n.ComponentType.Framework,n.ComponentType.Library,n.ComponentType.Container,n.ComponentType.Platform,n.ComponentType.OperatingSystem,n.ComponentType.Device,n.ComponentType.DeviceDriver,n.ComponentType.Firmware,n.ComponentType.File,n.ComponentType.MachineLearningModel,n.ComponentType.Data,n.ComponentType.CryptographicAsset],[i.HashAlgorithm.MD5,i.HashAlgorithm["SHA-1"],i.HashAlgorithm["SHA-256"],i.HashAlgorithm["SHA-384"],i.HashAlgorithm["SHA-512"],i.HashAlgorithm["SHA3-256"],i.HashAlgorithm["SHA3-384"],i.HashAlgorithm["SHA3-512"],i.HashAlgorithm["BLAKE2b-256"],i.HashAlgorithm["BLAKE2b-384"],i.HashAlgorithm["BLAKE2b-512"],i.HashAlgorithm.BLAKE3,i.HashAlgorithm["Streebog-256"],i.HashAlgorithm["Streebog-512"]],/^([a-fA-F0-9]{32})$|^([a-fA-F0-9]{40})$|^([a-fA-F0-9]{64})$|^([a-fA-F0-9]{96})$|^([a-fA-F0-9]{128})$/,[o.ExternalReferenceType.VCS,o.ExternalReferenceType.IssueTracker,o.ExternalReferenceType.Website,o.ExternalReferenceType.Advisories,o.ExternalReferenceType.BOM,o.ExternalReferenceType.MailingList,o.ExternalReferenceType.Social,o.ExternalReferenceType.Chat,o.ExternalReferenceType.Documentation,o.ExternalReferenceType.Support,o.ExternalReferenceType.SourceDistribution,o.ExternalReferenceType.Distribution,o.ExternalReferenceType.DistributionIntake,o.ExternalReferenceType.License,o.ExternalReferenceType.BuildMeta,o.ExternalReferenceType.BuildSystem,o.ExternalReferenceType.ReleaseNotes,o.ExternalReferenceType.SecurityContact,o.ExternalReferenceType.ModelCard,o.ExternalReferenceType.Log,o.ExternalReferenceType.Configuration,o.ExternalReferenceType.Evidence,o.ExternalReferenceType.Formulation,o.ExternalReferenceType.Attestation,o.ExternalReferenceType.ThreatModel,o.ExternalReferenceType.AdversaryModel,o.ExternalReferenceType.RiskAssessment,o.ExternalReferenceType.VulnerabilityAssertion,o.ExternalReferenceType.ExploitabilityStatement,o.ExternalReferenceType.PentestReport,o.ExternalReferenceType.StaticAnalysisReport,o.ExternalReferenceType.DynamicAnalysisReport,o.ExternalReferenceType.RuntimeAnalysisReport,o.ExternalReferenceType.ComponentAnalysisReport,o.ExternalReferenceType.MaturityReport,o.ExternalReferenceType.CertificationReport,o.ExternalReferenceType.CodifiedInfrastructure,o.ExternalReferenceType.QualityMetrics,o.ExternalReferenceType.POAM,o.ExternalReferenceType.ElectronicSignature,o.ExternalReferenceType.DigitalSignature,o.ExternalReferenceType.RFC9116,o.ExternalReferenceType.Citation,o.ExternalReferenceType.Patent,o.ExternalReferenceType.PatentAssertion,o.ExternalReferenceType.PatentFamily,o.ExternalReferenceType.RFC9116,o.ExternalReferenceType.Other],!0,!0,!1,!0,!0,[s.RatingMethod.CVSSv2,s.RatingMethod.CVSSv3,s.RatingMethod.CVSSv31,s.RatingMethod.CVSSv4,s.RatingMethod.OWASP,s.RatingMethod.SSVC,s.RatingMethod.Other],!0,!0,!0,!0,!0,!0,!0,!0)),t.SpecVersionDict=Object.freeze({[l.Version.v1dot7]:t.Spec1dot7,[l.Version.v1dot6]:t.Spec1dot6,[l.Version.v1dot5]:t.Spec1dot5,[l.Version.v1dot4]:t.Spec1dot4,[l.Version.v1dot3]:t.Spec1dot3,[l.Version.v1dot2]:t.Spec1dot2})},734:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.Metadata=void 0;const n=r(7988),o=r(4799),i=r(4477),s=r(4654),a=r(7645);t.Metadata=class{timestamp;lifecycles;tools;authors;component;manufacture;supplier;licenses;properties;constructor(e={}){this.timestamp=e.timestamp,this.lifecycles=e.lifecycles??new o.LifecycleRepository,this.tools=e.tools??new a.Tools,this.authors=e.authors??new i.OrganizationalContactRepository,this.component=e.component,this.manufacture=e.manufacture,this.supplier=e.supplier,this.licenses=e.licenses??new n.LicenseRepository,this.properties=e.properties??new s.PropertyRepository}}},759:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.CweRepository=void 0,t.isCWE=function(e){return(0,o.isPositiveInteger)(e)};const n=r(1507),o=r(9708);class i extends n.SortableNumbers{}t.CweRepository=i},785:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.AffectedVersionRepository=t.AffectedVersionRange=t.AffectedSingleVersion=t.AffectRepository=t.Affect=void 0;const n=r(1507);t.Affect=class{ref;versions;constructor(e,t={}){this.ref=e,this.versions=t.versions??new i}compare(e){return this.ref.compare(e.ref)||this.versions.compare(e.versions)}};class o extends n.SortableComparables{}t.AffectRepository=o,t.AffectedSingleVersion=class{version;status;constructor(e,t={}){this.version=e,this.status=t.status}compare(e){return this.version.localeCompare(e.version)||(this.status??"").localeCompare(e.status??"")}},t.AffectedVersionRange=class{range;status;constructor(e,t={}){this.range=e,this.status=t.status}compare(e){return this.range.localeCompare(e.range)||(this.status??"").localeCompare(e.status??"")}};class i extends n.SortableComparables{}t.AffectedVersionRepository=i},857:function(e,t,r){var n,o=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),i=this&&this.__setModuleDefault||(Object.create?function(e,t){Object.defineProperty(e,"default",{enumerable:!0,value:t})}:function(e,t){e.default=t}),s=this&&this.__exportStar||function(e,t){for(var r in e)"default"===r||Object.prototype.hasOwnProperty.call(t,r)||o(t,e,r)},a=this&&this.__importStar||(n=function(e){return n=Object.getOwnPropertyNames||function(e){var t=[];for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[t.length]=r);return t},n(e)},function(e){if(e&&e.__esModule)return e;var t={};if(null!=e)for(var r=n(e),s=0;s<r.length;s++)"default"!==r[s]&&o(t,e,r[s]);return i(t,e),t});Object.defineProperty(t,"__esModule",{value:!0}),t.Vulnerability=void 0,s(r(4277),t),s(r(2904),t),s(r(5866),t),s(r(3321),t),s(r(1525),t),s(r(1688),t),s(r(7894),t),t.Vulnerability=a(r(4880))},870:function(e,t,r){var n=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),o=this&&this.__exportStar||function(e,t){for(var r in e)"default"===r||Object.prototype.hasOwnProperty.call(t,r)||n(t,e,r)};Object.defineProperty(t,"__esModule",{value:!0}),o(r(5026),t),o(r(7472),t)},930:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.Analysis=void 0;const n=r(9511);t.Analysis=class{state;justification;response;detail;constructor(e={}){this.state=e.state,this.justification=e.justification,this.response=e.response??new n.AnalysisResponseRepository,this.detail=e.detail}}},1007:function(e,t,r){var n,o=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),i=this&&this.__setModuleDefault||(Object.create?function(e,t){Object.defineProperty(e,"default",{enumerable:!0,value:t})}:function(e,t){e.default=t}),s=this&&this.__importStar||(n=function(e){return n=Object.getOwnPropertyNames||function(e){var t=[];for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[t.length]=r);return t},n(e)},function(e){if(e&&e.__esModule)return e;var t={};if(null!=e)for(var r=n(e),s=0;s<r.length;s++)"default"!==r[s]&&o(t,e,r[s]);return i(t,e),t});Object.defineProperty(t,"__esModule",{value:!0}),t.Types=t.Normalize=void 0,t.Normalize=s(r(1280)),t.Types=s(r(2970))},1089:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.chainI=function*(...e){for(const t of e)for(const e of t)yield e}},1280:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.VulnerabilityAffectedVersionNormalizer=t.VulnerabilityAffectNormalizer=t.VulnerabilityAnalysisNormalizer=t.VulnerabilityCreditsNormalizer=t.VulnerabilityAdvisoryNormalizer=t.VulnerabilityRatingNormalizer=t.VulnerabilityReferenceNormalizer=t.VulnerabilitySourceNormalizer=t.VulnerabilityNormalizer=t.DependencyGraphNormalizer=t.PropertyNormalizer=t.AttachmentNormalizer=t.ExternalReferenceNormalizer=t.SWIDNormalizer=t.LicenseNormalizer=t.ComponentEvidenceNormalizer=t.ServiceNormalizer=t.ComponentNormalizer=t.OrganizationalEntityNormalizer=t.OrganizationalContactNormalizer=t.HashNormalizer=t.ToolsNormalizer=t.ToolNormalizer=t.LifecycleNormalizer=t.MetadataNormalizer=t.BomNormalizer=t.Factory=void 0;const n=r(1089),o=r(48),i=r(9027),s=r(7977),a=r(8207),l=r(7988),c=r(4799),p=r(785),m=r(4317),u=r(4196),d=r(2931),f=r(2970);t.Factory=class{#i;constructor(e){this.#i=e}get spec(){return this.#i}makeForBom(){return new v(this)}makeForMetadata(){return new b(this)}makeForLifecycle(){return new g(this)}makeForComponent(){return new R(this)}makeForService(){return new z(this)}makeForComponentEvidence(){return new _(this)}makeForTool(){return new S(this)}makeForTools(){return new C(this)}makeForOrganizationalContact(){return new A(this)}makeForOrganizationalEntity(){return new L(this)}makeForHash(){return new x(this)}makeForLicense(){return new P(this)}makeForSWID(){return new O(this)}makeForExternalReference(){return new T(this)}makeForAttachment(){return new E(this)}makeForProperty(){return new M(this)}makeForDependencyGraph(){return new N(this)}makeForVulnerability(){return new w(this)}makeForVulnerabilitySource(){return new D(this)}makeForVulnerabilityReference(){return new F(this)}makeForVulnerabilityRating(){return new k(this)}makeForVulnerabilityAdvisory(){return new I(this)}makeForVulnerabilityCredits(){return new B(this)}makeForVulnerabilityAffect(){return new V(this)}makeForVulnerabilityAffectedVersion(){return new H(this)}makeForVulnerabilityAnalysis(){return new j(this)}};const h=new Map([[u.Version.v1dot7,"http://cyclonedx.org/schema/bom/1.7"],[u.Version.v1dot6,"http://cyclonedx.org/schema/bom/1.6"],[u.Version.v1dot5,"http://cyclonedx.org/schema/bom/1.5"],[u.Version.v1dot4,"http://cyclonedx.org/schema/bom/1.4"],[u.Version.v1dot3,"http://cyclonedx.org/schema/bom/1.3"],[u.Version.v1dot2,"http://cyclonedx.org/schema/bom/1.2"],[u.Version.v1dot1,"http://cyclonedx.org/schema/bom/1.1"],[u.Version.v1dot0,"http://cyclonedx.org/schema/bom/1.0"]]);class y{_factory;constructor(e){this._factory=e}get factory(){return this._factory}}class v extends y{normalize(e,t){const r={type:"element",name:"components",children:e.components.size>0?this._factory.makeForComponent().normalizeIterable(e.components,t,"component"):void 0},n=this._factory.spec.supportsServices&&e.services.size>0?{type:"element",name:"services",children:this._factory.makeForService().normalizeIterable(e.services,t,"service")}:void 0,i=this._factory.spec.supportsVulnerabilities&&e.vulnerabilities.size>0?{type:"element",name:"vulnerabilities",children:this._factory.makeForVulnerability().normalizeIterable(e.vulnerabilities,t,"vulnerability")}:void 0;return{type:"element",name:"bom",namespace:h.get(this._factory.spec.version),attributes:{version:e.version,serialNumber:this.#s(e.serialNumber)?e.serialNumber:void 0},children:[this._factory.makeForMetadata().normalize(e.metadata,t,"metadata"),r,n,this._factory.spec.supportsDependencyGraph?this._factory.makeForDependencyGraph().normalize(e,t,"dependencies"):void 0,i].filter(o.isNotUndefined)}}#s(e){return void 0!==e&&/^urn:uuid:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$|^\{[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\}$/.test(e)}}t.BomNormalizer=v;class b extends y{normalize(e,t,r){const n=this._factory.makeForOrganizationalEntity(),i=this._factory.spec.supportsMetadataLifecycles&&e.lifecycles.size>0?{type:"element",name:"lifecycles",children:this._factory.makeForLifecycle().normalizeIterable(e.lifecycles,t,"lifecycle")}:void 0,s=e.tools.size>0?this._factory.makeForTools().normalize(e.tools,t,"tools"):void 0,a=e.authors.size>0?{type:"element",name:"authors",children:this._factory.makeForOrganizationalContact().normalizeIterable(e.authors,t,"author")}:void 0,l=this._factory.spec.supportsMetadataLicenses&&e.licenses.size>0?{type:"element",name:"licenses",children:this._factory.makeForLicense().normalizeIterable(e.licenses,t)}:void 0,c=this._factory.spec.supportsMetadataProperties&&e.properties.size>0?{type:"element",name:"properties",children:this._factory.makeForProperty().normalizeIterable(e.properties,t,"property")}:void 0;return{type:"element",name:r,children:[K(e.timestamp,"timestamp"),i,s,a,void 0===e.component?void 0:this._factory.makeForComponent().normalize(e.component,t,"component"),void 0===e.manufacture?void 0:n.normalize(e.manufacture,t,"manufacture"),void 0===e.supplier?void 0:n.normalize(e.supplier,t,"supplier"),l,c].filter(o.isNotUndefined)}}}t.MetadataNormalizer=b;class g extends y{normalize(e,t,r){return e instanceof c.NamedLifecycle?{type:"element",name:r,children:[$(e.name,"name",d.normalizedString),G(e.description,"description")].filter(o.isNotUndefined)}:{type:"element",name:r,children:[$(e,"phase")]}}normalizeIterable(e,t,r){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t,r))}}t.LifecycleNormalizer=g;class S extends y{normalize(e,t,r){const n=e.hashes.size>0?{type:"element",name:"hashes",children:this._factory.makeForHash().normalizeIterable(e.hashes,t,"hash")}:void 0,i=this._factory.spec.supportsToolReferences&&e.externalReferences.size>0?{type:"element",name:"externalReferences",children:this._factory.makeForExternalReference().normalizeIterable(e.externalReferences,t,"reference")}:void 0;return{type:"element",name:r,children:[G(e.vendor,"vendor",d.normalizedString),G(e.name,"name",d.normalizedString),G(e.version,"version",d.normalizedString),n,i].filter(o.isNotUndefined)}}normalizeIterable(e,t,r){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t,r))}}t.ToolNormalizer=S;class C extends y{normalize(e,t,r){let o=[];return e.tools.size>0||!this._factory.spec.supportsToolsComponentsServices?o=this._factory.makeForTool().normalizeIterable(new a.ToolRepository((0,n.chainI)(Array.from(e.components,a.Tool.fromComponent),Array.from(e.services,a.Tool.fromService),e.tools)),t,"tool"):(e.components.size>0&&o.push({type:"element",name:"components",children:this._factory.makeForComponent().normalizeIterable(e.components,t,"component")}),e.services.size>0&&o.push({type:"element",name:"services",children:this._factory.makeForService().normalizeIterable(e.services,t,"service")})),{type:"element",name:r,children:o}}}t.ToolsNormalizer=C;class x extends y{normalize([e,t],r,n){const o=this._factory.spec;return o.supportsHashAlgorithm(e)&&o.supportsHashValue(t)?{type:"element",name:n,attributes:{alg:e},children:(0,d.token)(t)}:void 0}normalizeIterable(e,t,r){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t,r)).filter(o.isNotUndefined)}}t.HashNormalizer=x;class A extends y{normalize(e,t,r){return{type:"element",name:r,children:[G(e.name,"name",d.normalizedString),G(e.email,"email",d.normalizedString),G(e.phone,"phone",d.normalizedString)].filter(o.isNotUndefined)}}normalizeIterable(e,t,r){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t,r))}}t.OrganizationalContactNormalizer=A;class L extends y{normalize(e,t,r){return{type:"element",name:r,children:[G(e.name,"name",d.normalizedString),...Y(Array.from(e.url,e=>(0,s.escapeUri)(e.toString())),t,"url").filter(({children:e})=>f.XmlSchema.isAnyURI(e)),...this._factory.makeForOrganizationalContact().normalizeIterable(e.contact,t,"contact")].filter(o.isNotUndefined)}}normalizeIterable(e,t,r){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t,r))}}t.OrganizationalEntityNormalizer=L;class R extends y{normalize(e,t,r){const n=this._factory.spec;if(!n.supportsComponentType(e.type))return;const i=void 0===e.supplier?void 0:this._factory.makeForOrganizationalEntity().normalize(e.supplier,t,"supplier"),s=(n.requiresComponentVersion?$:G)(e.version??"","version",d.normalizedString),a=e.hashes.size>0?{type:"element",name:"hashes",children:this._factory.makeForHash().normalizeIterable(e.hashes,t,"hash")}:void 0,l=e.licenses.size>0?{type:"element",name:"licenses",children:this._factory.makeForLicense().normalizeIterable(e.licenses,t)}:void 0,c=void 0===e.swid?void 0:this._factory.makeForSWID().normalize(e.swid,t,"swid"),p=e.externalReferences.size>0?{type:"element",name:"externalReferences",children:this._factory.makeForExternalReference().normalizeIterable(e.externalReferences,t,"reference")}:void 0,m=n.supportsProperties(e)&&e.properties.size>0?{type:"element",name:"properties",children:this._factory.makeForProperty().normalizeIterable(e.properties,t,"property")}:void 0,u=e.components.size>0?{type:"element",name:"components",children:this.normalizeIterable(e.components,t,"component")}:void 0,f=n.supportsComponentEvidence&&void 0!==e.evidence?this._factory.makeForComponentEvidence().normalize(e.evidence,t,"evidence"):void 0;return{type:"element",name:r,attributes:{type:e.type,"bom-ref":e.bomRef.value},children:[i,G(e.author,"author",d.normalizedString),G(e.publisher,"publisher",d.normalizedString),G(e.group,"group",d.normalizedString),$(e.name,"name",d.normalizedString),s,G(e.description,"description",d.normalizedString),G(e.scope,"scope"),a,l,G(e.copyright,"copyright",d.normalizedString),G(e.cpe,"cpe"),G(e.purl,"purl"),c,p,m,u,f].filter(o.isNotUndefined)}}normalizeIterable(e,t,r){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t,r)).filter(o.isNotUndefined)}}t.ComponentNormalizer=R;class z extends y{normalize(e,t,r){const n=this._factory.spec,i=void 0===e.provider?void 0:this._factory.makeForOrganizationalEntity().normalize(e.provider,t,"provider"),s=e.licenses.size>0?{type:"element",name:"licenses",children:this._factory.makeForLicense().normalizeIterable(e.licenses,t)}:void 0,a=e.externalReferences.size>0?{type:"element",name:"externalReferences",children:this._factory.makeForExternalReference().normalizeIterable(e.externalReferences,t,"reference")}:void 0,l=n.supportsProperties(e)&&e.properties.size>0?{type:"element",name:"properties",children:this._factory.makeForProperty().normalizeIterable(e.properties,t,"property")}:void 0,c=e.services.size>0?{type:"element",name:"services",children:this.normalizeIterable(e.services,t,"service")}:void 0;return{type:"element",name:r,attributes:{"bom-ref":e.bomRef.value},children:[i,G(e.group,"group",d.normalizedString),$(e.name,"name",d.normalizedString),G(e.version,"version",d.normalizedString),G(e.description,"description",d.normalizedString),s,a,l,c].filter(o.isNotUndefined)}}normalizeIterable(e,t,r){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t,r))}}t.ServiceNormalizer=z;class _ extends y{normalize(e,t,r){return{type:"element",name:r,children:[e.licenses.size>0?{type:"element",name:"licenses",children:this._factory.makeForLicense().normalizeIterable(e.licenses,t)}:void 0,e.copyright.size>0?{type:"element",name:"copyright",children:Y(e.copyright,t,"text")}:void 0].filter(o.isNotUndefined)}}}t.ComponentEvidenceNormalizer=_;class P extends y{normalize(e,t){switch(!0){case e instanceof l.NamedLicense:return this.#a(e,t);case e instanceof l.SpdxLicense:return(0,m.isSupportedSpdxId)(e.id)?this.#l(e,t):this.#a(new l.NamedLicense(e.id,{url:e.url}),t);case e instanceof l.LicenseExpression:return this.#c(e);default:throw new TypeError("Unexpected LicenseChoice")}}#a(e,t){const r=(0,s.escapeUri)(e.url?.toString());return{type:"element",name:"license",attributes:{acknowledgement:this._factory.spec.supportsLicenseAcknowledgement?e.acknowledgement:void 0},children:[$(e.name,"name",d.normalizedString),void 0===e.text?void 0:this._factory.makeForAttachment().normalize(e.text,t,"text"),f.XmlSchema.isAnyURI(r)?$(r,"url"):void 0].filter(o.isNotUndefined)}}#l(e,t){const r=(0,s.escapeUri)(e.url?.toString());return{type:"element",name:"license",attributes:{acknowledgement:this._factory.spec.supportsLicenseAcknowledgement?e.acknowledgement:void 0},children:[$(e.id,"id"),void 0===e.text?void 0:this._factory.makeForAttachment().normalize(e.text,t,"text"),f.XmlSchema.isAnyURI(r)?$(r,"url"):void 0].filter(o.isNotUndefined)}}#c(e){const t=$(e.expression,"expression",d.normalizedString);return t.attributes={acknowledgement:this._factory.spec.supportsLicenseAcknowledgement?e.acknowledgement:void 0},t}normalizeIterable(e,t){const r=t.sortLists?e.sorted():Array.from(e);if(r.length>1){const e=r.filter(e=>e instanceof l.LicenseExpression);if(e.length>0)return[this.#c(e[0])]}return r.map(e=>this.normalize(e,t))}}t.LicenseNormalizer=P;class O extends y{normalize(e,t,r){const n=(0,s.escapeUri)(e.url?.toString());return{type:"element",name:r,attributes:{tagId:e.tagId,name:e.name,version:e.version||void 0,tagVersion:e.tagVersion,patch:void 0===e.patch?void 0:e.patch?"true":"false"},children:[void 0===e.text?void 0:this._factory.makeForAttachment().normalize(e.text,t,"text"),f.XmlSchema.isAnyURI(n)?$(n,"url"):void 0].filter(o.isNotUndefined)}}}t.SWIDNormalizer=O;class T extends y{normalize(e,t,r){const n=(0,s.escapeUri)(e.url.toString()),i=this._factory.spec.supportsExternalReferenceHashes&&e.hashes.size>0?{type:"element",name:"hashes",children:this._factory.makeForHash().normalizeIterable(e.hashes,t,"hash")}:void 0;return this._factory.spec.supportsExternalReferenceType(e.type)&&f.XmlSchema.isAnyURI(n)?{type:"element",name:r,attributes:{type:e.type},children:[$(n,"url"),G(e.comment,"comment"),i].filter(o.isNotUndefined)}:void 0}normalizeIterable(e,t,r){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t,r)).filter(o.isNotUndefined)}}t.ExternalReferenceNormalizer=T;class E extends y{normalize(e,t,r){return{type:"element",name:r,attributes:{"content-type":e.contentType?(0,d.normalizedString)(e.contentType):void 0,encoding:e.encoding||void 0},children:e.content.toString()}}}t.AttachmentNormalizer=E;class M extends y{normalize(e,t,r){return{type:"element",name:r,attributes:{name:e.name},children:(0,d.normalizedString)(e.value)}}normalizeIterable(e,t,r){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t,r))}}t.PropertyNormalizer=M;class N extends y{normalize(e,t,r){const n=new Map;if(void 0!==e.metadata.component){n.set(e.metadata.component.bomRef,e.metadata.component.dependencies);for(const t of e.metadata.component.components[i.treeIteratorSymbol]())n.set(t.bomRef,t.dependencies)}for(const t of e.components[i.treeIteratorSymbol]())n.set(t.bomRef,t.dependencies);for(const t of e.services[i.treeIteratorSymbol]())n.set(t.bomRef,t.dependencies);const s=[];for(const[e,r]of n){const i=this.#p(e,r,n,t);(0,o.isNotUndefined)(i)&&s.push(i)}return t.sortLists&&s.sort(({attributes:{ref:e}},{attributes:{ref:t}})=>e.localeCompare(t)),{type:"element",name:r,children:s}}#p(e,t,r,n){const o=e.toString();if(0===o.length)return;const i=Array.from(t).filter(t=>r.has(t)&&t!==e).map(e=>e.toString()).filter(e=>e.length>0);return n.sortLists&&i.sort((e,t)=>e.localeCompare(t)),{type:"element",name:"dependency",attributes:{ref:o},children:i.map(e=>({type:"element",name:"dependency",attributes:{ref:e}}))}}}t.DependencyGraphNormalizer=N;class w extends y{normalize(e,t,r){const n=e.references.size>0?{type:"element",name:"references",children:this._factory.makeForVulnerabilityReference().normalizeIterable(e.references,t,"reference")}:void 0,i=e.ratings.size>0?{type:"element",name:"ratings",children:this._factory.makeForVulnerabilityRating().normalizeIterable(e.ratings,t,"rating")}:void 0,s=e.cwes.size>0?{type:"element",name:"cwes",children:(t.sortLists?e.cwes.sorted():Array.from(e.cwes)).map(e=>$(e,"cwe"))}:void 0,a=e.advisories.size>0?{type:"element",name:"advisories",children:this._factory.makeForVulnerabilityAdvisory().normalizeIterable(e.advisories,t,"advisory")}:void 0,l=e.tools.size>0?this._factory.makeForTools().normalize(e.tools,t,"tools"):void 0,c=e.affects.size>0?{type:"element",name:"affects",children:this._factory.makeForVulnerabilityAffect().normalizeIterable(e.affects,t,"target")}:void 0,p=e.properties.size>0?{type:"element",name:"properties",children:this._factory.makeForProperty().normalizeIterable(e.properties,t,"property")}:void 0;return{type:"element",name:r,attributes:{"bom-ref":e.bomRef.value||void 0},children:[G(e.id,"id",d.normalizedString),void 0===e.source?void 0:this._factory.makeForVulnerabilitySource().normalize(e.source,t,"source"),n,i,s,G(e.description,"description"),G(e.detail,"detail"),G(e.recommendation,"recommendation"),a,K(e.created,"created"),K(e.created,"published"),K(e.created,"updated"),void 0===e.credits?void 0:this._factory.makeForVulnerabilityCredits().normalize(e.credits,t,"credits"),l,void 0===e.analysis?void 0:this._factory.makeForVulnerabilityAnalysis().normalize(e.analysis,t,"analysis"),c,p].filter(o.isNotUndefined)}}normalizeIterable(e,t,r){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t,r))}}t.VulnerabilityNormalizer=w;class D extends y{normalize(e,t,r){const n=(0,s.escapeUri)(e.url?.toString());return{type:"element",name:r,children:[G(e.name,"name",d.normalizedString),f.XmlSchema.isAnyURI(n)?$(n,"url"):void 0].filter(o.isNotUndefined)}}}t.VulnerabilitySourceNormalizer=D;class F extends y{normalize(e,t,r){return{type:"element",name:r,children:[$(e.id,"id"),this._factory.makeForVulnerabilitySource().normalize(e.source,t,"source")]}}normalizeIterable(e,t,r){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t,r))}}t.VulnerabilityReferenceNormalizer=F;class k extends y{normalize(e,t,r){return{type:"element",name:r,children:[void 0===e.source?void 0:this._factory.makeForVulnerabilitySource().normalize(e.source,t,"source"),G(e.score,"score"),G(e.severity,"severity"),this._factory.spec.supportsVulnerabilityRatingMethod(e.method)?G(e.method,"method"):void 0,G(e.vector,"vector",d.normalizedString),G(e.justification,"justification")].filter(o.isNotUndefined)}}normalizeIterable(e,t,r){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t,r))}}t.VulnerabilityRatingNormalizer=k;class I extends y{normalize(e,t,r){const n=(0,s.escapeUri)(e.url.toString());if(f.XmlSchema.isAnyURI(n))return{type:"element",name:r,children:[G(e.title,"title"),$(n,"url")].filter(o.isNotUndefined)}}normalizeIterable(e,t,r){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t,r)).filter(o.isNotUndefined)}}t.VulnerabilityAdvisoryNormalizer=I;class B extends y{normalize(e,t,r){return{type:"element",name:r,children:[e.organizations.size>0?