packtory 0.0.17 → 0.0.18
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/bundle-emitter/registry/oidc-token-exchange.js +1 -8
- package/bundle-emitter/registry/oidc-token-exchange.js.map +1 -1
- package/bundle-emitter/registry/registry-response-schemas.js +1 -4
- package/bundle-emitter/registry/registry-response-schemas.js.map +1 -1
- package/package.json +2 -2
- package/sbom.cdx.json +424 -0
|
@@ -1,9 +1,6 @@
|
|
|
1
1
|
import { buildAuthOptions, createBaseOptions, isNpmRegistry, npmRegistryUrl, resolvePublishAuth, resolveRegistryUrl } from "./registry-auth-config.js";
|
|
2
2
|
import { parseOidcExchangeResponse } from "./registry-response-schemas.js";
|
|
3
3
|
const oidcExchangeRefreshThresholdInMilliseconds = 60_000;
|
|
4
|
-
function expiresValueAsNumber(value) {
|
|
5
|
-
return typeof value === 'string' ? Date.parse(value) : value;
|
|
6
|
-
}
|
|
7
4
|
function encodePackageName(name) {
|
|
8
5
|
return name.replace('/', '%2F');
|
|
9
6
|
}
|
|
@@ -38,11 +35,7 @@ export function createOidcTokenExchanger(dependencies) {
|
|
|
38
35
|
if (!parsed.success) {
|
|
39
36
|
throw new TypeError(`OIDC token exchange returned an invalid response: ${parsed.issues.join('; ')}`);
|
|
40
37
|
}
|
|
41
|
-
|
|
42
|
-
if (!Number.isFinite(expiresAt)) {
|
|
43
|
-
throw new TypeError('OIDC token exchange returned an invalid expiry timestamp');
|
|
44
|
-
}
|
|
45
|
-
return { token: parsed.data.token, expiresAt };
|
|
38
|
+
return { token: parsed.data.token, expiresAt: parsed.data.expires.getTime() };
|
|
46
39
|
}
|
|
47
40
|
async function requestExchange(packageName, auth) {
|
|
48
41
|
const idToken = await resolveIdToken(auth);
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"oidc-token-exchange.js","sourceRoot":"","sources":["../../../../../source/bundle-emitter/registry/oidc-token-exchange.ts"],"names":[],"mappings":"AAEA,OAAO,EACH,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAErB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,MAAM,0CAA0C,GAAG,MAAM,CAAC;
|
|
1
|
+
{"version":3,"file":"oidc-token-exchange.js","sourceRoot":"","sources":["../../../../../source/bundle-emitter/registry/oidc-token-exchange.ts"],"names":[],"mappings":"AAEA,OAAO,EACH,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAErB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,MAAM,0CAA0C,GAAG,MAAM,CAAC;AAyB1D,SAAS,iBAAiB,CAAC,IAAY;IACnC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,QAAkB;IACtC,OAAO,QAAQ,CAAC,IAAI,EAAsB,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,YAAuC;IAC5E,MAAM,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,YAAY,CAAC;IAC3E,MAAM,KAAK,GAAG,IAAI,GAAG,EAA6B,CAAC;IAEnD,SAAS,WAAW,CAAC,WAAmB,EAAE,gBAA4C;QAClF,OAAO,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,IAAI,cAAc,KAAK,WAAW,EAAE,CAAC;IACvF,CAAC;IAED,SAAS,eAAe,CAAC,QAAgB;QACrC,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,MAAM,WAAW,GAAG,KAAK,CAAC,4BAA4B,EAAE,CAAC;QACzD,IAAI,WAAW,CAAC,SAAS,GAAG,WAAW,GAAG,0CAA0C,EAAE,CAAC;YACnF,OAAO,WAAW,CAAC,KAAK,CAAC;QAC7B,CAAC;QACD,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,KAAK,UAAU,mBAAmB,CAAC,WAAmB,EAAE,OAAe;QACnE,OAAO,mBAAmB,CACtB,GAAG,cAAc,wCAAwC,iBAAiB,CAAC,WAAW,CAAC,EAAE,EACzF;YACI,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,EAAE,EAAE;SAC5B,CAC1B,CAAC;IACN,CAAC;IAED,SAAS,mBAAmB,CAAC,IAAa;QACtC,MAAM,MAAM,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,SAAS,CAAC,qDAAqD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzG,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;IAClF,CAAC;IAED,KAAK,UAAU,eAAe,CAC1B,WAAmB,EACnB,IAAwD;QAExD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,gBAAgB,GAAG,MAAM,mBAAmB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACzE,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,0CAA0C,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,mBAAmB,CAAC,MAAM,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,UAAU,aAAa,CACxB,WAAmB,EACnB,gBAA4C,EAC5C,IAAwD;QAExD,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