Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 12.1.5
Report Generated On: Sat, 20 Sep 2025 21:41:46 GMT
Dependencies Scanned: 584 (250 unique)
Vulnerable Dependencies: 0
Vulnerabilities Found: 0
Vulnerabilities Suppressed: 0
...
NVD API Last Checked: 2025-09-20T21:40:13Z
NVD API Last Modified: 2025-09-19T21:15:36Z

Summary

Summary of Vulnerable Dependencies (click to show all)

Dependency	Vulnerability IDs	Package	Confidence	Evidence Count
@bcoe/v8-coverage:1.0.2		pkg:npm/%40bcoe%2Fv8-coverage@1.0.2		6
@commander-js/extra-typings:14.0.0		pkg:npm/%40commander-js%2Fextra-typings@14.0.0		8
@eslint-community/eslint-utils:4.9.0		pkg:npm/%40eslint-community%2Feslint-utils@4.9.0		8
@eslint-community/regexpp:4.12.1		pkg:npm/%40eslint-community%2Fregexpp@4.12.1		8
@eslint/config-array:0.21.0		pkg:npm/%40eslint%2Fconfig-array@0.21.0		8
@eslint/config-helpers:0.3.1		pkg:npm/%40eslint%2Fconfig-helpers@0.3.1		7
@eslint/core:0.15.2		pkg:npm/%40eslint%2Fcore@0.15.2		8
@eslint/eslintrc:3.3.1		pkg:npm/%40eslint%2Feslintrc@3.3.1		8
@eslint/js:9.35.0		pkg:npm/%40eslint%2Fjs@9.35.0		7
@eslint/object-schema:2.1.6		pkg:npm/%40eslint%2Fobject-schema@2.1.6		8
@eslint/plugin-kit:0.3.5		pkg:npm/%40eslint%2Fplugin-kit@0.3.5		8
@humanfs/core:0.19.1		pkg:npm/%40humanfs%2Fcore@0.19.1		8
@humanfs/node:0.16.7		pkg:npm/%40humanfs%2Fnode@0.16.7		8
@humanwhocodes/module-importer:1.0.1		pkg:npm/%40humanwhocodes%2Fmodule-importer@1.0.1		6
@humanwhocodes/retry:0.4.3		pkg:npm/%40humanwhocodes%2Fretry@0.4.3		6
@isaacs/balanced-match:4.0.1		pkg:npm/%40isaacs%2Fbalanced-match@4.0.1		5
@isaacs/brace-expansion:5.0.0		pkg:npm/%40isaacs%2Fbrace-expansion@5.0.0		5
@isaacs/cliui:8.0.2		pkg:npm/%40isaacs%2Fcliui@8.0.2		6
@istanbuljs/schema:0.1.3		pkg:npm/%40istanbuljs%2Fschema@0.1.3		8
@jridgewell/gen-mapping:0.3.13		pkg:npm/%40jridgewell%2Fgen-mapping@0.3.13		7
@jridgewell/resolve-uri:3.1.2		pkg:npm/%40jridgewell%2Fresolve-uri@3.1.2		6
@jridgewell/source-map:0.3.11		pkg:npm/%40jridgewell%2Fsource-map@0.3.11		7
@jridgewell/sourcemap-codec:1.5.5		pkg:npm/%40jridgewell%2Fsourcemap-codec@1.5.5		7
@jridgewell/trace-mapping:0.3.31		pkg:npm/%40jridgewell%2Ftrace-mapping@0.3.31		7
@nodelib/fs.scandir:2.1.5		pkg:npm/%40nodelib%2Ffs.scandir@2.1.5		5
@nodelib/fs.stat:2.0.5		pkg:npm/%40nodelib%2Ffs.stat@2.0.5		5
@nodelib/fs.walk:1.2.8		pkg:npm/%40nodelib%2Ffs.walk@1.2.8		5
@oxc-resolver/binding-linux-x64-gnu:11.7.2		pkg:npm/%40oxc-resolver%2Fbinding-linux-x64-gnu@11.7.2		6
@oxc-resolver/binding-linux-x64-musl:11.7.2		pkg:npm/%40oxc-resolver%2Fbinding-linux-x64-musl@11.7.2		6
@pkgjs/parseargs:0.11.0		pkg:npm/%40pkgjs%2Fparseargs@0.11.0		8
@pkgr/core:0.2.9		pkg:npm/%40pkgr%2Fcore@0.2.9		7
@rollup/plugin-terser:0.4.4		pkg:npm/%40rollup%2Fplugin-terser@0.4.4		8
@rollup/rollup-linux-x64-gnu:4.50.1		pkg:npm/%40rollup%2Frollup-linux-x64-gnu@4.50.1		7
@rollup/rollup-linux-x64-musl:4.50.1		pkg:npm/%40rollup%2Frollup-linux-x64-musl@4.50.1		7
@sinonjs/commons:3.0.1		pkg:npm/%40sinonjs%2Fcommons@3.0.1		8
@sinonjs/fake-timers:13.0.5		pkg:npm/%40sinonjs%2Ffake-timers@13.0.5		9
@sinonjs/samsam:8.0.3		pkg:npm/%40sinonjs%2Fsamsam@8.0.3		7
@tsconfig/node20:20.1.6		pkg:npm/%40tsconfig%2Fnode20@20.1.6		5
@types/cross-spawn:6.0.6		pkg:npm/%40types%2Fcross-spawn@6.0.6		6
@types/estree:1.0.8		pkg:npm/%40types%2Festree@1.0.8		6
@types/istanbul-lib-coverage:2.0.6		pkg:npm/%40types%2Fistanbul-lib-coverage@2.0.6		6
@types/json-schema:7.0.15		pkg:npm/%40types%2Fjson-schema@7.0.15		6
@types/node:20.19.14		pkg:npm/%40types%2Fnode@20.19.14		6
@types/sinon:17.0.4		pkg:npm/%40types%2Fsinon@17.0.4		6
@types/sinonjs__fake-timers:8.1.5		pkg:npm/%40types%2Fsinonjs__fake-timers@8.1.5		6
@types/yauzl:2.10.3		pkg:npm/%40types%2Fyauzl@2.10.3		6
@typescript-eslint/eslint-plugin:8.43.0		pkg:npm/%40typescript-eslint%2Feslint-plugin@8.43.0		7
