@cyclonedx/cyclonedx-library 9.2.0 → 9.4.1

package/dist.d/builders/fromNodePackageJson.node.d.ts

@@ -16,28 +16,27 @@ limitations under the License.
 SPDX-License-Identifier: Apache-2.0
 Copyright (c) OWASP Foundation. All Rights Reserved.
 */
-import { ComponentType } from '../enums/componentType';
-import type * as Factories from '../factories/index.node';
-import { Component } from '../models/component';
-import { Tool } from '../models/tool';
-import type { NodePackageJson } from '../types/nodePackageJson';
 /**
- * Node-specific ToolBuilder.
+ * Node-specifics.
+ *
+ * Intended to run on normalized data structures
+ * based on [PackageJson spec](https://github.com/SchemaStore/schemastore/blob/master/src/schemas/json/package.json)
+ * and explained by [PackageJson description](https://docs.npmjs.com/cli/v9/configuring-npm/package-json).
+ * Normalization should be done downstream, for example via [`normalize-package-data`](https://www.npmjs.com/package/normalize-package-data).
  */
-export declare class ToolBuilder {
-    #private;
-    constructor(extRefFactory: ToolBuilder['extRefFactory']);
-    get extRefFactory(): Factories.FromNodePackageJson.ExternalReferenceFactory;
-    makeTool(data: NodePackageJson): Tool | undefined;
+import { ComponentBuilder as _ComponentBuilder, ToolBuilder as _ToolBuilder } from '../contrib/fromNodePackageJson/builders';
+/**
+ * Deprecated — Alias of {@link Contrib.FromNodePackageJson.Builders.ToolBuilder}.
+ *
+ * @deprecated Use `Contrib.FromNodePackageJson.Builders.ToolBuilder` instead.
+ */
+export declare class ToolBuilder extends _ToolBuilder {
 }
 /**
- * Node-specific ComponentBuilder.
+ * Deprecated — Alias of {@link Contrib.FromNodePackageJson.Builders.ComponentBuilder}.
+ *
+ * @deprecated Use `Contrib.FromNodePackageJson.Builders.ComponentBuilder` instead.
  */
-export declare class ComponentBuilder {
-    #private;
-    constructor(extRefFactory: ComponentBuilder['extRefFactory'], licenseFactory: ComponentBuilder['licenseFactory']);
-    get extRefFactory(): Factories.FromNodePackageJson.ExternalReferenceFactory;
-    get licenseFactory(): Factories.LicenseFactory;
-    makeComponent(data: NodePackageJson, type?: ComponentType): Component | undefined;
+export declare class ComponentBuilder extends _ComponentBuilder {
 }
 //# sourceMappingURL=fromNodePackageJson.node.d.ts.map

package/dist.d/builders/fromNodePackageJson.node.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fromNodePackageJson.node.d.ts","sourceRoot":"","sources":["../../src/builders/fromNodePackageJson.node.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAYF,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AACtD,OAAO,KAAK,KAAK,SAAS,MAAM,yBAAyB,CAAA;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAG/C,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAA;AACrC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AAE/D;;GAEG;AACH,qBAAa,WAAW;;gBAGT,aAAa,EAAE,WAAW,CAAC,eAAe,CAAC;IAIxD,IAAI,aAAa,IAAK,SAAS,CAAC,mBAAmB,CAAC,wBAAwB,CAE3E;IAID,QAAQ,CAAE,IAAI,EAAE,eAAe,GAAG,IAAI,GAAG,SAAS;CAcnD;AAED;;GAEG;AACH,qBAAa,gBAAgB;;gBAKzB,aAAa,EAAE,gBAAgB,CAAC,eAAe,CAAC,EAChD,cAAc,EAAE,gBAAgB,CAAC,gBAAgB,CAAC;IAMpD,IAAI,aAAa,IAAK,SAAS,CAAC,mBAAmB,CAAC,wBAAwB,CAE3E;IAED,IAAI,cAAc,IAAK,SAAS,CAAC,cAAc,CAE9C;IAED,aAAa,CAAE,IAAI,EAAE,eAAe,EAAE,IAAI,GAAE,aAAqC,GAAG,SAAS,GAAG,SAAS;CAwD1G"}
+{"version":3,"file":"fromNodePackageJson.node.d.ts","sourceRoot":"","sources":["../../src/builders/fromNodePackageJson.node.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF;;;;;;;GAOG;AAEH,OAAO,EAAC,gBAAgB,IAAI,iBAAiB,EAAE,WAAW,IAAI,YAAY,EAAC,MAAM,yCAAyC,CAAA;AAG1H;;;;GAIG;AACH,qBAAa,WAAY,SAAQ,YAAY;CAAG;AAEhD;;;;GAIG;AACH,qBAAa,gBAAiB,SAAQ,iBAAiB;CAAG"}