{type:"element",name:"organizations",children:this._factory.makeForOrganizationalEntity().normalizeIterable(e.organizations,t,"organization")}:void 0,e.individuals.size>0?{type:"element",name:"individuals",children:this._factory.makeForOrganizationalContact().normalizeIterable(e.individuals,t,"individual")}:void 0].filter(o.isNotUndefined)}}}t.VulnerabilityCreditsNormalizer=B;class j extends y{normalize(e,t,r){const n=e.response.size>0?{type:"element",name:"responses",children:(t.sortLists?e.response.sorted():Array.from(e.response)).map(e=>$(e,"response"))}:void 0;return{type:"element",name:r,children:[G(e.state,"state"),G(e.justification,"justification"),n,G(e.detail,"detail")].filter(o.isNotUndefined)}}}t.VulnerabilityAnalysisNormalizer=j;class V extends y{normalize(e,t,r){const n=e.versions.size>0?{type:"element",name:"versions",children:this._factory.makeForVulnerabilityAffectedVersion().normalizeIterable(e.versions,t,"version")}:void 0;return{type:"element",name:r,children:[$(e.ref,"ref"),n].filter(o.isNotUndefined)}}normalizeIterable(e,t,r){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t,r))}}t.VulnerabilityAffectNormalizer=V;class H extends y{normalize(e,t,r){switch(!0){case e instanceof p.AffectedSingleVersion:return this.#m(e,r);case e instanceof p.AffectedVersionRange:return this.#u(e,r);default:throw new TypeError("Unexpected Vulnerability AffectedVersion")}}#m(e,t){return{type:"element",name:t,children:[$(e.version,"version",d.normalizedString),G(e.status,"status")].filter(o.isNotUndefined)}}#u(e,t){return{type:"element",name:t,children:[$(e.range,"range",d.normalizedString),G(e.status,"status")].filter(o.isNotUndefined)}}normalizeIterable(e,t,r){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t,r))}}t.VulnerabilityAffectedVersionNormalizer=H;const U=e=>e;function G(e,t,r=U){const n=r(e?.toString()??"");return n.length>0?$(n,t):void 0}function $(e,t,r=U){return{type:"element",name:t,children:r(e.toString())}}function Y(e,t,r,n=U){const o=Array.from(e,e=>$(e,r,n));return t.sortLists&&o.sort(({children:e},{children:t})=>e.localeCompare(t)),o}function K(e,t,r=U){const n=e?.toISOString();return void 0===n?void 0:$(n,t,r)}},1507:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.SortableNumbers=t.SortableStringables=t.SortableComparables=t.SortableSet=t.compareObjectsSymbol=void 0,t.compareObjectsSymbol=Symbol("internal compare function");class r extends Set{sorted(){return Array.from(this).sort(this[t.compareObjectsSymbol])}compare(e){const r=e.sorted(),n=this.sorted();if(n.length!==r.length)return n.length-r.length;for(let e=n.length-1;e>=0;--e){const o=this[t.compareObjectsSymbol](n[e],r[e]);if(0!==o)return o}return 0}}t.SortableSet=r;class n extends r{[t.compareObjectsSymbol](e,t){return e.constructor===t.constructor?e.compare(t):e.constructor.name.localeCompare(t.constructor.name)}}t.SortableComparables=n;class o extends r{[t.compareObjectsSymbol](e,t){return e.toString().localeCompare(t.toString())}}t.SortableStringables=o;class i extends r{[t.compareObjectsSymbol](e,t){return e-t}}t.SortableNumbers=i},1525:(e,t)=>{var r;Object.defineProperty(t,"__esModule",{value:!0}),t.HashAlgorithm=void 0,function(e){e.MD5="MD5",e["SHA-1"]="SHA-1",e["SHA-256"]="SHA-256",e["SHA-384"]="SHA-384",e["SHA-512"]="SHA-512",e["SHA3-256"]="SHA3-256",e["SHA3-384"]="SHA3-384",e["SHA3-512"]="SHA3-512",e["BLAKE2b-256"]="BLAKE2b-256",e["BLAKE2b-384"]="BLAKE2b-384",e["BLAKE2b-512"]="BLAKE2b-512",e.BLAKE3="BLAKE3",e["Streebog-256"]="Streebog-256",e["Streebog-512"]="Streebog-512"}(r||(t.HashAlgorithm=r={}))},1588:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.BomRefRepository=t.BomRef=void 0,t.BomRef=class{value;constructor(e){this.value=e}compare(e){return this.toString().localeCompare(e.toString())}toString(){return this.value??""}};class r extends Set{}t.BomRefRepository=r},1592:(e,t)=>{var r;Object.defineProperty(t,"__esModule",{value:!0}),t.AnalysisJustification=void 0,function(e){e.CodeNotPresent="code_not_present",e.CodeNotReachable="code_not_reachable",e.RequiresConfiguration="requires_configuration",e.RequiresDependency="requires_dependency",e.RequiresEnvironment="requires_environment",e.ProtectedByCompiler="protected_by_compiler",e.ProtectedAtRuntime="protected_at_runtime",e.ProtectedAtPerimeter="protected_at_perimeter",e.ProtectedByMitigatingControl="protected_by_mitigating_control"}(r||(t.AnalysisJustification=r={}))},1688:(e,t)=>{var r;Object.defineProperty(t,"__esModule",{value:!0}),t.LicenseAcknowledgement=void 0,function(e){e.Declared="declared",e.Concluded="concluded"}(r||(t.LicenseAcknowledgement=r={}))},1699:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t._Spec=void 0,t._Spec=class{#d;#f;#h;#y;#v;#b;#g;#S;#C;#x;#A;#L;#R;#z;#_;#P;#O;#T;#E;#M;constructor(e,t,r,n,o,i,s,a,l,c,p,m,u,d,f,h,y,v,b,g){this.#d=e,this.#f=new Set(t),this.#h=new Set(r),this.#y=new Set(n),this.#v=o,this.#b=new Set(i),this.#S=s,this.#C=a,this.#x=l,this.#A=c,this.#L=p,this.#g=new Set(m),this.#R=u,this.#z=d,this.#_=f,this.#P=h,this.#O=y,this.#T=v,this.#E=b,this.#M=g}get version(){return this.#d}supportsFormat(e){return this.#f.has(e)}supportsComponentType(e){return this.#h.has(e)}supportsHashAlgorithm(e){return this.#y.has(e)}supportsHashValue(e){return"string"==typeof e&&this.#v.test(e)}supportsExternalReferenceType(e){return this.#b.has(e)}get supportsDependencyGraph(){return this.#S}get supportsToolReferences(){return this.#C}get requiresComponentVersion(){return this.#x}supportsProperties(){return this.#A}get supportsVulnerabilities(){return this.#L}supportsVulnerabilityRatingMethod(e){return this.#g.has(e)}get supportsComponentEvidence(){return this.#R}get supportsMetadataLifecycles(){return this.#z}get supportsMetadataLicenses(){return this.#_}get supportsMetadataProperties(){return this.#P}get supportsExternalReferenceHashes(){return this.#O}get supportsLicenseAcknowledgement(){return this.#T}get supportsServices(){return this.#E}get supportsToolsComponentsServices(){return this.#M}}},1722:function(e,t,r){var n=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),o=this&&this.__exportStar||function(e,t){for(var r in e)"default"===r||Object.prototype.hasOwnProperty.call(t,r)||n(t,e,r)};Object.defineProperty(t,"__esModule",{value:!0}),o(r(7715),t)},1723:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.VulnerabilityAnalysisNormalizer=t.VulnerabilityAffectedVersionNormalizer=t.VulnerabilityAffectNormalizer=t.VulnerabilityCreditsNormalizer=t.VulnerabilityAdvisoryNormalizer=t.VulnerabilityRatingNormalizer=t.VulnerabilityReferenceNormalizer=t.VulnerabilitySourceNormalizer=t.VulnerabilityNormalizer=t.DependencyGraphNormalizer=t.PropertyNormalizer=t.AttachmentNormalizer=t.ExternalReferenceNormalizer=t.SWIDNormalizer=t.LicenseNormalizer=t.ComponentEvidenceNormalizer=t.ServiceNormalizer=t.ComponentNormalizer=t.OrganizationalEntityNormalizer=t.OrganizationalContactNormalizer=t.HashNormalizer=t.ToolsNormalizer=t.ToolNormalizer=t.LifecycleNormalizer=t.MetadataNormalizer=t.BomNormalizer=t.Factory=void 0;const n=r(1089),o=r(48),i=r(9027),s=r(7977),a=r(7988),l=r(4799),c=r(7645),p=r(785),m=r(4317),u=r(4196),d=r(3349);t.Factory=class{#i;constructor(e){this.#i=e}get spec(){return this.#i}makeForBom(){return new y(this)}makeForMetadata(){return new v(this)}makeForComponent(){return new L(this)}makeForService(){return new R(this)}makeForComponentEvidence(){return new z(this)}makeForLifecycle(){return new b(this)}makeForTool(){return new g(this)}makeForTools(){return new S(this)}makeForOrganizationalContact(){return new x(this)}makeForOrganizationalEntity(){return new A(this)}makeForHash(){return new C(this)}makeForLicense(){return new _(this)}makeForSWID(){return new P(this)}makeForExternalReference(){return new O(this)}makeForAttachment(){return new T(this)}makeForProperty(){return new E(this)}makeForDependencyGraph(){return new M(this)}makeForVulnerability(){return new N(this)}makeForVulnerabilitySource(){return new w(this)}makeForVulnerabilityReference(){return new D(this)}makeForVulnerabilityRating(){return new F(this)}makeForVulnerabilityAdvisory(){return new k(this)}makeForVulnerabilityCredits(){return new I(this)}makeForVulnerabilityAffect(){return new B(this)}makeForVulnerabilityAffectedVersion(){return new j(this)}makeForVulnerabilityAnalysis(){return new V(this)}};const f=new Map([[u.Version.v1dot7,"http://cyclonedx.org/schema/bom-1.7.schema.json"],[u.Version.v1dot6,"http://cyclonedx.org/schema/bom-1.6.schema.json"],[u.Version.v1dot5,"http://cyclonedx.org/schema/bom-1.5.schema.json"],[u.Version.v1dot4,"http://cyclonedx.org/schema/bom-1.4.schema.json"],[u.Version.v1dot3,"http://cyclonedx.org/schema/bom-1.3a.schema.json"],[u.Version.v1dot2,"http://cyclonedx.org/schema/bom-1.2b.schema.json"]]);class h{_factory;constructor(e){this._factory=e}get factory(){return this._factory}}class y extends h{normalize(e,t){return{$schema:f.get(this._factory.spec.version),bomFormat:"CycloneDX",specVersion:this._factory.spec.version,version:e.version,serialNumber:this.#s(e.serialNumber)?e.serialNumber:void 0,metadata:this._factory.makeForMetadata().normalize(e.metadata,t),components:e.components.size>0?this._factory.makeForComponent().normalizeIterable(e.components,t):[],services:this._factory.spec.supportsServices&&e.services.size>0?this._factory.makeForService().normalizeIterable(e.services,t):void 0,dependencies:this._factory.spec.supportsDependencyGraph?this._factory.makeForDependencyGraph().normalize(e,t):void 0,vulnerabilities:this._factory.spec.supportsVulnerabilities&&e.vulnerabilities.size>0?this._factory.makeForVulnerability().normalizeIterable(e.vulnerabilities,t):void 0}}#s(e){return void 0!==e&&/^urn:uuid:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.test(e)}}t.BomNormalizer=y;class v extends h{normalize(e,t){const r=this._factory.makeForOrganizationalEntity();return{timestamp:e.timestamp?.toISOString(),lifecycles:this._factory.spec.supportsMetadataLifecycles&&e.lifecycles.size>0?this._factory.makeForLifecycle().normalizeIterable(e.lifecycles,t):void 0,tools:e.tools.size>0?this._factory.makeForTools().normalize(e.tools,t):void 0,authors:e.authors.size>0?this._factory.makeForOrganizationalContact().normalizeIterable(e.authors,t):void 0,component:void 0===e.component?void 0:this._factory.makeForComponent().normalize(e.component,t),manufacture:void 0===e.manufacture?void 0:r.normalize(e.manufacture,t),supplier:void 0===e.supplier?void 0:r.normalize(e.supplier,t),licenses:this._factory.spec.supportsMetadataLicenses&&e.licenses.size>0?this._factory.makeForLicense().normalizeIterable(e.licenses,t):void 0,properties:this._factory.spec.supportsMetadataProperties&&e.properties.size>0?this._factory.makeForProperty().normalizeIterable(e.properties,t):void 0}}}t.MetadataNormalizer=v;class b extends h{normalize(e,t){return e instanceof l.NamedLifecycle?{name:e.name,description:e.description}:{phase:e}}normalizeIterable(e,t){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t))}}t.LifecycleNormalizer=b;class g extends h{normalize(e,t){return{vendor:e.vendor||void 0,name:e.name||void 0,version:e.version||void 0,hashes:e.hashes.size>0?this._factory.makeForHash().normalizeIterable(e.hashes,t):void 0,externalReferences:this._factory.spec.supportsToolReferences&&e.externalReferences.size>0?this._factory.makeForExternalReference().normalizeIterable(e.externalReferences,t):void 0}}normalizeIterable(e,t){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t))}}t.ToolNormalizer=g;class S extends h{normalize(e,t){return e.tools.size>0||!this._factory.spec.supportsToolsComponentsServices?this._factory.makeForTool().normalizeIterable(new c.ToolRepository((0,n.chainI)(Array.from(e.components,c.Tool.fromComponent),Array.from(e.services,c.Tool.fromService),e.tools)),t):{components:e.components.size>0?this._factory.makeForComponent().normalizeIterable(e.components,t):void 0,services:e.services.size>0?this._factory.makeForService().normalizeIterable(e.services,t):void 0}}}t.ToolsNormalizer=S;class C extends h{normalize([e,t],r){const n=this._factory.spec;return n.supportsHashAlgorithm(e)&&n.supportsHashValue(t)?{alg:e,content:t}:void 0}normalizeIterable(e,t){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t)).filter(o.isNotUndefined)}}t.HashNormalizer=C;class x extends h{normalize(e,t){return{name:e.name||void 0,email:d.JsonSchema.isIdnEmail(e.email)?e.email:void 0,phone:e.phone||void 0}}normalizeIterable(e,t){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t))}}t.OrganizationalContactNormalizer=x;class A extends h{normalize(e,t){const r=H(Array.from(e.url,e=>(0,s.escapeUri)(e.toString())),t).filter(d.JsonSchema.isIriReference);return{name:e.name||void 0,url:r.length>0?r:void 0,contact:e.contact.size>0?this._factory.makeForOrganizationalContact().normalizeIterable(e.contact,t):void 0}}normalizeIterable(e,t){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t))}}t.OrganizationalEntityNormalizer=A;class L extends h{normalize(e,t){const r=this._factory.spec;if(!r.supportsComponentType(e.type))return;const n=e.version??"";return{type:e.type,name:e.name,group:e.group||void 0,version:n.length>0||r.requiresComponentVersion?n:void 0,"bom-ref":e.bomRef.value||void 0,supplier:void 0===e.supplier?void 0:this._factory.makeForOrganizationalEntity().normalize(e.supplier,t),author:e.author||void 0,publisher:e.publisher||void 0,description:e.description||void 0,scope:e.scope,hashes:e.hashes.size>0?this._factory.makeForHash().normalizeIterable(e.hashes,t):void 0,licenses:e.licenses.size>0?this._factory.makeForLicense().normalizeIterable(e.licenses,t):void 0,copyright:e.copyright?.toString()||void 0,cpe:e.cpe||void 0,purl:e.purl?.toString(),swid:void 0===e.swid?void 0:this._factory.makeForSWID().normalize(e.swid,t),externalReferences:e.externalReferences.size>0?this._factory.makeForExternalReference().normalizeIterable(e.externalReferences,t):void 0,properties:r.supportsProperties(e)&&e.properties.size>0?this._factory.makeForProperty().normalizeIterable(e.properties,t):void 0,components:e.components.size>0?this.normalizeIterable(e.components,t):void 0,evidence:r.supportsComponentEvidence&&void 0!==e.evidence?this._factory.makeForComponentEvidence().normalize(e.evidence,t):void 0}}normalizeIterable(e,t){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t)).filter(o.isNotUndefined)}}t.ComponentNormalizer=L;class R extends h{normalize(e,t){const r=this._factory.spec;return{"bom-ref":e.bomRef.value||void 0,provider:e.provider?this._factory.makeForOrganizationalEntity().normalize(e.provider,t):void 0,group:e.group,name:e.name,version:e.version||void 0,description:e.description||void 0,licenses:e.licenses.size>0?this._factory.makeForLicense().normalizeIterable(e.licenses,t):void 0,externalReferences:e.externalReferences.size>0?this._factory.makeForExternalReference().normalizeIterable(e.externalReferences,t):void 0,services:e.services.size>0?this._factory.makeForService().normalizeIterable(e.services,t):void 0,properties:r.supportsProperties(e)&&e.properties.size>0?this._factory.makeForProperty().normalizeIterable(e.properties,t):void 0}}normalizeIterable(e,t){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t))}}t.ServiceNormalizer=R;class z extends h{normalize(e,t){return{licenses:e.licenses.size>0?this._factory.makeForLicense().normalizeIterable(e.licenses,t):void 0,copyright:e.copyright.size>0?t.sortLists?e.copyright.sorted().map(z.#N):Array.from(e.copyright,z.#N):void 0}}static#N(e){return{text:e.toString()}}}t.ComponentEvidenceNormalizer=z;class _ extends h{normalize(e,t){switch(!0){case e instanceof a.NamedLicense:return this.#a(e,t);case e instanceof a.SpdxLicense:return(0,m.isSupportedSpdxId)(e.id)?this.#l(e,t):this.#a(new a.NamedLicense(e.id,{url:e.url}),t);case e instanceof a.LicenseExpression:return this.#c(e);default:throw new TypeError("Unexpected LicenseChoice")}}#a(e,t){const r=(0,s.escapeUri)(e.url?.toString());return{license:{name:e.name,acknowledgement:this._factory.spec.supportsLicenseAcknowledgement?e.acknowledgement:void 0,text:void 0===e.text?void 0:this._factory.makeForAttachment().normalize(e.text,t),url:d.JsonSchema.isIriReference(r)?r:void 0}}}#l(e,t){const r=(0,s.escapeUri)(e.url?.toString());return{license:{id:e.id,acknowledgement:this._factory.spec.supportsLicenseAcknowledgement?e.acknowledgement:void 0,text:void 0===e.text?void 0:this._factory.makeForAttachment().normalize(e.text,t),url:d.JsonSchema.isIriReference(r)?r:void 0}}}#c(e){return{expression:e.expression,acknowledgement:this._factory.spec.supportsLicenseAcknowledgement?e.acknowledgement:void 0}}normalizeIterable(e,t){const r=t.sortLists?e.sorted():Array.from(e);if(r.length>1){const e=r.filter(e=>e instanceof a.LicenseExpression);if(e.length>0)return[this.#c(e[0])]}return r.map(e=>this.normalize(e,t))}}t.LicenseNormalizer=_;class P extends h{normalize(e,t){const r=(0,s.escapeUri)(e.url?.toString());return{tagId:e.tagId,name:e.name,version:e.version||void 0,tagVersion:e.tagVersion,patch:e.patch,text:void 0===e.text?void 0:this._factory.makeForAttachment().normalize(e.text,t),url:d.JsonSchema.isIriReference(r)?r:void 0}}}t.SWIDNormalizer=P;class O extends h{normalize(e,t){return this._factory.spec.supportsExternalReferenceType(e.type)?{url:(0,s.escapeUri)(e.url.toString()),type:e.type,hashes:this._factory.spec.supportsExternalReferenceHashes&&e.hashes.size>0?this._factory.makeForHash().normalizeIterable(e.hashes,t):void 0,comment:e.comment||void 0}:void 0}normalizeIterable(e,t){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t)).filter(o.isNotUndefined)}}t.ExternalReferenceNormalizer=O;class T extends h{normalize(e,t){return{content:e.content.toString(),contentType:e.contentType||void 0,encoding:e.encoding}}}t.AttachmentNormalizer=T;class E extends h{normalize(e,t){return{name:e.name,value:e.value}}normalizeIterable(e,t){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t))}}t.PropertyNormalizer=E;class M extends h{normalize(e,t){const r=new Map;if(void 0!==e.metadata.component){r.set(e.metadata.component.bomRef,e.metadata.component.dependencies);for(const t of e.metadata.component.components[i.treeIteratorSymbol]())r.set(t.bomRef,t.dependencies)}for(const t of e.components[i.treeIteratorSymbol]())r.set(t.bomRef,t.dependencies);for(const t of e.services[i.treeIteratorSymbol]())r.set(t.bomRef,t.dependencies);const n=[];for(const[e,i]of r){const s=this.#p(e,i,r,t);(0,o.isNotUndefined)(s)&&n.push(s)}return t.sortLists&&n.sort(({ref:e},{ref:t})=>e.localeCompare(t)),n}#p(e,t,r,n){const o=e.toString();if(0===o.length)return;const i=H(Array.from(t).filter(t=>r.has(t)&&t!==e),n).filter(e=>e.length>0);return{ref:o,dependsOn:i.length>0?i:void 0}}}t.DependencyGraphNormalizer=M;class N extends h{normalize(e,t){return{"bom-ref":e.bomRef.value||void 0,id:e.id||void 0,source:void 0===e.source?void 0:this._factory.makeForVulnerabilitySource().normalize(e.source,t),references:e.references.size>0?this._factory.makeForVulnerabilityReference().normalizeIterable(e.references,t):void 0,ratings:e.ratings.size>0?this._factory.makeForVulnerabilityRating().normalizeIterable(e.ratings,t):void 0,cwes:e.cwes.size>0?t.sortLists?e.cwes.sorted():Array.from(e.cwes):void 0,description:e.description,detail:e.detail,recommendation:e.recommendation,advisories:e.advisories.size>0?this._factory.makeForVulnerabilityAdvisory().normalizeIterable(e.advisories,t):void 0,created:e.created?.toISOString(),published:e.published?.toISOString(),updated:e.updated?.toISOString(),credits:void 0===e.credits?void 0:this._factory.makeForVulnerabilityCredits().normalize(e.credits,t),tools:e.tools.size>0?this._factory.makeForTools().normalize(e.tools,t):void 0,analysis:void 0===e.analysis?void 0:this._factory.makeForVulnerabilityAnalysis().normalize(e.analysis,t),affects:e.affects.size>0?this._factory.makeForVulnerabilityAffect().normalizeIterable(e.affects,t):void 0,properties:e.properties.size>0?this._factory.makeForProperty().normalizeIterable(e.properties,t):void 0}}normalizeIterable(e,t){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t))}}t.VulnerabilityNormalizer=N;class w extends h{normalize(e,t){return{name:e.name,url:e.url?.toString()}}}t.VulnerabilitySourceNormalizer=w;class D extends h{normalize(e,t){return{id:e.id,source:this._factory.makeForVulnerabilitySource().normalize(e.source,t)}}normalizeIterable(e,t){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t))}}t.VulnerabilityReferenceNormalizer=D;class F extends h{normalize(e,t){return{source:void 0===e.source?void 0:this._factory.makeForVulnerabilitySource().normalize(e.source,t),score:e.score,severity:e.severity,method:this._factory.spec.supportsVulnerabilityRatingMethod(e.method)?e.method:void 0,vector:e.vector,justification:e.justification}}normalizeIterable(e,t){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t))}}t.VulnerabilityRatingNormalizer=F;class k extends h{normalize(e,t){const r=(0,s.escapeUri)(e.url.toString());if(d.JsonSchema.isIriReference(r))return{title:e.title,url:r}}normalizeIterable(e,t){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t)).filter(o.isNotUndefined)}}t.VulnerabilityAdvisoryNormalizer=k;class I extends h{normalize(e,t){return{organizations:e.organizations.size>0?this._factory.makeForOrganizationalEntity().normalizeIterable(e.organizations,t):void 0,individuals:e.individuals.size>0?this._factory.makeForOrganizationalContact().normalizeIterable(e.individuals,t):void 0}}}t.VulnerabilityCreditsNormalizer=I;class B extends h{normalize(e,t){return{ref:e.ref.toString(),versions:e.versions.size>0?this._factory.makeForVulnerabilityAffectedVersion().normalizeIterable(e.versions,t):void 0}}normalizeIterable(e,t){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t))}}t.VulnerabilityAffectNormalizer=B;class j extends h{normalize(e,t){switch(!0){case e instanceof p.AffectedSingleVersion:return this.#m(e);case e instanceof p.AffectedVersionRange:return this.#u(e);default:throw new TypeError("Unexpected Vulnerability AffectedVersion")}}#m(e){return e.version.length<1?void 0:{version:e.version.substring(0,1024),status:e.status}}#u(e){return e.range.length<1?void 0:{range:e.range.substring(0,1024),status:e.status}}normalizeIterable(e,t){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t)).filter(o.isNotUndefined)}}t.VulnerabilityAffectedVersionNormalizer=j;class V extends h{normalize(e,t){return{state:e.state,justification:e.justification,response:e.response.size>0?t.sortLists?e.response.sorted():Array.from(e.response):void 0,detail:e.detail}}}function H(e,t){const r=Array.from(e,e=>e.toString());return t.sortLists&&r.sort((e,t)=>e.localeCompare(t)),r}t.VulnerabilityAnalysisNormalizer=V},1791:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.ExternalReferenceRepository=t.ExternalReference=void 0;const n=r(1507),o=r(2463);t.ExternalReference=class{url;type;hashes;comment;constructor(e,t,r={}){this.url=e,this.type=t,this.hashes=r.hashes??new o.HashDictionary,this.comment=r.comment}compare(e){return this.type.localeCompare(e.type)||this.url.toString().localeCompare(e.url.toString())}};class i extends n.SortableComparables{}t.ExternalReferenceRepository=i},2229:function(e,t,r){var n,o=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),i=this&&this.__setModuleDefault||(Object.create?function(e,t){Object.defineProperty(e,"default",{enumerable:!0,value:t})}:function(e,t){e.default=t}),s=this&&this.__importStar||(n=function(e){return n=Object.getOwnPropertyNames||function(e){var t=[];for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[t.length]=r);return t},n(e)},function(e){if(e&&e.__esModule)return e;var t={};if(null!=e)for(var r=n(e),s=0;s<r.length;s++)"default"!