@typescript-eslint/parser:8.43.0		pkg:npm/%40typescript-eslint%2Fparser@8.43.0		7
@typescript-eslint/project-service:8.43.0		pkg:npm/%40typescript-eslint%2Fproject-service@8.43.0		7
@typescript-eslint/scope-manager:8.43.0		pkg:npm/%40typescript-eslint%2Fscope-manager@8.43.0		7
@typescript-eslint/tsconfig-utils:8.43.0		pkg:npm/%40typescript-eslint%2Ftsconfig-utils@8.43.0		7
@typescript-eslint/type-utils:8.43.0		pkg:npm/%40typescript-eslint%2Ftype-utils@8.43.0		7
@typescript-eslint/types:8.43.0		pkg:npm/%40typescript-eslint%2Ftypes@8.43.0		7
@typescript-eslint/typescript-estree:8.43.0		pkg:npm/%40typescript-eslint%2Ftypescript-estree@8.43.0		7
@typescript-eslint/utils:8.43.0		pkg:npm/%40typescript-eslint%2Futils@8.43.0		7
@typescript-eslint/visitor-keys:8.43.0		pkg:npm/%40typescript-eslint%2Fvisitor-keys@8.43.0		7
acorn-jsx:5.3.2		pkg:npm/acorn-jsx@5.3.2		9
acorn:8.15.0		pkg:npm/acorn@8.15.0		14
ajv:6.12.6	cpe:2.3:a:ajv.js:ajv:6.12.6:::::::*	pkg:npm/ajv@6.12.6	Highest	8
ansi-regex:6.2.2	cpe:2.3:a:ansi-regex_project:ansi-regex:6.2.2:::::::*	pkg:npm/ansi-regex@6.2.2	Highest	8
ansi-styles:4.3.0		pkg:npm/ansi-styles@4.3.0		8
ansi-styles:6.2.3		pkg:npm/ansi-styles@6.2.3		8
ansis:4.1.0		pkg:npm/ansis@4.1.0		6
argparse:2.0.1		pkg:npm/argparse@2.0.1		5
async:3.2.6	cpe:2.3:a:async_project:async:3.2.6:::::::*	pkg:npm/async@3.2.6	Highest	8
balanced-match:1.0.2		pkg:npm/balanced-match@1.0.2		9
brace-expansion:1.1.12	cpe:2.3:a:brace_expansion_project:brace_expansion:1.1.12:::::::*	pkg:npm/brace-expansion@1.1.12	Highest	9
braces:3.0.3	cpe:2.3:a:braces_project:braces:3.0.3:::::::* cpe:2.3:a:jonschlinkert:braces:3.0.3:::::::*	pkg:npm/braces@3.0.3	Highest	8
buffer-crc32:0.2.13		pkg:npm/buffer-crc32@0.2.13		7
buffer-from:1.1.2		pkg:npm/buffer-from@1.1.2		4
c8:10.1.3		pkg:npm/c8@10.1.3		6
callsites:3.1.0		pkg:npm/callsites@3.1.0		8
chalk:4.1.2		pkg:npm/chalk@4.1.2		5
cliui:8.0.1		pkg:npm/cliui@8.0.1		6
color-convert:2.0.1		pkg:npm/color-convert@2.0.1		6
color-name:1.1.4		pkg:npm/color-name@1.1.4		8
commander:14.0.1		pkg:npm/commander@14.0.1		6
commander:2.20.3		pkg:npm/commander@2.20.3		6
commander:7.2.0		pkg:npm/commander@7.2.0		6
concat-map:0.0.1		pkg:npm/concat-map@0.0.1		8
convert-source-map:2.0.0		pkg:npm/convert-source-map@2.0.0		9
cross-spawn:7.0.6		pkg:npm/cross-spawn@7.0.6		7
debug:4.4.3	cpe:2.3:a:debug_project:debug:4.4.3:::::::*	pkg:npm/debug@4.4.3	Highest	6
deep-is:0.1.4		pkg:npm/deep-is@0.1.4		8
diff:7.0.0		pkg:npm/diff@7.0.0		7
eastasianwidth:0.2.0		pkg:npm/eastasianwidth@0.2.0		6
ejs:3.1.10	cpe:2.3:a:ejs:ejs:3.1.10:::::::*	pkg:npm/ejs@3.1.10	Highest	8
emoji-regex:9.2.2		pkg:npm/emoji-regex@9.2.2		9
end-of-stream:1.4.5		pkg:npm/end-of-stream@1.4.5		8
escalade:3.2.0		pkg:npm/escalade@3.2.0		8
escape-string-regexp:4.0.0		pkg:npm/escape-string-regexp@4.0.0		8
eslint-config-prettier:10.1.8		pkg:npm/eslint-config-prettier@10.1.8		7
eslint-plugin-prettier:5.5.4		pkg:npm/eslint-plugin-prettier@5.5.4		7
eslint-scope:8.4.0		pkg:npm/eslint-scope@8.4.0		7
eslint-visitor-keys:3.4.3		pkg:npm/eslint-visitor-keys@3.4.3		8
eslint-visitor-keys:4.2.1		pkg:npm/eslint-visitor-keys@4.2.1		8
eslint:9.35.0		pkg:npm/eslint@9.35.0		8
espree:10.4.0		pkg:npm/espree@10.4.0		8
esquery:1.6.0		pkg:npm/esquery@1.6.0		8
esrecurse:4.3.0		pkg:npm/esrecurse@4.3.0		9
estraverse:5.3.0		pkg:npm/estraverse@5.3.0		9
esutils:2.0.3		pkg:npm/esutils@2.0.3		9
extract-zip:2.0.1		pkg:npm/extract-zip@2.0.1		6
fast-deep-equal:3.1.3		pkg:npm/fast-deep-equal@3.1.3		8
fast-diff:1.3.0		pkg:npm/fast-diff@1.3.0		7
fast-glob:3.3.3		pkg:npm/fast-glob@3.3.3		7
fast-json-stable-stringify:2.1.0		pkg:npm/fast-json-stable-stringify@2.1.0		9
fast-levenshtein:2.0.6		pkg:npm/fast-levenshtein@2.0.6		6
fastq:1.19.1		pkg:npm/fastq@1.19.1		8
fd-package-json:2.0.0		pkg:npm/fd-package-json@2.0.0		8