,MAAM,CAAC;QAClB,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACnF,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC3D,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC/B,OAAO,SAAS,CAAC,KAAK,CAAC;IAC3B,CAAC;IAED,OAAO;QACH,aAAa;QAEb,KAAK,CAAC,uBAAuB,CAAC,WAAW,EAAE,gBAAgB;YACvD,MAAM,IAAI,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;YAClD,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC3B,OAAO,gBAAgB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,OAAO,CAAC;YAC5D,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,WAAW,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;YACvE,OAAO;gBACH,GAAG,iBAAiB,CAAC,gBAAgB,CAAC;gBACtC,SAAS,EAAE,EAAE,KAAK,EAAE;aACvB,CAAC;QACN,CAAC;KACJ,CAAC;AACN,CAAC"}
|
|
@@ -20,12 +20,9 @@ const fullPackageResponseSchema = z.object({
|
|
|
20
20
|
time: z.optional(z.record(z.string(), z.string())),
|
|
21
21
|
versions: z.record(z.string(), packageVersionDetailsSchema)
|
|
22
22
|
});
|
|
23
|
-
const oidcTimestampSchema = z.union([z.number(), z.string()]);
|
|
24
23
|
const oidcExchangeResponseSchema = z.object({
|
|
25
24
|
token: z.string(),
|
|
26
|
-
expires:
|
|
27
|
-
token_type: z.optional(z.string()),
|
|
28
|
-
created: z.optional(oidcTimestampSchema)
|
|
25
|
+
expires: z.coerce.date()
|
|
29
26
|
});
|
|
30
27
|
export function parseAbbreviatedPackageResponse(response) {
|
|
31
28
|
const result = abbreviatedPackageResponseSchema.safeParse(response);
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"registry-response-schemas.js","sourceRoot":"","sources":["../../../../../source/bundle-emitter/registry/registry-response-schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAC;AAC5D,OAAO,EAAE,CAAC,EAAE,MAAM,UAAU,CAAC;AAE7B,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACX,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;KACtB,CAAC;CACL,CAAC,CAAC;AAEH,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KACjC,CAAC;IACF,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC;CAC9D,CAAC,CAAC;AACH,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KACjC,CAAC;IACF,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAClD,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC;CAC9D,CAAC,CAAC;AAEH,MAAM,
|
|
1
|
+
{"version":3,"file":"registry-response-schemas.js","sourceRoot":"","sources":["../../../../../source/bundle-emitter/registry/registry-response-schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAC;AAC5D,OAAO,EAAE,CAAC,EAAE,MAAM,UAAU,CAAC;AAE7B,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACX,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;KACtB,CAAC;CACL,CAAC,CAAC;AAEH,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KACjC,CAAC;IACF,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC;CAC9D,CAAC,CAAC;AACH,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KACjC,CAAC;IACF,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAClD,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC;CAC9D,CAAC,CAAC;AAEH,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;CAC3B,CAAC,CAAC;AA4BH,MAAM,UAAU,+BAA+B,CAAC,QAAiB;IAC7D,MAAM,MAAM,GAAG,gCAAgC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACpE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,QAAiB;IACtD,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,QAAiB;IACvD,MAAM,MAAM,GAAG,SAAS,CAAC,0BAA0B,EAAE,QAAQ,CAAC,CAAC;IAC/D,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAA4B,EAAE,CAAC;IACxE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;AAC3D,CAAC"}
|
package/package.json
CHANGED
|
@@ -18,7 +18,7 @@
|
|
|
18
18
|
"libnpmpublish": "11.2.0",
|
|
19
19
|
"npm-package-arg": "14.0.0",
|
|
20
20
|
"npm-registry-fetch": "20.0.0",
|
|
21
|
-
"remeda": "2.
|
|
21
|
+
"remeda": "2.36.0",
|
|
22
22
|
"semver": "7.8.1",
|
|
23
23
|
"spdx-expression-parse": "4.0.0",
|
|
24
24
|
"tar-stream": "3.1.8",
|
|
@@ -103,5 +103,5 @@
|
|
|
103
103
|
"./tar/tarball-builder.js"
|
|
104
104
|
],
|
|
105
105
|
"type": "module",
|
|
106
|
-
"version": "0.0.