==r[s]&&o(t,e,r[s]);return i(t,e),t});Object.defineProperty(t,"__esModule",{value:!0}),t.Types=t.Spec=t.SPDX=t.Models=t.Enums=void 0,t.Enums=s(r(857)),t.Models=s(r(8207)),t.SPDX=s(r(4317)),t.Spec=s(r(382)),t.Types=s(r(5170))},2253:(e,t)=>{var r;Object.defineProperty(t,"__esModule",{value:!0}),t.AffectStatus=void 0,function(e){e.Affected="affected",e.Unaffected="unaffected",e.Unknown="unknown"}(r||(t.AffectStatus=r={}))},2311:e=>{e.exports=JSON.parse('{"$schema":"http://json-schema.org/draft-07/schema#","$id":"http://cyclonedx.org/schema/spdx.schema.json","$comment":"v1.0-3.27.0","type":"string","enum":["0BSD","3D-Slicer-1.0","AAL","Abstyles","AdaCore-doc","Adobe-2006","Adobe-Display-PostScript","Adobe-Glyph","Adobe-Utopia","ADSL","AFL-1.1","AFL-1.2","AFL-2.0","AFL-2.1","AFL-3.0","Afmparse","AGPL-1.0","AGPL-1.0-only","AGPL-1.0-or-later","AGPL-3.0","AGPL-3.0-only","AGPL-3.0-or-later","Aladdin","AMD-newlib","AMDPLPA","AML","AML-glslang","AMPAS","ANTLR-PD","ANTLR-PD-fallback","any-OSI","any-OSI-perl-modules","Apache-1.0","Apache-1.1","Apache-2.0","APAFML","APL-1.0","App-s2p","APSL-1.0","APSL-1.1","APSL-1.2","APSL-2.0","Arphic-1999","Artistic-1.0","Artistic-1.0-cl8","Artistic-1.0-Perl","Artistic-2.0","Artistic-dist","Aspell-RU","ASWF-Digital-Assets-1.0","ASWF-Digital-Assets-1.1","Baekmuk","Bahyph","Barr","bcrypt-Solar-Designer","Beerware","Bitstream-Charter","Bitstream-Vera","BitTorrent-1.0","BitTorrent-1.1","blessing","BlueOak-1.0.0","Boehm-GC","Boehm-GC-without-fee","Borceux","Brian-Gladman-2-Clause","Brian-Gladman-3-Clause","BSD-1-Clause","BSD-2-Clause","BSD-2-Clause-Darwin","BSD-2-Clause-first-lines","BSD-2-Clause-FreeBSD","BSD-2-Clause-NetBSD","BSD-2-Clause-Patent","BSD-2-Clause-pkgconf-disclaimer","BSD-2-Clause-Views","BSD-3-Clause","BSD-3-Clause-acpica","BSD-3-Clause-Attribution","BSD-3-Clause-Clear","BSD-3-Clause-flex","BSD-3-Clause-HP","BSD-3-Clause-LBNL","BSD-3-Clause-Modification","BSD-3-Clause-No-Military-License","BSD-3-Clause-No-Nuclear-License","BSD-3-Clause-No-Nuclear-License-2014","BSD-3-Clause-No-Nuclear-Warranty","BSD-3-Clause-Open-MPI","BSD-3-Clause-Sun","BSD-4-Clause","BSD-4-Clause-Shortened","BSD-4-Clause-UC","BSD-4.3RENO","BSD-4.3TAHOE","BSD-Advertising-Acknowledgement","BSD-Attribution-HPND-disclaimer","BSD-Inferno-Nettverk","BSD-Protection","BSD-Source-beginning-file","BSD-Source-Code","BSD-Systemics","BSD-Systemics-W3Works","BSL-1.0","BUSL-1.1","bzip2-1.0.5","bzip2-1.0.6","C-UDA-1.0","CAL-1.0","CAL-1.0-Combined-Work-Exception","Caldera","Caldera-no-preamble","Catharon","CATOSL-1.1","CC-BY-1.0","CC-BY-2.0","CC-BY-2.5","CC-BY-2.5-AU","CC-BY-3.0","CC-BY-3.0-AT","CC-BY-3.0-AU","CC-BY-3.0-DE","CC-BY-3.0-IGO","CC-BY-3.0-NL","CC-BY-3.0-US","CC-BY-4.0","CC-BY-NC-1.0","CC-BY-NC-2.0","CC-BY-NC-2.5","CC-BY-NC-3.0","CC-BY-NC-3.0-DE","CC-BY-NC-4.0","CC-BY-NC-ND-1.0","CC-BY-NC-ND-2.0","CC-BY-NC-ND-2.5","CC-BY-NC-ND-3.0","CC-BY-NC-ND-3.0-DE","CC-BY-NC-ND-3.0-IGO","CC-BY-NC-ND-4.0","CC-BY-NC-SA-1.0","CC-BY-NC-SA-2.0","CC-BY-NC-SA-2.0-DE","CC-BY-NC-SA-2.0-FR","CC-BY-NC-SA-2.0-UK","CC-BY-NC-SA-2.5","CC-BY-NC-SA-3.0","CC-BY-NC-SA-3.0-DE","CC-BY-NC-SA-3.0-IGO","CC-BY-NC-SA-4.0","CC-BY-ND-1.0","CC-BY-ND-2.0","CC-BY-ND-2.5","CC-BY-ND-3.0","CC-BY-ND-3.0-DE","CC-BY-ND-4.0","CC-BY-SA-1.0","CC-BY-SA-2.0","CC-BY-SA-2.0-UK","CC-BY-SA-2.1-JP","CC-BY-SA-2.5","CC-BY-SA-3.0","CC-BY-SA-3.0-AT","CC-BY-SA-3.0-DE","CC-BY-SA-3.0-IGO","CC-BY-SA-4.0","CC-PDDC","CC-PDM-1.0","CC-SA-1.0","CC0-1.0","CDDL-1.0","CDDL-1.1","CDL-1.0","CDLA-Permissive-1.0","CDLA-Permissive-2.0","CDLA-Sharing-1.0","CECILL-1.0","CECILL-1.1","CECILL-2.0","CECILL-2.1","CECILL-B","CECILL-C","CERN-OHL-1.1","CERN-OHL-1.2","CERN-OHL-P-2.0","CERN-OHL-S-2.0","CERN-OHL-W-2.0","CFITSIO","check-cvs","checkmk","ClArtistic","Clips","CMU-Mach","CMU-Mach-nodoc","CNRI-Jython","CNRI-Python","CNRI-Python-GPL-Compatible","COIL-1.0","Community-Spec-1.0","Condor-1.1","copyleft-next-0.3.0","copyleft-next-0.3.1","Cornell-Lossless-JPEG","CPAL-1.0","CPL-1.0","CPOL-1.02","Cronyx","Crossword","CryptoSwift","CrystalStacker","CUA-OPL-1.0","Cube","curl","cve-tou","D-FSL-1.0","DEC-3-Clause","diffmark","DL-DE-BY-2.0","DL-DE-ZERO-2.0","DOC","DocBook-DTD","DocBook-Schema","DocBook-Stylesheet","DocBook-XML","Dotseqn","DRL-1.0","DRL-1.1","DSDP","dtoa","dvipdfm","ECL-1.0","ECL-2.0","eCos-2.0","EFL-1.0","EFL-2.0","eGenix","Elastic-2.0","Entessa","EPICS","EPL-1.0","EPL-2.0","ErlPL-1.1","etalab-2.0","EUDatagrid","EUPL-1.0","EUPL-1.1","EUPL-1.2","Eurosym","Fair","FBM","FDK-AAC","Ferguson-Twofish","Frameworx-1.0","FreeBSD-DOC","FreeImage","FSFAP","FSFAP-no-warranty-disclaimer","FSFUL","FSFULLR","FSFULLRSD","FSFULLRWD","FSL-1.1-ALv2","FSL-1.1-MIT","FTL","Furuseth","fwlw","Game-Programming-Gems","GCR-docs","GD","generic-xts","GFDL-1.1","GFDL-1.1-invariants-only","GFDL-1.1-invariants-or-later","GFDL-1.1-no-invariants-only","GFDL-1.1-no-invariants-or-later","GFDL-1.1-only","GFDL-1.1-or-later","GFDL-1.2","GFDL-1.2-invariants-only","GFDL-1.2-invariants-or-later","GFDL-1.2-no-invariants-only","GFDL-1.2-no-invariants-or-later","GFDL-1.2-only","GFDL-1.2-or-later","GFDL-1.3","GFDL-1.3-invariants-only","GFDL-1.3-invariants-or-later","GFDL-1.3-no-invariants-only","GFDL-1.3-no-invariants-or-later","GFDL-1.3-only","GFDL-1.3-or-later","Giftware","GL2PS","Glide","Glulxe","GLWTPL","gnuplot","GPL-1.0","GPL-1.0+","GPL-1.0-only","GPL-1.0-or-later","GPL-2.0","GPL-2.0+","GPL-2.0-only","GPL-2.0-or-later","GPL-2.0-with-autoconf-exception","GPL-2.0-with-bison-exception","GPL-2.0-with-classpath-exception","GPL-2.0-with-font-exception","GPL-2.0-with-GCC-exception","GPL-3.0","GPL-3.0+","GPL-3.0-only","GPL-3.0-or-later","GPL-3.0-with-autoconf-exception","GPL-3.0-with-GCC-exception","Graphics-Gems","gSOAP-1.3b","gtkbook","Gutmann","HaskellReport","HDF5","hdparm","HIDAPI","Hippocratic-2.1","HP-1986","HP-1989","HPND","HPND-DEC","HPND-doc","HPND-doc-sell","HPND-export-US","HPND-export-US-acknowledgement","HPND-export-US-modify","HPND-export2-US","HPND-Fenneberg-Livingston","HPND-INRIA-IMAG","HPND-Intel","HPND-Kevlin-Henney","HPND-Markus-Kuhn","HPND-merchantability-variant","HPND-MIT-disclaimer","HPND-Netrek","HPND-Pbmplus","HPND-sell-MIT-disclaimer-xserver","HPND-sell-regexpr","HPND-sell-variant","HPND-sell-variant-MIT-disclaimer","HPND-sell-variant-MIT-disclaimer-rev","HPND-UC","HPND-UC-export-US","HTMLTIDY","IBM-pibs","ICU","IEC-Code-Components-EULA","IJG","IJG-short","ImageMagick","iMatix","Imlib2","Info-ZIP","Inner-Net-2.0","InnoSetup","Intel","Intel-ACPI","Interbase-1.0","IPA","IPL-1.0","ISC","ISC-Veillard","Jam","JasPer-2.0","jove","JPL-image","JPNIC","JSON","Kastrup","Kazlib","Knuth-CTAN","LAL-1.2","LAL-1.3","Latex2e","Latex2e-translated-notice","Leptonica","LGPL-2.0","LGPL-2.0+","LGPL-2.0-only","LGPL-2.0-or-later","LGPL-2.1","LGPL-2.1+","LGPL-2.1-only","LGPL-2.1-or-later","LGPL-3.0","LGPL-3.0+","LGPL-3.0-only","LGPL-3.0-or-later","LGPLLR","Libpng","libpng-1.6.35","libpng-2.0","libselinux-1.0","libtiff","libutil-David-Nugent","LiLiQ-P-1.1","LiLiQ-R-1.1","LiLiQ-Rplus-1.1","Linux-man-pages-1-para","Linux-man-pages-copyleft","Linux-man-pages-copyleft-2-para","Linux-man-pages-copyleft-var","Linux-OpenIB","LOOP","LPD-document","LPL-1.0","LPL-1.02","LPPL-1.0","LPPL-1.1","LPPL-1.2","LPPL-1.3a","LPPL-1.3c","lsof","Lucida-Bitmap-Fonts","LZMA-SDK-9.11-to-9.20","LZMA-SDK-9.22","Mackerras-3-Clause","Mackerras-3-Clause-acknowledgment","magaz","mailprio","MakeIndex","man2html","Martin-Birgmeier","McPhee-slideshow","metamail","Minpack","MIPS","MirOS","MIT","MIT-0","MIT-advertising","MIT-Click","MIT-CMU","MIT-enna","MIT-feh","MIT-Festival","MIT-Khronos-old","MIT-Modern-Variant","MIT-open-group","MIT-testregex","MIT-Wu","MITNFA","MMIXware","Motosoto","MPEG-SSG","mpi-permissive","mpich2","MPL-1.0","MPL-1.1","MPL-2.0","MPL-2.0-no-copyleft-exception","mplus","MS-LPL","MS-PL","MS-RL","MTLL","MulanPSL-1.0","MulanPSL-2.0","Multics","Mup","NAIST-2003","NASA-1.3","Naumen","NBPL-1.0","NCBI-PD","NCGL-UK-2.0","NCL","NCSA","Net-SNMP","NetCDF","Newsletr","NGPL","ngrep","NICTA-1.0","NIST-PD","NIST-PD-fallback","NIST-Software","NLOD-1.0","NLOD-2.0","NLPL","Nokia","NOSL","Noweb","NPL-1.0","NPL-1.1","NPOSL-3.0","NRL","NTIA-PD","NTP","NTP-0","Nunit","O-UDA-1.0","OAR","OCCT-PL","OCLC-2.0","ODbL-1.0","ODC-By-1.0","OFFIS","OFL-1.0","OFL-1.0-no-RFN","OFL-1.0-RFN","OFL-1.1","OFL-1.1-no-RFN","OFL-1.1-RFN","OGC-1.0","OGDL-Taiwan-1.0","OGL-Canada-2.0","OGL-UK-1.0","OGL-UK-2.0","OGL-UK-3.0","OGTSL","OLDAP-1.1","OLDAP-1.2","OLDAP-1.3","OLDAP-1.4","OLDAP-2.0","OLDAP-2.0.1","OLDAP-2.1","OLDAP-2.2","OLDAP-2.2.1","OLDAP-2.2.2","OLDAP-2.3","OLDAP-2.4","OLDAP-2.5","OLDAP-2.6","OLDAP-2.7","OLDAP-2.8","OLFL-1.3","OML","OpenPBS-2.3","OpenSSL","OpenSSL-standalone","OpenVision","OPL-1.0","OPL-UK-3.0","OPUBL-1.0","OSET-PL-2.1","OSL-1.0","OSL-1.1","OSL-2.0","OSL-2.1","OSL-3.0","PADL","Parity-6.0.0","Parity-7.0.0","PDDL-1.0","PHP-3.0","PHP-3.01","Pixar","pkgconf","Plexus","pnmstitch","PolyForm-Noncommercial-1.0.0","PolyForm-Small-Business-1.0.0","PostgreSQL","PPL","PSF-2.0","psfrag","psutils","Python-2.0","Python-2.0.1","python-ldap","Qhull","QPL-1.0","QPL-1.0-INRIA-2004","radvd","Rdisc","RHeCos-1.1","RPL-1.1","RPL-1.5","RPSL-1.0","RSA-MD","RSCPL","Ruby","Ruby-pty","SAX-PD","SAX-PD-2.0","Saxpath","SCEA","SchemeReport","Sendmail","Sendmail-8.23","Sendmail-Open-Source-1.1","SGI-B-1.0","SGI-B-1.1","SGI-B-2.0","SGI-OpenGL","SGP4","SHL-0.5","SHL-0.51","SimPL-2.0","SISSL","SISSL-1.2","SL","Sleepycat","SMAIL-GPL","SMLNJ","SMPPL","SNIA","snprintf","SOFA","softSurfer","Soundex","Spencer-86","Spencer-94","Spencer-99","SPL-1.0","ssh-keyscan","SSH-OpenSSH","SSH-short","SSLeay-standalone","SSPL-1.0","StandardML-NJ","SugarCRM-1.1.3","SUL-1.0","Sun-PPP","Sun-PPP-2000","SunPro","SWL","swrule","Symlinks","TAPR-OHL-1.0","TCL","TCP-wrappers","TermReadKey","TGPPL-1.0","ThirdEye","threeparttable","TMate","TORQUE-1.1","TOSL","TPDL","TPL-1.0","TrustedQSL","TTWL","TTYP0","TU-Berlin-1.0","TU-Berlin-2.0","Ubuntu-font-1.0","UCAR","UCL-1.0","ulem","UMich-Merit","Unicode-3.0","Unicode-DFS-2015","Unicode-DFS-2016","Unicode-TOU","UnixCrypt","Unlicense","Unlicense-libtelnet","Unlicense-libwhirlpool","UPL-1.0","URT-RLE","Vim","VOSTROM","VSL-1.0","W3C","W3C-19980720","W3C-20150513","w3m","Watcom-1.0","Widget-Workshop","Wsuipa","WTFPL","wwl","wxWindows","X11","X11-distribute-modifications-variant","X11-swapped","Xdebug-1.03","Xerox","Xfig","XFree86-1.1","xinetd","xkeyboard-config-Zinoviev","xlock","Xnet","xpp","XSkat","xzoom","YPL-1.0","YPL-1.1","Zed","Zeeff","Zend-2.0","Zimbra-1.3","Zimbra-1.4","Zlib","zlib-acknowledgement","ZPL-1.1","ZPL-2.0","ZPL-2.1","389-exception","Asterisk-exception","Asterisk-linking-protocols-exception","Autoconf-exception-2.0","Autoconf-exception-3.0","Autoconf-exception-generic","Autoconf-exception-generic-3.0","Autoconf-exception-macro","Bison-exception-1.24","Bison-exception-2.2","Bootloader-exception","CGAL-linking-exception","Classpath-exception-2.0","CLISP-exception-2.0","cryptsetup-OpenSSL-exception","Digia-Qt-LGPL-exception-1.1","DigiRule-FOSS-exception","eCos-exception-2.0","erlang-otp-linking-exception","Fawkes-Runtime-exception","FLTK-exception","fmt-exception","Font-exception-2.0","freertos-exception-2.0","GCC-exception-2.0","GCC-exception-2.0-note","GCC-exception-3.1","Gmsh-exception","GNAT-exception","GNOME-examples-exception","GNU-compiler-exception","gnu-javamail-exception","GPL-3.0-389-ds-base-exception","GPL-3.0-interface-exception","GPL-3.0-linking-exception","GPL-3.0-linking-source-exception","GPL-CC-1.0","GStreamer-exception-2005","GStreamer-exception-2008","harbour-exception","i2p-gpl-java-exception","Independent-modules-exception","KiCad-libraries-exception","LGPL-3.0-linking-exception","libpri-OpenH323-exception","Libtool-exception","Linux-syscall-note","LLGPL","LLVM-exception","LZMA-exception","mif-exception","mxml-exception","Nokia-Qt-exception-1.1","OCaml-LGPL-linking-exception","OCCT-exception-1.0","OpenJDK-assembly-exception-1.0","openvpn-openssl-exception","PCRE2-exception","polyparse-exception","PS-or-PDF-font-exception-20170817","QPL-1.0-INRIA-2004-exception","Qt-GPL-exception-1.0","Qt-LGPL-exception-1.1","Qwt-exception-1.0","romic-exception","RRDtool-FLOSS-exception-2.0","SANE-exception","SHL-2.0","SHL-2.1","stunnel-exception","SWI-exception","Swift-exception","Texinfo-exception","u-boot-exception-2.0","UBDL-exception","Universal-FOSS-exception-1.0","vsftpd-openssl-exception","WxWindows-exception-3.1","x11vnc-openssl-exception"]}')},2463:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.HashDictionary=void 0;class r extends Map{static#w([e,t],[r,n]){return e.localeCompare(r)||t.localeCompare(n)}sorted(){return Array.from(this.entries()).sort(r.#w)}}t.HashDictionary=r},2569:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.RatingRepository=t.Rating=void 0;const n=r(1507);t.Rating=class{source;score;severity;method;vector;justification;constructor(e={}){this.source=e.source,this.score=e.score,this.severity=e.severity,this.method=e.method,this.vector=e.vector,this.justification=e.justification}compare(e){return(this.score??0)-(e.score??0)||(this.vector??"").localeCompare(e.vector??"")||(this.justification??"").localeCompare(e.justification??"")||(this.severity??"").localeCompare(e.severity??"")||(this.method??"").localeCompare(e.method??"")||(this.source&&e.source?this.source.compare(e.source):0)}};class o extends n.SortableComparables{}t.RatingRepository=o},2632:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.SWID=void 0;const n=r(9708);t.SWID=class{tagId;name;version;patch;text;url;#D;constructor(e,t,r={}){this.tagId=e,this.name=t,this.version=r.version,this.patch=r.patch,this.text=r.text,this.url=r.url,this.tagVersion=r.tagVersion}get tagVersion(){return this.#D}set tagVersion(e){if(void 0!==e&&!(0,n.isNonNegativeInteger)(e))throw new TypeError("Not NonNegativeInteger nor undefined");this.#D=e}}},2904:(e,t)=>{var r;Object.defineProperty(t,"__esModule",{value:!0}),t.ComponentScope=void 0,function(e){e.Required="required",e.Optional="optional",e.Excluded="excluded"}(r||(t.ComponentScope=r={}))},2931:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.normalizedString=o,t.token=function(e){return o(e).trim().replace(i,s)};const r=/\r\n|\t|\n|\r/g,n=" ";function o(e){return e.replace(r,n)}const i=/ {2,}/g,s=" "},2970:(e,t)=>{var r;Object.defineProperty(t,"__esModule",{value:!0}),t.XmlSchema=void 0,function(e){const t=/^[a-z][a-z0-9+\-.]*$/i;e.isAnyURI=function(e){if("string"!=typeof e)return!1;if(0===e.length)return!1;const r=e.indexOf("#");let n=e;if(r>=0){if(e.includes("#",r+1))return!1;n=e.slice(void 0,r)}const o=n.indexOf(":");return!(o>=0&&!t.test(n.slice(void 0,o)))}}(r||(t.XmlSchema=r={}))},2971:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.UnsupportedFormatError=void 0;class r extends Error{}t.UnsupportedFormatError=r},3087:(e,t)=>{var r;Object.defineProperty(t,"__esModule",{value:!0}),t.AnalysisState=void 0,function(e){e.Resolved="resolved",e.ResolvedWithPedigree="resolved_with_pedigree",e.Exploitable="exploitable",e.InTriage="in_triage",e.FalsePositive="false_positive",e.NotAffected="not_affected"}(r||(t.AnalysisState=r={}))},3321:(e,t)=>{var r;Object.defineProperty(t,"__esModule",{value:!0}),t.ExternalReferenceType=void 0,function(e){e.VCS="vcs",e.IssueTracker="issue-tracker",e.Website="website",e.Advisories="advisories",e.BOM="bom",e.MailingList="mailing-list",e.Social="social",e.Chat="chat",e.Documentation="documentation",e.Support="support",e.SourceDistribution="source-distribution",e.Distribution="distribution",e.DistributionIntake="distribution-intake",e.License="license",e.BuildMeta="build-meta",e.BuildSystem="build-system",e.ReleaseNotes="release-notes",e.SecurityContact="security-contact",e.ModelCard="model-card",e.Log="log",e.Configuration="configuration",e.Evidence="evidence",e.Formulation="formulation",e.Attestation="attestation",e.ThreatModel="threat-model",e.AdversaryModel="adversary-model",e.RiskAssessment="risk-assessment",e.VulnerabilityAssertion="vulnerability-assertion",e.ExploitabilityStatement="exploitability-statement",e.PentestReport="pentest-report",e.StaticAnalysisReport="static-analysis-report",e.DynamicAnalysisReport="dynamic-analysis-report",e.RuntimeAnalysisReport="runtime-analysis-report",e.ComponentAnalysisReport="component-analysis-report",e.MaturityReport="maturity-report",e.CertificationReport="certification-report",e.CodifiedInfrastructure="codified-infrastructure",e.QualityMetrics="quality-metrics",e.POAM="poam",e.ElectronicSignature="electronic-signature",e.DigitalSignature="digital-signature",e.RFC9116="rfc-9116",e.Citation="citation",e.Patent="patent",e.PatentAssertion="patent-assertion",e.PatentFamily="patent-family",e.Other="other"}(r||(t.ExternalReferenceType=r={}))},3327:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.AdvisoryRepository=t.Advisory=void 0;const n=r(1507);t.Advisory=class{title;url;constructor(e,t={}){this.url=e,this.title=t.title}compare(e){return this.url.toString().localeCompare(e.url.toString())||(this.title??"").localeCompare(e.title??"")}};class o extends n.SortableComparables{}t.AdvisoryRepository=o},3349:(e,t)=>{var r;Object.defineProperty(t,"__esModule",{value:!0}),t.JsonSchema=void 0,function(e){e.isIriReference=function(e){return"string"==typeof e&&e.length>0},e.isIdnEmail=function(e){return"string"==typeof e&&e.length>0}}(r||(t.JsonSchema=r={}))},3668:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.Credits=void 0;const n=r(4477),o=r(6258);t.Credits=class{organizations;individuals;constructor(e={}){this.organizations=e.organizations??new o.OrganizationalEntityRepository,this.individuals=e.individuals??new n.OrganizationalContactRepository}}},3729:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.BomLinkElement=t.BomLinkDocument=void 0;class r{#F;constructor(e){this.value=e}get value(){return this.#F}set value(e){if(!this._isValid(e))throw new RangeError("invalid value");this.#F=e}compare(e){return this.toString().localeCompare(e.toString())}toString(){return this.value}}class n extends r{static#k=/^urn:cdx:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\/[1-9][0-9]*$/;static isValid(e){return"string"==typeof e&&this.#k.test(e)}_isValid(e){return n.isValid(e)}}t.BomLinkDocument=n;class o extends r{static#k=/^urn:cdx:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\/[1-9][0-9]*#.+$/;static isValid(e){return"string"==typeof e&&this.#k.test(e)}_isValid(e){return o.isValid(e)}}t.BomLinkElement=o},3899:e=>{e.exports=require("packageurl-js")},3922:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.CopyrightRepository=void 0;const n=r(1507);class o extends n.SortableStringables{}t.CopyrightRepository=o},4196:(e,t)=>{var r,n;Object.defineProperty(t,"__esModule",{value:!0}),t.Format=t.Version=void 0,function(e){e.v1dot7="1.7",e.v1dot6="1.6",e.v1dot5="1.5",e.v1dot4="1.4",e.v1dot3="1.3",e.v1dot2="1.2",e.v1dot1="1.1",e.v1dot0="1.0"}(r||(t.Version=r={})),function(e){e.XML="xml",e.JSON="json"}(n||(t.Format=n={}))},4212:function(e,t,r){var n,o=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),i=this&&this.__setModuleDefault||(Object.create?function(e,t){Object.defineProperty(e,"default",{enumerable:!0,value:t})}:function(e,t){e.default=t}),s=this&&this.__importStar||(n=function(e){return n=Object.getOwnPropertyNames||function(e){var t=[];for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[t.length]=r);return t},n(e)},function(e){if(e&&e.__esModule)return e;var t={};if(null!=e)for(var r=n(e),s=0;s<r.length;s++)"default"!==r[s]&&o(t,e,r[s]);return i(t,e),t});Object.defineProperty(t,"__esModule",{value:!0}),t.Types=t.Normalize=void 0,t.Normalize=s(r(1723)),t.Types=s(r(3349))},4242:function(e,t,r){var n=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),o=this&&this.__exportStar||function(e,t){for(var r in e)"default"===r||Object.prototype.hasOwnProperty.call(t,r)||n(t,e,r)};Object.defineProperty(t,"__esModule",{value:!0}),o(r(7099),t)},4277:(e,t)=>{var r;Object.defineProperty(t,"__esModule",{value:!0}),t.AttachmentEncoding=void 0,function(e){e.Base64="base64"}(r||(t.AttachmentEncoding=r={}))},4317:function(e,t,r){var n=this&&this.__importDefault||function(e){return e&&e.__esModule?e:{default:e}};Object.defineProperty(t,"__esModule",{value:!0}),t.isSupportedSpdxId=function(e){return s.has(e)},t.fixupSpdxId=function(e){return"string"==typeof e&&e.length>0?a[e.toLowerCase()]:void 0},t.isValidSpdxLicenseExpression=function(e){if("string"!=typeof e)return!1;try{(0,o.default)(e)}catch(e){return!1}return!0};const o=n(r(6926)),i=r(2311),s=new Set(i.enum),a=Object.freeze(Object.fromEntries(i.enum.map(e=>[e.toLowerCase(),e])))},4477:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.OrganizationalContactRepository=t.OrganizationalContact=void 0;const n=r(1507);t.OrganizationalContact=class{name;email;phone;constructor(e={}){this.name=e.name,this.email=e.email,this.phone=e.phone}compare(e){return(this.name??"").localeCompare(e.name??"")||(this.email??"").localeCompare(e.email??"")||(this.phone??"").localeCompare(e.phone??"")}};class o extends n.SortableComparables{}t.OrganizationalContactRepository=o},4654:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.PropertyRepository=t.Property=void 0;const n=r(1507);t.Property=class{name;value;constructor(e,t){this.name=e,this.value=t}compare(e){return this.name.localeCompare(e.name)||this.value.localeCompare(e.value)}};class o extends n.SortableComparables{}t.PropertyRepository=o},4757:(e,t)=>{var r;Object.defineProperty(t,"__esModule",{value:!0}),t.Severity=void 0,function(e){e.Critical="critical",e.High="high",e.Medium="medium",e.Low="low",e.Info="info",e.None="none",e.Unknown="unknown"}(r||(t.Severity=r={}))},4799:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.LifecycleRepository=t.NamedLifecycle=void 0;class r{name;description;constructor(e,t={}){this.name=e,this.description=t.description}compare(e){return this.name.localeCompare(e.name)}}t.NamedLifecycle=r;class n extends Set{static#w(e,t){return e.constructor===t.constructor?e instanceof r?e.compare(t):e.localeCompare(t):e.constructor.name.localeCompare(t.constructor.name)}sorted(){return Array.from(this).sort(n.#w)}}t.LifecycleRepository=n},4880:function(e,t,r){var n=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),o=this&&this.__exportStar||function(e,t){for(var r in e)"default"===r||Object.prototype.hasOwnProperty.call(t,r)||n(t,e,r)};Object.defineProperty(t,"__esModule",{value:!0}),o(r(2253),t),o(r(1592),t),o(r(9511),t),o(r(3087),t),o(r(5486),t),o(r(4757),t)},4889:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.XmlBaseSerializer=void 0;const n=r(4196),o=r(2971),i=r(8352);class s extends i.BaseSerializer{#I;constructor(e){if(!e.spec.supportsFormat(n.Format.XML))throw new o.UnsupportedFormatError("Spec does not support XML format.");super(),this.#I=e}get normalizerFactory(){return this.#I}_normalize(e,t={}){return this.#I.makeForBom().normalize(e,t)}}t.XmlBaseSerializer=s},4970:function(e,t,r){var n=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),o=this&&this.__exportStar||function(e,t){for(var r in e)"default"===r||Object.prototype.hasOwnProperty.call(t,r)||n(t,e,r)};Object.defineProperty(t,"__esModule",{value:!0}),o(r(3327),t),o(r(785),t),o(r(930),t),o(r(3668),t),o(r(2569),t),o(r(9803),t),o(r(625),t),o(r(8768),t)},5026:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.LicenseFactory=void 0;const n=r(7988),o=r(4317);t.LicenseFactory=class{makeFromString(e){try{return this.makeSpdxLicense(e)}catch{}try{return this.makeExpression(e)}catch{}return this.makeNamedLicense(e)}makeExpression(e){const t=String(e);if((0,o.isValidSpdxLicenseExpression)(t))return new n.LicenseExpression(t);throw new RangeError("Invalid SPDX license expression")}makeDisjunctive(e){try{return this.makeSpdxLicense(e)}catch{return this.makeNamedLicense(e)}}makeSpdxLicense(e){const t=(0,o.fixupSpdxId)(String(e));if(void 0===t)throw new RangeError("Unsupported SPDX license ID");return new n.SpdxLicense(t)}makeNamedLicense(e){return new n.NamedLicense(String(e))}}},5126:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.randomSerialNumber=function(){const e=[Math.round(65535*Math.random()),Math.round(65535*Math.random()),Math.round(65535*Math.random()),16384|Math.round(4095*Math.random()),32768|Math.round(16383*Math.random()),Math.round(65535*Math.random()),Math.round(65535*Math.random()),Math.round(65535*Math.random())].map(e=>e.toString(16).padStart(4,"0"));return`urn:uuid:${e[0]}${e[1]}-${e[2]}-${e[3]}-${e[4]}-${e[5]}${e[6]}${e[7]}`}},5170:function(e,t,r){var n=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),o=this&&this.__exportStar||function(e,t){for(var r in e)"default"===r||Object.prototype.hasOwnProperty.call(t,r)||n(t,e,r)};Object.defineProperty(t,"__esModule",{value:!0}),o(r(608),t),o(r(759),t),o(r(9708),t),o(r(9356),t),o(r(8008),t)},5393:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.Bom=void 0;const n=r(9708),o=r(9064),i=r(734),s=r(8672),a=r(8768);t.Bom=class{metadata;components;services;vulnerabilities;#d=1;#B;constructor(e={}){this.metadata=e.metadata??new i.Metadata,this.components=e.components??new o.ComponentRepository,this.services=e.services??new s.ServiceRepository,this.version=e.version??this.version,this.vulnerabilities=e.vulnerabilities??new a.VulnerabilityRepository,this.serialNumber=e.serialNumber}get version(){return this.#d}set version(e){if(!(0,n.isPositiveInteger)(e))throw new TypeError("Not PositiveInteger");this.#d=e}get serialNumber(){return this.#B}set serialNumber(e){this.#B=""===e?void 0:e}}},5486:(e,t)=>{var r;Object.defineProperty(t,"__esModule",{value:!0}),t.RatingMethod=void 0,function(e){e.CVSSv2="CVSSv2",e.CVSSv3="CVSSv3",e.CVSSv31="CVSSv31",e.CVSSv4="CVSSv4",e.OWASP="OWASP",e.SSVC="SSVC",e.Other="other"}(r||(t.RatingMethod=r={}))},5563:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.MissingOptionalDependencyError=t.NotImplementedError=void 0;const n=r(7840);class o extends Error{constructor(e){super(`not implemented for CycloneDX version: ${e}`)}}t.NotImplementedError=o;class i extends n.OptPlugError{}t.MissingOptionalDependencyError=i},5866:(e,t)=>{var r;Object.defineProperty(t,"__esModule",{value:!0}),t.ComponentType=void 0,function(e){e.Application="application",e.Framework="framework",e.Library="library",e.Container="container",e.Platform="platform",e.OperatingSystem="operating-system",e.Device="device",e.DeviceDriver="device-driver",e.Firmware="firmware",e.File="file",e.MachineLearningModel="machine-learning-model",e.Data="data",e.CryptographicAsset="cryptographic-asset"}(r||(t.ComponentType=r={}))},6258:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.OrganizationalEntityRepository=t.OrganizationalEntity=void 0;const n=r(1507),o=r(4477);t.OrganizationalEntity=class{name;url;contact;constructor(e={}){this.name=e.name,this.url=e.url??new Set,this.contact=e.contact??new o.OrganizationalContactRepository}compare(e){return(this.name??"").localeCompare(e.name??"")