package/dist.d/builders/index.node.d.ts

@@ -16,5 +16,6 @@ limitations under the License.
 SPDX-License-Identifier: Apache-2.0
 Copyright (c) OWASP Foundation. All Rights Reserved.
 */
+/** @deprecated next */
 export * as FromNodePackageJson from './fromNodePackageJson.node';
 //# sourceMappingURL=index.node.d.ts.map

package/dist.d/builders/index.node.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.node.d.ts","sourceRoot":"","sources":["../../src/builders/index.node.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF,OAAO,KAAK,mBAAmB,MAAM,4BAA4B,CAAA"}
+{"version":3,"file":"index.node.d.ts","sourceRoot":"","sources":["../../src/builders/index.node.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF,uBAAuB;AACvB,OAAO,KAAK,mBAAmB,MAAM,4BAA4B,CAAA"}

package/dist.d/contrib/bom/index.d.ts

@@ -0,0 +1,20 @@
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+export * as Utils from './utils';
+//# sourceMappingURL=index.d.ts.map

package/dist.d/contrib/bom/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/contrib/bom/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF,OAAO,KAAK,KAAK,MAAM,SAAS,CAAA"}

package/dist.d/contrib/bom/utils.d.ts

@@ -0,0 +1,23 @@
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+/**
+ * Generate valid random SerialNumbers for {@link Models.Bom.serialNumber | Models.Bom.serialNumber}.
+ */
+export declare function randomSerialNumber(): string;
+//# sourceMappingURL=utils.d.ts.map

package/dist.d/contrib/bom/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/contrib/bom/utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF;;GAEG;AACH,wBAAgB,kBAAkB,IAAK,MAAM,CAc5C"}

package/dist.d/contrib/fromNodePackageJson/_helpers/gitUrl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitUrl.d.ts","sourceRoot":"","sources":["../../../../src/contrib/fromNodePackageJson/_helpers/gitUrl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AASF;;GAEG;AACH,wBAAgB,qBAAqB,CAAE,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,GAAG,GAAG,MAAM,GAAG,SAAS,CA0B1F"}

package/dist.d/contrib/fromNodePackageJson/_helpers/packageJson.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"packageJson.d.ts","sourceRoot":"","sources":["../../../../src/contrib/fromNodePackageJson/_helpers/packageJson.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAE,IAAI,EAAE,MAAM,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAO/D"}

package/dist.d/contrib/fromNodePackageJson/builders.d.ts

@@ -0,0 +1,52 @@
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+/**
+ * Node-specifics.
+ *
+ * Intended to run on normalized data structures
+ * based on [PackageJson spec](https://github.com/SchemaStore/schemastore/blob/master/src/schemas/json/package.json)
+ * and explained by [PackageJson description](https://docs.npmjs.com/cli/v9/configuring-npm/package-json).
+ * Normalization should be done downstream, for example via [`normalize-package-data`](https://www.npmjs.com/package/normalize-package-data).
+ */
+import { ComponentType } from '../../enums/componentType';
+import { Component } from '../../models/component';
+import { Tool } from '../../models/tool';
+import type { LicenseFactory } from '../license/factories';
+import type { ExternalReferenceFactory } from './factories';
+import type { NodePackageJson } from './types';
+/**
+ * Node-specific ToolBuilder.
+ */
+export declare class ToolBuilder {
+    #private;
+    constructor(extRefFactory: ToolBuilder['extRefFactory']);
+    get extRefFactory(): ExternalReferenceFactory;
+    makeTool(data: NodePackageJson): Tool | undefined;
+}
+/**
+ * Node-specific ComponentBuilder.
+ */
+export declare class ComponentBuilder {
+    #private;
+    constructor(extRefFactory: ComponentBuilder['extRefFactory'], licenseFactory: ComponentBuilder['licenseFactory']);
+    get extRefFactory(): ExternalReferenceFactory;
+    get licenseFactory(): LicenseFactory;
+    makeComponent(data: NodePackageJson, type?: ComponentType): Component | undefined;
+}
+//# sourceMappingURL=builders.d.ts.map