fd-slicer:1.1.0		pkg:npm/fd-slicer@1.1.0		7
file-entry-cache:8.0.0		pkg:npm/file-entry-cache@8.0.0		7
filelist:1.0.4		pkg:npm/filelist@1.0.4		8
fill-range:7.1.1		pkg:npm/fill-range@7.1.1		8
find-package:1.0.0		pkg:npm/find-package@1.0.0		8
find-up:5.0.0		pkg:npm/find-up@5.0.0		8
flat-cache:4.0.1		pkg:npm/flat-cache@4.0.1		7
flatted:3.3.3		pkg:npm/flatted@3.3.3		8
foreground-child:3.3.1		pkg:npm/foreground-child@3.3.1		6
formatly:0.3.0		pkg:npm/formatly@0.3.0		7
genversion:3.2.0		pkg:npm/genversion@3.2.0		8
get-caller-file:2.0.5		pkg:npm/get-caller-file@2.0.5		8
get-stream:5.2.0		pkg:npm/get-stream@5.2.0		8
glob-parent:5.1.2	cpe:2.3:a:gulpjs:glob-parent:5.1.2:::::::*	pkg:npm/glob-parent@5.1.2	Highest	6
glob-parent:6.0.2	cpe:2.3:a:gulpjs:glob-parent:6.0.2:::::::*	pkg:npm/glob-parent@6.0.2	Highest	6
glob:10.4.5		pkg:npm/glob@10.4.5		6
glob:11.0.3		pkg:npm/glob@11.0.3		6
globals:14.0.0		pkg:npm/globals@14.0.0		8
graphemer:1.4.0		pkg:npm/graphemer@1.4.0		8
has-flag:4.0.0		pkg:npm/has-flag@4.0.0		8
html-escaper:2.0.2		pkg:npm/html-escaper@2.0.2		8
ignore:5.3.2		pkg:npm/ignore@5.3.2		7
ignore:7.0.5		pkg:npm/ignore@7.0.5		7
import-fresh:3.3.1		pkg:npm/import-fresh@3.3.1		8
imurmurhash:0.1.4		pkg:npm/imurmurhash@0.1.4		10
is-extglob:2.1.1		pkg:npm/is-extglob@2.1.1		8
is-fullwidth-code-point:3.0.0		pkg:npm/is-fullwidth-code-point@3.0.0		8
is-glob:4.0.3		pkg:npm/is-glob@4.0.3		8
is-number:7.0.0		pkg:npm/is-number@7.0.0		8
isexe:2.0.0		pkg:npm/isexe@2.0.0		8
istanbul-lib-coverage:3.2.2		pkg:npm/istanbul-lib-coverage@3.2.2		8
istanbul-lib-report:3.0.1		pkg:npm/istanbul-lib-report@3.0.1		8
istanbul-reports:3.2.0		pkg:npm/istanbul-reports@3.2.0		8
jackspeak:3.4.3		pkg:npm/jackspeak@3.4.3		6
jackspeak:4.1.1		pkg:npm/jackspeak@4.1.1		6
jake:10.9.4		pkg:npm/jake@10.9.4		6
jiti:2.5.1		pkg:npm/jiti@2.5.1		5
js-yaml:4.1.0	cpe:2.3:a:js-yaml_project:js-yaml:4.1.0:::::::*	pkg:npm/js-yaml@4.1.0	Highest	6
json-buffer:3.0.1		pkg:npm/json-buffer@3.0.1		7
json-schema-traverse:0.4.1		pkg:npm/json-schema-traverse@0.4.1		8
json-stable-stringify-without-jsonify:1.0.1		pkg:npm/json-stable-stringify-without-jsonify@1.0.1		9
keyv:4.5.4		pkg:npm/keyv@4.5.4		8
knip:5.63.1		pkg:npm/knip@5.63.1		9
levn:0.4.1		pkg:npm/levn@0.4.1		8
locate-path:6.0.0		pkg:npm/locate-path@6.0.0		8
lodash.merge:4.6.2		pkg:npm/lodash.merge@4.6.2		7
lru-cache:10.4.3		pkg:npm/lru-cache@10.4.3		6
make-dir:4.0.0		pkg:npm/make-dir@4.0.0		8
merge2:1.4.1		pkg:npm/merge2@1.4.1		6
micromatch:4.0.8	cpe:2.3:a:jonschlinkert:micromatch:4.0.8:::::::*	pkg:npm/micromatch@4.0.8	Highest	8
minimatch:10.0.3	cpe:2.3:a:minimatch_project:minimatch:10.0.3:::::::*	pkg:npm/minimatch@10.0.3	Highest	6
minimatch:3.1.2	cpe:2.3:a:minimatch_project:minimatch:3.1.2:::::::*	pkg:npm/minimatch@3.1.2	Highest	6
minimatch:5.1.6	cpe:2.3:a:minimatch_project:minimatch:5.1.6:::::::*	pkg:npm/minimatch@5.1.6	Highest	6
minimatch:9.0.5	cpe:2.3:a:minimatch_project:minimatch:9.0.5:::::::*	pkg:npm/minimatch@9.0.5	Highest	6
minimist:1.2.8	cpe:2.3:a:substack:minimist:1.2.8:::::::*	pkg:npm/minimist@1.2.8	Highest	9
minipass:7.1.2		pkg:npm/minipass@7.1.2		6
ms:2.1.3		pkg:npm/ms@2.1.3		5
napi-postinstall:0.3.3		pkg:npm/napi-postinstall@0.3.3		6
natural-compare:1.4.0		pkg:npm/natural-compare@1.4.0		7
once:1.4.0		pkg:npm/once@1.4.0		6
optionator:0.9.4		pkg:npm/optionator@0.9.4		8
oxc-resolver:11.7.2		pkg:npm/oxc-resolver@11.7.2		6
p-limit:3.1.0		pkg:npm/p-limit@3.1.0		8
p-locate:5.0.0		pkg:npm/p-locate@5.0.0		8
package-json-from-dist:1.0.1		pkg:npm/package-json-from-dist@1.0.1		6
parent-module:1.0.1		pkg:npm/parent-module@1.0.1		8
parents:1.0.1		pkg:npm/parents@1.0.1		9
path-exists:4.0.0		pkg:npm/path-exists@4.0.0		8
path-key:3.1.1		pkg:npm/path-key@3.1.1		8
path-platform:0.11.15		pkg:npm/path-platform@0.11.15		8
path-scurry:1.11.1		pkg:npm/path-scurry@1.11.1		6