||this.contact.compare(e.contact)||new n.SortableStringables(this.url).compare(new n.SortableStringables(e.url))}};class i extends n.SortableComparables{}t.OrganizationalEntityRepository=i},6505:function(e,t,r){var n=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),o=this&&this.__exportStar||function(e,t){for(var r in e)"default"===r||Object.prototype.hasOwnProperty.call(t,r)||n(t,e,r)};Object.defineProperty(t,"__esModule",{value:!0}),o(r(870),t)},6926:e=>{e.exports=require("spdx-expression-parse")},7099:function(e,t,r){var n,o=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),i=this&&this.__setModuleDefault||(Object.create?function(e,t){Object.defineProperty(e,"default",{enumerable:!0,value:t})}:function(e,t){e.default=t}),s=this&&this.__importStar||(n=function(e){return n=Object.getOwnPropertyNames||function(e){var t=[];for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[t.length]=r);return t},n(e)},function(e){if(e&&e.__esModule)return e;var t={};if(null!=e)for(var r=n(e),s=0;s<r.length;s++)"default"!==r[s]&&o(t,e,r[s]);return i(t,e),t});Object.defineProperty(t,"__esModule",{value:!0}),t.BomUtility=void 0,t.BomUtility=s(r(5126))},7238:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.Attachment=void 0,t.Attachment=class{contentType;content;encoding;constructor(e,t={}){this.contentType=t.contentType,this.content=e,this.encoding=t.encoding}}},7288:function(e,t,r){var n,o=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),i=this&&this.__setModuleDefault||(Object.create?function(e,t){Object.defineProperty(e,"default",{enumerable:!0,value:t})}:function(e,t){e.default=t}),s=this&&this.__exportStar||function(e,t){for(var r in e)"default"===r||Object.prototype.hasOwnProperty.call(t,r)||o(t,e,r)},a=this&&this.__importStar||(n=function(e){return n=Object.getOwnPropertyNames||function(e){var t=[];for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[t.length]=r);return t},n(e)},function(e){if(e&&e.__esModule)return e;var t={};if(null!=e)for(var r=n(e),s=0;s<r.length;s++)"default"!==r[s]&&o(t,e,r[s]);return i(t,e),t});Object.defineProperty(t,"__esModule",{value:!0}),t.Validation=t.Utils=t.Serialize=t.Factories=void 0,s(r(2229),t),t.Factories=a(r(6505)),t.Serialize=a(r(9569)),t.Utils=a(r(4242)),t.Validation=a(r(1722))},7472:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.PackageUrlFactory=void 0;const n=r(3899),o=r(3321);t.PackageUrlFactory=class{#j;constructor(e){this.#j=e}get type(){return this.#j}makeFromComponent(e,t=!1){const r={};let i;r.__proto__=null;const s=t?e.externalReferences.sorted():e.externalReferences;for(const e of s){const t=e.url.toString();if(!(t.length<=0))switch(e.type){case o.ExternalReferenceType.VCS:[r[n.PurlQualifierNames.VcsUrl],i]=t.split("#",2);break;case o.ExternalReferenceType.Distribution:r[n.PurlQualifierNames.DownloadUrl]=t}}const a=e.hashes;a.size>0&&(r[n.PurlQualifierNames.Checksum]=Array.from(t?a.sorted():a,([e,t])=>`${e.toLowerCase()}:${t.toLowerCase()}`).join(","));try{return new n.PackageURL(this.#j,e.group,e.name,e.version,r,i)}catch{return}}}},7645:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.Tools=t.ToolRepository=t.Tool=void 0;const n=r(1507),o=r(9064),i=r(1791),s=r(2463),a=r(8672);class l{vendor;name;version;hashes;externalReferences;constructor(e={}){this.vendor=e.vendor,this.name=e.name,this.version=e.version,this.hashes=e.hashes??new s.HashDictionary,this.externalReferences=e.externalReferences??new i.ExternalReferenceRepository}compare(e){return(this.vendor??"").localeCompare(e.vendor??"")||(this.name??"").localeCompare(e.name??"")||(this.version??"").localeCompare(e.version??"")}static fromComponent(e){return new l({vendor:e.group,name:e.name,version:e.version,hashes:e.hashes,externalReferences:e.externalReferences})}static fromService(e){return new l({vendor:e.group,name:e.name,version:e.version,externalReferences:e.externalReferences})}}t.Tool=l;class c extends n.SortableComparables{}t.ToolRepository=c,t.Tools=class{components;services;tools;constructor(e={}){this.components=e.components??new o.ComponentRepository,this.services=e.services??new a.ServiceRepository,this.tools=e.tools??new c}get size(){return this.components.size+this.services.size+this.tools.size}}},7676:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.BomRefDiscriminator=void 0;class r{#V;#H;constructor(e,t="BomRef"){this.#V=Array.from(e,e=>[e,e.value]),this.#H=t}get prefix(){return this.#H}*[Symbol.iterator](){for(const[e]of this.#V)yield e}discriminate(){const e=new Set([""]);for(const[t]of this.#V){let r=t.value;(void 0===r||e.has(r))&&(r=this.#U(),t.value=r),e.add(r)}}reset(){for(const[e,t]of this.#V)e.value=t}#U(){return`${this.#H}${Math.random().toString(32).substring(1)}${Math.random().toString(32).substring(1)}`}}t.BomRefDiscriminator=r},7715:function(e,t,r){var n,o=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),i=this&&this.__setModuleDefault||(Object.create?function(e,t){Object.defineProperty(e,"default",{enumerable:!0,value:t})}:function(e,t){e.default=t}),s=this&&this.__exportStar||function(e,t){for(var r in e)"default"===r||Object.prototype.hasOwnProperty.call(t,r)||o(t,e,r)},a=this&&this.__importStar||(n=function(e){return n=Object.getOwnPropertyNames||function(e){var t=[];for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[t.length]=r);return t},n(e)},function(e){if(e&&e.__esModule)return e;var t={};if(null!=e)for(var r=n(e),s=0;s<r.length;s++)"default"!==r[s]&&o(t,e,r[s]);return i(t,e),t});Object.defineProperty(t,"__esModule",{value:!0}),t.Types=void 0,s(r(5563),t),t.Types=a(r(8359))},7840:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.OptPlugError=void 0;class r extends Error{cause;constructor(e,t){super(e),this.cause=t}}t.OptPlugError=r},7894:(e,t)=>{var r;Object.defineProperty(t,"__esModule",{value:!0}),t.LifecyclePhase=void 0,function(e){e.Design="design",e.PreBuild="pre-build",e.Build="build",e.PostBuild="post-build",e.Operations="operations",e.Discovery="discovery",e.Decommission="decommission"}(r||(t.LifecyclePhase=r={}))},7977:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.escapeUri=function(e){if(void 0===e)return e;for(const[t,n]of r)e=e.replace(t,n);return e};const r=[[/ /g,"%20"],[/"/g,"%22"],[/'/g,"%27"],[/\[/g,"%5B"],[/]/g,"%5D"],[/</g,"%3C"],[/>/g,"%3E"],[/\{/g,"%7B"],[/}/g,"%7D"]]},7988:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.LicenseRepository=t.SpdxLicense=t.NamedLicense=t.LicenseExpression=void 0,t.LicenseExpression=class{#G;acknowledgement;constructor(e){this.expression=e}get expression(){return this.#G}set expression(e){if(""===e)throw new RangeError("value is empty string");this.#G=e}compare(e){return this.#G.localeCompare(e.#G)}};class r{acknowledgement;text;#$;constructor(e={}){this.acknowledgement=e.acknowledgement,this.text=e.text,this.url=e.url}get url(){return this.#$}set url(e){this.#$=""===e?void 0:e}}t.NamedLicense=class extends r{name;constructor(e,t={}){super(t),this.name=e}compare(e){return this.name.localeCompare(e.name)}},t.SpdxLicense=class extends r{#Y;constructor(e,t={}){super(t),this.id=e}get id(){return this.#Y}set id(e){if(""===e)throw new RangeError("value is empty string");this.#Y=e}compare(e){return this.#Y.localeCompare(e.#Y)}};class n extends Set{static#w(e,t){return e.constructor===t.constructor?e.compare(t):e.constructor.name.localeCompare(t.constructor.name)}sorted(){return Array.from(this).sort(n.#w)}}t.LicenseRepository=n},8008:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.isNodePackageJson=function(e){throw new Error("Not implemented")},t.assertNodePackageJson=function(e){throw new Error("Not implemented")}},8070:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.MissingOptionalDependencyError=void 0;const n=r(7840);class o extends n.OptPlugError{}t.MissingOptionalDependencyError=o},8127:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.JsonSerializer=void 0;const n=r(4196),o=r(2971),i=r(8352);class s extends i.BaseSerializer{#I;constructor(e){if(!e.spec.supportsFormat(n.Format.JSON))throw new o.UnsupportedFormatError("Spec does not support JSON format.");super(),this.#I=e}get normalizerFactory(){return this.#I}_normalize(e,t={}){return this.#I.makeForBom().normalize(e,t)}_serialize(e,{space:t}={}){return JSON.stringify(e,null,t)}}t.JsonSerializer=s},8207:function(e,t,r){var n,o=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),i=this&&this.__setModuleDefault||(Object.create?function(e,t){Object.defineProperty(e,"default",{enumerable:!0,value:t})}:function(e,t){e.default=t}),s=this&&this.__exportStar||function(e,t){for(var r in e)"default"===r||Object.prototype.hasOwnProperty.call(t,r)||o(t,e,r)},a=this&&this.__importStar||(n=function(e){return n=Object.getOwnPropertyNames||function(e){var t=[];for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[t.length]=r);return t},n(e)},function(e){if(e&&e.__esModule)return e;var t={};if(null!=e)for(var r=n(e),s=0;s<r.length;s++)"default"!==r[s]&&o(t,e,r[s]);return i(t,e),t});Object.defineProperty(t,"__esModule",{value:!0}),t.Vulnerability=void 0,s(r(7238),t),s(r(5393),t),s(r(3729),t),s(r(1588),t),s(r(9064),t),s(r(3922),t),s(r(1791),t),s(r(2463),t),s(r(7988),t),s(r(4799),t),s(r(734),t),s(r(4477),t),s(r(6258),t),s(r(4654),t),s(r(8672),t),s(r(2632),t),s(r(7645),t),t.Vulnerability=a(r(4970))},8352:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.BaseSerializer=void 0;const n=r(9027),o=r(7676);t.BaseSerializer=class{*#K(e){if(void 0!==e.metadata.component){yield e.metadata.component.bomRef;for(const{bomRef:t}of e.metadata.component.components[n.treeIteratorSymbol]())yield t}for(const{bomRef:t}of e.components[n.treeIteratorSymbol]())yield t;for(const{bomRef:t}of e.services[n.treeIteratorSymbol]())yield t;for(const{bomRef:t}of e.vulnerabilities)yield t}#W(e,t){const r=new o.BomRefDiscriminator(this.#K(e));r.discriminate();try{return this._normalize(e,t)}finally{r.reset()}}serialize(e,t){return this._serialize(this.#W(e,t),t)}}},8359:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0})},8440:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0})},8672:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.ServiceRepository=t.Service=void 0;const n=r(1507),o=r(9027),i=r(1588),s=r(1791),a=r(7988),l=r(4654);t.Service=class{provider;group;name;version;description;licenses;externalReferences;services;properties;#X;dependencies;constructor(e,t={}){this.#X=new i.BomRef(t.bomRef),this.provider=t.provider,this.group=t.group,this.name=e,this.version=t.version,this.description=t.description,this.licenses=t.licenses??new a.LicenseRepository,this.externalReferences=t.externalReferences??new s.ExternalReferenceRepository,this.services=t.services??new c,this.properties=t.properties??new l.PropertyRepository,this.dependencies=t.dependencies??new i.BomRefRepository}get bomRef(){return this.#X}compare(e){const t=this.bomRef.compare(e.bomRef);return 0!==t?t:(this.group??"").localeCompare(e.group??"")||this.name.localeCompare(e.name)||(this.version??"").localeCompare(e.version??"")}};class c extends n.SortableComparables{*[o.treeIteratorSymbol](){for(const e of this)yield e,yield*e.services[o.treeIteratorSymbol]()}}t.ServiceRepository=c},8768:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.VulnerabilityRepository=t.Vulnerability=void 0;const n=r(1507),o=r(759),i=r(1588),s=r(4654),a=r(7645),l=r(3327),c=r(785),p=r(2569),m=r(9803);t.Vulnerability=class{#X;id;source;references;ratings;cwes;description;detail;recommendation;advisories;created;published;updated;credits;tools;analysis;affects;properties;constructor(e={}){this.#X=new i.BomRef(e.bomRef),this.id=e.id,this.source=e.source,this.references=e.references??new m.ReferenceRepository,this.ratings=e.ratings??new p.RatingRepository,this.cwes=e.cwes??new o.CweRepository,this.description=e.description,this.detail=e.detail,this.recommendation=e.recommendation,this.advisories=e.advisories??new l.AdvisoryRepository,this.created=e.created,this.published=e.published,this.updated=e.updated,this.credits=e.credits,this.tools=e.tools??new a.Tools,this.analysis=e.analysis,this.affects=e.affects??new c.AffectRepository,this.properties=e.properties??new s.PropertyRepository}get bomRef(){return this.#X}compare(e){const t=this.bomRef.compare(e.bomRef);return 0!==t?t:(this.id??"").localeCompare(e.id??"")||(this.created?.getTime()??0)-(e.created?.getTime()??0)||(this.published?.getTime()??0)-(e.published?.getTime()??0)||(this.updated?.getTime()??0)-(e.updated?.getTime()??0)||this.ratings.compare(e.ratings)||this.cwes.compare(e.cwes)||(this.description??"").localeCompare(e.description??"")||(this.detail??"").localeCompare(e.detail??"")||(this.recommendation??"").localeCompare(e.recommendation??"")||(this.source&&e.source?this.source.compare(e.source):0)||this.properties.compare(e.properties)}};class u extends n.SortableComparables{}t.VulnerabilityRepository=u},9027:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.treeIteratorSymbol=void 0,t.treeIteratorSymbol=Symbol("iterator of a tree/nesting-like structure")},9064:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.ComponentEvidence=t.ComponentRepository=t.Component=void 0;const n=r(1507),o=r(9027),i=r(608),s=r(1588),a=r(3922),l=r(1791),c=r(2463),p=r(7988),m=r(4654);t.Component=class{type;name;author;copyright;description;externalReferences;group;hashes;licenses;publisher;purl;scope;supplier;swid;version;components;properties;evidence;#X;#J;dependencies;constructor(e,t,r={}){this.#X=new s.BomRef(r.bomRef),this.type=e,this.name=t,this.supplier=r.supplier,this.author=r.author,this.copyright=r.copyright,this.externalReferences=r.externalReferences??new l.ExternalReferenceRepository,this.group=r.group,this.hashes=r.hashes??new c.HashDictionary,this.licenses=r.licenses??new p.LicenseRepository,this.publisher=r.publisher,this.purl=r.purl,this.scope=r.scope,this.swid=r.swid,this.version=r.version,this.description=r.description,this.components=r.components??new u,this.cpe=r.cpe,this.properties=r.properties??new m.PropertyRepository,this.evidence=r.evidence,this.dependencies=r.dependencies??new s.BomRefRepository}get bomRef(){return this.#X}get cpe(){return this.#J}set cpe(e){if(void 0!==e&&!(0,i.isCPE)(e))throw new TypeError("Not CPE nor undefined");this.#J=e}compare(e){const t=this.bomRef.compare(e.bomRef);return 0!==t?t:void 0!==this.purl&&void 0!==e.purl?this.purl.toString().localeCompare(e.purl.toString()):void 0!==this.#J&&void 0!==e.#J?this.#J.localeCompare(e.#J):(this.group??"").localeCompare(e.group??"")||this.name.localeCompare(e.name)||(this.version??"").localeCompare(e.version??"")}};class u extends n.SortableComparables{*[o.treeIteratorSymbol](){for(const e of this)yield e,yield*e.components[o.treeIteratorSymbol]()}}t.ComponentRepository=u,t.ComponentEvidence=class{licenses;copyright;constructor(e={}){this.licenses=e.licenses??new p.LicenseRepository,this.copyright=e.copyright??new a.CopyrightRepository}}},9356:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.isMimeType=function(e){return"string"==typeof e&&r.test(e)};const r=/^[-+a-z0-9.]+\/[-+a-z0-9.]+$/},9511:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.AnalysisResponseRepository=t.AnalysisResponse=void 0;const n=r(1507);var o;!function(e){e.CanNotFix="can_not_fix",e.WillNotFix="will_not_fix",e.Update="update",e.Rollback="rollback",e.WorkaroundAvailable="workaround_available"}(o||(t.AnalysisResponse=o={}));class i extends n.SortableStringables{}t.AnalysisResponseRepository=i},9569:function(e,t,r){var n=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),o=this&&this.__exportStar||function(e,t){for(var r in e)"default"===r||Object.prototype.hasOwnProperty.call(t,r)||n(t,e,r)};Object.defineProperty(t,"__esModule",{value:!0}),o(r(94),t),o(r(204),t)},9708:(e,t)=>{function r(e){return Number.isInteger(e)}Object.defineProperty(t,"__esModule",{value:!0}),t.isInteger=r,t.isNonNegativeInteger=function(e){return r(e)&&e>=0},t.isPositiveInteger=function(e){return r(e)&&e>0}},9803:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.ReferenceRepository=t.Reference=void 0;const n=r(1507);t.Reference=class{id;source;constructor(e,t){this.id=e,this.source=t}compare(e){return this.id.localeCompare(e.id)||this.source.compare(e.source)}};class o extends n.SortableComparables{}t.ReferenceRepository=o}},t={};return function r(n){var o=t[n];if(void 0!==o)return o.exports;var i=t[n]={exports:{}};return e[n].call(i.exports,i,i.exports,r),i.exports}(7288)})());
+!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.CycloneDX_library=t():e.CycloneDX_library=t()}(self,()=>(()=>{"use strict";var e={48:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.isNotUndefined=function(e){return void 0!==e}},94:function(e,t,r){var n,o=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),i=this&&this.__setModuleDefault||(Object.create?function(e,t){Object.defineProperty(e,"default",{enumerable:!0,value:t})}:function(e,t){e.default=t}),a=this&&this.__exportStar||function(e,t){for(var r in e)"default"===r||Object.prototype.hasOwnProperty.call(t,r)||o(t,e,r)},s=this&&this.__importStar||(n=function(e){return n=Object.getOwnPropertyNames||function(e){var t=[];for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[t.length]=r);return t},n(e)},function(e){if(e&&e.__esModule)return e;var t={};if(null!=e)for(var r=n(e),a=0;a<r.length;a++)"default"!==r[a]&&o(t,e,r[a]);return i(t,e),t});Object.defineProperty(t,"__esModule",{value:!0}),t.XML=t.JSON=t.Types=void 0,a(r(7676),t),a(r(8070),t),t.Types=s(r(8440)),a(r(8352),t),t.JSON=s(r(4212)),a(r(8127),t),t.XML=s(r(1007)),a(r(4889),t)},162:function(e,t,r){var n=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),o=this&&this.__exportStar||function(e,t){for(var r in e)"default"===r||Object.prototype.hasOwnProperty.call(t,r)||n(t,e,r)};Object.defineProperty(t,"__esModule",{value:!0}),o(r(9979),t)},204:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.XmlSerializer=void 0;const n=r(48),o=r(4889);class i extends o.XmlBaseSerializer{_serialize(e,{space:t}={}){const r=this.#e(e);return(new XMLSerializer).serializeToString(r)}#e(e){const t=document.implementation.createDocument(null,null);return t.appendChild(this.#t(e,t,null)),t}#r(e){const t=(e.namespace??e.attributes?.xmlns)?.toString()??"";return t.length>0?t:null}#t(e,t,r){const o=this.#r(e)??r,i=t.createElementNS(o,e.name);return(0,n.isNotUndefined)(e.attributes)&&this.#n(i,e.attributes),(0,n.isNotUndefined)(e.children)&&this.#o(i,e.children,o),i}#n(e,t){for(const[r,o]of Object.entries(t))(0,n.isNotUndefined)(o)&&"xmlns"!==r&&e.setAttribute(r,`${o}`)}#o(e,t,r=null){if(void 0===t)return;if("string"==typeof t||"number"==typeof t)return void(e.textContent=t.toString());const n=e.ownerDocument;for(const o of t)"element"===o.type&&e.appendChild(this.#t(o,n,r))}}t.XmlSerializer=i},382:function(e,t,r){var n=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),o=this&&this.__exportStar||function(e,t){for(var r in e)"default"===r||Object.prototype.hasOwnProperty.call(t,r)||n(t,e,r)};Object.defineProperty(t,"__esModule",{value:!0}),o(r(656),t),o(r(4196),t),o(r(2971),t)},428:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.PackageUrlFactory=void 0;const n=r(3899),o=r(3321);t.PackageUrlFactory=class{#i;constructor(e){this.#i=e}get type(){return this.#i}makeFromComponent(e,t=!1){const r={};let i;r.__proto__=null;const a=t?e.externalReferences.sorted():e.externalReferences;for(const e of a){const t=e.url.toString();if(!(t.length<=0))switch(e.type){case o.ExternalReferenceType.VCS:[r[n.PurlQualifierNames.VcsUrl],i]=t.split("#",2);break;case o.ExternalReferenceType.Distribution:r[n.PurlQualifierNames.DownloadUrl]=t}}const s=e.hashes;s.size>0&&(r[n.PurlQualifierNames.Checksum]=Array.from(t?s.sorted():s,([e,t])=>`${e.toLowerCase()}:${t.toLowerCase()}`).join(","));try{return new n.PackageURL(this.#i,e.group,e.name,e.version,r,i)}catch{return}}}},608:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.isCPE=function(e){return"string"==typeof e&&r.test(e)};const r=/^([c][pP][eE]:\/[AHOaho]?(:[A-Za-z0-9\._\-~%]*){0,6})$|^(cpe:2\.3:[aho\*\-](:(((\?*|\*?)([a-zA-Z0-9\-\._]|(\\[\\\*\?!"#$$%&'\(\)\+,\/:;<=>@\[\]\^`\{\|}~]))+(\?*|\*?))|[\*\-])){5}(:(([a-zA-Z]{2,3}(-([a-zA-Z]{2}|[0-9]{3}))?)|[\*\-]))(:(((\?*|\*?)([a-zA-Z0-9\-\._]|(\\[\\\*\?!"#$$%&'\(\)\+,\/:;<=>@\[\]\^`\{\|}~]))+(\?*|\*?))|[\*\-])){4})$/},625:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.Source=void 0,t.Source=class{name;url;constructor(e={}){this.name=e.name,this.url=e.url}compare(e){return(this.url?.toString()??"").localeCompare(e.url?.toString()??"")||(this.name??"").localeCompare(e.name??"")}}},656:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.SpecVersionDict=t.Spec1dot7=t.Spec1dot6=t.Spec1dot5=t.Spec1dot4=t.Spec1dot3=t.Spec1dot2=void 0;const n=r(5866),o=r(3321),i=r(1525),a=r(5486),s=r(1699),l=r(4196);t.Spec1dot2=Object.freeze(new s._Spec(l.Version.v1dot2,[l.Format.XML,l.Format.JSON],[n.ComponentType.Application,n.ComponentType.Framework,n.ComponentType.Library,n.ComponentType.Container,n.ComponentType.OperatingSystem,n.ComponentType.Device,n.ComponentType.Firmware,n.ComponentType.File],[i.HashAlgorithm.MD5,i.HashAlgorithm["SHA-1"],i.HashAlgorithm["SHA-256"],i.HashAlgorithm["SHA-384"],i.HashAlgorithm["SHA-512"],i.HashAlgorithm["SHA3-256"],i.HashAlgorithm["SHA3-384"],i.HashAlgorithm["SHA3-512"],i.HashAlgorithm["BLAKE2b-256"],i.HashAlgorithm["BLAKE2b-384"],i.HashAlgorithm["BLAKE2b-512"],i.HashAlgorithm.BLAKE3],/^([a-fA-F0-9]{32})$|^([a-fA-F0-9]{40})$|^([a-fA-F0-9]{64})$|^([a-fA-F0-9]{96})$|^([a-fA-F0-9]{128})$/,[o.ExternalReferenceType.VCS,o.ExternalReferenceType.IssueTracker,o.ExternalReferenceType.Website,o.ExternalReferenceType.Advisories,o.ExternalReferenceType.BOM,o.ExternalReferenceType.MailingList,o.ExternalReferenceType.Social,o.ExternalReferenceType.Chat,o.ExternalReferenceType.Documentation,o.ExternalReferenceType.Support,o.ExternalReferenceType.Distribution,o.ExternalReferenceType.License,o.ExternalReferenceType.BuildMeta,o.ExternalReferenceType.BuildSystem,o.ExternalReferenceType.Other],!0,!1,!0,!1,!1,[],!1,!1,!1,!1,!1,!1,!0,!1)),t.Spec1dot3=Object.freeze(new s._Spec(l.Version.v1dot3,[l.Format.XML,l.Format.JSON],[n.ComponentType.Application,n.ComponentType.Framework,n.ComponentType.Library,n.ComponentType.Container,n.ComponentType.OperatingSystem,n.ComponentType.Device,n.ComponentType.Firmware,n.ComponentType.File],[i.HashAlgorithm.MD5,i.HashAlgorithm["SHA-1"],i.HashAlgorithm["SHA-256"],i.HashAlgorithm["SHA-384"],i.HashAlgorithm["SHA-512"],i.HashAlgorithm["SHA3-256"],i.HashAlgorithm["SHA3-384"],i.HashAlgorithm["SHA3-512"],i.HashAlgorithm["BLAKE2b-256"],i.HashAlgorithm["BLAKE2b-384"],i.HashAlgorithm["BLAKE2b-512"],i.HashAlgorithm.BLAKE3],/^([a-fA-F0-9]{32})$|^([a-fA-F0-9]{40})$|^([a-fA-F0-9]{64})$|^([a-fA-F0-9]{96})$|^([a-fA-F0-9]{128})$/,[o.ExternalReferenceType.VCS,o.ExternalReferenceType.IssueTracker,o.ExternalReferenceType.Website,o.ExternalReferenceType.Advisories,o.ExternalReferenceType.BOM,o.ExternalReferenceType.MailingList,o.ExternalReferenceType.Social,o.ExternalReferenceType.Chat,o.ExternalReferenceType.Documentation,o.ExternalReferenceType.Support,o.ExternalReferenceType.Distribution,o.ExternalReferenceType.License,o.ExternalReferenceType.BuildMeta,o.ExternalReferenceType.BuildSystem,o.ExternalReferenceType.Other],!0,!1,!0,!0,!1,[],!0,!1,!0,!0,!0,!1,!0,!1)),t.Spec1dot4=Object.freeze(new s._Spec(l.Version.v1dot4,[l.Format.XML,l.Format.JSON],[n.ComponentType.Application,n.ComponentType.Framework,n.ComponentType.Library,n.ComponentType.Container,n.ComponentType.OperatingSystem,n.ComponentType.Device,n.ComponentType.Firmware,n.ComponentType.File],[i.HashAlgorithm.MD5,i.HashAlgorithm["SHA-1"],i.HashAlgorithm["SHA-256"],i.HashAlgorithm["SHA-384"],i.HashAlgorithm["SHA-512"],i.HashAlgorithm["SHA3-256"],i.HashAlgorithm["SHA3-384"],i.HashAlgorithm["SHA3-512"],i.HashAlgorithm["BLAKE2b-256"],i.HashAlgorithm["BLAKE2b-384"],i.HashAlgorithm["BLAKE2b-512"],i.HashAlgorithm.BLAKE3],/^([a-fA-F0-9]{32})$|^([a-fA-F0-9]{40})$|^([a-fA-F0-9]{64})$|^([a-fA-F0-9]{96})$|^([a-fA-F0-9]{128})$/,[o.ExternalReferenceType.VCS,o.ExternalReferenceType.IssueTracker,o.ExternalReferenceType.Website,o.ExternalReferenceType.Advisories,o.ExternalReferenceType.BOM,o.ExternalReferenceType.MailingList,o.ExternalReferenceType.Social,o.ExternalReferenceType.Chat,o.ExternalReferenceType.Documentation,o.ExternalReferenceType.Support,o.ExternalReferenceType.Distribution,o.ExternalReferenceType.License,o.ExternalReferenceType.BuildMeta,o.ExternalReferenceType.BuildSystem,o.ExternalReferenceType.ReleaseNotes,o.ExternalReferenceType.Other],!0,!0,!1,!0,!0,[a.RatingMethod.CVSSv2,a.RatingMethod.CVSSv3,a.RatingMethod.CVSSv31,a.RatingMethod.OWASP,a.RatingMethod.Other],!0,!1,!0,!0,!0,!1,!0,!1)),t.Spec1dot5=Object.freeze(new