package/dist.d/contrib/fromNodePackageJson/builders.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"builders.d.ts","sourceRoot":"","sources":["../../../src/contrib/fromNodePackageJson/builders.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF;;;;;;;GAOG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AAGlD,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAA;AACxC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAE1D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAA;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAE9C;;GAEG;AACH,qBAAa,WAAW;;gBAGT,aAAa,EAAE,WAAW,CAAC,eAAe,CAAC;IAIxD,IAAI,aAAa,IAAK,wBAAwB,CAE7C;IAID,QAAQ,CAAE,IAAI,EAAE,eAAe,GAAG,IAAI,GAAG,SAAS;CAcnD;AAED;;GAEG;AACH,qBAAa,gBAAgB;;gBAKzB,aAAa,EAAE,gBAAgB,CAAC,eAAe,CAAC,EAChD,cAAc,EAAE,gBAAgB,CAAC,gBAAgB,CAAC;IAMpD,IAAI,aAAa,IAAK,wBAAwB,CAE7C;IAED,IAAI,cAAc,IAAK,cAAc,CAEpC;IAED,aAAa,CAAE,IAAI,EAAE,eAAe,EAAE,IAAI,GAAE,aAAqC,GAAG,SAAS,GAAG,SAAS;CAwD1G"}

package/dist.d/contrib/fromNodePackageJson/factories.d.ts

@@ -0,0 +1,50 @@
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+/**
+ * Node-specifics.
+ *
+ * Intended to run on normalized data structures
+ * based on [PackageJson spec](https://github.com/SchemaStore/schemastore/blob/master/src/schemas/json/package.json)
+ * and explained by [PackageJson description](https://docs.npmjs.com/cli/v9/configuring-npm/package-json).
+ * Normalization should be done downstream, for example via [`normalize-package-data`](https://www.npmjs.com/package/normalize-package-data).
+ */
+import type { PackageURL } from 'packageurl-js';
+import type { Component } from '../../models/component';
+import { ExternalReference } from '../../models/externalReference';
+import { PackageUrlFactory as PlainPackageUrlFactory } from '../packageUrl/factories';
+import type { NodePackageJson } from './types';
+/**
+ * Node-specific ExternalReferenceFactory.
+ */
+export declare class ExternalReferenceFactory {
+    makeExternalReferences(data: NodePackageJson): ExternalReference[];
+    makeVcs(data: NodePackageJson): ExternalReference | undefined;
+    makeHomepage(data: NodePackageJson): ExternalReference | undefined;
+    makeIssueTracker(data: NodePackageJson): ExternalReference | undefined;
+    makeDist(data: NodePackageJson): ExternalReference | undefined;
+}
+/**
+ * Node-specific PackageUrlFactory.
+ * @see {@link https://github.com/package-url/purl-spec/blob/master/PURL-TYPES.rst#npm}
+ */
+export declare class PackageUrlFactory extends PlainPackageUrlFactory<'npm'> {
+    #private;
+    makeFromComponent(component: Component, sort?: boolean): PackageURL | undefined;
+}
+//# sourceMappingURL=factories.d.ts.map

package/dist.d/contrib/fromNodePackageJson/factories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"factories.d.ts","sourceRoot":"","sources":["../../../src/contrib/fromNodePackageJson/factories.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAM/C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAA;AAElE,OAAO,EAAE,iBAAiB,IAAI,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AAErF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAG9C;;GAEG;AACH,qBAAa,wBAAwB;IACnC,sBAAsB,CAAE,IAAI,EAAE,eAAe,GAAG,iBAAiB,EAAE;IAWnE,OAAO,CAAE,IAAI,EAAE,eAAe,GAAG,iBAAiB,GAAG,SAAS;IAuB9D,YAAY,CAAE,IAAI,EAAE,eAAe,GAAG,iBAAiB,GAAG,SAAS;IAUnE,gBAAgB,CAAE,IAAI,EAAE,eAAe,GAAG,iBAAiB,GAAG,SAAS;IAiBvE,QAAQ,CAAC,IAAI,EAAE,eAAe,GAAG,iBAAiB,GAAG,SAAS;CAwB/D;AAED;;;GAGG;AACH,qBAAa,iBAAkB,SAAQ,sBAAsB,CAAC,KAAK,CAAC;;IAEzD,iBAAiB,CAAE,SAAS,EAAE,SAAS,EAAE,IAAI,GAAE,OAAe,GAAG,UAAU,GAAG,SAAS;CA8CjG"}