path-scurry:2.0.0		pkg:npm/path-scurry@2.0.0		6
pend:1.2.0		pkg:npm/pend@1.2.0		7
picocolors:1.1.1		pkg:npm/picocolors@1.1.1		6
picomatch:2.3.1		pkg:npm/picomatch@2.3.1		8
picomatch:4.0.3		pkg:npm/picomatch@4.0.3		8
prelude-ls:1.2.1		pkg:npm/prelude-ls@1.2.1		8
prettier-linter-helpers:1.0.0		pkg:npm/prettier-linter-helpers@1.0.0		7
prettier:3.6.2		pkg:npm/prettier@3.6.2		7
property-expr:2.0.6	cpe:2.3:a:property-expr_project:property-expr:2.0.6:::::::*	pkg:npm/property-expr@2.0.6	Highest	6
pump:3.0.3		pkg:npm/pump@3.0.3		6
punycode:2.3.1		pkg:npm/punycode@2.3.1		9
purify-ts:2.1.2		pkg:npm/purify-ts@2.1.2		6
queue-microtask:1.2.3		pkg:npm/queue-microtask@1.2.3		10
randombytes:2.1.0		pkg:npm/randombytes@2.1.0		8
require-directory:2.1.1		pkg:npm/require-directory@2.1.1		8
resolve-from:4.0.0		pkg:npm/resolve-from@4.0.0		8
reusify:1.1.0		pkg:npm/reusify@1.1.0		8
rimraf:6.0.1		pkg:npm/rimraf@6.0.1		6
rollup:4.50.1	cpe:2.3:a:rollupjs:rollup:4.50.1:::::::*	pkg:npm/rollup@4.50.1	Highest	8
run-parallel:1.2.0		pkg:npm/run-parallel@1.2.0		10
safe-buffer:5.2.1		pkg:npm/safe-buffer@5.2.1		10
semver:7.7.2		pkg:npm/semver@7.7.2		6
serialize-javascript:6.0.2		pkg:npm/serialize-javascript@6.0.2		8
shebang-command:2.0.0		pkg:npm/shebang-command@2.0.0		8
shebang-regex:3.0.0		pkg:npm/shebang-regex@3.0.0		8
signal-exit:4.1.0		pkg:npm/signal-exit@4.1.0		6
sinon:21.0.0		pkg:npm/sinon@21.0.0		8
smob:1.5.0		pkg:npm/smob@1.5.0		10
smol-toml:1.4.2		pkg:npm/smol-toml@1.4.2		7
source-map-support:0.5.21		pkg:npm/source-map-support@0.5.21		6
source-map:0.6.1		pkg:npm/source-map@0.6.1		7
string-width:4.2.3		pkg:npm/string-width@4.2.3		8
string-width:5.1.2		pkg:npm/string-width@5.1.2		8
strip-ansi:6.0.1		pkg:npm/strip-ansi@6.0.1		8
strip-ansi:7.1.2		pkg:npm/strip-ansi@7.1.2		8
strip-json-comments:3.1.1		pkg:npm/strip-json-comments@3.1.1		8
strip-json-comments:5.0.2		pkg:npm/strip-json-comments@5.0.2		8
supports-color:7.2.0		pkg:npm/supports-color@7.2.0		8
synckit:0.11.11		pkg:npm/synckit@0.11.11		6
terser:5.44.0	cpe:2.3:a:terser:terser:5.44.0:::::::*	pkg:npm/terser@5.44.0	Highest	7
test-exclude:7.0.1		pkg:npm/test-exclude@7.0.1		8
tiny-case:1.0.3		pkg:npm/tiny-case@1.0.3		6
to-regex-range:5.0.1		pkg:npm/to-regex-range@5.0.1		8
toposort:2.0.2		pkg:npm/toposort@2.0.2		6
ts-api-utils:2.1.0		pkg:npm/ts-api-utils@2.1.0		7
type-check:0.4.0		pkg:npm/type-check@0.4.0		8
type-detect:4.0.8		pkg:npm/type-detect@4.0.8		6
type-detect:4.1.0		pkg:npm/type-detect@4.1.0		6
type-fest:2.19.0		pkg:npm/type-fest@2.19.0		8
typescript-eslint:8.43.0		pkg:npm/typescript-eslint@8.43.0		7
typescript:5.9.2	cpe:2.3:a:microsoft:typescript:5.9.2:::::::*	pkg:npm/typescript@5.9.2	Highest	8
undici-types:6.21.0		pkg:npm/undici-types@6.21.0		7
undici:7.16.0	cpe:2.3:a:nodejs:undici:7.16.0:::::::*	pkg:npm/undici@7.16.0	Highest	7
uri-js:4.4.1	cpe:2.3:a:garycourt:uri-js:4.4.1:::::::* cpe:2.3:a:uri.js_project:uri.js:4.4.1:::::::*	pkg:npm/uri-js@4.4.1	Highest	8
v8-to-istanbul:9.3.0		pkg:npm/v8-to-istanbul@9.3.0		6
walk-up-path:4.0.0		pkg:npm/walk-up-path@4.0.0		6
which:2.0.2		pkg:npm/which@2.0.2		6
word-wrap:1.2.5	cpe:2.3:a:word-wrap_project:word-wrap:1.2.5:::::::*	pkg:npm/word-wrap@1.2.5	Highest	8
wrap-ansi:7.0.0		pkg:npm/wrap-ansi@7.0.0		8
wrap-ansi:8.1.0		pkg:npm/wrap-ansi@8.1.0		8
wrappy:1.0.2		pkg:npm/wrappy@1.0.2		8
y18n:5.0.8	cpe:2.3:a:y18n_project:y18n:5.0.8:::::::*	pkg:npm/y18n@5.0.8	Highest	8
yargs-parser:21.1.1	cpe:2.3:a:yargs:yargs-parser:21.1.1:::::::*	pkg:npm/yargs-parser@21.1.1	Highest	6
yargs:17.7.2		pkg:npm/yargs@17.7.2		6
yauzl:2.10.0		pkg:npm/yauzl@2.10.0		8
yocto-queue:0.1.0		pkg:npm/yocto-queue@0.1.0		8
yup:1.7.0		pkg:npm/yup@1.7.0		8
zod-validation-error:3.5.3		pkg:npm/zod-validation-error@3.5.3		8
zod:3.25.76	cpe:2.3:a:zod:zod:3.25.76:::::::*	pkg:npm/zod@3.25.76	Highest	8