s._Spec(l.Version.v1dot5,[l.Format.XML,l.Format.JSON],[n.ComponentType.Application,n.ComponentType.Framework,n.ComponentType.Library,n.ComponentType.Container,n.ComponentType.Platform,n.ComponentType.OperatingSystem,n.ComponentType.Device,n.ComponentType.DeviceDriver,n.ComponentType.Firmware,n.ComponentType.File,n.ComponentType.MachineLearningModel,n.ComponentType.Data],[i.HashAlgorithm.MD5,i.HashAlgorithm["SHA-1"],i.HashAlgorithm["SHA-256"],i.HashAlgorithm["SHA-384"],i.HashAlgorithm["SHA-512"],i.HashAlgorithm["SHA3-256"],i.HashAlgorithm["SHA3-384"],i.HashAlgorithm["SHA3-512"],i.HashAlgorithm["BLAKE2b-256"],i.HashAlgorithm["BLAKE2b-384"],i.HashAlgorithm["BLAKE2b-512"],i.HashAlgorithm.BLAKE3],/^([a-fA-F0-9]{32})$|^([a-fA-F0-9]{40})$|^([a-fA-F0-9]{64})$|^([a-fA-F0-9]{96})$|^([a-fA-F0-9]{128})$/,[o.ExternalReferenceType.VCS,o.ExternalReferenceType.IssueTracker,o.ExternalReferenceType.Website,o.ExternalReferenceType.Advisories,o.ExternalReferenceType.BOM,o.ExternalReferenceType.MailingList,o.ExternalReferenceType.Social,o.ExternalReferenceType.Chat,o.ExternalReferenceType.Documentation,o.ExternalReferenceType.Support,o.ExternalReferenceType.Distribution,o.ExternalReferenceType.DistributionIntake,o.ExternalReferenceType.License,o.ExternalReferenceType.BuildMeta,o.ExternalReferenceType.BuildSystem,o.ExternalReferenceType.ReleaseNotes,o.ExternalReferenceType.SecurityContact,o.ExternalReferenceType.ModelCard,o.ExternalReferenceType.Log,o.ExternalReferenceType.Configuration,o.ExternalReferenceType.Evidence,o.ExternalReferenceType.Formulation,o.ExternalReferenceType.Attestation,o.ExternalReferenceType.ThreatModel,o.ExternalReferenceType.AdversaryModel,o.ExternalReferenceType.RiskAssessment,o.ExternalReferenceType.VulnerabilityAssertion,o.ExternalReferenceType.ExploitabilityStatement,o.ExternalReferenceType.PentestReport,o.ExternalReferenceType.StaticAnalysisReport,o.ExternalReferenceType.DynamicAnalysisReport,o.ExternalReferenceType.RuntimeAnalysisReport,o.ExternalReferenceType.ComponentAnalysisReport,o.ExternalReferenceType.MaturityReport,o.ExternalReferenceType.CertificationReport,o.ExternalReferenceType.CodifiedInfrastructure,o.ExternalReferenceType.QualityMetrics,o.ExternalReferenceType.POAM,o.ExternalReferenceType.Other],!0,!0,!1,!0,!0,[a.RatingMethod.CVSSv2,a.RatingMethod.CVSSv3,a.RatingMethod.CVSSv31,a.RatingMethod.CVSSv4,a.RatingMethod.OWASP,a.RatingMethod.SSVC,a.RatingMethod.Other],!0,!0,!0,!0,!0,!1,!0,!0)),t.Spec1dot6=Object.freeze(new s._Spec(l.Version.v1dot6,[l.Format.XML,l.Format.JSON],[n.ComponentType.Application,n.ComponentType.Framework,n.ComponentType.Library,n.ComponentType.Container,n.ComponentType.Platform,n.ComponentType.OperatingSystem,n.ComponentType.Device,n.ComponentType.DeviceDriver,n.ComponentType.Firmware,n.ComponentType.File,n.ComponentType.MachineLearningModel,n.ComponentType.Data,n.ComponentType.CryptographicAsset],[i.HashAlgorithm.MD5,i.HashAlgorithm["SHA-1"],i.HashAlgorithm["SHA-256"],i.HashAlgorithm["SHA-384"],i.HashAlgorithm["SHA-512"],i.HashAlgorithm["SHA3-256"],i.HashAlgorithm["SHA3-384"],i.HashAlgorithm["SHA3-512"],i.HashAlgorithm["BLAKE2b-256"],i.HashAlgorithm["BLAKE2b-384"],i.HashAlgorithm["BLAKE2b-512"],i.HashAlgorithm.BLAKE3],/^([a-fA-F0-9]{32})$|^([a-fA-F0-9]{40})$|^([a-fA-F0-9]{64})$|^([a-fA-F0-9]{96})$|^([a-fA-F0-9]{128})$/,[o.ExternalReferenceType.VCS,o.ExternalReferenceType.IssueTracker,o.ExternalReferenceType.Website,o.ExternalReferenceType.Advisories,o.ExternalReferenceType.BOM,o.ExternalReferenceType.MailingList,o.ExternalReferenceType.Social,o.ExternalReferenceType.Chat,o.ExternalReferenceType.Documentation,o.ExternalReferenceType.Support,o.ExternalReferenceType.SourceDistribution,o.ExternalReferenceType.Distribution,o.ExternalReferenceType.DistributionIntake,o.ExternalReferenceType.License,o.ExternalReferenceType.BuildMeta,o.ExternalReferenceType.BuildSystem,o.ExternalReferenceType.ReleaseNotes,o.ExternalReferenceType.SecurityContact,o.ExternalReferenceType.ModelCard,o.ExternalReferenceType.Log,o.ExternalReferenceType.Configuration,o.ExternalReferenceType.Evidence,o.ExternalReferenceType.Formulation,o.ExternalReferenceType.Attestation,o.ExternalReferenceType.ThreatModel,o.ExternalReferenceType.AdversaryModel,o.ExternalReferenceType.RiskAssessment,o.ExternalReferenceType.VulnerabilityAssertion,o.ExternalReferenceType.ExploitabilityStatement,o.ExternalReferenceType.PentestReport,o.ExternalReferenceType.StaticAnalysisReport,o.ExternalReferenceType.DynamicAnalysisReport,o.ExternalReferenceType.RuntimeAnalysisReport,o.ExternalReferenceType.ComponentAnalysisReport,o.ExternalReferenceType.MaturityReport,o.ExternalReferenceType.CertificationReport,o.ExternalReferenceType.CodifiedInfrastructure,o.ExternalReferenceType.QualityMetrics,o.ExternalReferenceType.POAM,o.ExternalReferenceType.ElectronicSignature,o.ExternalReferenceType.DigitalSignature,o.ExternalReferenceType.RFC9116,o.ExternalReferenceType.Other],!0,!0,!1,!0,!0,[a.RatingMethod.CVSSv2,a.RatingMethod.CVSSv3,a.RatingMethod.CVSSv31,a.RatingMethod.CVSSv4,a.RatingMethod.OWASP,a.RatingMethod.SSVC,a.RatingMethod.Other],!0,!0,!0,!0,!0,!0,!0,!0)),t.Spec1dot7=Object.freeze(new s._Spec(l.Version.v1dot7,[l.Format.XML,l.Format.JSON],[n.ComponentType.Application,n.ComponentType.Framework,n.ComponentType.Library,n.ComponentType.Container,n.ComponentType.Platform,n.ComponentType.OperatingSystem,n.ComponentType.Device,n.ComponentType.DeviceDriver,n.ComponentType.Firmware,n.ComponentType.File,n.ComponentType.MachineLearningModel,n.ComponentType.Data,n.ComponentType.CryptographicAsset],[i.HashAlgorithm.MD5,i.HashAlgorithm["SHA-1"],i.HashAlgorithm["SHA-256"],i.HashAlgorithm["SHA-384"],i.HashAlgorithm["SHA-512"],i.HashAlgorithm["SHA3-256"],i.HashAlgorithm["SHA3-384"],i.HashAlgorithm["SHA3-512"],i.HashAlgorithm["BLAKE2b-256"],i.HashAlgorithm["BLAKE2b-384"],i.HashAlgorithm["BLAKE2b-512"],i.HashAlgorithm.BLAKE3,i.HashAlgorithm["Streebog-256"],i.HashAlgorithm["Streebog-512"]],/^([a-fA-F0-9]{32})$|^([a-fA-F0-9]{40})$|^([a-fA-F0-9]{64})$|^([a-fA-F0-9]{96})$|^([a-fA-F0-9]{128})$/,[o.ExternalReferenceType.VCS,o.ExternalReferenceType.IssueTracker,o.ExternalReferenceType.Website,o.ExternalReferenceType.Advisories,o.ExternalReferenceType.BOM,o.ExternalReferenceType.MailingList,o.ExternalReferenceType.Social,o.ExternalReferenceType.Chat,o.ExternalReferenceType.Documentation,o.ExternalReferenceType.Support,o.ExternalReferenceType.SourceDistribution,o.ExternalReferenceType.Distribution,o.ExternalReferenceType.DistributionIntake,o.ExternalReferenceType.License,o.ExternalReferenceType.BuildMeta,o.ExternalReferenceType.BuildSystem,o.ExternalReferenceType.ReleaseNotes,o.ExternalReferenceType.SecurityContact,o.ExternalReferenceType.ModelCard,o.ExternalReferenceType.Log,o.ExternalReferenceType.Configuration,o.ExternalReferenceType.Evidence,o.ExternalReferenceType.Formulation,o.ExternalReferenceType.Attestation,o.ExternalReferenceType.ThreatModel,o.ExternalReferenceType.AdversaryModel,o.ExternalReferenceType.RiskAssessment,o.ExternalReferenceType.VulnerabilityAssertion,o.ExternalReferenceType.ExploitabilityStatement,o.ExternalReferenceType.PentestReport,o.ExternalReferenceType.StaticAnalysisReport,o.ExternalReferenceType.DynamicAnalysisReport,o.ExternalReferenceType.RuntimeAnalysisReport,o.ExternalReferenceType.ComponentAnalysisReport,o.ExternalReferenceType.MaturityReport,o.ExternalReferenceType.CertificationReport,o.ExternalReferenceType.CodifiedInfrastructure,o.ExternalReferenceType.QualityMetrics,o.ExternalReferenceType.POAM,o.ExternalReferenceType.ElectronicSignature,o.ExternalReferenceType.DigitalSignature,o.ExternalReferenceType.RFC9116,o.ExternalReferenceType.Citation,o.ExternalReferenceType.Patent,o.ExternalReferenceType.PatentAssertion,o.ExternalReferenceType.PatentFamily,o.ExternalReferenceType.RFC9116,o.ExternalReferenceType.Other],!0,!0,!1,!0,!0,[a.RatingMethod.CVSSv2,a.RatingMethod.CVSSv3,a.RatingMethod.CVSSv31,a.RatingMethod.CVSSv4,a.RatingMethod.OWASP,a.RatingMethod.SSVC,a.RatingMethod.Other],!0,!0,!0,!0,!0,!0,!0,!0)),t.SpecVersionDict=Object.freeze({[l.Version.v1dot7]:t.Spec1dot7,[l.Version.v1dot6]:t.Spec1dot6,[l.Version.v1dot5]:t.Spec1dot5,[l.Version.v1dot4]:t.Spec1dot4,[l.Version.v1dot3]:t.Spec1dot3,[l.Version.v1dot2]:t.Spec1dot2})},734:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.Metadata=void 0;const n=r(7988),o=r(4799),i=r(4477),a=r(4654),s=r(7645);t.Metadata=class{timestamp;lifecycles;tools;authors;component;manufacture;supplier;licenses;properties;constructor(e={}){this.timestamp=e.timestamp,this.lifecycles=e.lifecycles??new o.LifecycleRepository,this.tools=e.tools??new s.Tools,this.authors=e.authors??new i.OrganizationalContactRepository,this.component=e.component,this.manufacture=e.manufacture,this.supplier=e.supplier,this.licenses=e.licenses??new n.LicenseRepository,this.properties=e.properties??new a.PropertyRepository}}},759:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.CweRepository=void 0,t.isCWE=function(e){return(0,o.isPositiveInteger)(e)};const n=r(1507),o=r(9708);class i extends n.SortableNumbers{}t.CweRepository=i},785:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.AffectedVersionRepository=t.AffectedVersionRange=t.AffectedSingleVersion=t.AffectRepository=t.Affect=void 0;const n=r(1507);t.Affect=class{ref;versions;constructor(e,t={}){this.ref=e,this.versions=t.versions??new i}compare(e){return this.ref.compare(e.ref)||this.versions.compare(e.versions)}};class o extends n.SortableComparables{}t.AffectRepository=o,t.AffectedSingleVersion=class{version;status;constructor(e,t={}){this.version=e,this.status=t.status}compare(e){return this.version.localeCompare(e.version)||(this.status??"").localeCompare(e.status??"")}},t.AffectedVersionRange=class{range;status;constructor(e,t={}){this.range=e,this.status=t.status}compare(e){return this.range.localeCompare(e.range)||(this.status??"").localeCompare(e.status??"")}};class i extends n.SortableComparables{}t.AffectedVersionRepository=i},857:function(e,t,r){var n,o=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),i=this&&this.__setModuleDefault||(Object.create?function(e,t){Object.defineProperty(e,"default",{enumerable:!0,value:t})}:function(e,t){e.default=t}),a=this&&this.__exportStar||function(e,t){for(var r in e)"default"===r||Object.prototype.hasOwnProperty.call(t,r)||o(t,e,r)},s=this&&this.__importStar||(n=function(e){return n=Object.getOwnPropertyNames||function(e){var t=[];for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[t.length]=r);return t},n(e)},function(e){if(e&&e.__esModule)return e;var t={};if(null!=e)for(var r=n(e),a=0;a<r.length;a++)"default"!==r[a]&&o(t,e,r[a]);return i(t,e),t});Object.defineProperty(t,"__esModule",{value:!0}),t.Vulnerability=void 0,a(r(4277),t),a(r(2904),t),a(r(5866),t),a(r(3321),t),a(r(1525),t),a(r(1688),t),a(r(7894),t),t.Vulnerability=s(r(4880))},870:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.PackageUrlFactory=t.LicenseFactory=void 0;const n=r(6612),o=r(428);t.LicenseFactory=n.LicenseFactory,t.PackageUrlFactory=o.PackageUrlFactory},930:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.Analysis=void 0;const n=r(9511);t.Analysis=class{state;justification;response;detail;constructor(e={}){this.state=e.state,this.justification=e.justification,this.response=e.response??new n.AnalysisResponseRepository,this.detail=e.detail}}},1007:function(e,t,r){var n,o=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),i=this&&this.__setModuleDefault||(Object.create?function(e,t){Object.defineProperty(e,"default",{enumerable:!0,value:t})}:function(e,t){e.default=t}),a=this&&this.__importStar||(n=function(e){return n=Object.getOwnPropertyNames||function(e){var t=[];for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[t.length]=r);return t},n(e)},function(e){if(e&&e.__esModule)return e;var t={};if(null!=e)for(var r=n(e),a=0;a<r.length;a++)"default"!==r[a]&&o(t,e,r[a]);return i(t,e),t});Object.defineProperty(t,"__esModule",{value:!0}),t.Types=t.Normalize=void 0,t.Normalize=a(r(1280)),t.Types=a(r(2970))},1089:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.chainI=function*(...e){for(const t of e)for(const e of t)yield e}},1280:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.VulnerabilityAffectedVersionNormalizer=t.VulnerabilityAffectNormalizer=t.VulnerabilityAnalysisNormalizer=t.VulnerabilityCreditsNormalizer=t.VulnerabilityAdvisoryNormalizer=t.VulnerabilityRatingNormalizer=t.VulnerabilityReferenceNormalizer=t.VulnerabilitySourceNormalizer=t.VulnerabilityNormalizer=t.DependencyGraphNormalizer=t.PropertyNormalizer=t.AttachmentNormalizer=t.ExternalReferenceNormalizer=t.SWIDNormalizer=t.LicenseNormalizer=t.ComponentEvidenceNormalizer=t.ServiceNormalizer=t.ComponentNormalizer=t.OrganizationalEntityNormalizer=t.OrganizationalContactNormalizer=t.HashNormalizer=t.ToolsNormalizer=t.ToolNormalizer=t.LifecycleNormalizer=t.MetadataNormalizer=t.BomNormalizer=t.Factory=void 0;const n=r(1089),o=r(48),i=r(9027),a=r(7977),s=r(8207),l=r(7988),c=r(4799),p=r(785),m=r(4317),u=r(4196),d=r(2931),f=r(2970);t.Factory=class{#a;constructor(e){this.#a=e}get spec(){return this.#a}makeForBom(){return new v(this)}makeForMetadata(){return new b(this)}makeForLifecycle(){return new g(this)}makeForComponent(){return new L(this)}makeForService(){return new R(this)}makeForComponentEvidence(){return new z(this)}makeForTool(){return new S(this)}makeForTools(){return new C(this)}makeForOrganizationalContact(){return new A(this)}makeForOrganizationalEntity(){return new _(this)}makeForHash(){return new x(this)}makeForLicense(){return new P(this)}makeForSWID(){return new O(this)}makeForExternalReference(){return new T(this)}makeForAttachment(){return new E(this)}makeForProperty(){return new M(this)}makeForDependencyGraph(){return new N(this)}makeForVulnerability(){return new w(this)}makeForVulnerabilitySource(){return new D(this)}makeForVulnerabilityReference(){return new F(this)}makeForVulnerabilityRating(){return new k(this)}makeForVulnerabilityAdvisory(){return new I(this)}makeForVulnerabilityCredits(){return new j(this)}makeForVulnerabilityAffect(){return new V(this)}makeForVulnerabilityAffectedVersion(){return new H(this)}makeForVulnerabilityAnalysis(){return new B(this)}};const h=new Map([[u.Version.v1dot7,"http://cyclonedx.org/schema/bom/1.7"],[u.Version.v1dot6,"http://cyclonedx.org/schema/bom/1.6"],[u.Version.v1dot5,"http://cyclonedx.org/schema/bom/1.5"],[u.Version.v1dot4,"http://cyclonedx.org/schema/bom/1.4"],[u.Version.v1dot3,"http://cyclonedx.org/schema/bom/1.3"],[u.Version.v1dot2,"http://cyclonedx.org/schema/bom/1.2"],[u.Version.v1dot1,"http://cyclonedx.org/schema/bom/1.1"],[u.Version.v1dot0,"http://cyclonedx.org/schema/bom/1.0"]]);class y{_factory;constructor(e){this._factory=e}get factory(){return this._factory}}class v extends y{normalize(e,t){const r={type:"element",name:"components",children:e.components.size>0?this._factory.makeForComponent().normalizeIterable(e.components,t,"component"):void 0},n=this._factory.spec.supportsServices&&e.services.size>0?{type:"element",name:"services",children:this._factory.makeForService().normalizeIterable(e.services,t,"service")}:void 0,i=this._factory.spec.supportsVulnerabilities&&e.vulnerabilities.size>0?{type:"element",name:"vulnerabilities",children:this._factory.makeForVulnerability().normalizeIterable(e.vulnerabilities,t,"vulnerability")}:void 0;return{type:"element",name:"bom",namespace:h.get(this._factory.spec.version),attributes:{version:e.version,serialNumber:this.#s(e.serialNumber)?e.serialNumber:void 0},children:[this._factory.makeForMetadata().normalize(e.metadata,t,"metadata"),r,n,this._factory.spec.supportsDependencyGraph?this._factory.makeForDependencyGraph().normalize(e,t,"dependencies"):void 0,i].filter(o.isNotUndefined)}}#s(e){return void 0!==e&&/^urn:uuid:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$|^\{[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\}$/.test(e)}}t.BomNormalizer=v;class b extends y{normalize(e,t,r){const n=this._factory.makeForOrganizationalEntity(),i=this._factory.spec.supportsMetadataLifecycles&&e.lifecycles.size>0?{type:"element",name:"lifecycles",children:this._factory.makeForLifecycle().normalizeIterable(e.lifecycles,t,"lifecycle")}:void 0,a=e.tools.size>0?this._factory.makeForTools().normalize(e.tools,t,"tools"):void 0,s=e.authors.size>0?{type:"element",name:"authors",children:this._factory.makeForOrganizationalContact().normalizeIterable(e.authors,t,"author")}:void 0,l=this._factory.spec.supportsMetadataLicenses&&e.licenses.size>0?{type:"element",name:"licenses",children:this._factory.makeForLicense().normalizeIterable(e.licenses,t)}:void 0,c=this._factory.spec.supportsMetadataProperties&&e.properties.size>0?{type:"element",name:"properties",children:this._factory.makeForProperty().normalizeIterable(e.properties,t,"property")}:void 0;return{type:"element",name:r,children:[K(e.timestamp,"timestamp"),i,a,s,void 0===e.component?void 0:this._factory.makeForComponent().normalize(e.component,t,"component"),void 0===e.manufacture?void 0:n.normalize(e.manufacture,t,"manufacture"),void 0===e.supplier?void 0:n.normalize(e.supplier,t,"supplier"),l,c].filter(o.isNotUndefined)}}}t.MetadataNormalizer=b;class g extends y{normalize(e,t,r){return e instanceof c.NamedLifecycle?{type:"element",name:r,children:[$(e.name,"name",d.normalizedString),G(e.description,"description")].filter(o.isNotUndefined)}:{type:"element",name:r,children:[$(e,"phase")]}}normalizeIterable(e,t,r){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t,r))}}t.LifecycleNormalizer=g;class S extends y{normalize(e,t,r){const n=e.hashes.size>0?{type:"element",name:"hashes",children:this._factory.makeForHash().normalizeIterable(e.hashes,t,"hash")}:void 0,i=this._factory.spec.supportsToolReferences&&e.externalReferences.size>0?{type:"element",name:"externalReferences",children:this._factory.makeForExternalReference().normalizeIterable(e.externalReferences,t,"reference")}:void 0;return{type:"element",name:r,children:[G(e.vendor,"vendor",d.normalizedString),G(e.name,"name",d.normalizedString),G(e.version,"version",d.normalizedString),n,i].filter(o.isNotUndefined)}}normalizeIterable(e,t,r){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t,r))}}t.ToolNormalizer=S;class C extends y{normalize(e,t,r){let o=[];return e.tools.size>0||!this._factory.spec.supportsToolsComponentsServices?o=this._factory.makeForTool().normalizeIterable(new s.ToolRepository((0,n.chainI)(Array.from(e.components,s.Tool.fromComponent),Array.from(e.services,s.Tool.fromService),e.tools)),t,"tool"):(e.components.size>0&&o.push({type:"element",name:"components",children:this._factory.makeForComponent().normalizeIterable(e.components,t,"component")}),e.services.size>0&&o.push({type:"element",name:"services",children:this._factory.makeForService().normalizeIterable(e.services,t,"service")})),{type:"element",name:r,children:o}}}t.ToolsNormalizer=C;class x extends y{normalize([e,t],r,n){const o=this._factory.spec;return o.supportsHashAlgorithm(e)&&o.supportsHashValue(t)?{type:"element",name:n,attributes:{alg:e},children:(0,d.token)(t)}:void 0}normalizeIterable(e,t,r){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t,r)).filter(o.isNotUndefined)}}t.HashNormalizer=x;class A extends y{normalize(e,t,r){return{type:"element",name:r,children:[G(e.name,"name",d.normalizedString),G(e.email,"email",d.normalizedString),G(e.phone,"phone",d.normalizedString)].filter(o.isNotUndefined)}}normalizeIterable(e,t,r){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t,r))}}t.OrganizationalContactNormalizer=A;class _ extends y{normalize(e,t,r){return{type:"element",name:r,children:[G(e.name,"name",d.normalizedString),...Y(Array.from(e.url,e=>(0,a.escapeUri)(e.toString())),t,"url").filter(({children:e})=>f.XmlSchema.isAnyURI(e)),...this._factory.makeForOrganizationalContact().normalizeIterable(e.contact,t,"contact")].filter(o.isNotUndefined)}}normalizeIterable(e,t,r){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t,r))}}t.OrganizationalEntityNormalizer=_;class L extends y{normalize(e,t,r){const n=this._factory.spec;if(!n.supportsComponentType(e.type))return;const i=void 0===e.supplier?void 0:this._factory.makeForOrganizationalEntity().normalize(e.supplier,t,"supplier"),a=(n.requiresComponentVersion?$:G)(e.version??"","version",d.normalizedString),s=e.hashes.size>0?{type:"element",name:"hashes",children:this._factory.makeForHash().normalizeIterable(e.hashes,t,"hash")}:void 0,l=e.licenses.size>0?{type:"element",name:"licenses",children:this._factory.makeForLicense().normalizeIterable(e.licenses,t)}:void 0,c=void 0===e.swid?void 0:this._factory.makeForSWID().normalize(e.swid,t,"swid"),p=e.externalReferences.size>0?{type:"element",name:"externalReferences",children:this._factory.makeForExternalReference().normalizeIterable(e.externalReferences,t,"reference")}:void 0,m=n.supportsProperties(e)&&e.properties.size>0?{type:"element",name:"properties",children:this._factory.makeForProperty().normalizeIterable(e.properties,t,"property")}:void 0,u=e.components.size>0?{type:"element",name:"components",children:this.normalizeIterable(e.components,t,"component")}:void 0,f=n.supportsComponentEvidence&&void 0!==e.evidence?this._factory.makeForComponentEvidence().normalize(e.evidence,t,"evidence"):void 0;return{type:"element",name:r,attributes:{type:e.type,"bom-ref":e.bomRef.value},children:[i,G(e.author,"author",d.normalizedString),G(e.publisher,"publisher",d.normalizedString),G(e.group,"group",d.normalizedString),$(e.name,"name",d.normalizedString),a,G(e.description,"description",d.normalizedString),G(e.scope,"scope"),s,l,G(e.copyright,"copyright",d.normalizedString),G(e.cpe,"cpe"),G(e.purl,"purl"),c,p,m,u,f].filter(o.isNotUndefined)}}normalizeIterable(e,t,r){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t,r)).filter(o.isNotUndefined)}}t.ComponentNormalizer=L;class R extends y{normalize(e,t,r){const n=this._factory.spec,i=void 0===e.provider?void 0:this._factory.makeForOrganizationalEntity().normalize(e.provider,t,"provider"),a=e.licenses.size>0?{type:"element",name:"licenses",children:this._factory.makeForLicense().normalizeIterable(e.licenses,t)}:void 0,s=e.externalReferences.size>0?{type:"element",name:"externalReferences",children:this._factory.makeForExternalReference().normalizeIterable(e.externalReferences,t,"reference")}:void 0,l=n.supportsProperties(e)&&e.properties.size>0?{type:"element",name:"properties",children:this._factory.makeForProperty().normalizeIterable(e.properties,t,"property")}:void 0,c=e.services.size>0?{type:"element",name:"services",children:this.normalizeIterable(e.services,t,"service")}:void 0;return{type:"element",name:r,attributes:{"bom-ref":e.bomRef.value},children:[i,G(e.group,"group",d.normalizedString),$(e.name,"name",d.normalizedString),G(e.version,"version",d.normalizedString),G(e.description,"description",d.normalizedString),a,s,l,c].filter(o.isNotUndefined)}}normalizeIterable(e,t,r){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t,r))}}t.ServiceNormalizer=R;class z extends y{normalize(e,t,r){return{type:"element",name:r,children:[e.licenses.size>0?{type:"element",name:"licenses",children:this._factory.makeForLicense().normalizeIterable(e.licenses,t)}:void 0,e.copyright.size>0?{type:"element",name:"copyright",children:Y(e.copyright,t,"text")}:void 0].filter(o.isNotUndefined)}}}t.ComponentEvidenceNormalizer=z;class P extends y{normalize(e,t){switch(!0){case e instanceof l.NamedLicense:return this.#l(e,t);case e instanceof l.SpdxLicense:return(0,m.isSupportedSpdxId)(e.id)?this.#c(e,t):this.#l(new l.NamedLicense(e.id,{url:e.url}),t);case e instanceof l.LicenseExpression:return this.#p(e);default:throw new TypeError("Unexpected LicenseChoice")}}#l(e,t){const r=(0,a.escapeUri)(e.url?.toString());return{type:"element",name:"license",attributes:{acknowledgement:this._factory.spec.supportsLicenseAcknowledgement?e.acknowledgement:void 0},children:[$(e.name,"name",d.normalizedString),void 0===e.text?void 0:this._factory.makeForAttachment().normalize(e.text,t,"text"),f.XmlSchema.isAnyURI(r)?$(r,"url"):void 0].filter(o.isNotUndefined)}}#c(e,t){const r=(0,a.escapeUri)(e.url?.toString());return{type:"element",name:"license",attributes:{acknowledgement:this._factory.spec.supportsLicenseAcknowledgement?e.acknowledgement:void 0},children:[$(e.id,"id"),void 0===e.text?void 0:this._factory.makeForAttachment().normalize(e.text,t,"text"),f.XmlSchema.isAnyURI(r)?$(r,"url"):void 0].filter(o.isNotUndefined)}}#p(e){const t=$(e.expression,"expression",d.normalizedString);return t.attributes={acknowledgement:this._factory.spec.supportsLicenseAcknowledgement?e.acknowledgement:void 0},t}normalizeIterable(e,t){const r=t.sortLists?e.sorted():Array.from(e);if(r.length>1){const e=r.filter(e=>e instanceof l.LicenseExpression);if(e.length>0)return[this.#p(e[0])]}return r.map(e=>this.normalize(e,t))}}t.LicenseNormalizer=P;class O extends y{normalize(e,t,r){const n=(0,a.escapeUri)(e.url?.toString());return{type:"element",name:r,attributes:{tagId:e.tagId,name:e.name,version:e.version||void 0,tagVersion:e.tagVersion,patch:void 0===e.patch?void 0:e.patch?"true":"false"},children:[void 0===e.text?void 0:this._factory.makeForAttachment().normalize(e.text,t,"text"),f.XmlSchema.isAnyURI(n)?