package/dist.d/contrib/fromNodePackageJson/index.node.d.ts

@@ -0,0 +1,31 @@
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+/**
+ * Node-specifics.
+ *
+ * Intended to run on normalized data structures
+ * based on [PackageJson spec](https://github.com/SchemaStore/schemastore/blob/master/src/schemas/json/package.json)
+ * and explained by [PackageJson description](https://docs.npmjs.com/cli/v9/configuring-npm/package-json).
+ * Normalization should be done downstream, for example via [`normalize-package-data`](https://www.npmjs.com/package/normalize-package-data).
+ */
+export * as Builders from './builders';
+export * as Factories from './factories';
+export * as Types from './types';
+export * as Utils from './utils';
+//# sourceMappingURL=index.node.d.ts.map

package/dist.d/contrib/fromNodePackageJson/index.node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.node.d.ts","sourceRoot":"","sources":["../../../src/contrib/fromNodePackageJson/index.node.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF;;;;;;;GAOG;AAEH,OAAO,KAAK,QAAQ,MAAM,YAAY,CAAA;AACtC,OAAO,KAAK,SAAS,MAAM,aAAa,CAAA;AACxC,OAAO,KAAK,KAAK,MAAM,SAAS,CAAA;AAChC,OAAO,KAAK,KAAK,MAAM,SAAS,CAAA"}

package/dist.d/{types/nodePackageJson.d.ts → contrib/fromNodePackageJson/types.d.ts}

@@ -66,4 +66,4 @@ export declare function isNodePackageJson(value: any): value is NodePackageJson;
  * @alpha
  */
 export declare function assertNodePackageJson(value: any): asserts value is NodePackageJson;
-//# sourceMappingURL=nodePackageJson.d.ts.map
+//# sourceMappingURL=types.d.ts.map

package/dist.d/contrib/fromNodePackageJson/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/contrib/fromNodePackageJson/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,KAAK,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,GAAG,CAAC,EAAE,MAAM,CAAA;KACb,CAAC,CAAA;IACF,MAAM,CAAC,EAAE,MAAM,GAAG;QAChB,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAA;IACD,IAAI,CAAC,EAAE,MAAM,GAAG;QACd,GAAG,CAAC,EAAE,MAAM,CAAA;KACb,CAAA;IACD,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,UAAU,CAAC,EAAE,MAAM,GAAG;QACpB,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,GAAG,CAAC,EAAE,MAAM,CAAA;QACZ,SAAS,CAAC,EAAE,MAAM,CAAA;KACnB,CAAA;IAED,IAAI,CAAC,EAAE,GAAG,CAAA;CACX;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAE,KAAK,EAAE,GAAG,GAAG,KAAK,IAAI,eAAe,CAOvE;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAE,KAAK,EAAE,GAAG,GAAG,OAAO,CAAC,KAAK,IAAI,eAAe,CAOnF"}

package/dist.d/contrib/fromNodePackageJson/utils.d.ts

@@ -0,0 +1,29 @@
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+import { HashAlgorithm } from '../../enums/hashAlogorithm';
+/**
+ * @throws {@link RangeError} if value is unparsable
+ */
+export declare function parsePackageIntegrity(integrity: string): [HashAlgorithm, string];
+/**
+ * The default registry is `https://registry.npmjs.org`.
+ * @see {@link https://github.com/package-url/purl-spec/blob/master/PURL-TYPES.rst#npm}
+ */
+export declare const defaultRegistryMatcher: RegExp;
+//# sourceMappingURL=utils.d.ts.map

package/dist.d/contrib/fromNodePackageJson/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/contrib/fromNodePackageJson/utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF,OAAO,EAAC,aAAa,EAAC,MAAM,4BAA4B,CAAA;AAgDxD;;GAEG;AACH,wBAAgB,qBAAqB,CAAE,SAAS,EAAE,MAAM,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,CAWjF;AAGD;;;GAGG;AACH,eAAO,MAAM,sBAAsB,QAA6C,CAAA"}

package/dist.d/contrib/index.common.d.ts

@@ -0,0 +1,24 @@
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+/**
+ * Some features in this library are marked as contrib. These are community-provided extensions and are not part of the official standard. They are optional and may evolve independently from the core.
+ */
+export * as Bom from './bom';
+export * as PackageUrl from './packageUrl';
+//# sourceMappingURL=index.common.d.ts.map

package/dist.d/contrib/index.common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.common.d.ts","sourceRoot":"","sources":["../../src/contrib/index.common.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF;;GAEG;AAEH,OAAO,KAAK,GAAG,MAAM,OAAO,CAAA;AAC5B,OAAO,KAAK,UAAU,MAAM,cAAc,CAAA"}