Dependencies (vulnerable)

@bcoe/v8-coverage:1.0.2

Description:

Helper functions for V8 coverage files.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?c8:10.1.3/@bcoe/v8-coverage:^1.0.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/c8:10.1.3

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Charles Samborski <demurgos@demurgos.net> (https://demurgos.net)	Highest
Vendor	package.json	description	Helper functions for V8 coverage files.	Highest
Vendor	package.json	name	@bcoe/v8-coverage	Highest
Vendor	package.json	name	@bcoe/v8-coverage_project	Highest
Product	package.json	name	@bcoe/v8-coverage	Highest
Version	package.json	version	1.0.2	Highest

Related Dependencies

Identifiers

pkg:npm/%40bcoe%2Fv8-coverage@1.0.2 (Confidence:Highest)

@commander-js/extra-typings:14.0.0

Description:

Infer strong typings for commander options and action handlers

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/@commander-js/extra-typings:14.0.0

Referenced In Project/Scope: owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author		Highest
Vendor	package.json	bugs.url	https://github.com/commander-js/extra-typings/issues	Highest
Vendor	package.json	description	Infer strong typings for commander options and action handlers	Highest
Vendor	package.json	homepage	https://github.com/commander-js/extra-typings#readme	Highest
Vendor	package.json	name	@commander-js/extra-typings	Highest
Vendor	package.json	name	@commander-js/extra-typings_project	Highest
Product	package.json	name	@commander-js/extra-typings	Highest
Version	package.json	version	14.0.0	Highest

Identifiers

pkg:npm/%40commander-js%2Fextra-typings@14.0.0 (Confidence:Highest)

@eslint-community/eslint-utils:4.9.0

Description:

Utilities for ESLint plugins.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?eslint:9.35.0/@eslint-community/eslint-utils:^4.8.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/@typescript-eslint/utils:8.43.0
owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/eslint:9.35.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Toru Nagashima	Highest
Vendor	package.json	bugs.url	https://github.com/eslint-community/eslint-utils/issues	Highest
Vendor	package.json	description	Utilities for ESLint plugins.	Highest
Vendor	package.json	homepage	https://github.com/eslint-community/eslint-utils#readme	Highest
Vendor	package.json	name	@eslint-community/eslint-utils	Highest
Vendor	package.json	name	@eslint-community/eslint-utils_project	Highest
Product	package.json	name	@eslint-community/eslint-utils	Highest
Version	package.json	version	4.9.0	Highest

Related Dependencies

Identifiers

pkg:npm/%40eslint-community%2Feslint-utils@4.9.0 (Confidence:Highest)

@eslint-community/regexpp:4.12.1

Description:

Regular expression parser for ECMAScript.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?eslint:9.35.0/@eslint-community/regexpp:^4.12.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@typescript-eslint/eslint-plugin:8.43.0
owasp-dependency-check:0.9.0/eslint:9.35.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Toru Nagashima	Highest
Vendor	package.json	bugs.url	https://github.com/eslint-community/regexpp/issues	Highest
Vendor	package.json	description	Regular expression parser for ECMAScript.	Highest
Vendor	package.json	homepage	https://github.com/eslint-community/regexpp#readme	Highest
Vendor	package.json	name	@eslint-community/regexpp	Highest
Vendor	package.json	name	@eslint-community/regexpp_project	Highest
Product	package.json	name	@eslint-community/regexpp	Highest
Version	package.json	version	4.12.1	Highest

Related Dependencies

Identifiers

pkg:npm/%40eslint-community%2Fregexpp@4.12.1 (Confidence:Highest)

@eslint/config-array:0.21.0

Description:

General purpose glob-based configuration matching.

License:

Apache-2.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?eslint:9.35.0/@eslint/config-array:^0.21.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/eslint:9.35.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Nicholas C. Zakas	Highest
Vendor	package.json	bugs.url	https://github.com/eslint/rewrite/issues	Highest
Vendor	package.json	description	General purpose glob-based configuration matching.	Highest
Vendor	package.json	homepage	https://github.com/eslint/rewrite/tree/main/packages/config-array#readme	Highest
Vendor	package.json	name	@eslint/config-array	Highest
Vendor	package.json	name	@eslint/config-array_project	Highest
Product	package.json	name	@eslint/config-array	Highest
Version	package.json	version	0.21.0	Highest

Related Dependencies

Identifiers

pkg:npm/%40eslint%2Fconfig-array@0.21.0 (Confidence:Highest)

@eslint/config-helpers:0.3.1

Description:

Helper utilities for creating ESLint configuration

License:

Apache-2.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?eslint:9.35.0/@eslint/config-helpers:^0.3.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/eslint:9.35.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.url	https://github.com/eslint/rewrite/issues	Highest
Vendor	package.json	description	Helper utilities for creating ESLint configuration	Highest
Vendor	package.json	homepage	https://github.com/eslint/rewrite/tree/main/packages/config-helpers#readme	Highest
Vendor	package.json	name	@eslint/config-helpers	Highest
Vendor	package.json	name	@eslint/config-helpers_project	Highest
Product	package.json	name	@eslint/config-helpers	Highest
Version	package.json	version	0.3.1	Highest

Related Dependencies

Identifiers

pkg:npm/%40eslint%2Fconfig-helpers@0.3.1 (Confidence:Highest)

@eslint/core:0.15.2

Description:

Runtime-agnostic core of ESLint

License:

Apache-2.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?eslint:9.35.0/@eslint/core:^0.15.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@eslint/plugin-kit:0.3.5
owasp-dependency-check:0.9.0/eslint:9.35.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Nicholas C. Zakas	Highest
Vendor	package.json	bugs.url	https://github.com/eslint/rewrite/issues	Highest
Vendor	package.json	description	Runtime-agnostic core of ESLint	Highest
Vendor	package.json	homepage	https://github.com/eslint/rewrite/tree/main/packages/core#readme	Highest
Vendor	package.json	name	@eslint/core	Highest
Vendor	package.json	name	@eslint/core_project	Highest
Product	package.json	name	@eslint/core	Highest
Version	package.json	version	0.15.2	Highest