$(n,"url"):void 0].filter(o.isNotUndefined)}}}t.SWIDNormalizer=O;class T extends y{normalize(e,t,r){const n=(0,a.escapeUri)(e.url.toString()),i=this._factory.spec.supportsExternalReferenceHashes&&e.hashes.size>0?{type:"element",name:"hashes",children:this._factory.makeForHash().normalizeIterable(e.hashes,t,"hash")}:void 0;return this._factory.spec.supportsExternalReferenceType(e.type)&&f.XmlSchema.isAnyURI(n)?{type:"element",name:r,attributes:{type:e.type},children:[$(n,"url"),G(e.comment,"comment"),i].filter(o.isNotUndefined)}:void 0}normalizeIterable(e,t,r){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t,r)).filter(o.isNotUndefined)}}t.ExternalReferenceNormalizer=T;class E extends y{normalize(e,t,r){return{type:"element",name:r,attributes:{"content-type":e.contentType?(0,d.normalizedString)(e.contentType):void 0,encoding:e.encoding||void 0},children:e.content.toString()}}}t.AttachmentNormalizer=E;class M extends y{normalize(e,t,r){return{type:"element",name:r,attributes:{name:e.name},children:(0,d.normalizedString)(e.value)}}normalizeIterable(e,t,r){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t,r))}}t.PropertyNormalizer=M;class N extends y{normalize(e,t,r){const n=new Map;if(void 0!==e.metadata.component){n.set(e.metadata.component.bomRef,e.metadata.component.dependencies);for(const t of e.metadata.component.components[i.treeIteratorSymbol]())n.set(t.bomRef,t.dependencies)}for(const t of e.components[i.treeIteratorSymbol]())n.set(t.bomRef,t.dependencies);for(const t of e.services[i.treeIteratorSymbol]())n.set(t.bomRef,t.dependencies);const a=[];for(const[e,r]of n){const i=this.#m(e,r,n,t);(0,o.isNotUndefined)(i)&&a.push(i)}return t.sortLists&&a.sort(({attributes:{ref:e}},{attributes:{ref:t}})=>e.localeCompare(t)),{type:"element",name:r,children:a}}#m(e,t,r,n){const o=e.toString();if(0===o.length)return;const i=Array.from(t).filter(t=>r.has(t)&&t!==e).map(e=>e.toString()).filter(e=>e.length>0);return n.sortLists&&i.sort((e,t)=>e.localeCompare(t)),{type:"element",name:"dependency",attributes:{ref:o},children:i.map(e=>({type:"element",name:"dependency",attributes:{ref:e}}))}}}t.DependencyGraphNormalizer=N;class w extends y{normalize(e,t,r){const n=e.references.size>0?{type:"element",name:"references",children:this._factory.makeForVulnerabilityReference().normalizeIterable(e.references,t,"reference")}:void 0,i=e.ratings.size>0?{type:"element",name:"ratings",children:this._factory.makeForVulnerabilityRating().normalizeIterable(e.ratings,t,"rating")}:void 0,a=e.cwes.size>0?{type:"element",name:"cwes",children:(t.sortLists?e.cwes.sorted():Array.from(e.cwes)).map(e=>$(e,"cwe"))}:void 0,s=e.advisories.size>0?{type:"element",name:"advisories",children:this._factory.makeForVulnerabilityAdvisory().normalizeIterable(e.advisories,t,"advisory")}:void 0,l=e.tools.size>0?this._factory.makeForTools().normalize(e.tools,t,"tools"):void 0,c=e.affects.size>0?{type:"element",name:"affects",children:this._factory.makeForVulnerabilityAffect().normalizeIterable(e.affects,t,"target")}:void 0,p=e.properties.size>0?{type:"element",name:"properties",children:this._factory.makeForProperty().normalizeIterable(e.properties,t,"property")}:void 0;return{type:"element",name:r,attributes:{"bom-ref":e.bomRef.value||void 0},children:[G(e.id,"id",d.normalizedString),void 0===e.source?void 0:this._factory.makeForVulnerabilitySource().normalize(e.source,t,"source"),n,i,a,G(e.description,"description"),G(e.detail,"detail"),G(e.recommendation,"recommendation"),s,K(e.created,"created"),K(e.created,"published"),K(e.created,"updated"),void 0===e.credits?void 0:this._factory.makeForVulnerabilityCredits().normalize(e.credits,t,"credits"),l,void 0===e.analysis?void 0:this._factory.makeForVulnerabilityAnalysis().normalize(e.analysis,t,"analysis"),c,p].filter(o.isNotUndefined)}}normalizeIterable(e,t,r){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t,r))}}t.VulnerabilityNormalizer=w;class D extends y{normalize(e,t,r){const n=(0,a.escapeUri)(e.url?.toString());return{type:"element",name:r,children:[G(e.name,"name",d.normalizedString),f.XmlSchema.isAnyURI(n)?$(n,"url"):void 0].filter(o.isNotUndefined)}}}t.VulnerabilitySourceNormalizer=D;class F extends y{normalize(e,t,r){return{type:"element",name:r,children:[$(e.id,"id"),this._factory.makeForVulnerabilitySource().normalize(e.source,t,"source")]}}normalizeIterable(e,t,r){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t,r))}}t.VulnerabilityReferenceNormalizer=F;class k extends y{normalize(e,t,r){return{type:"element",name:r,children:[void 0===e.source?void 0:this._factory.makeForVulnerabilitySource().normalize(e.source,t,"source"),G(e.score,"score"),G(e.severity,"severity"),this._factory.spec.supportsVulnerabilityRatingMethod(e.method)?G(e.method,"method"):void 0,G(e.vector,"vector",d.normalizedString),G(e.justification,"justification")].filter(o.isNotUndefined)}}normalizeIterable(e,t,r){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t,r))}}t.VulnerabilityRatingNormalizer=k;class I extends y{normalize(e,t,r){const n=(0,a.escapeUri)(e.url.toString());if(f.XmlSchema.isAnyURI(n))return{type:"element",name:r,children:[G(e.title,"title"),$(n,"url")].filter(o.isNotUndefined)}}normalizeIterable(e,t,r){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t,r)).filter(o.isNotUndefined)}}t.VulnerabilityAdvisoryNormalizer=I;class j extends y{normalize(e,t,r){return{type:"element",name:r,children:[e.organizations.size>0?{type:"element",name:"organizations",children:this._factory.makeForOrganizationalEntity().normalizeIterable(e.organizations,t,"organization")}:void 0,e.individuals.size>0?{type:"element",name:"individuals",children:this._factory.makeForOrganizationalContact().normalizeIterable(e.individuals,t,"individual")}:void 0].filter(o.isNotUndefined)}}}t.VulnerabilityCreditsNormalizer=j;class B extends y{normalize(e,t,r){const n=e.response.size>0?{type:"element",name:"responses",children:(t.sortLists?e.response.sorted():Array.from(e.response)).map(e=>$(e,"response"))}:void 0;return{type:"element",name:r,children:[G(e.state,"state"),G(e.justification,"justification"),n,G(e.detail,"detail")].filter(o.isNotUndefined)}}}t.VulnerabilityAnalysisNormalizer=B;class V extends y{normalize(e,t,r){const n=e.versions.size>0?{type:"element",name:"versions",children:this._factory.makeForVulnerabilityAffectedVersion().normalizeIterable(e.versions,t,"version")}:void 0;return{type:"element",name:r,children:[$(e.ref,"ref"),n].filter(o.isNotUndefined)}}normalizeIterable(e,t,r){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t,r))}}t.VulnerabilityAffectNormalizer=V;class H extends y{normalize(e,t,r){switch(!0){case e instanceof p.AffectedSingleVersion:return this.#u(e,r);case e instanceof p.AffectedVersionRange:return this.#d(e,r);default:throw new TypeError("Unexpected Vulnerability AffectedVersion")}}#u(e,t){return{type:"element",name:t,children:[$(e.version,"version",d.normalizedString),G(e.status,"status")].filter(o.isNotUndefined)}}#d(e,t){return{type:"element",name:t,children:[$(e.range,"range",d.normalizedString),G(e.status,"status")].filter(o.isNotUndefined)}}normalizeIterable(e,t,r){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t,r))}}t.VulnerabilityAffectedVersionNormalizer=H;const U=e=>e;function G(e,t,r=U){const n=r(e?.toString()??"");return n.length>0?$(n,t):void 0}function $(e,t,r=U){return{type:"element",name:t,children:r(e.toString())}}function Y(e,t,r,n=U){const o=Array.from(e,e=>$(e,r,n));return t.sortLists&&o.sort(({children:e},{children:t})=>e.localeCompare(t)),o}function K(e,t,r=U){const n=e?.toISOString();return void 0===n?void 0:$(n,t,r)}},1322:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.isNodePackageJson=function(e){throw new Error("Not implemented")},t.assertNodePackageJson=function(e){throw new Error("Not implemented")}},1507:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.SortableNumbers=t.SortableStringables=t.SortableComparables=t.SortableSet=t.compareObjectsSymbol=void 0,t.compareObjectsSymbol=Symbol("internal compare function");class r extends Set{sorted(){return Array.from(this).sort(this[t.compareObjectsSymbol])}compare(e){const r=e.sorted(),n=this.sorted();if(n.length!==r.length)return n.length-r.length;for(let e=n.length-1;e>=0;--e){const o=this[t.compareObjectsSymbol](n[e],r[e]);if(0!==o)return o}return 0}}t.SortableSet=r;class n extends r{[t.compareObjectsSymbol](e,t){return e.constructor===t.constructor?e.compare(t):e.constructor.name.localeCompare(t.constructor.name)}}t.SortableComparables=n;class o extends r{[t.compareObjectsSymbol](e,t){return e.toString().localeCompare(t.toString())}}t.SortableStringables=o;class i extends r{[t.compareObjectsSymbol](e,t){return e-t}}t.SortableNumbers=i},1525:(e,t)=>{var r;Object.defineProperty(t,"__esModule",{value:!0}),t.HashAlgorithm=void 0,function(e){e.MD5="MD5",e["SHA-1"]="SHA-1",e["SHA-256"]="SHA-256",e["SHA-384"]="SHA-384",e["SHA-512"]="SHA-512",e["SHA3-256"]="SHA3-256",e["SHA3-384"]="SHA3-384",e["SHA3-512"]="SHA3-512",e["BLAKE2b-256"]="BLAKE2b-256",e["BLAKE2b-384"]="BLAKE2b-384",e["BLAKE2b-512"]="BLAKE2b-512",e.BLAKE3="BLAKE3",e["Streebog-256"]="Streebog-256",e["Streebog-512"]="Streebog-512"}(r||(t.HashAlgorithm=r={}))},1588:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.BomRefRepository=t.BomRef=void 0,t.BomRef=class{value;constructor(e){this.value=e}compare(e){return this.toString().localeCompare(e.toString())}toString(){return this.value??""}};class r extends Set{}t.BomRefRepository=r},1592:(e,t)=>{var r;Object.defineProperty(t,"__esModule",{value:!0}),t.AnalysisJustification=void 0,function(e){e.CodeNotPresent="code_not_present",e.CodeNotReachable="code_not_reachable",e.RequiresConfiguration="requires_configuration",e.RequiresDependency="requires_dependency",e.RequiresEnvironment="requires_environment",e.ProtectedByCompiler="protected_by_compiler",e.ProtectedAtRuntime="protected_at_runtime",e.ProtectedAtPerimeter="protected_at_perimeter",e.ProtectedByMitigatingControl="protected_by_mitigating_control"}(r||(t.AnalysisJustification=r={}))},1688:(e,t)=>{var r;Object.defineProperty(t,"__esModule",{value:!0}),t.LicenseAcknowledgement=void 0,function(e){e.Declared="declared",e.Concluded="concluded"}(r||(t.LicenseAcknowledgement=r={}))},1699:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t._Spec=void 0,t._Spec=class{#f;#h;#y;#v;#b;#g;#S;#C;#x;#A;#_;#L;#R;#z;#P;#O;#T;#E;#M;#N;constructor(e,t,r,n,o,i,a,s,l,c,p,m,u,d,f,h,y,v,b,g){this.#f=e,this.#h=new Set(t),this.#y=new Set(r),this.#v=new Set(n),this.#b=o,this.#g=new Set(i),this.#C=a,this.#x=s,this.#A=l,this.#_=c,this.#L=p,this.#S=new Set(m),this.#R=u,this.#z=d,this.#P=f,this.#O=h,this.#T=y,this.#E=v,this.#M=b,this.#N=g}get version(){return this.#f}supportsFormat(e){return this.#h.has(e)}supportsComponentType(e){return this.#y.has(e)}supportsHashAlgorithm(e){return this.#v.has(e)}supportsHashValue(e){return"string"==typeof e&&this.#b.test(e)}supportsExternalReferenceType(e){return this.#g.has(e)}get supportsDependencyGraph(){return this.#C}get supportsToolReferences(){return this.#x}get requiresComponentVersion(){return this.#A}supportsProperties(){return this.#_}get supportsVulnerabilities(){return this.#L}supportsVulnerabilityRatingMethod(e){return this.#S.has(e)}get supportsComponentEvidence(){return this.#R}get supportsMetadataLifecycles(){return this.#z}get supportsMetadataLicenses(){return this.#P}get supportsMetadataProperties(){return this.#O}get supportsExternalReferenceHashes(){return this.#T}get supportsLicenseAcknowledgement(){return this.#E}get supportsServices(){return this.#M}get supportsToolsComponentsServices(){return this.#N}}},1722:function(e,t,r){var n=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),o=this&&this.__exportStar||function(e,t){for(var r in e)"default"===r||Object.prototype.hasOwnProperty.call(t,r)||n(t,e,r)};Object.defineProperty(t,"__esModule",{value:!0}),o(r(7715),t)},1723:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.VulnerabilityAnalysisNormalizer=t.VulnerabilityAffectedVersionNormalizer=t.VulnerabilityAffectNormalizer=t.VulnerabilityCreditsNormalizer=t.VulnerabilityAdvisoryNormalizer=t.VulnerabilityRatingNormalizer=t.VulnerabilityReferenceNormalizer=t.VulnerabilitySourceNormalizer=t.VulnerabilityNormalizer=t.DependencyGraphNormalizer=t.PropertyNormalizer=t.AttachmentNormalizer=t.ExternalReferenceNormalizer=t.SWIDNormalizer=t.LicenseNormalizer=t.ComponentEvidenceNormalizer=t.ServiceNormalizer=t.ComponentNormalizer=t.OrganizationalEntityNormalizer=t.OrganizationalContactNormalizer=t.HashNormalizer=t.ToolsNormalizer=t.ToolNormalizer=t.LifecycleNormalizer=t.MetadataNormalizer=t.BomNormalizer=t.Factory=void 0;const n=r(1089),o=r(48),i=r(9027),a=r(7977),s=r(7988),l=r(4799),c=r(7645),p=r(785),m=r(4317),u=r(4196),d=r(3349);t.Factory=class{#a;constructor(e){this.#a=e}get spec(){return this.#a}makeForBom(){return new y(this)}makeForMetadata(){return new v(this)}makeForComponent(){return new _(this)}makeForService(){return new L(this)}makeForComponentEvidence(){return new R(this)}makeForLifecycle(){return new b(this)}makeForTool(){return new g(this)}makeForTools(){return new S(this)}makeForOrganizationalContact(){return new x(this)}makeForOrganizationalEntity(){return new A(this)}makeForHash(){return new C(this)}makeForLicense(){return new z(this)}makeForSWID(){return new P(this)}makeForExternalReference(){return new O(this)}makeForAttachment(){return new T(this)}makeForProperty(){return new E(this)}makeForDependencyGraph(){return new M(this)}makeForVulnerability(){return new N(this)}makeForVulnerabilitySource(){return new w(this)}makeForVulnerabilityReference(){return new D(this)}makeForVulnerabilityRating(){return new F(this)}makeForVulnerabilityAdvisory(){return new k(this)}makeForVulnerabilityCredits(){return new I(this)}makeForVulnerabilityAffect(){return new j(this)}makeForVulnerabilityAffectedVersion(){return new B(this)}makeForVulnerabilityAnalysis(){return new V(this)}};const f=new Map([[u.Version.v1dot7,"http://cyclonedx.org/schema/bom-1.7.schema.json"],[u.Version.v1dot6,"http://cyclonedx.org/schema/bom-1.6.schema.json"],[u.Version.v1dot5,"http://cyclonedx.org/schema/bom-1.5.schema.json"],[u.Version.v1dot4,"http://cyclonedx.org/schema/bom-1.4.schema.json"],[u.Version.v1dot3,"http://cyclonedx.org/schema/bom-1.3a.schema.json"],[u.Version.v1dot2,"http://cyclonedx.org/schema/bom-1.2b.schema.json"]]);class h{_factory;constructor(e){this._factory=e}get factory(){return this._factory}}class y extends h{normalize(e,t){return{$schema:f.get(this._factory.spec.version),bomFormat:"CycloneDX",specVersion:this._factory.spec.version,version:e.version,serialNumber:this.#s(e.serialNumber)?e.serialNumber:void 0,metadata:this._factory.makeForMetadata().normalize(e.metadata,t),components:e.components.size>0?this._factory.makeForComponent().normalizeIterable(e.components,t):[],services:this._factory.spec.supportsServices&&e.services.size>0?this._factory.makeForService().normalizeIterable(e.services,t):void 0,dependencies:this._factory.spec.supportsDependencyGraph?this._factory.makeForDependencyGraph().normalize(e,t):void 0,vulnerabilities:this._factory.spec.supportsVulnerabilities&&e.vulnerabilities.size>0?this._factory.makeForVulnerability().normalizeIterable(e.vulnerabilities,t):void 0}}#s(e){return void 0!==e&&/^urn:uuid:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.test(e)}}t.BomNormalizer=y;class v extends h{normalize(e,t){const r=this._factory.makeForOrganizationalEntity();return{timestamp:e.timestamp?.toISOString(),lifecycles:this._factory.spec.supportsMetadataLifecycles&&e.lifecycles.size>0?this._factory.makeForLifecycle().normalizeIterable(e.lifecycles,t):void 0,tools:e.tools.size>0?this._factory.makeForTools().normalize(e.tools,t):void 0,authors:e.authors.size>0?this._factory.makeForOrganizationalContact().normalizeIterable(e.authors,t):void 0,component:void 0===e.component?void 0:this._factory.makeForComponent().normalize(e.component,t),manufacture:void 0===e.manufacture?void 0:r.normalize(e.manufacture,t),supplier:void 0===e.supplier?void 0:r.normalize(e.supplier,t),licenses:this._factory.spec.supportsMetadataLicenses&&e.licenses.size>0?this._factory.makeForLicense().normalizeIterable(e.licenses,t):void 0,properties:this._factory.spec.supportsMetadataProperties&&e.properties.size>0?this._factory.makeForProperty().normalizeIterable(e.properties,t):void 0}}}t.MetadataNormalizer=v;class b extends h{normalize(e,t){return e instanceof l.NamedLifecycle?{name:e.name,description:e.description}:{phase:e}}normalizeIterable(e,t){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t))}}t.LifecycleNormalizer=b;class g extends h{normalize(e,t){return{vendor:e.vendor||void 0,name:e.name||void 0,version:e.version||void 0,hashes:e.hashes.size>0?this._factory.makeForHash().normalizeIterable(e.hashes,t):void 0,externalReferences:this._factory.spec.supportsToolReferences&&e.externalReferences.size>0?this._factory.makeForExternalReference().normalizeIterable(e.externalReferences,t):void 0}}normalizeIterable(e,t){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t))}}t.ToolNormalizer=g;class S extends h{normalize(e,t){return e.tools.size>0||!this._factory.spec.supportsToolsComponentsServices?this._factory.makeForTool().normalizeIterable(new c.ToolRepository((0,n.chainI)(Array.from(e.components,c.Tool.fromComponent),Array.from(e.services,c.Tool.fromService),e.tools)),t):{components:e.components.size>0?this._factory.makeForComponent().normalizeIterable(e.components,t):void 0,services:e.services.size>0?this._factory.makeForService().normalizeIterable(e.services,t):void 0}}}t.ToolsNormalizer=S;class C extends h{normalize([e,t],r){const n=this._factory.spec;return n.supportsHashAlgorithm(e)&&n.supportsHashValue(t)?{alg:e,content:t}:void 0}normalizeIterable(e,t){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t)).filter(o.isNotUndefined)}}t.HashNormalizer=C;class x extends h{normalize(e,t){return{name:e.name||void 0,email:d.JsonSchema.isIdnEmail(e.email)?e.email:void 0,phone:e.phone||void 0}}normalizeIterable(e,t){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t))}}t.OrganizationalContactNormalizer=x;class A extends h{normalize(e,t){const r=H(Array.from(e.url,e=>(0,a.escapeUri)(e.toString())),t).filter(d.JsonSchema.isIriReference);return{name:e.name||void 0,url:r.length>0?r:void 0,contact:e.contact.size>0?this._factory.makeForOrganizationalContact().normalizeIterable(e.contact,t):void 0}}normalizeIterable(e,t){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t))}}t.OrganizationalEntityNormalizer=A;class _ extends h{normalize(e,t){const r=this._factory.spec;if(!r.supportsComponentType(e.type))return;const n=e.version??"";return{type:e.type,name:e.name,group:e.group||void 0,version:n.length>0||r.requiresComponentVersion?n:void 0,"bom-ref":e.bomRef.value||void 0,supplier:void 0===e.supplier?void 0:this._factory.makeForOrganizationalEntity().normalize(e.supplier,t),author:e.author||void 0,publisher:e.publisher||void 0,description:e.description||void 0,scope:e.scope,hashes:e.hashes.size>0?this._factory.makeForHash().normalizeIterable(e.hashes,t):void 0,licenses:e.licenses.size>0?this._factory.makeForLicense().normalizeIterable(e.licenses,t):void 0,copyright:e.copyright?.toString()||void 0,cpe:e.cpe||void 0,purl:e.purl?.toString(),swid:void 0===e.swid?void 0:this._factory.makeForSWID().normalize(e.swid,t),externalReferences:e.externalReferences.size>0?this._factory.makeForExternalReference().normalizeIterable(e.externalReferences,t):void 0,properties:r.supportsProperties(e)&&e.properties.size>0?this._factory.makeForProperty().normalizeIterable(e.properties,t):void 0,components:e.components.size>0?this.normalizeIterable(e.components,t):void 0,evidence:r.supportsComponentEvidence&&void 0!==e.evidence?this._factory.makeForComponentEvidence().normalize(e.evidence,t):void 0}}normalizeIterable(e,t){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t)).filter(o.isNotUndefined)}}t.ComponentNormalizer=_;class L extends h{normalize(e,t){const r=this._factory.spec;return{"bom-ref":e.bomRef.value||void 0,provider:e.provider?this._factory.makeForOrganizationalEntity().normalize(e.provider,t):void 0,group:e.group,name:e.name,version:e.version||void 0,description:e.description||void 0,licenses:e.licenses.size>0?this._factory.makeForLicense().normalizeIterable(e.licenses,t):void 0,externalReferences:e.externalReferences.size>0?this._factory.makeForExternalReference().normalizeIterable(e.externalReferences,t):void 0,services:e.services.size>0?this._factory.makeForService().normalizeIterable(e.services,t):void 0,properties:r.supportsProperties(e)&&e.properties.size>0?this._factory.makeForProperty().normalizeIterable(e.properties,t):void 0}}normalizeIterable(e,t){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t))}}t.ServiceNormalizer=L;class R extends h{normalize(e,t){return{licenses:e.licenses.size>0?this._factory.makeForLicense().normalizeIterable(e.licenses,t):void 0,copyright:e.copyright.size>0?t.sortLists?e.copyright.sorted().map(R.#w):Array.from(e.copyright,R.#w):void 0}}static#w(e){return{text:e.toString()}}}t.ComponentEvidenceNormalizer=R;class z extends h{normalize(e,t){switch(!0){case e instanceof s.NamedLicense:return this.#l(e,t);case e instanceof s.SpdxLicense:return(0,m.isSupportedSpdxId)(e.id)?this.#c(e,t):this.#l(new s.NamedLicense(e.id,{url:e.url}),t);case e instanceof s.LicenseExpression:return this.#p(e);default:throw new TypeError("Unexpected LicenseChoice")}}#l(e,t){const r=(0,a.escapeUri)(e.url?.toString());return{license:{name:e.name,acknowledgement:this._factory.spec.supportsLicenseAcknowledgement?e.acknowledgement:void 0,text:void 0===e.text?void 0:this._factory.makeForAttachment().normalize(e.text,t),url:d.JsonSchema.isIriReference(r)?r:void 0}}}#c(e,t){const r=(0,a.escapeUri)(e.url?.toString());return{license:{id:e.id,acknowledgement:this._factory.spec.supportsLicenseAcknowledgement?e.acknowledgement:void 0,text:void 0===e.text?void 0:this._factory.makeForAttachment().normalize(e.text,t),url:d.JsonSchema.isIriReference(r)?r:void 0}}}#p(e){return{expression:e.expression,acknowledgement:this._factory.spec.supportsLicenseAcknowledgement?e.acknowledgement:void 0}}normalizeIterable(e,t){const r=t.sortLists?e.sorted():Array.from(e);if(r.length>1){const e=r.filter(e=>e instanceof s.LicenseExpression);if(e.length>0)return[this.#p(e[0])]}return r.map(e=>this.normalize(e,t))}}t.LicenseNormalizer=z;class P extends h{normalize(e,t){const r=(0,a.escapeUri)(e.url?.toString());return{tagId:e.tagId,name:e.name,version:e.version||void 0,tagVersion:e.tagVersion,patch:e.patch,text:void 0===e.text?void 0:this._factory.makeForAttachment().normalize(e.text,t),url:d.JsonSchema.isIriReference(r)?r:void 0}}}t.SWIDNormalizer=P;class O extends h{normalize(e,t){return this._factory.spec.supportsExternalReferenceType(e.type)?{url:(0,a.escapeUri)(e.url.toString()),type:e.type,hashes:this._factory.spec.supportsExternalReferenceHashes&&e.hashes.size>0?this._factory.makeForHash().normalizeIterable(e.hashes,t):void 0,comment:e.comment||void 0}:void 0}normalizeIterable(e,t){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t)).filter(o.isNotUndefined)}}t.ExternalReferenceNormalizer=O;class T extends h{normalize(e,t){return{content:e.content.toString(),contentType:e.contentType||void 0,encoding:e.encoding}}}t.AttachmentNormalizer=T;class E extends h{normalize(e,t){return{name:e.name,value:e.value}}normalizeIterable(e,t){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t))}}t.PropertyNormalizer=E;class M extends h{normalize(e,t){const r=new Map;if(void 0!==e.metadata.component){r.set(e.metadata.component.bomRef,e.metadata.component.dependencies);for(const t of e.metadata.component.components[i.treeIteratorSymbol]())r.set(t.bomRef,t.dependencies)}for(const t of e.components[i.treeIteratorSymbol]())r.set(t.bomRef,t.dependencies);for(const t of e.services[i.treeIteratorSymbol]())r.set(t.bomRef,t.dependencies);const n=[];for(const[e,i]of r){const a=this.#m(e,i,r,t);(0,o.isNotUndefined)(a)&&n.push(a)}return t.sortLists&&n.sort(({ref:e},{ref:t})=>e.localeCompare(t)),n}#m(e,t,r,n){const o=e.toString();if(0===o.length)return;const i=H(Array.from(t).filter(t=>r.has(t)&&t!