|
|
106
|
+
"version": "0.0.18"
|
|
107
107
|
}
|
package/sbom.cdx.json
ADDED
|
@@ -0,0 +1,424 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
|
|
3
|
+
"bomFormat": "CycloneDX",
|
|
4
|
+
"specVersion": "1.6",
|
|
5
|
+
"version": 1,
|
|
6
|
+
"metadata": {
|
|
7
|
+
"tools": {
|
|
8
|
+
"components": [
|
|
9
|
+
{
|
|
10
|
+
"type": "application",
|
|
11
|
+
"name": "packtory",
|
|
12
|
+
"version": "0.0.17"
|
|
13
|
+
}
|
|
14
|
+
]
|
|
15
|
+
},
|
|
16
|
+
"component": {
|
|
17
|
+
"type": "library",
|
|
18
|
+
"name": "packtory",
|
|
19
|
+
"version": "0.0.18",
|
|
20
|
+
"bom-ref": "pkg:npm/packtory@0.0.18",
|
|
21
|
+
"purl": "pkg:npm/packtory@0.0.18"
|
|
22
|
+
}
|
|
23
|
+
},
|
|
24
|
+
"components": [
|
|
25
|
+
{
|
|
26
|
+
"type": "library",
|
|
27
|
+
"name": "@cyclonedx/cyclonedx-library",
|
|
28
|
+
"version": "10.0.0",
|
|
29
|
+
"bom-ref": "pkg:npm/@cyclonedx/cyclonedx-library@10.0.0",
|
|
30
|
+
"scope": "required",
|
|
31
|
+
"licenses": [
|
|
32
|
+
{
|
|
33
|
+
"expression": "Apache-2.0"
|
|
34
|
+
}
|
|
35
|
+
],
|
|
36
|
+
"purl": "pkg:npm/@cyclonedx/cyclonedx-library@10.0.0"
|
|
37
|
+
},
|
|
38
|
+
{
|
|
39
|
+
"type": "library",
|
|
40
|
+
"name": "@jridgewell/gen-mapping",
|
|
41
|
+
"version": "0.3.13",
|
|
42
|
+
"bom-ref": "pkg:npm/@jridgewell/gen-mapping@0.3.13",
|
|
43
|
+
"scope": "required",
|
|
44
|
+
"licenses": [
|
|
45
|
+
{
|
|
46
|
+
"expression": "MIT"
|
|
47
|
+
}
|
|
48
|
+
],
|
|
49
|
+
"purl": "pkg:npm/@jridgewell/gen-mapping@0.3.13"
|
|
50
|
+
},
|
|
51
|
+
{
|
|
52
|
+
"type": "library",
|
|
53
|
+
"name": "@jridgewell/trace-mapping",
|
|
54
|
+
"version": "0.3.31",
|
|
55
|
+
"bom-ref": "pkg:npm/@jridgewell/trace-mapping@0.3.31",
|
|
56
|
+
"scope": "required",
|
|
57
|
+
"licenses": [
|
|
58
|
+
{
|
|
59
|
+
"expression": "MIT"
|
|
60
|
+
}
|
|
61
|
+
],
|
|
62
|
+
"purl": "pkg:npm/@jridgewell/trace-mapping@0.3.31"
|
|
63
|
+
},
|
|
64
|
+
{
|
|
65
|
+
"type": "library",
|
|
66
|
+
"name": "@schema-hub/zod-error-formatter",
|
|
67
|
+
"version": "0.0.11",
|
|
68
|
+
"bom-ref": "pkg:npm/@schema-hub/zod-error-formatter@0.0.11",
|
|
69
|
+
"scope": "required",
|
|
70
|
+
"licenses": [
|
|
71
|
+
{
|
|
72
|
+
"expression": "MIT"
|
|
73
|
+
}
|
|
74
|
+
],
|
|
75
|
+
"purl": "pkg:npm/@schema-hub/zod-error-formatter@0.0.11"
|
|
76
|
+
},
|
|
77
|
+
{
|
|
78
|
+
"type": "library",
|
|
79
|
+
"name": "@ts-morph/common",
|
|
80
|
+
"version": "0.29.0",
|
|
81
|
+