Related Dependencies

Identifiers

pkg:npm/%40eslint%2Fcore@0.15.2 (Confidence:Highest)

@eslint/eslintrc:3.3.1

Description:

The legacy ESLintRC config file format for ESLint

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?eslint:9.35.0/@eslint/eslintrc:^3.3.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/eslint:9.35.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Nicholas C. Zakas	Highest
Vendor	package.json	bugs.url	https://github.com/eslint/eslintrc/issues	Highest
Vendor	package.json	description	The legacy ESLintRC config file format for ESLint	Highest
Vendor	package.json	homepage	https://github.com/eslint/eslintrc#readme	Highest
Vendor	package.json	name	@eslint/eslintrc	Highest
Vendor	package.json	name	@eslint/eslintrc_project	Highest
Product	package.json	name	@eslint/eslintrc	Highest
Version	package.json	version	3.3.1	Highest

Related Dependencies

Identifiers

pkg:npm/%40eslint%2Feslintrc@3.3.1 (Confidence:Highest)

@eslint/js:9.35.0

Description:

ESLint JavaScript language implementation

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?eslint:9.35.0/@eslint/js:9.35.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/eslint:9.35.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs	https://github.com/eslint/eslint/issues/	Highest
Vendor	package.json	description	ESLint JavaScript language implementation	Highest
Vendor	package.json	homepage	https://eslint.org	Highest
Vendor	package.json	name	@eslint/js	Highest
Vendor	package.json	name	@eslint/js_project	Highest
Product	package.json	name	@eslint/js	Highest
Version	package.json	version	9.35.0	Highest

Related Dependencies

Identifiers

pkg:npm/%40eslint%2Fjs@9.35.0 (Confidence:Highest)

@eslint/object-schema:2.1.6

Description:

An object schema merger/validator

License:

Apache-2.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/@eslint/object-schema:2.1.6

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@eslint/config-array:0.21.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Nicholas C. Zakas	Highest
Vendor	package.json	bugs.url	https://github.com/eslint/rewrite/issues	Highest
Vendor	package.json	description	An object schema merger/validator	Highest
Vendor	package.json	homepage	https://github.com/eslint/rewrite#readme	Highest
Vendor	package.json	name	@eslint/object-schema	Highest
Vendor	package.json	name	@eslint/object-schema_project	Highest
Product	package.json	name	@eslint/object-schema	Highest
Version	package.json	version	2.1.6	Highest

Related Dependencies

Identifiers

pkg:npm/%40eslint%2Fobject-schema@2.1.6 (Confidence:Highest)

@eslint/plugin-kit:0.3.5

Description:

Utilities for building ESLint plugins.

License:

Apache-2.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?eslint:9.35.0/@eslint/plugin-kit:^0.3.5

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/eslint:9.35.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Nicholas C. Zakas	Highest
Vendor	package.json	bugs.url	https://github.com/eslint/rewrite/issues	Highest
Vendor	package.json	description	Utilities for building ESLint plugins.	Highest
Vendor	package.json	homepage	https://github.com/eslint/rewrite/tree/main/packages/plugin-kit#readme	Highest
Vendor	package.json	name	@eslint/plugin-kit	Highest
Vendor	package.json	name	@eslint/plugin-kit_project	Highest
Product	package.json	name	@eslint/plugin-kit	Highest
Version	package.json	version	0.3.5	Highest

Related Dependencies

Identifiers

pkg:npm/%40eslint%2Fplugin-kit@0.3.5 (Confidence:Highest)

@humanfs/core:0.19.1

Description:

The core of the humanfs library.

License:

Apache-2.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?@humanfs/node:0.16.7/@humanfs/core:^0.19.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@humanfs/node:0.16.7

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Nicholas C. Zakas	Highest
Vendor	package.json	bugs.url	https://github.com/humanwhocodes/humanfs/issues	Highest
Vendor	package.json	description	The core of the humanfs library.	Highest
Vendor	package.json	homepage	https://github.com/humanwhocodes/humanfs#readme	Highest
Vendor	package.json	name	@humanfs/core	Highest
Vendor	package.json	name	@humanfs/core_project	Highest
Product	package.json	name	@humanfs/core	Highest
Version	package.json	version	0.19.1	Highest

Related Dependencies

Identifiers

pkg:npm/%40humanfs%2Fcore@0.19.1 (Confidence:Highest)

@humanfs/node:0.16.7

Description:

The Node.js bindings of the humanfs library.

License:

Apache-2.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?eslint:9.35.0/@humanfs/node:^0.16.6

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/eslint:9.35.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Nicholas C. Zakas	Highest
Vendor	package.json	bugs.url	https://github.com/humanwhocodes/humanfs/issues	Highest
Vendor	package.json	description	The Node.js bindings of the humanfs library.	Highest
Vendor	package.json	homepage	https://github.com/humanwhocodes/humanfs#readme	Highest
Vendor	package.json	name	@humanfs/node	Highest
Vendor	package.json	name	@humanfs/node_project	Highest
Product	package.json	name	@humanfs/node	Highest
Version	package.json	version	0.16.7	Highest

Related Dependencies

Identifiers

pkg:npm/%40humanfs%2Fnode@0.16.7 (Confidence:Highest)

@humanwhocodes/module-importer:1.0.1

Description:

Universal module importer for Node.js

License:

Apache-2.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?eslint:9.35.0/@humanwhocodes/module-importer:^1.0.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/eslint:9.35.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Nicholas C. Zaks	Highest
Vendor	package.json	description	Universal module importer for Node.js	Highest
Vendor	package.json	name	@humanwhocodes/module-importer	Highest
Vendor	package.json	name	@humanwhocodes/module-importer_project	Highest
Product	package.json	name	@humanwhocodes/module-importer	Highest
Version	package.json	version	1.0.1	Highest

Related Dependencies

Identifiers

pkg:npm/%40humanwhocodes%2Fmodule-importer@1.0.1 (Confidence:Highest)

@humanwhocodes/retry:0.4.3

Description:

A utility to retry failed async methods.