package/dist.d/contrib/index.node.d.ts

@@ -0,0 +1,25 @@
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+/**
+ * Some features in this library are marked as contrib. These are community-provided extensions and are not part of the official standard. They are optional and may evolve independently from the core.
+ */
+export * from './index.common';
+export * as FromNodePackageJson from './fromNodePackageJson/index.node';
+export * as License from './license/index.node';
+//# sourceMappingURL=index.node.d.ts.map

package/dist.d/contrib/index.node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.node.d.ts","sourceRoot":"","sources":["../../src/contrib/index.node.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF;;GAEG;AAEH,cAAc,gBAAgB,CAAA;AAI9B,OAAO,KAAK,mBAAmB,MAAM,kCAAkC,CAAA;AACvE,OAAO,KAAK,OAAO,MAAM,sBAAsB,CAAA"}

package/dist.d/contrib/index.web.d.ts

@@ -0,0 +1,24 @@
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+/**
+ * Some features in this library are marked as contrib. These are community-provided extensions and are not part of the official standard. They are optional and may evolve independently from the core.
+ */
+export * from './index.common';
+export * as License from './license/index.web';
+//# sourceMappingURL=index.web.d.ts.map

package/dist.d/contrib/index.web.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.web.d.ts","sourceRoot":"","sources":["../../src/contrib/index.web.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF;;GAEG;AAEH,cAAc,gBAAgB,CAAA;AAI9B,OAAO,KAAK,OAAO,MAAM,qBAAqB,CAAA"}

package/dist.d/contrib/license/_helpers/mime.node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mime.node.d.ts","sourceRoot":"","sources":["../../../../src/contrib/license/_helpers/mime.node.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAIF,KAAK,QAAQ,GAAG,MAAM,CAAA;AA8BtB,wBAAgB,2BAA2B,CAAE,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAKnF"}

package/dist.d/contrib/license/factories.d.ts

@@ -0,0 +1,34 @@
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+import type { DisjunctiveLicense, License } from '../../models/license';
+import { LicenseExpression, NamedLicense, SpdxLicense } from '../../models/license';
+export declare class LicenseFactory {
+    makeFromString(value: string): License;
+    /**
+     * @throws {@link RangeError} if expression is not eligible
+     */
+    makeExpression(value: string | any): LicenseExpression;
+    makeDisjunctive(value: string): DisjunctiveLicense;
+    /**
+     * @throws {@link RangeError} if value is not supported SPDX id
+     */
+    makeSpdxLicense(value: string | any): SpdxLicense;
+    makeNamedLicense(value: string | any): NamedLicense;
+}
+//# sourceMappingURL=factories.d.ts.map

package/dist.d/contrib/license/factories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"factories.d.ts","sourceRoot":"","sources":["../../../src/contrib/license/factories.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF,OAAO,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AACvE,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAGnF,qBAAa,cAAc;IACzB,cAAc,CAAE,KAAK,EAAE,MAAM,GAAG,OAAO;IAgBvC;;OAEG;IACH,cAAc,CAAE,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,iBAAiB;IAQvD,eAAe,CAAE,KAAK,EAAE,MAAM,GAAG,kBAAkB;IAQnD;;OAEG;IACH,eAAe,CAAE,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,WAAW;IASlD,gBAAgB,CAAE,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,YAAY;CAGrD"}

package/dist.d/contrib/license/index.common.d.ts

@@ -0,0 +1,20 @@
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+export * as Factories from './factories';
+//# sourceMappingURL=index.common.d.ts.map

package/dist.d/contrib/license/index.common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.common.d.ts","sourceRoot":"","sources":["../../../src/contrib/license/index.common.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF,OAAO,KAAK,SAAS,MAAM,aAAa,CAAA"}

package/dist.d/contrib/license/index.node.d.ts

@@ -0,0 +1,21 @@
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+export * from './index.common';
+export * as Utils from './utils.node';
+//# sourceMappingURL=index.node.d.ts.map

package/dist.d/contrib/license/index.node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.node.d.ts","sourceRoot":"","sources":["../../../src/contrib/license/index.node.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF,cAAc,gBAAgB,CAAA;AAI9B,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA"}

package/dist.d/contrib/license/index.web.d.ts

@@ -0,0 +1,20 @@
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+export * from './index.common';
+//# sourceMappingURL=index.web.d.ts.map