"bom-ref": "pkg:npm/@ts-morph/common@0.29.0",
|
|
82
|
+
"scope": "required",
|
|
83
|
+
"licenses": [
|
|
84
|
+
{
|
|
85
|
+
"expression": "MIT"
|
|
86
|
+
}
|
|
87
|
+
],
|
|
88
|
+
"purl": "pkg:npm/@ts-morph/common@0.29.0"
|
|
89
|
+
},
|
|
90
|
+
{
|
|
91
|
+
"type": "library",
|
|
92
|
+
"name": "@types/libnpmpublish",
|
|
93
|
+
"version": "9.0.1",
|
|
94
|
+
"bom-ref": "pkg:npm/@types/libnpmpublish@9.0.1",
|
|
95
|
+
"scope": "required",
|
|
96
|
+
"licenses": [
|
|
97
|
+
{
|
|
98
|
+
"expression": "MIT"
|
|
99
|
+
}
|
|
100
|
+
],
|
|
101
|
+
"purl": "pkg:npm/@types/libnpmpublish@9.0.1"
|
|
102
|
+
},
|
|
103
|
+
{
|
|
104
|
+
"type": "library",
|
|
105
|
+
"name": "@types/npm-registry-fetch",
|
|
106
|
+
"version": "8.0.9",
|
|
107
|
+
"bom-ref": "pkg:npm/@types/npm-registry-fetch@8.0.9",
|
|
108
|
+
"scope": "required",
|
|
109
|
+
"licenses": [
|
|
110
|
+
{
|
|
111
|
+
"expression": "MIT"
|
|
112
|
+
}
|
|
113
|
+
],
|
|
114
|
+
"purl": "pkg:npm/@types/npm-registry-fetch@8.0.9"
|
|
115
|
+
},
|
|
116
|
+
{
|
|
117
|
+
"type": "library",
|
|
118
|
+
"name": "common-tags",
|
|
119
|
+
"version": "1.8.2",
|
|
120
|
+
"bom-ref": "pkg:npm/common-tags@1.8.2",
|
|
121
|
+
"scope": "required",
|
|
122
|
+
"licenses": [
|
|
123
|
+
{
|
|
124
|
+
"expression": "MIT"
|
|
125
|
+
}
|
|
126
|
+
],
|
|
127
|
+
"purl": "pkg:npm/common-tags@1.8.2"
|
|
128
|
+
},
|
|
129
|
+
{
|
|
130
|
+
"type": "library",
|
|
131
|
+
"name": "diff",
|
|
132
|
+
"version": "9.0.0",
|
|
133
|
+
"bom-ref": "pkg:npm/diff@9.0.0",
|
|
134
|
+
"scope": "required",
|
|
135
|
+
"licenses": [
|
|
136
|
+
{
|
|
137
|
+
"expression": "BSD-3-Clause"
|
|
138
|
+
}
|
|
139
|
+
],
|
|
140
|
+
"purl": "pkg:npm/diff@9.0.0"
|
|
141
|
+
},
|
|
142
|
+
{
|
|
143
|
+
"type": "library",
|
|
144
|
+
"name": "fflate",
|
|
145
|
+
"version": "0.8.3",
|
|
146
|
+
"bom-ref": "pkg:npm/fflate@0.8.3",
|
|
147
|
+
"scope": "required",
|
|
148
|
+
"licenses": [
|
|
149
|
+
{
|
|
150
|
+
"expression": "MIT"
|
|
151
|
+
}
|
|
152
|
+
],
|
|
153
|
+
"purl": "pkg:npm/fflate@0.8.3"
|
|
154
|
+
},
|
|
155
|
+
{
|
|
156
|
+
"type": "library",
|
|
157
|
+
"name": "hosted-git-info",
|
|
158
|
+
"version": "10.1.1",
|
|
159
|
+
"bom-ref": "pkg:npm/hosted-git-info@10.1.1",
|
|
160
|
+
"scope": "required",
|
|
161
|
+
"licenses": [
|
|
162
|
+
{
|
|
163
|
+
"expression": "ISC"
|
|
164
|
+
}
|
|
165
|
+
],
|
|
166
|
+
"purl": "pkg:npm/hosted-git-info@10.1.1"
|
|
167
|
+
},
|
|
168
|
+
{
|
|
169
|
+