License:

Apache-2.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?eslint:9.35.0/@humanwhocodes/retry:^0.4.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/eslint:9.35.0
owasp-dependency-check:0.9.0/@humanfs/node:0.16.7

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Nicholas C. Zaks	Highest
Vendor	package.json	description	A utility to retry failed async methods.	Highest
Vendor	package.json	name	@humanwhocodes/retry	Highest
Vendor	package.json	name	@humanwhocodes/retry_project	Highest
Product	package.json	name	@humanwhocodes/retry	Highest
Version	package.json	version	0.4.3	Highest

Related Dependencies

Identifiers

pkg:npm/%40humanwhocodes%2Fretry@0.4.3 (Confidence:Highest)

@isaacs/balanced-match:4.0.1

Description:

Match balanced character pairs, like "{" and "}"

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?@isaacs/brace-expansion:5.0.0/@isaacs/balanced-match:^4.0.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@isaacs/brace-expansion:5.0.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	Match balanced character pairs, like "{" and "}"	Highest
Vendor	package.json	name	@isaacs/balanced-match	Highest
Vendor	package.json	name	@isaacs/balanced-match_project	Highest
Product	package.json	name	@isaacs/balanced-match	Highest
Version	package.json	version	4.0.1	Highest

Related Dependencies

Identifiers

pkg:npm/%40isaacs%2Fbalanced-match@4.0.1 (Confidence:Highest)

@isaacs/brace-expansion:5.0.0

Description:

Brace expansion as known from sh/bash

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?minimatch:10.0.3/@isaacs/brace-expansion:^5.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/minimatch:10.0.3

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	Brace expansion as known from sh/bash	Highest
Vendor	package.json	name	@isaacs/brace-expansion	Highest
Vendor	package.json	name	@isaacs/brace-expansion_project	Highest
Product	package.json	name	@isaacs/brace-expansion	Highest
Version	package.json	version	5.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/%40isaacs%2Fbrace-expansion@5.0.0 (Confidence:Highest)

@isaacs/cliui:8.0.2

Description:

easily create complex multi-column command-line-interfaces

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?jackspeak:4.1.1/@isaacs/cliui:^8.0.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/jackspeak:3.4.3
owasp-dependency-check:0.9.0/jackspeak:4.1.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Ben Coe <ben@npmjs.com>	Highest
Vendor	package.json	description	easily create complex multi-column command-line-interfaces	Highest
Vendor	package.json	name	@isaacs/cliui	Highest
Vendor	package.json	name	@isaacs/cliui_project	Highest
Product	package.json	name	@isaacs/cliui	Highest
Version	package.json	version	8.0.2	Highest

Related Dependencies

Identifiers

pkg:npm/%40isaacs%2Fcliui@8.0.2 (Confidence:Highest)

@istanbuljs/schema:0.1.3

Description:

Schemas describing various structures used by nyc and istanbuljs

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?test-exclude:7.0.1/@istanbuljs/schema:^0.1.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/c8:10.1.3
owasp-dependency-check:0.9.0/test-exclude:7.0.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Corey Farrell	Highest
Vendor	package.json	bugs.url	https://github.com/istanbuljs/schema/issues	Highest
Vendor	package.json	description	Schemas describing various structures used by nyc and istanbuljs	Highest
Vendor	package.json	homepage	https://github.com/istanbuljs/schema#readme	Highest
Vendor	package.json	name	@istanbuljs/schema	Highest
Vendor	package.json	name	@istanbuljs/schema_project	Highest
Product	package.json	name	@istanbuljs/schema	Highest
Version	package.json	version	0.1.3	Highest

Related Dependencies

Identifiers

pkg:npm/%40istanbuljs%2Fschema@0.1.3 (Confidence:Highest)

@jridgewell/gen-mapping:0.3.13

Description:

Generate source maps

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?@jridgewell/source-map:0.3.11/@jridgewell/gen-mapping:^0.3.5

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@jridgewell/source-map:0.3.11

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Justin Ridgewell <justin@ridgewell.name>	Highest
Vendor	package.json	description	Generate source maps	Highest
Vendor	package.json	homepage	https://github.com/jridgewell/sourcemaps/tree/main/packages/gen-mapping	Highest
Vendor	package.json	name	@jridgewell/gen-mapping	Highest
Vendor	package.json	name	@jridgewell/gen-mapping_project	Highest
Product	package.json	name	@jridgewell/gen-mapping	Highest
Version	package.json	version	0.3.13	Highest

Related Dependencies

Identifiers

pkg:npm/%40jridgewell%2Fgen-mapping@0.3.13 (Confidence:Highest)

@jridgewell/resolve-uri:3.1.2

Description:

Resolve a URI relative to an optional base URI

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?@jridgewell/trace-mapping:0.3.31/@jridgewell/resolve-uri:^3.1.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/@jridgewell/trace-mapping:0.3.31
owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Justin Ridgewell <justin@ridgewell.name>	Highest
Vendor	package.json	description	Resolve a URI relative to an optional base URI	Highest
Vendor	package.json	name	@jridgewell/resolve-uri	Highest
Vendor	package.json	name	@jridgewell/resolve-uri_project	Highest
Product	package.json	name	@jridgewell/resolve-uri	Highest
Version	package.json	version	3.1.2	Highest

Related Dependencies

Identifiers

pkg:npm/%40jridgewell%2Fresolve-uri@3.1.2 (Confidence:Highest)

@jridgewell/source-map:0.3.11

Description:

Packages @jridgewell/trace-mapping and @jridgewell/gen-mapping into the familiar source-map API

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?terser:5.44.0/@jridgewell/source-map:^0.3.3

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/terser:5.44.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Justin Ridgewell <justin@ridgewell.name>	Highest
Vendor	package.json	description	Packages @jridgewell/trace-mapping and @jridgewell/gen-mapping into the familiar source-map API	Highest
Vendor	package.json	homepage	https://github.com/jridgewell/sourcemaps/tree/main/packages/source-map	Highest
Vendor	package.json	name	@jridgewell/source-map	Highest
Vendor	package.json	name	@jridgewell/source-map_project	Highest
Product	package.json	name	@jridgewell/source-map	Highest
Version	package.json	version	0.3.11	Highest

Related Dependencies

Identifiers

pkg:npm/%40jridgewell%2Fsource-map@0.3.11 (Confidence:Highest)

@jridgewell/sourcemap-codec:1.5.5

Description:

Encode/decode sourcemap mappings

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?@jridgewell/trace-mapping:0.3.31/@jridgewell/sourcemap-codec:^1.4.14