==e),n).filter(e=>e.length>0);return{ref:o,dependsOn:i.length>0?i:void 0}}}t.DependencyGraphNormalizer=M;class N extends h{normalize(e,t){return{"bom-ref":e.bomRef.value||void 0,id:e.id||void 0,source:void 0===e.source?void 0:this._factory.makeForVulnerabilitySource().normalize(e.source,t),references:e.references.size>0?this._factory.makeForVulnerabilityReference().normalizeIterable(e.references,t):void 0,ratings:e.ratings.size>0?this._factory.makeForVulnerabilityRating().normalizeIterable(e.ratings,t):void 0,cwes:e.cwes.size>0?t.sortLists?e.cwes.sorted():Array.from(e.cwes):void 0,description:e.description,detail:e.detail,recommendation:e.recommendation,advisories:e.advisories.size>0?this._factory.makeForVulnerabilityAdvisory().normalizeIterable(e.advisories,t):void 0,created:e.created?.toISOString(),published:e.published?.toISOString(),updated:e.updated?.toISOString(),credits:void 0===e.credits?void 0:this._factory.makeForVulnerabilityCredits().normalize(e.credits,t),tools:e.tools.size>0?this._factory.makeForTools().normalize(e.tools,t):void 0,analysis:void 0===e.analysis?void 0:this._factory.makeForVulnerabilityAnalysis().normalize(e.analysis,t),affects:e.affects.size>0?this._factory.makeForVulnerabilityAffect().normalizeIterable(e.affects,t):void 0,properties:e.properties.size>0?this._factory.makeForProperty().normalizeIterable(e.properties,t):void 0}}normalizeIterable(e,t){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t))}}t.VulnerabilityNormalizer=N;class w extends h{normalize(e,t){return{name:e.name,url:e.url?.toString()}}}t.VulnerabilitySourceNormalizer=w;class D extends h{normalize(e,t){return{id:e.id,source:this._factory.makeForVulnerabilitySource().normalize(e.source,t)}}normalizeIterable(e,t){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t))}}t.VulnerabilityReferenceNormalizer=D;class F extends h{normalize(e,t){return{source:void 0===e.source?void 0:this._factory.makeForVulnerabilitySource().normalize(e.source,t),score:e.score,severity:e.severity,method:this._factory.spec.supportsVulnerabilityRatingMethod(e.method)?e.method:void 0,vector:e.vector,justification:e.justification}}normalizeIterable(e,t){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t))}}t.VulnerabilityRatingNormalizer=F;class k extends h{normalize(e,t){const r=(0,a.escapeUri)(e.url.toString());if(d.JsonSchema.isIriReference(r))return{title:e.title,url:r}}normalizeIterable(e,t){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t)).filter(o.isNotUndefined)}}t.VulnerabilityAdvisoryNormalizer=k;class I extends h{normalize(e,t){return{organizations:e.organizations.size>0?this._factory.makeForOrganizationalEntity().normalizeIterable(e.organizations,t):void 0,individuals:e.individuals.size>0?this._factory.makeForOrganizationalContact().normalizeIterable(e.individuals,t):void 0}}}t.VulnerabilityCreditsNormalizer=I;class j extends h{normalize(e,t){return{ref:e.ref.toString(),versions:e.versions.size>0?this._factory.makeForVulnerabilityAffectedVersion().normalizeIterable(e.versions,t):void 0}}normalizeIterable(e,t){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t))}}t.VulnerabilityAffectNormalizer=j;class B extends h{normalize(e,t){switch(!0){case e instanceof p.AffectedSingleVersion:return this.#u(e);case e instanceof p.AffectedVersionRange:return this.#d(e);default:throw new TypeError("Unexpected Vulnerability AffectedVersion")}}#u(e){return e.version.length<1?void 0:{version:e.version.substring(0,1024),status:e.status}}#d(e){return e.range.length<1?void 0:{range:e.range.substring(0,1024),status:e.status}}normalizeIterable(e,t){return(t.sortLists?e.sorted():Array.from(e)).map(e=>this.normalize(e,t)).filter(o.isNotUndefined)}}t.VulnerabilityAffectedVersionNormalizer=B;class V extends h{normalize(e,t){return{state:e.state,justification:e.justification,response:e.response.size>0?t.sortLists?e.response.sorted():Array.from(e.response):void 0,detail:e.detail}}}function H(e,t){const r=Array.from(e,e=>e.toString());return t.sortLists&&r.sort((e,t)=>e.localeCompare(t)),r}t.VulnerabilityAnalysisNormalizer=V},1791:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.ExternalReferenceRepository=t.ExternalReference=void 0;const n=r(1507),o=r(2463);t.ExternalReference=class{url;type;hashes;comment;constructor(e,t,r={}){this.url=e,this.type=t,this.hashes=r.hashes??new o.HashDictionary,this.comment=r.comment}compare(e){return this.type.localeCompare(e.type)||this.url.toString().localeCompare(e.url.toString())}};class i extends n.SortableComparables{}t.ExternalReferenceRepository=i},2229:function(e,t,r){var n,o=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),i=this&&this.__setModuleDefault||(Object.create?function(e,t){Object.defineProperty(e,"default",{enumerable:!0,value:t})}:function(e,t){e.default=t}),a=this&&this.__importStar||(n=function(e){return n=Object.getOwnPropertyNames||function(e){var t=[];for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[t.length]=r);return t},n(e)},function(e){if(e&&e.__esModule)return e;var t={};if(null!=e)for(var r=n(e),a=0;a<r.length;a++)"default"!==r[a]&&o(t,e,r[a]);return i(t,e),t});Object.defineProperty(t,"__esModule",{value:!0}),t.Types=t.Spec=t.SPDX=t.Models=t.Enums=void 0,t.Enums=a(r(857)),t.Models=a(r(8207)),t.SPDX=a(r(4317)),t.Spec=a(r(382)),t.Types=a(r(5170))},2253:(e,t)=>{var r;Object.defineProperty(t,"__esModule",{value:!0}),t.AffectStatus=void 0,function(e){e.Affected="affected",e.Unaffected="unaffected",e.Unknown="unknown"}(r||(t.AffectStatus=r={}))},2302:function(e,t,r){var n,o=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),i=this&&this.__setModuleDefault||(Object.create?function(e,t){Object.defineProperty(e,"default",{enumerable:!0,value:t})}:function(e,t){e.default=t}),a=this&&this.__importStar||(n=function(e){return n=Object.getOwnPropertyNames||function(e){var t=[];for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[t.length]=r);return t},n(e)},function(e){if(e&&e.__esModule)return e;var t={};if(null!=e)for(var r=n(e),a=0;a<r.length;a++)"default"!==r[a]&&o(t,e,r[a]);return i(t,e),t});Object.defineProperty(t,"__esModule",{value:!0}),t.Factories=void 0,t.Factories=a(r(428))},2311:e=>{e.exports=JSON.parse('{"$schema":"http://json-schema.org/draft-07/schema#","$id":"http://cyclonedx.org/schema/spdx.schema.json","$comment":"v1.0-3.27.0","type":"string","enum":["0BSD","3D-Slicer-1.0","AAL","Abstyles","AdaCore-doc","Adobe-2006","Adobe-Display-PostScript","Adobe-Glyph","Adobe-Utopia","ADSL","AFL-1.1","AFL-1.2","AFL-2.0","AFL-2.1","AFL-3.0","Afmparse","AGPL-1.0","AGPL-1.0-only","AGPL-1.0-or-later","AGPL-3.0","AGPL-3.0-only","AGPL-3.0-or-later","Aladdin","AMD-newlib","AMDPLPA","AML","AML-glslang","AMPAS","ANTLR-PD","ANTLR-PD-fallback","any-OSI","any-OSI-perl-modules","Apache-1.0","Apache-1.1","Apache-2.0","APAFML","APL-1.0","App-s2p","APSL-1.0","APSL-1.1","APSL-1.2","APSL-2.0","Arphic-1999","Artistic-1.0","Artistic-1.0-cl8","Artistic-1.0-Perl","Artistic-2.0","Artistic-dist","Aspell-RU","ASWF-Digital-Assets-1.0","ASWF-Digital-Assets-1.1","Baekmuk","Bahyph","Barr","bcrypt-Solar-Designer","Beerware","Bitstream-Charter","Bitstream-Vera","BitTorrent-1.0","BitTorrent-1.1","blessing","BlueOak-1.0.0","Boehm-GC","Boehm-GC-without-fee","Borceux","Brian-Gladman-2-Clause","Brian-Gladman-3-Clause","BSD-1-Clause","BSD-2-Clause","BSD-2-Clause-Darwin","BSD-2-Clause-first-lines","BSD-2-Clause-FreeBSD","BSD-2-Clause-NetBSD","BSD-2-Clause-Patent","BSD-2-Clause-pkgconf-disclaimer","BSD-2-Clause-Views","BSD-3-Clause","BSD-3-Clause-acpica","BSD-3-Clause-Attribution","BSD-3-Clause-Clear","BSD-3-Clause-flex","BSD-3-Clause-HP","BSD-3-Clause-LBNL","BSD-3-Clause-Modification","BSD-3-Clause-No-Military-License","BSD-3-Clause-No-Nuclear-License","BSD-3-Clause-No-Nuclear-License-2014","BSD-3-Clause-No-Nuclear-Warranty","BSD-3-Clause-Open-MPI","BSD-3-Clause-Sun","BSD-4-Clause","BSD-4-Clause-Shortened","BSD-4-Clause-UC","BSD-4.3RENO","BSD-4.3TAHOE","BSD-Advertising-Acknowledgement","BSD-Attribution-HPND-disclaimer","BSD-Inferno-Nettverk","BSD-Protection","BSD-Source-beginning-file","BSD-Source-Code","BSD-Systemics","BSD-Systemics-W3Works","BSL-1.0","BUSL-1.1","bzip2-1.0.5","bzip2-1.0.6","C-UDA-1.0","CAL-1.0","CAL-1.0-Combined-Work-Exception","Caldera","Caldera-no-preamble","Catharon","CATOSL-1.1","CC-BY-1.0","CC-BY-2.0","CC-BY-2.5","CC-BY-2.5-AU","CC-BY-3.0","CC-BY-3.0-AT","CC-BY-3.0-AU","CC-BY-3.0-DE","CC-BY-3.0-IGO","CC-BY-3.0-NL","CC-BY-3.0-US","CC-BY-4.0","CC-BY-NC-1.0","CC-BY-NC-2.0","CC-BY-NC-2.5","CC-BY-NC-3.0","CC-BY-NC-3.0-DE","CC-BY-NC-4.0","CC-BY-NC-ND-1.0","CC-BY-NC-ND-2.0","CC-BY-NC-ND-2.5","CC-BY-NC-ND-3.0","CC-BY-NC-ND-3.0-DE","CC-BY-NC-ND-3.0-IGO","CC-BY-NC-ND-4.0","CC-BY-NC-SA-1.0","CC-BY-NC-SA-2.0","CC-BY-NC-SA-2.0-DE","CC-BY-NC-SA-2.0-FR","CC-BY-NC-SA-2.0-UK","CC-BY-NC-SA-2.5","CC-BY-NC-SA-3.0","CC-BY-NC-SA-3.0-DE","CC-BY-NC-SA-3.0-IGO","CC-BY-NC-SA-4.0","CC-BY-ND-1.0","CC-BY-ND-2.0","CC-BY-ND-2.5","CC-BY-ND-3.0","CC-BY-ND-3.0-DE","CC-BY-ND-4.0","CC-BY-SA-1.0","CC-BY-SA-2.0","CC-BY-SA-2.0-UK","CC-BY-SA-2.1-JP","CC-BY-SA-2.5","CC-BY-SA-3.0","CC-BY-SA-3.0-AT","CC-BY-SA-3.0-DE","CC-BY-SA-3.0-IGO","CC-BY-SA-4.0","CC-PDDC","CC-PDM-1.0","CC-SA-1.0","CC0-1.0","CDDL-1.0","CDDL-1.1","CDL-1.0","CDLA-Permissive-1.0","CDLA-Permissive-2.0","CDLA-Sharing-1.0","CECILL-1.0","CECILL-1.1","CECILL-2.0","CECILL-2.1","CECILL-B","CECILL-C","CERN-OHL-1.1","CERN-OHL-1.2","CERN-OHL-P-2.0","CERN-OHL-S-2.0","CERN-OHL-W-2.0","CFITSIO","check-cvs","checkmk","ClArtistic","Clips","CMU-Mach","CMU-Mach-nodoc","CNRI-Jython","CNRI-Python","CNRI-Python-GPL-Compatible","COIL-1.0","Community-Spec-1.0","Condor-1.1","copyleft-next-0.3.0","copyleft-next-0.3.1","Cornell-Lossless-JPEG","CPAL-1.0","CPL-1.0","CPOL-1.02","Cronyx","Crossword","CryptoSwift","CrystalStacker","CUA-OPL-1.0","Cube","curl","cve-tou","D-FSL-1.0","DEC-3-Clause","diffmark","DL-DE-BY-2.0","DL-DE-ZERO-2.0","DOC","DocBook-DTD","DocBook-Schema","DocBook-Stylesheet","DocBook-XML","Dotseqn","DRL-1.0","DRL-1.1","DSDP","dtoa","dvipdfm","ECL-1.0","ECL-2.0","eCos-2.0","EFL-1.0","EFL-2.0","eGenix","Elastic-2.0","Entessa","EPICS","EPL-1.0","EPL-2.0","ErlPL-1.1","etalab-2.0","EUDatagrid","EUPL-1.0","EUPL-1.1","EUPL-1.2","Eurosym","Fair","FBM","FDK-AAC","Ferguson-Twofish","Frameworx-1.0","FreeBSD-DOC","FreeImage","FSFAP","FSFAP-no-warranty-disclaimer","FSFUL","FSFULLR","FSFULLRSD","FSFULLRWD","FSL-1.1-ALv2","FSL-1.1-MIT","FTL","Furuseth","fwlw","Game-Programming-Gems","GCR-docs","GD","generic-xts","GFDL-1.1","GFDL-1.1-invariants-only","GFDL-1.1-invariants-or-later","GFDL-1.1-no-invariants-only","GFDL-1.1-no-invariants-or-later","GFDL-1.1-only","GFDL-1.1-or-later","GFDL-1.2","GFDL-1.2-invariants-only","GFDL-1.2-invariants-or-later","GFDL-1.2-no-invariants-only","GFDL-1.2-no-invariants-or-later","GFDL-1.2-only","GFDL-1.2-or-later","GFDL-1.3","GFDL-1.3-invariants-only","GFDL-1.3-invariants-or-later","GFDL-1.3-no-invariants-only","GFDL-1.3-no-invariants-or-later","GFDL-1.3-only","GFDL-1.3-or-later","Giftware","GL2PS","Glide","Glulxe","GLWTPL","gnuplot","GPL-1.0","GPL-1.0+","GPL-1.0-only","GPL-1.0-or-later","GPL-2.0","GPL-2.0+","GPL-2.0-only","GPL-2.0-or-later","GPL-2.0-with-autoconf-exception","GPL-2.0-with-bison-exception","GPL-2.0-with-classpath-exception","GPL-2.0-with-font-exception","GPL-2.0-with-GCC-exception","GPL-3.0","GPL-3.0+","GPL-3.0-only","GPL-3.0-or-later","GPL-3.0-with-autoconf-exception","GPL-3.0-with-GCC-exception","Graphics-Gems","gSOAP-1.3b","gtkbook","Gutmann","HaskellReport","HDF5","hdparm","HIDAPI","Hippocratic-2.1","HP-1986","HP-1989","HPND","HPND-DEC","HPND-doc","HPND-doc-sell","HPND-export-US","HPND-export-US-acknowledgement","HPND-export-US-modify","HPND-export2-US","HPND-Fenneberg-Livingston","HPND-INRIA-IMAG","HPND-Intel","HPND-Kevlin-Henney","HPND-Markus-Kuhn","HPND-merchantability-variant","HPND-MIT-disclaimer","HPND-Netrek","HPND-Pbmplus","HPND-sell-MIT-disclaimer-xserver","HPND-sell-regexpr","HPND-sell-variant","HPND-sell-variant-MIT-disclaimer","HPND-sell-variant-MIT-disclaimer-rev","HPND-UC","HPND-UC-export-US","HTMLTIDY","IBM-pibs","ICU","IEC-Code-Components-EULA","IJG","IJG-short","ImageMagick","iMatix","Imlib2","Info-ZIP","Inner-Net-2.0","InnoSetup","Intel","Intel-ACPI","Interbase-1.0","IPA","IPL-1.0","ISC","ISC-Veillard","Jam","JasPer-2.0","jove","JPL-image","JPNIC","JSON","Kastrup","Kazlib","Knuth-CTAN","LAL-1.2","LAL-1.3","Latex2e","Latex2e-translated-notice","Leptonica","LGPL-2.0","LGPL-2.0+","LGPL-2.0-only","LGPL-2.0-or-later","LGPL-2.1","LGPL-2.1+","LGPL-2.1-only","LGPL-2.1-or-later","LGPL-3.0","LGPL-3.0+","LGPL-3.0-only","LGPL-3.0-or-later","LGPLLR","Libpng","libpng-1.6.35","libpng-2.0","libselinux-1.0","libtiff","libutil-David-Nugent","LiLiQ-P-1.1","LiLiQ-R-1.1","LiLiQ-Rplus-1.1","Linux-man-pages-1-para","Linux-man-pages-copyleft","Linux-man-pages-copyleft-2-para","Linux-man-pages-copyleft-var","Linux-OpenIB","LOOP","LPD-document","LPL-1.0","LPL-1.02","LPPL-1.0","LPPL-1.1","LPPL-1.2","LPPL-1.3a","LPPL-1.3c","lsof","Lucida-Bitmap-Fonts","LZMA-SDK-9.11-to-9.20","LZMA-SDK-9.22","Mackerras-3-Clause","Mackerras-3-Clause-acknowledgment","magaz","mailprio","MakeIndex","man2html","Martin-Birgmeier","McPhee-slideshow","metamail","Minpack","MIPS","MirOS","MIT","MIT-0","MIT-advertising","MIT-Click","MIT-CMU","MIT-enna","MIT-feh","MIT-Festival","MIT-Khronos-old","MIT-Modern-Variant","MIT-open-group","MIT-testregex","MIT-Wu","MITNFA","MMIXware","Motosoto","MPEG-SSG","mpi-permissive","mpich2","MPL-1.0","MPL-1.1","MPL-2.0","MPL-2.0-no-copyleft-exception","mplus","MS-LPL","MS-PL","MS-RL","MTLL","MulanPSL-1.0","MulanPSL-2.0","Multics","Mup","NAIST-2003","NASA-1.3","Naumen","NBPL-1.0","NCBI-PD","NCGL-UK-2.0","NCL","NCSA","Net-SNMP","NetCDF","Newsletr","NGPL","ngrep","NICTA-1.0","NIST-PD","NIST-PD-fallback","NIST-Software","NLOD-1.0","NLOD-2.0","NLPL","Nokia","NOSL","Noweb","NPL-1.0","NPL-1.1","NPOSL-3.0","NRL","NTIA-PD","NTP","NTP-0","Nunit","O-UDA-1.0","OAR","OCCT-PL","OCLC-2.0","ODbL-1.0","ODC-By-1.0","OFFIS","OFL-1.0","OFL-1.0-no-RFN","OFL-1.0-RFN","OFL-1.1","OFL-1.1-no-RFN","OFL-1.1-RFN","OGC-1.0","OGDL-Taiwan-1.0","OGL-Canada-2.0","OGL-UK-1.0","OGL-UK-2.0","OGL-UK-3.0","OGTSL","OLDAP-1.1","OLDAP-1.2","OLDAP-1.3","OLDAP-1.4","OLDAP-2.0","OLDAP-2.0.1","OLDAP-2.1","OLDAP-2.2","OLDAP-2.2.1","OLDAP-2.2.2","OLDAP-2.3","OLDAP-2.4","OLDAP-2.5","OLDAP-2.6","OLDAP-2.7","OLDAP-2.8","OLFL-1.3","OML","OpenPBS-2.3","OpenSSL","OpenSSL-standalone","OpenVision","OPL-1.0","OPL-UK-3.0","OPUBL-1.0","OSET-PL-2.1","OSL-1.0","OSL-1.1","OSL-2.0","OSL-2.1","OSL-3.0","PADL","Parity-6.0.0","Parity-7.0.0","PDDL-1.0","PHP-3.0","PHP-3.01","Pixar","pkgconf","Plexus","pnmstitch","PolyForm-Noncommercial-1.0.0","PolyForm-Small-Business-1.0.0","PostgreSQL","PPL","PSF-2.0","psfrag","psutils","Python-2.0","Python-2.0.1","python-ldap","Qhull","QPL-1.0","QPL-1.0-INRIA-2004","radvd","Rdisc","RHeCos-1.1","RPL-1.1","RPL-1.5","RPSL-1.0","RSA-MD","RSCPL","Ruby","Ruby-pty","SAX-PD","SAX-PD-2.0","Saxpath","SCEA","SchemeReport","Sendmail","Sendmail-8.23","Sendmail-Open-Source-1.1","SGI-B-1.0","SGI-B-1.1","SGI-B-2.0","SGI-OpenGL","SGP4","SHL-0.5","SHL-0.51","SimPL-2.0","SISSL","SISSL-1.2","SL","Sleepycat","SMAIL-GPL","SMLNJ","SMPPL","SNIA","snprintf","SOFA","softSurfer","Soundex","Spencer-86","Spencer-94","Spencer-99","SPL-1.0","ssh-keyscan","SSH-OpenSSH","SSH-short","SSLeay-standalone","SSPL-1.0","StandardML-NJ","SugarCRM-1.1.3","SUL-1.0","Sun-PPP","Sun-PPP-2000","SunPro","SWL","swrule","Symlinks","TAPR-OHL-1.0","TCL","TCP-wrappers","TermReadKey","TGPPL-1.0","ThirdEye","threeparttable","TMate","TORQUE-1.1","TOSL","TPDL","TPL-1.0","TrustedQSL","TTWL","TTYP0","TU-Berlin-1.0","TU-Berlin-2.0","Ubuntu-font-1.0","UCAR","UCL-1.0","ulem","UMich-Merit","Unicode-3.0","Unicode-DFS-2015","Unicode-DFS-2016","Unicode-TOU","UnixCrypt","Unlicense","Unlicense-libtelnet","Unlicense-libwhirlpool","UPL-1.0","URT-RLE","Vim","VOSTROM","VSL-1.0","W3C","W3C-19980720","W3C-20150513","w3m","Watcom-1.0","Widget-Workshop","Wsuipa","WTFPL","wwl","wxWindows","X11","X11-distribute-modifications-variant","X11-swapped","Xdebug-1.03","Xerox","Xfig","XFree86-1.1","xinetd","xkeyboard-config-Zinoviev","xlock","Xnet","xpp","XSkat","xzoom","YPL-1.0","YPL-1.1","Zed","Zeeff","Zend-2.0","Zimbra-1.3","Zimbra-1.4","Zlib","zlib-acknowledgement","ZPL-1.1","ZPL-2.0","ZPL-2.1","389-exception","Asterisk-exception","Asterisk-linking-protocols-exception","Autoconf-exception-2.0","Autoconf-exception-3.0","Autoconf-exception-generic","Autoconf-exception-generic-3.0","Autoconf-exception-macro","Bison-exception-1.24","Bison-exception-2.2","Bootloader-exception","CGAL-linking-exception","Classpath-exception-2.0","CLISP-exception-2.0","cryptsetup-OpenSSL-exception","Digia-Qt-LGPL-exception-1.1","DigiRule-FOSS-exception","eCos-exception-2.0","erlang-otp-linking-exception","Fawkes-Runtime-exception","FLTK-exception","fmt-exception","Font-exception-2.0","freertos-exception-2.0","GCC-exception-2.0","GCC-exception-2.0-note","GCC-exception-3.1","Gmsh-exception","GNAT-exception","GNOME-examples-exception","GNU-compiler-exception","gnu-javamail-exception","GPL-3.0-389-ds-base-exception","GPL-3.0-interface-exception","GPL-3.0-linking-exception","GPL-3.0-linking-source-exception","GPL-CC-1.0","GStreamer-exception-2005","GStreamer-exception-2008","harbour-exception","i2p-gpl-java-exception","Independent-modules-exception","KiCad-libraries-exception","LGPL-3.0-linking-exception","libpri-OpenH323-exception","Libtool-exception","Linux-syscall-note","LLGPL","LLVM-exception","LZMA-exception","mif-exception","mxml-exception","Nokia-Qt-exception-1.1","OCaml-LGPL-linking-exception","OCCT-exception-1.0","OpenJDK-assembly-exception-1.0","openvpn-openssl-exception","PCRE2-exception","polyparse-exception","PS-or-PDF-font-exception-20170817","QPL-1.0-INRIA-2004-exception","Qt-GPL-exception-1.0","Qt-LGPL-exception-1.1","Qwt-exception-1.0","romic-exception","RRDtool-FLOSS-exception-2.0","SANE-exception","SHL-2.0","SHL-2.1","stunnel-exception","SWI-exception","Swift-exception","Texinfo-exception","u-boot-exception-2.0","UBDL-exception","Universal-FOSS-exception-1.0","vsftpd-openssl-exception","WxWindows-exception-3.1","x11vnc-openssl-exception"]}')},2463:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.HashDictionary=void 0;class r extends Map{static#D([e,t],[r,n]){return e.localeCompare(r)||t.localeCompare(n)}sorted(){return Array.from(this.entries()).sort(r.#D)}}t.HashDictionary=r},2569:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.RatingRepository=t.Rating=void 0;const n=r(1507);t.Rating=class{source;score;severity;method;vector;justification;constructor(e={}){this.source=e.source,this.score=e.score,this.severity=e.severity,this.method=e.method,this.vector=e.vector,this.justification=e.justification}compare(e){return(this.score??0)-(e.score??0)||(this.vector??"").localeCompare(e.vector??"")||(this.justification??"").localeCompare(e.justification??"")||(this.severity??"").localeCompare(e.severity??"")||(this.method??"").localeCompare(e.method??"")||(this.source&&e.source?this.source.compare(e.source):0)}};class o extends n.SortableComparables{}t.RatingRepository=o},2632:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.SWID=void 0;const n=r(9708);t.SWID=class{tagId;name;version;patch;text;url;#F;constructor(e,t,r={}){this.tagId=e,this.name=t,this.version=r.version,this.patch=r.patch,this.text=r.text,this.url=r.url,this.tagVersion=r.tagVersion}get tagVersion(){return this.#F}set tagVersion(e){if(void 0!==e&&!(0,n.isNonNegativeInteger)(e))throw new TypeError("Not NonNegativeInteger nor undefined");this.#F=e}}},2904:(e,t)=>{var r;Object.defineProperty(t,"__esModule",{value:!0}),t.ComponentScope=void 0,function(e){e.Required="required",e.Optional="optional",e.Excluded="excluded"}(r||(t.ComponentScope=r={}))},2931:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.normalizedString=o,t.token=function(e){return o(e).trim().replace(i,a)};const r=/\r\n|\t|\n|\r/g,n=" ";function o(e){return e.replace(r,n)}const i=/ {2,}/g,a=" "},2970:(e,t)=>{var r;Object.defineProperty(t,"__esModule",{value:!0}),t.XmlSchema=void 0,function(e){const t=/^[a-z][a-z0-9+\-.]*$/i;e.isAnyURI=function(e){if("string"!=typeof e)return!1;if(0===e.length)return!1;const r=e.indexOf("#");let n=e;if(r>=0){if(e.includes("#",r+1))return!1;n=e.slice(void 0,r)}const o=n.indexOf(":");return!(o>=0&&!t.test(n.slice(void 0,o)))}}(r||(t.XmlSchema=r={}))},2971:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.UnsupportedFormatError=void 0;class r extends Error{}t.UnsupportedFormatError=r},3087:(e,t)=>{var r;Object.defineProperty(t,"__esModule",{value:!0}),t.AnalysisState=void 0,function(e){e.Resolved="resolved",e.ResolvedWithPedigree="resolved_with_pedigree",e.Exploitable="exploitable",e.InTriage="in_triage",e.FalsePositive="false_positive",e.NotAffected="not_affected"}(r||(t.AnalysisState=r={}))},3321:(e,t)=>{var r;Object.defineProperty(t,"__esModule",{value:!0}),t.ExternalReferenceType=void 0,function(e){e.VCS="vcs",e.IssueTracker="issue-tracker",e.Website="website",e.Advisories="advisories",e.BOM="bom",e.MailingList="mailing-list",e.Social="social",e.Chat="chat",e.Documentation="documentation",e.Support="support",e.SourceDistribution="source-distribution",e.Distribution="distribution",e.DistributionIntake="distribution-intake",e.License="license",e.BuildMeta="build-meta",e.BuildSystem="build-system",e.ReleaseNotes="release-notes",e.SecurityContact="security-contact",e.ModelCard="model-card",e.Log="log",e.Configuration="configuration",e.Evidence="evidence",e.Formulation="formulation",e.Attestation="attestation",e.ThreatModel="threat-model",e.AdversaryModel="adversary-model",e.RiskAssessment="risk-assessment",e.VulnerabilityAssertion="vulnerability-assertion",e.ExploitabilityStatement="exploitability-statement",e.PentestReport="pentest-report",e.StaticAnalysisReport="static-analysis-report",e.DynamicAnalysisReport="dynamic-analysis-report",e.RuntimeAnalysisReport="runtime-analysis-report",e.ComponentAnalysisReport="component-analysis-report",e.MaturityReport="maturity-report",e.CertificationReport="certification-report",e.CodifiedInfrastructure="codified-infrastructure",e.QualityMetrics="quality-metrics",e.POAM="poam",e.ElectronicSignature="electronic-signature",e.DigitalSignature="digital-signature",e.RFC9116="rfc-9116",e.Citation="citation",e.Patent="patent",e.PatentAssertion="patent-assertion",e.PatentFamily="patent-family",e.Other="other"}(r||(t.ExternalReferenceType=r={}))},3327:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.AdvisoryRepository=t.Advisory=void 0;const n=r(1507);t.Advisory=class{title;url;constructor(e,t={}){this.url=e,this.title=t.title}compare(e){return this.url.toString().localeCompare(e.url.toString())||(this.title??"").localeCompare(e.title??"")}};class o extends n.SortableComparables{}t.AdvisoryRepository=o},3349:(e,t)=>{var r;Object.defineProperty(t,"__esModule",{value:!0}),t.JsonSchema=void 0,function(e){e.isIriReference=function(e){return"string"==typeof e&&e.length>0},e.isIdnEmail=function(e){return"string"==typeof e&&e.length>0}}(r||(t.JsonSchema=r={}))},3668:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.Credits=void 0;const n=r(4477),o=r(6258);t.Credits=class{organizations;individuals;constructor(e={}){this.organizations=e.organizations??new o.OrganizationalEntityRepository,this.individuals=e.individuals??new n.OrganizationalContactRepository}}},3729:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.BomLinkElement=t.BomLinkDocument=void 0;class r{#k;constructor(e){this.value=e}get value(){return this.#k}set value(e){if(!this._isValid(e))throw new RangeError("invalid value");this.#k=e}compare(e){return this.toString().localeCompare(e.toString())}toString(){return this.value}}class n extends r{static#I=/^urn:cdx:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\/[1-9][0-9]*$/;static isValid(e){return"string"==typeof e&&this.#I.test(e)}_isValid(e){return n.isValid(e)}}t.BomLinkDocument=n;class o extends r{static#I=/^urn:cdx:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\/[1-9][0-9]*#.+$/;static isValid(e){return"string"==typeof e&&this.#I.test(e)}_isValid(e){return o.isValid(e)}}t.BomLinkElement=o},3899:e=>{e.exports=require("packageurl-js")},3922:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.CopyrightRepository=void 0;const n=r(1507);class o extends n.SortableStringables{}t.CopyrightRepository=o},4196:(e,t)=>{var r,n;Object.defineProperty(t,"__esModule",{value:!0}),t.Format=t.Version=void 0,function(e){e.v1dot7="1.7",e.v1dot6="1.6",e.v1dot5="1.5",e.v1dot4="1.4",e.v1dot3="1.3",e.v1dot2="1.2",e.v1dot1="1.1",e.v1dot0="1.0"}(r||(t.Version=r={})),function(e){e.XML="xml",e.JSON="json"}(n||(t.Format=n={}))},4212:function(e,t,r){var n,o=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),i=this&&this.__setModuleDefault||(Object.create?function(e,t){Object.defineProperty(e,"default",{enumerable:!0,value:t})}:function(e,t){e.default=t}),a=this&&this.__importStar||(n=function(e){return n=Object.getOwnPropertyNames||function(e){var t=[];for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[t.length]=r);return t},n(e)},function(e){if(e&&e.__esModule)return e;var t={};if(null!=e)for(var r=n(e),a=0;a<r.length;a++)"default"!==r[a]&&o(t,e,r[a]);return i(t,e),t});Object.defineProperty(t,"__esModule",{value:!0}),t.Types=t.Normalize=void 0,t.Normalize=a(r(1723)),t.Types=a(r(3349))},4242:function(e,t,r){var n=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),o=this&&this.__exportStar||function(e,t){for(var r in e)"default"===r||Object.prototype.hasOwnProperty.call(t,r)||n(t,e,r)};Object.defineProperty(t,"__esModule",{value:!0}),o(r(7099),t)},4277:(e,t)=>{var r;Object.defineProperty(t,"__esModule",{value:!0}),t.AttachmentEncoding=void 0,function(e){e.Base64="base64"}(r||(t.AttachmentEncoding=r={}))},4317:function(e,t,r){var n=this&&this.__importDefault||function(e){return e&&e.__esModule?e:{default:e}};Object.defineProperty(t,"__esModule",{value:!0}),t.isSupportedSpdxId=function(e){return a.has(e)},t.fixupSpdxId=function(e){return"string"==typeof e&&e.length>0?s[e.toLowerCase()]:void 0},t.isValidSpdxLicenseExpression=function(e){if("string"!