"type": "library",
|
|
170
|
+
"name": "libnpmpublish",
|
|
171
|
+
"version": "11.2.0",
|
|
172
|
+
"bom-ref": "pkg:npm/libnpmpublish@11.2.0",
|
|
173
|
+
"scope": "required",
|
|
174
|
+
"licenses": [
|
|
175
|
+
{
|
|
176
|
+
"expression": "ISC"
|
|
177
|
+
}
|
|
178
|
+
],
|
|
179
|
+
"purl": "pkg:npm/libnpmpublish@11.2.0"
|
|
180
|
+
},
|
|
181
|
+
{
|
|
182
|
+
"type": "library",
|
|
183
|
+
"name": "npm-package-arg",
|
|
184
|
+
"version": "14.0.0",
|
|
185
|
+
"bom-ref": "pkg:npm/npm-package-arg@14.0.0",
|
|
186
|
+
"scope": "required",
|
|
187
|
+
"licenses": [
|
|
188
|
+
{
|
|
189
|
+
"expression": "ISC"
|
|
190
|
+
}
|
|
191
|
+
],
|
|
192
|
+
"purl": "pkg:npm/npm-package-arg@14.0.0"
|
|
193
|
+
},
|
|
194
|
+
{
|
|
195
|
+
"type": "library",
|
|
196
|
+
"name": "npm-registry-fetch",
|
|
197
|
+
"version": "20.0.0",
|
|
198
|
+
"bom-ref": "pkg:npm/npm-registry-fetch@20.0.0",
|
|
199
|
+
"scope": "required",
|
|
200
|
+
"licenses": [
|
|
201
|
+
{
|
|
202
|
+
"expression": "ISC"
|
|
203
|
+
}
|
|
204
|
+
],
|
|
205
|
+
"purl": "pkg:npm/npm-registry-fetch@20.0.0"
|
|
206
|
+
},
|
|
207
|
+
{
|
|
208
|
+
"type": "library",
|
|
209
|
+
"name": "remeda",
|
|
210
|
+
"version": "2.36.0",
|
|
211
|
+
"bom-ref": "pkg:npm/remeda@2.36.0",
|
|
212
|
+
"scope": "required",
|
|
213
|
+
"licenses": [
|
|
214
|
+
{
|
|
215
|
+
"expression": "MIT"
|
|
216
|
+
}
|
|
217
|
+
],
|
|
218
|
+
"purl": "pkg:npm/remeda@2.36.0"
|
|
219
|
+
},
|
|
220
|
+
{
|
|
221
|
+
"type": "library",
|
|
222
|
+
"name": "semver",
|
|
223
|
+
"version": "7.8.1",
|
|
224
|
+
"bom-ref": "pkg:npm/semver@7.8.1",
|
|
225
|
+
"scope": "required",
|
|
226
|
+
"licenses": [
|
|
227
|
+
{
|
|
228
|
+
"expression": "ISC"
|
|
229
|
+
}
|
|
230
|
+
],
|
|
231
|
+
"purl": "pkg:npm/semver@7.8.1"
|
|
232
|
+
},
|
|
233
|
+
{
|
|
234
|
+
"type": "library",
|
|
235
|
+
"name": "spdx-expression-parse",
|
|
236
|
+
"version": "4.0.0",
|
|
237
|
+
"bom-ref": "pkg:npm/spdx-expression-parse@4.0.0",
|
|
238
|
+
"scope": "required",
|
|
239
|
+
"licenses": [
|
|
240
|
+
{
|
|
241
|
+
"expression": "MIT"
|
|
242
|
+
}
|
|
243
|
+
],
|
|
244
|
+
"purl": "pkg:npm/spdx-expression-parse@4.0.0"
|
|
245
|
+
},
|
|
246
|
+
{
|
|
247
|
+
"type": "library",
|
|
248
|
+
"name": "tar-stream",
|
|
249
|
+
"version": "3.1.8",
|
|
250
|
+
"bom-ref": "pkg:npm/tar-stream@3.1.8",
|
|
251
|
+
"scope": "required",
|
|
252
|
+
"licenses": [
|
|
253
|
+
{
|
|
254
|
+
"expression": "MIT"
|
|
255
|
+
}
|
|