package/dist.d/contrib/license/index.web.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.web.d.ts","sourceRoot":"","sources":["../../../src/contrib/license/index.web.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF,cAAc,gBAAgB,CAAA"}

package/dist.d/contrib/license/utils.node.d.ts

@@ -0,0 +1,55 @@
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+/**
+ * This module tries to be as compatible as possible, it only uses basic methods that are known to be working in all FileSystem abstraction-layers.
+ * In addition, we use type parameters for all `PathLike`s, so downstream users can utilize their implementations accordingly.
+ *
+ * @module
+ */
+import type { Stats } from 'node:fs';
+import { Attachment } from '../../models/attachment';
+export interface FsUtils<P extends string> {
+    readdirSync: (path: P) => P[];
+    readFileSync: (path: P) => Buffer;
+    statSync: (path: P) => Stats;
+}
+export interface PathUtils<P extends string> {
+    join: (...paths: P[]) => P;
+}
+export interface FileAttachment<P extends string> {
+    filePath: P;
+    file: P;
+    text: Attachment;
+}
+export type ErrorReporter = (e: Error) => any;
+export declare class LicenseEvidenceGatherer<P extends string = string> {
+    #private;
+    /**
+     * `fs` and `path` can be supplied, if any compatibility-layer or drop-in replacement is used.
+     *
+     * @param options.fs - If omitted, the native `node:fs` is used.
+     * @param options.path - If omitted, the native `node:path` is used.
+     */
+    constructor(options?: {
+        fs?: FsUtils<P>;
+        path?: PathUtils<P>;
+    });
+    getFileAttachments(prefixPath: P, onError?: ErrorReporter): Generator<FileAttachment<P>>;
+}
+//# sourceMappingURL=utils.node.d.ts.map

package/dist.d/contrib/license/utils.node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.node.d.ts","sourceRoot":"","sources":["../../../src/contrib/license/utils.node.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAA;AAGpC,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAA;AAGpD,MAAM,WAAW,OAAO,CAAC,CAAC,SAAS,MAAM;IACvC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC,KAAM,CAAC,EAAE,CAAA;IAC9B,YAAY,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,MAAM,CAAA;IACjC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,KAAK,CAAA;CAC7B;AAED,MAAM,WAAW,SAAS,CAAC,CAAC,SAAS,MAAM;IACzC,IAAI,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,CAAA;CAC3B;AAED,MAAM,WAAW,cAAc,CAAC,CAAC,SAAS,MAAM;IAC9C,QAAQ,EAAE,CAAC,CAAA;IACX,IAAI,EAAE,CAAC,CAAA;IACP,IAAI,EAAE,UAAU,CAAA;CACjB;AAID,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,EAAC,KAAK,KAAK,GAAG,CAAA;AAE5C,qBAAa,uBAAuB,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM;;IAK5D;;;;;OAKG;gBACU,OAAO,GAAE;QAAE,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAA;KAAO;IAQjE,kBAAkB,CAAE,UAAU,EAAE,CAAC,EAAE,OAAO,GAAE,aAAoB,GAAG,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;CA6BlG"}

package/dist.d/contrib/packageUrl/factories.d.ts

@@ -0,0 +1,27 @@
+/*!
+This file is part of CycloneDX JavaScript Library.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+   http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+SPDX-License-Identifier: Apache-2.0
+Copyright (c) OWASP Foundation. All Rights Reserved.
+*/
+import { PackageURL } from 'packageurl-js';
+import type { Component } from '../../models/component';
+export declare class PackageUrlFactory<PurlType extends PackageURL['type'] = PackageURL['type']> {
+    #private;
+    constructor(type: PurlType);
+    get type(): PurlType;
+    makeFromComponent(component: Component, sort?: boolean): PackageURL | undefined;
+}
+//# sourceMappingURL=factories.d.ts.map

package/dist.d/contrib/packageUrl/factories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"factories.d.ts","sourceRoot":"","sources":["../../../src/contrib/packageUrl/factories.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;EAiBE;AAEF,OAAO,EAAE,UAAU,EAAsB,MAAM,eAAe,CAAA;AAG9D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AAEvD,qBAAa,iBAAiB,CAAC,QAAQ,SAAS,UAAU,CAAC,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC;;gBAGxE,IAAI,EAAE,QAAQ;IAI3B,IAAI,IAAI,IAAK,QAAQ,CAEpB;IAGD,iBAAiB,CAAE,SAAS,EAAE,SAAS,EAAE,IAAI,GAAE,OAAe,GAAG,UAAU,GAAG,SAAS;CAuDxF"}