=typeof e)return!1;try{(0,o.default)(e)}catch(e){return!1}return!0};const o=n(r(6926)),i=r(2311),a=new Set(i.enum),s=Object.freeze(Object.fromEntries(i.enum.map(e=>[e.toLowerCase(),e])))},4477:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.OrganizationalContactRepository=t.OrganizationalContact=void 0;const n=r(1507);t.OrganizationalContact=class{name;email;phone;constructor(e={}){this.name=e.name,this.email=e.email,this.phone=e.phone}compare(e){return(this.name??"").localeCompare(e.name??"")||(this.email??"").localeCompare(e.email??"")||(this.phone??"").localeCompare(e.phone??"")}};class o extends n.SortableComparables{}t.OrganizationalContactRepository=o},4654:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.PropertyRepository=t.Property=void 0;const n=r(1507);t.Property=class{name;value;constructor(e,t){this.name=e,this.value=t}compare(e){return this.name.localeCompare(e.name)||this.value.localeCompare(e.value)}};class o extends n.SortableComparables{}t.PropertyRepository=o},4757:(e,t)=>{var r;Object.defineProperty(t,"__esModule",{value:!0}),t.Severity=void 0,function(e){e.Critical="critical",e.High="high",e.Medium="medium",e.Low="low",e.Info="info",e.None="none",e.Unknown="unknown"}(r||(t.Severity=r={}))},4799:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.LifecycleRepository=t.NamedLifecycle=void 0;class r{name;description;constructor(e,t={}){this.name=e,this.description=t.description}compare(e){return this.name.localeCompare(e.name)}}t.NamedLifecycle=r;class n extends Set{static#D(e,t){return e.constructor===t.constructor?e instanceof r?e.compare(t):e.localeCompare(t):e.constructor.name.localeCompare(t.constructor.name)}sorted(){return Array.from(this).sort(n.#D)}}t.LifecycleRepository=n},4880:function(e,t,r){var n=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),o=this&&this.__exportStar||function(e,t){for(var r in e)"default"===r||Object.prototype.hasOwnProperty.call(t,r)||n(t,e,r)};Object.defineProperty(t,"__esModule",{value:!0}),o(r(2253),t),o(r(1592),t),o(r(9511),t),o(r(3087),t),o(r(5486),t),o(r(4757),t)},4889:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.XmlBaseSerializer=void 0;const n=r(4196),o=r(2971),i=r(8352);class a extends i.BaseSerializer{#j;constructor(e){if(!e.spec.supportsFormat(n.Format.XML))throw new o.UnsupportedFormatError("Spec does not support XML format.");super(),this.#j=e}get normalizerFactory(){return this.#j}_normalize(e,t={}){return this.#j.makeForBom().normalize(e,t)}}t.XmlBaseSerializer=a},4970:function(e,t,r){var n=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),o=this&&this.__exportStar||function(e,t){for(var r in e)"default"===r||Object.prototype.hasOwnProperty.call(t,r)||n(t,e,r)};Object.defineProperty(t,"__esModule",{value:!0}),o(r(3327),t),o(r(785),t),o(r(930),t),o(r(3668),t),o(r(2569),t),o(r(9803),t),o(r(625),t),o(r(8768),t)},5170:function(e,t,r){var n=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),o=this&&this.__exportStar||function(e,t){for(var r in e)"default"===r||Object.prototype.hasOwnProperty.call(t,r)||n(t,e,r)};Object.defineProperty(t,"__esModule",{value:!0}),t.isNodePackageJson=t.assertNodePackageJson=void 0;const i=r(1322);o(r(608),t),o(r(759),t),o(r(9708),t),o(r(9356),t),t.assertNodePackageJson=i.assertNodePackageJson,t.isNodePackageJson=i.isNodePackageJson},5393:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.Bom=void 0;const n=r(9708),o=r(9064),i=r(734),a=r(8672),s=r(8768);t.Bom=class{metadata;components;services;vulnerabilities;#f=1;#B;constructor(e={}){this.metadata=e.metadata??new i.Metadata,this.components=e.components??new o.ComponentRepository,this.services=e.services??new a.ServiceRepository,this.version=e.version??this.version,this.vulnerabilities=e.vulnerabilities??new s.VulnerabilityRepository,this.serialNumber=e.serialNumber}get version(){return this.#f}set version(e){if(!(0,n.isPositiveInteger)(e))throw new TypeError("Not PositiveInteger");this.#f=e}get serialNumber(){return this.#B}set serialNumber(e){this.#B=""===e?void 0:e}}},5486:(e,t)=>{var r;Object.defineProperty(t,"__esModule",{value:!0}),t.RatingMethod=void 0,function(e){e.CVSSv2="CVSSv2",e.CVSSv3="CVSSv3",e.CVSSv31="CVSSv31",e.CVSSv4="CVSSv4",e.OWASP="OWASP",e.SSVC="SSVC",e.Other="other"}(r||(t.RatingMethod=r={}))},5563:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.MissingOptionalDependencyError=t.NotImplementedError=void 0;const n=r(7840);class o extends Error{constructor(e){super(`not implemented for CycloneDX version: ${e}`)}}t.NotImplementedError=o;class i extends n.OptPlugError{}t.MissingOptionalDependencyError=i},5866:(e,t)=>{var r;Object.defineProperty(t,"__esModule",{value:!0}),t.ComponentType=void 0,function(e){e.Application="application",e.Framework="framework",e.Library="library",e.Container="container",e.Platform="platform",e.OperatingSystem="operating-system",e.Device="device",e.DeviceDriver="device-driver",e.Firmware="firmware",e.File="file",e.MachineLearningModel="machine-learning-model",e.Data="data",e.CryptographicAsset="cryptographic-asset"}(r||(t.ComponentType=r={}))},5879:function(e,t,r){var n,o=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),i=this&&this.__setModuleDefault||(Object.create?function(e,t){Object.defineProperty(e,"default",{enumerable:!0,value:t})}:function(e,t){e.default=t}),a=this&&this.__importStar||(n=function(e){return n=Object.getOwnPropertyNames||function(e){var t=[];for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[t.length]=r);return t},n(e)},function(e){if(e&&e.__esModule)return e;var t={};if(null!=e)for(var r=n(e),a=0;a<r.length;a++)"default"!==r[a]&&o(t,e,r[a]);return i(t,e),t});Object.defineProperty(t,"__esModule",{value:!0}),t.PackageUrl=t.Bom=void 0,t.Bom=a(r(7223)),t.PackageUrl=a(r(2302))},6258:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.OrganizationalEntityRepository=t.OrganizationalEntity=void 0;const n=r(1507),o=r(4477);t.OrganizationalEntity=class{name;url;contact;constructor(e={}){this.name=e.name,this.url=e.url??new Set,this.contact=e.contact??new o.OrganizationalContactRepository}compare(e){return(this.name??"").localeCompare(e.name??"")||this.contact.compare(e.contact)||new n.SortableStringables(this.url).compare(new n.SortableStringables(e.url))}};class i extends n.SortableComparables{}t.OrganizationalEntityRepository=i},6505:function(e,t,r){var n=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),o=this&&this.__exportStar||function(e,t){for(var r in e)"default"===r||Object.prototype.hasOwnProperty.call(t,r)||n(t,e,r)};Object.defineProperty(t,"__esModule",{value:!0}),o(r(870),t)},6612:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.LicenseFactory=void 0;const n=r(7988),o=r(4317);t.LicenseFactory=class{makeFromString(e){try{return this.makeSpdxLicense(e)}catch{}try{return this.makeExpression(e)}catch{}return this.makeNamedLicense(e)}makeExpression(e){const t=String(e);if((0,o.isValidSpdxLicenseExpression)(t))return new n.LicenseExpression(t);throw new RangeError("Invalid SPDX license expression")}makeDisjunctive(e){try{return this.makeSpdxLicense(e)}catch{return this.makeNamedLicense(e)}}makeSpdxLicense(e){const t=(0,o.fixupSpdxId)(String(e));if(void 0===t)throw new RangeError("Unsupported SPDX license ID");return new n.SpdxLicense(t)}makeNamedLicense(e){return new n.NamedLicense(String(e))}}},6926:e=>{e.exports=require("spdx-expression-parse")},7099:function(e,t,r){var n,o=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),i=this&&this.__setModuleDefault||(Object.create?function(e,t){Object.defineProperty(e,"default",{enumerable:!0,value:t})}:function(e,t){e.default=t}),a=this&&this.__importStar||(n=function(e){return n=Object.getOwnPropertyNames||function(e){var t=[];for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[t.length]=r);return t},n(e)},function(e){if(e&&e.__esModule)return e;var t={};if(null!=e)for(var r=n(e),a=0;a<r.length;a++)"default"!==r[a]&&o(t,e,r[a]);return i(t,e),t});Object.defineProperty(t,"__esModule",{value:!0}),t.BomUtility=void 0;const s=a(r(9294));t.BomUtility=s},7223:function(e,t,r){var n,o=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),i=this&&this.__setModuleDefault||(Object.create?function(e,t){Object.defineProperty(e,"default",{enumerable:!0,value:t})}:function(e,t){e.default=t}),a=this&&this.__importStar||(n=function(e){return n=Object.getOwnPropertyNames||function(e){var t=[];for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[t.length]=r);return t},n(e)},function(e){if(e&&e.__esModule)return e;var t={};if(null!=e)for(var r=n(e),a=0;a<r.length;a++)"default"!==r[a]&&o(t,e,r[a]);return i(t,e),t});Object.defineProperty(t,"__esModule",{value:!0}),t.Utils=void 0,t.Utils=a(r(9294))},7238:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.Attachment=void 0,t.Attachment=class{contentType;content;encoding;constructor(e,t={}){this.contentType=t.contentType,this.content=e,this.encoding=t.encoding}}},7288:function(e,t,r){var n,o=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),i=this&&this.__setModuleDefault||(Object.create?function(e,t){Object.defineProperty(e,"default",{enumerable:!0,value:t})}:function(e,t){e.default=t}),a=this&&this.__exportStar||function(e,t){for(var r in e)"default"===r||Object.prototype.hasOwnProperty.call(t,r)||o(t,e,r)},s=this&&this.__importStar||(n=function(e){return n=Object.getOwnPropertyNames||function(e){var t=[];for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[t.length]=r);return t},n(e)},function(e){if(e&&e.__esModule)return e;var t={};if(null!=e)for(var r=n(e),a=0;a<r.length;a++)"default"!==r[a]&&o(t,e,r[a]);return i(t,e),t});Object.defineProperty(t,"__esModule",{value:!0}),t.Validation=t.Utils=t.Serialize=t.Factories=t.Contrib=void 0,a(r(2229),t),t.Contrib=s(r(7294)),t.Factories=s(r(6505)),t.Serialize=s(r(9569)),t.Utils=s(r(4242)),t.Validation=s(r(1722))},7294:function(e,t,r){var n,o=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),i=this&&this.__setModuleDefault||(Object.create?function(e,t){Object.defineProperty(e,"default",{enumerable:!0,value:t})}:function(e,t){e.default=t}),a=this&&this.__exportStar||function(e,t){for(var r in e)"default"===r||Object.prototype.hasOwnProperty.call(t,r)||o(t,e,r)},s=this&&this.__importStar||(n=function(e){return n=Object.getOwnPropertyNames||function(e){var t=[];for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[t.length]=r);return t},n(e)},function(e){if(e&&e.__esModule)return e;var t={};if(null!=e)for(var r=n(e),a=0;a<r.length;a++)"default"!==r[a]&&o(t,e,r[a]);return i(t,e),t});Object.defineProperty(t,"__esModule",{value:!0}),t.License=void 0,a(r(5879),t),t.License=s(r(162))},7645:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.Tools=t.ToolRepository=t.Tool=void 0;const n=r(1507),o=r(9064),i=r(1791),a=r(2463),s=r(8672);class l{vendor;name;version;hashes;externalReferences;constructor(e={}){this.vendor=e.vendor,this.name=e.name,this.version=e.version,this.hashes=e.hashes??new a.HashDictionary,this.externalReferences=e.externalReferences??new i.ExternalReferenceRepository}compare(e){return(this.vendor??"").localeCompare(e.vendor??"")||(this.name??"").localeCompare(e.name??"")||(this.version??"").localeCompare(e.version??"")}static fromComponent(e){return new l({vendor:e.group,name:e.name,version:e.version,hashes:e.hashes,externalReferences:e.externalReferences})}static fromService(e){return new l({vendor:e.group,name:e.name,version:e.version,externalReferences:e.externalReferences})}}t.Tool=l;class c extends n.SortableComparables{}t.ToolRepository=c,t.Tools=class{components;services;tools;constructor(e={}){this.components=e.components??new o.ComponentRepository,this.services=e.services??new s.ServiceRepository,this.tools=e.tools??new c}get size(){return this.components.size+this.services.size+this.tools.size}}},7676:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.BomRefDiscriminator=void 0;class r{#V;#H;constructor(e,t="BomRef"){this.#V=Array.from(e,e=>[e,e.value]),this.#H=t}get prefix(){return this.#H}*[Symbol.iterator](){for(const[e]of this.#V)yield e}discriminate(){const e=new Set([""]);for(const[t]of this.#V){let r=t.value;(void 0===r||e.has(r))&&(r=this.#U(),t.value=r),e.add(r)}}reset(){for(const[e,t]of this.#V)e.value=t}#U(){return`${this.#H}${Math.random().toString(32).substring(1)}${Math.random().toString(32).substring(1)}`}}t.BomRefDiscriminator=r},7715:function(e,t,r){var n,o=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),i=this&&this.__setModuleDefault||(Object.create?function(e,t){Object.defineProperty(e,"default",{enumerable:!0,value:t})}:function(e,t){e.default=t}),a=this&&this.__exportStar||function(e,t){for(var r in e)"default"===r||Object.prototype.hasOwnProperty.call(t,r)||o(t,e,r)},s=this&&this.__importStar||(n=function(e){return n=Object.getOwnPropertyNames||function(e){var t=[];for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[t.length]=r);return t},n(e)},function(e){if(e&&e.__esModule)return e;var t={};if(null!=e)for(var r=n(e),a=0;a<r.length;a++)"default"!==r[a]&&o(t,e,r[a]);return i(t,e),t});Object.defineProperty(t,"__esModule",{value:!0}),t.Types=void 0,a(r(5563),t),t.Types=s(r(8359))},7840:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.OptPlugError=void 0;class r extends Error{cause;constructor(e,t){super(e),this.cause=t}}t.OptPlugError=r},7894:(e,t)=>{var r;Object.defineProperty(t,"__esModule",{value:!0}),t.LifecyclePhase=void 0,function(e){e.Design="design",e.PreBuild="pre-build",e.Build="build",e.PostBuild="post-build",e.Operations="operations",e.Discovery="discovery",e.Decommission="decommission"}(r||(t.LifecyclePhase=r={}))},7977:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.escapeUri=function(e){if(void 0===e)return e;for(const[t,n]of r)e=e.replace(t,n);return e};const r=[[/ /g,"%20"],[/"/g,"%22"],[/'/g,"%27"],[/\[/g,"%5B"],[/]/g,"%5D"],[/</g,"%3C"],[/>/g,"%3E"],[/\{/g,"%7B"],[/}/g,"%7D"]]},7988:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.LicenseRepository=t.SpdxLicense=t.NamedLicense=t.LicenseExpression=void 0,t.LicenseExpression=class{#G;acknowledgement;constructor(e){this.expression=e}get expression(){return this.#G}set expression(e){if(""===e)throw new RangeError("value is empty string");this.#G=e}compare(e){return this.#G.localeCompare(e.#G)}};class r{acknowledgement;text;#$;constructor(e={}){this.acknowledgement=e.acknowledgement,this.text=e.text,this.url=e.url}get url(){return this.#$}set url(e){this.#$=""===e?void 0:e}}t.NamedLicense=class extends r{name;constructor(e,t={}){super(t),this.name=e}compare(e){return this.name.localeCompare(e.name)}},t.SpdxLicense=class extends r{#Y;constructor(e,t={}){super(t),this.id=e}get id(){return this.#Y}set id(e){if(""===e)throw new RangeError("value is empty string");this.#Y=e}compare(e){return this.#Y.localeCompare(e.#Y)}};class n extends Set{static#D(e,t){return e.constructor===t.constructor?e.compare(t):e.constructor.name.localeCompare(t.constructor.name)}sorted(){return Array.from(this).sort(n.#D)}}t.LicenseRepository=n},8070:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.MissingOptionalDependencyError=void 0;const n=r(7840);class o extends n.OptPlugError{}t.MissingOptionalDependencyError=o},8127:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.JsonSerializer=void 0;const n=r(4196),o=r(2971),i=r(8352);class a extends i.BaseSerializer{#j;constructor(e){if(!e.spec.supportsFormat(n.Format.JSON))throw new o.UnsupportedFormatError("Spec does not support JSON format.");super(),this.#j=e}get normalizerFactory(){return this.#j}_normalize(e,t={}){return this.#j.makeForBom().normalize(e,t)}_serialize(e,{space:t}={}){return JSON.stringify(e,null,t)}}t.JsonSerializer=a},8207:function(e,t,r){var n,o=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),i=this&&this.__setModuleDefault||(Object.create?function(e,t){Object.defineProperty(e,"default",{enumerable:!0,value:t})}:function(e,t){e.default=t}),a=this&&this.__exportStar||function(e,t){for(var r in e)"default"===r||Object.prototype.hasOwnProperty.call(t,r)||o(t,e,r)},s=this&&this.__importStar||(n=function(e){return n=Object.getOwnPropertyNames||function(e){var t=[];for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[t.length]=r);return t},n(e)},function(e){if(e&&e.__esModule)return e;var t={};if(null!=e)for(var r=n(e),a=0;a<r.length;a++)"default"!==r[a]&&o(t,e,r[a]);return i(t,e),t});Object.defineProperty(t,"__esModule",{value:!0}),t.Vulnerability=void 0,a(r(7238),t),a(r(5393),t),a(r(3729),t),a(r(1588),t),a(r(9064),t),a(r(3922),t),a(r(1791),t),a(r(2463),t),a(r(7988),t),a(r(4799),t),a(r(734),t),a(r(4477),t),a(r(6258),t),a(r(4654),t),a(r(8672),t),a(r(2632),t),a(r(7645),t),t.Vulnerability=s(r(4970))},8352:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.BaseSerializer=void 0;const n=r(9027),o=r(7676);t.BaseSerializer=class{*#K(e){if(void 0!==e.metadata.component){yield e.metadata.component.bomRef;for(const{bomRef:t}of e.metadata.component.components[n.treeIteratorSymbol]())yield t}for(const{bomRef:t}of e.components[n.treeIteratorSymbol]())yield t;for(const{bomRef:t}of e.services[n.treeIteratorSymbol]())yield t;for(const{bomRef:t}of e.vulnerabilities)yield t}#W(e,t){const r=new o.BomRefDiscriminator(this.#K(e));r.discriminate();try{return this._normalize(e,t)}finally{r.reset()}}serialize(e,t){return this._serialize(this.#W(e,t),t)}}},8359:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0})},8440:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0})},8672:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.ServiceRepository=t.Service=void 0;const n=r(1507),o=r(9027),i=r(1588),a=r(1791),s=r(7988),l=r(4654);t.Service=class{provider;group;name;version;description;licenses;externalReferences;services;properties;#X;dependencies;constructor(e,t={}){this.#X=new i.BomRef(t.bomRef),this.provider=t.provider,this.group=t.group,this.name=e,this.version=t.version,this.description=t.description,this.licenses=t.licenses??new s.LicenseRepository,this.externalReferences=t.externalReferences??new a.ExternalReferenceRepository,this.services=t.services??new c,this.properties=t.properties??new l.PropertyRepository,this.dependencies=t.dependencies??new i.BomRefRepository}get bomRef(){return this.#X}compare(e){const t=this.bomRef.compare(e.bomRef);return 0!==t?t:(this.group??"").localeCompare(e.group??"")||this.name.localeCompare(e.name)||(this.version??"").localeCompare(e.version??"")}};class c extends n.SortableComparables{*[o.treeIteratorSymbol](){for(const e of this)yield e,yield*e.services[o.treeIteratorSymbol]()}}t.ServiceRepository=c},8768:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.VulnerabilityRepository=t.Vulnerability=void 0;const n=r(1507),o=r(759),i=r(1588),a=r(4654),s=r(7645),l=r(3327),c=r(785),p=r(2569),m=r(9803);t.Vulnerability=class{#X;id;source;references;ratings;cwes;description;detail;recommendation;advisories;created;published;updated;credits;tools;analysis;affects;properties;constructor(e={}){this.#X=new i.BomRef(e.bomRef),this.id=e.id,this.source=e.source,this.references=e.references??new m.ReferenceRepository,this.ratings=e.ratings??new p.RatingRepository,this.cwes=e.cwes??new o.CweRepository,this.description=e.description,this.detail=e.detail,this.recommendation=e.recommendation,this.advisories=e.advisories??new l.AdvisoryRepository,this.created=e.created,this.published=e.published,this.updated=e.updated,this.credits=e.credits,this.tools=e.tools??new s.Tools,this.analysis=e.analysis,this.affects=e.affects??new c.AffectRepository,this.properties=e.properties??new a.PropertyRepository}get bomRef(){return this.#X}compare(e){const t=this.bomRef.compare(e.bomRef);return 0!==t?t:(this.id??"").localeCompare(e.id??"")||(this.created?.getTime()??0)-(e.created?.getTime()??0)||(this.published?.getTime()??0)-(e.published?.getTime()??0)||(this.updated?.getTime()??0)-(e.updated?.getTime()??0)||this.ratings.compare(e.ratings)||this.cwes.compare(e.cwes)||(this.description??"").localeCompare(e.description??"")||(this.detail??"").localeCompare(e.detail??"")||(this.recommendation??"").localeCompare(e.recommendation??"")||(this.source&&e.source?this.source.compare(e.source):0)||this.properties.compare(e.properties)}};class u extends n.SortableComparables{}t.VulnerabilityRepository=u},9027:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.treeIteratorSymbol=void 0,t.treeIteratorSymbol=Symbol("iterator of a tree/nesting-like structure")},9064:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.ComponentEvidence=t.ComponentRepository=t.Component=void 0;const n=r(1507),o=r(9027),i=r(608),a=r(1588),s=r(3922),l=r(1791),c=r(2463),p=r(7988),m=r(4654);t.Component=class{type;name;author;copyright;description;externalReferences;group;hashes;licenses;publisher;purl;scope;supplier;swid;version;components;properties;evidence;#X;#J;dependencies;constructor(e,t,r={}){this.#X=new a.BomRef(r.bomRef),this.type=e,this.name=t,this.supplier=r.supplier,this.author=r.author,this.copyright=r.copyright,this.externalReferences=r.externalReferences??new l.ExternalReferenceRepository,this.group=r.group,this.hashes=r.hashes??new c.HashDictionary,this.licenses=r.licenses??new p.LicenseRepository,this.publisher=r.publisher,this.purl=r.purl,this.scope=r.scope,this.swid=r.swid,this.version=r.version,this.description=r.description,this.components=r.components??new u,this.cpe=r.cpe,this.properties=r.properties??new m.PropertyRepository,this.evidence=r.evidence,this.dependencies=r.dependencies??new a.BomRefRepository}get bomRef(){return this.#X}get cpe(){return this.#J}set cpe(e){if(void 0!==e&&!(0,i.isCPE)(e))throw new TypeError("Not CPE nor undefined");this.#J=e}compare(e){const t=this.bomRef.compare(e.bomRef);return 0!==t?t:void 0!==this.purl&&void 0!==e.purl?this.purl.toString().localeCompare(e.purl.toString()):void 0!==this.#J&&void 0!==e.#J?this.#J.localeCompare(e.#J):(this.group??"").localeCompare(e.group??"")||this.name.localeCompare(e.name)||(this.version??"").localeCompare(e.version??"")}};class u extends n.SortableComparables{*[o.treeIteratorSymbol](){for(const e of this)yield e,yield*e.components[o.treeIteratorSymbol]()}}t.ComponentRepository=u,t.ComponentEvidence=class{licenses;copyright;constructor(e={}){this.licenses=e.licenses??new p.LicenseRepository,this.copyright=e.copyright??new s.CopyrightRepository}}},9294:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.randomSerialNumber=function(){const e=[Math.round(65535*Math.random()),Math.round(65535*Math.random()),Math.round(65535*Math.random()),16384|Math.round(4095*Math.random()),32768|Math.round(16383*Math.random()),Math.round(65535*Math.random()),Math.round(65535*Math.random()),Math.round(65535*Math.random())].map(e=>e.toString(16).padStart(4,"0"));return`urn:uuid:${e[0]}${e[1]}-${e[2]}-${e[3]}-${e[4]}-${e[5]}${e[6]}${e[7]}`}},9356:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.isMimeType=function(e){return"string"==typeof e&&r.test(e)};const r=/^[-+a-z0-9.]+\/[-+a-z0-9.]+$/},9511:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.AnalysisResponseRepository=t.AnalysisResponse=void 0;const n=r(1507);var o;!function(e){e.CanNotFix="can_not_fix",e.WillNotFix="will_not_fix",e.Update="update",e.Rollback="rollback",e.WorkaroundAvailable="workaround_available"}(o||(t.AnalysisResponse=o={}));class i extends n.SortableStringables{}t.AnalysisResponseRepository=i},9569:function(e,t,r){var n=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),o=this&&this.__exportStar||function(e,t){for(var r in e)"default"===r||Object.prototype.hasOwnProperty.call(t,r)||n(t,e,r)};Object.defineProperty(t,"__esModule",{value:!0}),o(r(94),t),o(r(204),t)},9708:(e,t)=>{function r(e){return Number.isInteger(e)}Object.defineProperty(t,"__esModule",{value:!0}),t.isInteger=r,t.isNonNegativeInteger=function(e){return r(e)&&e>=0},t.isPositiveInteger=function(e){return r(e)&&e>0}},9803:(e,t,r)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.ReferenceRepository=t.Reference=void 0;const n=r(1507);t.Reference=class{id;source;constructor(e,t){this.id=e,this.source=t}compare(e){return this.id.localeCompare(e.id)||this.source.compare(e.source)}};class o extends n.SortableComparables{}t.ReferenceRepository=o},9979:function(e,t,r){var n,o=this&&this.__createBinding||(Object.create?function(e,t,r,n){void 0===n&&(n=r);var o=Object.getOwnPropertyDescriptor(t,r);o&&!("get"in o?!t.__esModule:o.writable||o.configurable)||(o={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,o)}:function(e,t,r,n){void 0===n&&(n=r),e[n]=t[r]}),i=this&&this.__setModuleDefault||(Object.create?function(e,t){Object.defineProperty(e,"default",{enumerable:!0,value:t})}:function(e,t){e.default=t}),a=this&&this.__importStar||(n=function(e){return n=Object.getOwnPropertyNames||function(e){var t=[];for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[t.length]=r);return t},n(e)},function(e){if(e&&e.__esModule)return e;var t={};if(null!=e)for(var r=n(e),a=0;a<r.length;a++)"default"!==r[a]&&o(t,e,r[a]);return i(t,e),t});Object.defineProperty(t,"__esModule",{value:!0}),t.Factories=void 0,t.Factories=a(r(6612))}},t={};return function r(n){var o=t[n];if(void 0!==o)return o.exports;var i=t[n]={exports:{}};return e[n].call(i.exports,i,i.exports,r),i.exports}(7288)})());
 //# sourceMappingURL=lib.js.map