256
|
+
],
|
|
257
|
+
"purl": "pkg:npm/tar-stream@3.1.8"
|
|
258
|
+
},
|
|
259
|
+
{
|
|
260
|
+
"type": "library",
|
|
261
|
+
"name": "true-myth",
|
|
262
|
+
"version": "9.4.0",
|
|
263
|
+
"bom-ref": "pkg:npm/true-myth@9.4.0",
|
|
264
|
+
"scope": "required",
|
|
265
|
+
"licenses": [
|
|
266
|
+
{
|
|
267
|
+
"expression": "MIT"
|
|
268
|
+
}
|
|
269
|
+
],
|
|
270
|
+
"purl": "pkg:npm/true-myth@9.4.0"
|
|
271
|
+
},
|
|
272
|
+
{
|
|
273
|
+
"type": "library",
|
|
274
|
+
"name": "ts-morph",
|
|
275
|
+
"version": "27.0.2",
|
|
276
|
+
"bom-ref": "pkg:npm/ts-morph@27.0.2",
|
|
277
|
+
"scope": "required",
|
|
278
|
+
"licenses": [
|
|
279
|
+
{
|
|
280
|
+
"expression": "MIT"
|
|
281
|
+
}
|
|
282
|
+
],
|
|
283
|
+
"purl": "pkg:npm/ts-morph@27.0.2"
|
|
284
|
+
},
|
|
285
|
+
{
|
|
286
|
+
"type": "library",
|
|
287
|
+
"name": "type-fest",
|
|
288
|
+
"version": "5.6.0",
|
|
289
|
+
"bom-ref": "pkg:npm/type-fest@5.6.0",
|
|
290
|
+
"scope": "required",
|
|
291
|
+
"licenses": [
|
|
292
|
+
{
|
|
293
|
+
"expression": "(MIT OR CC0-1.0)"
|
|
294
|
+
}
|
|
295
|
+
],
|
|
296
|
+
"purl": "pkg:npm/type-fest@5.6.0"
|
|
297
|
+
},
|
|
298
|
+
{
|
|
299
|
+
"type": "library",
|
|
300
|
+
"name": "unix-permissions",
|
|
301
|
+
"version": "6.0.1",
|
|
302
|
+
"bom-ref": "pkg:npm/unix-permissions@6.0.1",
|
|
303
|
+
"scope": "required",
|
|
304
|
+
"licenses": [
|
|
305
|
+
{
|
|
306
|
+
"expression": "Apache-2.0"
|
|
307
|
+
}
|
|
308
|
+
],
|
|
309
|
+
"purl": "pkg:npm/unix-permissions@6.0.1"
|
|
310
|
+
},
|
|
311
|
+
{
|
|
312
|
+
"type": "library",
|
|
313
|
+
"name": "zod",
|
|
314
|
+
"version": "4.4.3",
|
|
315
|
+
"bom-ref": "pkg:npm/zod@4.4.3",
|
|
316
|
+
"scope": "required",
|
|
317
|
+
"licenses": [
|
|
318
|
+
{
|
|
319
|
+
"expression": "MIT"
|
|
320
|
+
}
|
|
321
|
+
],
|
|
322
|
+
"purl": "pkg:npm/zod@4.4.3"
|
|
323
|
+
}
|
|
324
|
+
],
|
|
325
|
+
"dependencies": [
|
|
326
|
+
{
|
|
327
|
+
"ref": "pkg:npm/@cyclonedx/cyclonedx-library@10.0.0"
|
|
328
|
+
},
|
|
329
|
+
{
|
|
330
|
+
"ref": "pkg:npm/@jridgewell/gen-mapping@0.3.13"
|
|
331
|
+
},
|
|
332
|
+
{
|
|
333
|
+
"ref": "pkg:npm/@jridgewell/trace-mapping@0.3.31"
|
|
334
|
+
},
|
|
335
|
+
{
|
|
336
|
+
"ref": "pkg:npm/@schema-hub/zod-error-formatter@0.0.11"
|
|
337
|
+
},
|
|
338
|
+
{
|
|
339
|
+
"ref": "pkg:npm/@ts-morph/common@0.29.0"
|
|
340
|
+
},
|
|
341
|
+
{
|
|
342
|
+
"ref": "pkg:npm/@types/libnpmpublish@9.0.1"
|
|
343
|
+
},
|
|
344
|
+
{
|
|
345
|
+
"ref": "pkg:npm/@types/npm-registry-fetch@8.0.9"
|
|
346
|
+
},
|
|
347
|
+
{
|
|
348
|
+
"ref": "pkg:npm/common-tags@1.8.2"
|
|
349
|
+
},
|
|
350
|
+
{
|
|
351
|
+
"ref": "pkg:npm/diff@9.0.0"
|
|
352
|
+
},
|
|
353
|
+
{
|
|
354
|
+
"ref": "pkg:npm/fflate@0.8.3"
|
|
355
|
+
},
|
|
356
|
+
{
|
|
357
|
+
"ref": "pkg:npm/hosted-git-info@10.1.1"
|
|
358
|
+
},
|
|
359
|
+
{
|
|
360
|
+
"ref": "pkg:npm/libnpmpublish@11.2.0"
|
|
361
|
+
},
|
|
362
|
+
{
|
|
363
|
+
"ref": "pkg:npm/npm-package-arg@14.0.0"
|
|
364
|
+
},
|
|
365
|
+
{
|
|
366
|
+
"ref": "pkg:npm/npm-registry-fetch@20.0.0"
|
|
367
|
+
},
|
|
368
|
+
{
|
|
369
|
+
"ref": "pkg:npm/packtory@0.0.18",
|
|
370
|
+
"dependsOn": [
|
|
371
|
+
"pkg:npm/@cyclonedx/cyclonedx-library@10.0.0",
|
|
372
|
+
"pkg:npm/@jridgewell/gen-mapping@0.3.13",
|
|
373
|
+
"pkg:npm/@jridgewell/trace-mapping@0.3.31",
|
|
374
|
+
"pkg:npm/@schema-hub/zod-error-formatter@0.0.11",
|
|
375
|
+
"pkg:npm/@ts-morph/common@0.29.0",
|
|
376
|
+
"pkg:npm/@types/libnpmpublish@9.0.1",
|
|
377
|
+
"pkg:npm/@types/npm-registry-fetch@8.0.9",
|
|
378
|
+
"pkg:npm/common-tags@1.8.2",
|
|
379
|
+
"pkg:npm/diff@9.0.0",
|
|
380
|
+
"pkg:npm/fflate@0.8.3",
|
|
381
|
+
"pkg:npm/hosted-git-info@10.1.1",
|
|
382
|
+
"pkg:npm/libnpmpublish@11.2.0",
|
|
383
|
+
"pkg:npm/npm-package-arg@14.0.0",
|
|
384
|
+
"pkg:npm/npm-registry-fetch@20.0.0",
|
|
385
|
+
"pkg:npm/remeda@2.36.0",
|
|
386
|
+
"pkg:npm/semver@7.8.1",
|
|
387
|
+
"pkg:npm/spdx-expression-parse@4.0.0",
|
|
388
|
+
"pkg:npm/tar-stream@3.1.8",
|
|
389
|
+
"pkg:npm/true-myth@9.4.0",
|
|
390
|
+
"pkg:npm/ts-morph@27.0.2",
|
|
391
|
+
"pkg:npm/type-fest@5.6.0",
|
|
392
|
+
"pkg:npm/unix-permissions@6.0.1",
|
|
393
|
+
"pkg:npm/zod@4.4.3"
|
|
394
|
+
]
|
|
395
|
+
},
|
|
396
|
+
{
|
|
397
|
+
"ref": "pkg:npm/remeda@2.36.0"
|
|
398
|
+
},
|
|
399
|
+
{
|
|
400
|
+
"ref": "pkg:npm/semver@7.8.1"
|
|
401
|
+
},
|
|
402
|
+
{
|
|
403
|
+
"ref": "pkg:npm/spdx-expression-parse@4.0.0"
|
|
404
|
+
},
|
|
405
|
+
{
|
|
406
|
+
"ref": "pkg:npm/tar-stream@3.1.8"
|
|
407
|
+
},
|
|
408
|
+
{
|
|
409
|
+
"ref": "pkg:npm/true-myth@9.4.0"
|
|
410
|
+
},
|
|
411
|
+
{
|
|
412
|
+
"ref": "pkg:npm/ts-morph@27.0.2"
|
|
413
|
+
},
|
|
414
|
+
{
|
|
415
|
+
"ref": "pkg:npm/type-fest@5.6.0"
|
|
416
|
+
},
|
|
417
|
+
{
|
|
418
|
+
"ref": "pkg:npm/unix-permissions@6.0.1"
|
|
419
|
+
},
|
|
420
|
+
{
|
|
421
|
+
"ref": "pkg:npm/zod@4.4.3"
|
|
422
|
+
}
|
|
423
|
+
]
|
|
424
|
+
}
|