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/@jridgewell/trace-mapping:0.3.31
owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@jridgewell/gen-mapping:0.3.13

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Justin Ridgewell <justin@ridgewell.name>	Highest
Vendor	package.json	description	Encode/decode sourcemap mappings	Highest
Vendor	package.json	homepage	https://github.com/jridgewell/sourcemaps/tree/main/packages/sourcemap-codec	Highest
Vendor	package.json	name	@jridgewell/sourcemap-codec	Highest
Vendor	package.json	name	@jridgewell/sourcemap-codec_project	Highest
Product	package.json	name	@jridgewell/sourcemap-codec	Highest
Version	package.json	version	1.5.5	Highest

Related Dependencies

Identifiers

pkg:npm/%40jridgewell%2Fsourcemap-codec@1.5.5 (Confidence:Highest)

@jridgewell/trace-mapping:0.3.31

Description:

Trace the original position through a source map

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?v8-to-istanbul:9.3.0/@jridgewell/trace-mapping:^0.3.12

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/v8-to-istanbul:9.3.0
owasp-dependency-check:0.9.0/@jridgewell/gen-mapping:0.3.13
owasp-dependency-check:0.9.0/@jridgewell/source-map:0.3.11

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Justin Ridgewell <justin@ridgewell.name>	Highest
Vendor	package.json	description	Trace the original position through a source map	Highest
Vendor	package.json	homepage	https://github.com/jridgewell/sourcemaps/tree/main/packages/trace-mapping	Highest
Vendor	package.json	name	@jridgewell/trace-mapping	Highest
Vendor	package.json	name	@jridgewell/trace-mapping_project	Highest
Product	package.json	name	@jridgewell/trace-mapping	Highest
Version	package.json	version	0.3.31	Highest

Related Dependencies

Identifiers

pkg:npm/%40jridgewell%2Ftrace-mapping@0.3.31 (Confidence:Highest)

@nodelib/fs.scandir:2.1.5

Description:

List files and directories inside the specified directory

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?@nodelib/fs.walk:1.2.8/@nodelib/fs.scandir:2.1.5

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@nodelib/fs.walk:1.2.8

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	List files and directories inside the specified directory	Highest
Vendor	package.json	name	@nodelib/fs.scandir	Highest
Vendor	package.json	name	@nodelib/fs.scandir_project	Highest
Product	package.json	name	@nodelib/fs.scandir	Highest
Version	package.json	version	2.1.5	Highest

Related Dependencies

Identifiers

pkg:npm/%40nodelib%2Ffs.scandir@2.1.5 (Confidence:Highest)

@nodelib/fs.stat:2.0.5

Description:

Get the status of a file with some features

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?fast-glob:3.3.3/@nodelib/fs.stat:^2.0.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/fast-glob:3.3.3
owasp-dependency-check:0.9.0/@nodelib/fs.scandir:2.1.5

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	Get the status of a file with some features	Highest
Vendor	package.json	name	@nodelib/fs.stat	Highest
Vendor	package.json	name	@nodelib/fs.stat_project	Highest
Product	package.json	name	@nodelib/fs.stat	Highest
Version	package.json	version	2.0.5	Highest

Related Dependencies

Identifiers

pkg:npm/%40nodelib%2Ffs.stat@2.0.5 (Confidence:Highest)

@nodelib/fs.walk:1.2.8

Description:

A library for efficiently walking a directory recursively

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?knip:5.63.1/@nodelib/fs.walk:^1.2.3

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/knip:5.63.1
owasp-dependency-check:0.9.0/fast-glob:3.3.3

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	A library for efficiently walking a directory recursively	Highest
Vendor	package.json	name	@nodelib/fs.walk	Highest
Vendor	package.json	name	@nodelib/fs.walk_project	Highest
Product	package.json	name	@nodelib/fs.walk	Highest
Version	package.json	version	1.2.8	Highest

Related Dependencies

Identifiers

pkg:npm/%40nodelib%2Ffs.walk@1.2.8 (Confidence:Highest)

@oxc-resolver/binding-linux-x64-gnu:11.7.2

Description:

Oxc Resolver Node API

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/@oxc-resolver/binding-linux-x64-gnu:11.7.2

Referenced In Project/Scope: owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	Oxc Resolver Node API	Highest
Vendor	package.json	homepage	https://oxc.rs	Highest
Vendor	package.json	name	@oxc-resolver/binding-linux-x64-gnu	Highest
Vendor	package.json	name	@oxc-resolver/binding-linux-x64-gnu_project	Highest
Product	package.json	name	@oxc-resolver/binding-linux-x64-gnu	Highest
Version	package.json	version	11.7.2	Highest

Identifiers

pkg:npm/%40oxc-resolver%2Fbinding-linux-x64-gnu@11.7.2 (Confidence:Highest)

@oxc-resolver/binding-linux-x64-musl:11.7.2

Description:

Oxc Resolver Node API

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/@oxc-resolver/binding-linux-x64-musl:11.7.2

Referenced In Project/Scope: owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	Oxc Resolver Node API	Highest
Vendor	package.json	homepage	https://oxc.rs	Highest
Vendor	package.json	name	@oxc-resolver/binding-linux-x64-musl	Highest
Vendor	package.json	name	@oxc-resolver/binding-linux-x64-musl_project	Highest
Product	package.json	name	@oxc-resolver/binding-linux-x64-musl	Highest
Version	package.json	version	11.7.2	Highest

Identifiers

pkg:npm/%40oxc-resolver%2Fbinding-linux-x64-musl@11.7.2 (Confidence:Highest)

@pkgjs/parseargs:0.11.0

Description:

Polyfill of future proposal for `util.parseArgs()`

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/@pkgjs/parseargs:0.11.0

Referenced In Project/Scope: owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author		Highest
Vendor	package.json	bugs.url	https://github.com/pkgjs/parseargs/issues	Highest
Vendor	package.json	description	Polyfill of future proposal for `util.parseArgs()`	Highest
Vendor	package.json	homepage	https://github.com/pkgjs/parseargs#readme	Highest
Vendor	package.json	name	@pkgjs/parseargs	Highest
Vendor	package.json	name	@pkgjs/parseargs_project	Highest
Product	package.json	name	@pkgjs/parseargs	Highest
Version	package.json	version	0.11.0	Highest

Identifiers

pkg:npm/%40pkgjs%2Fparseargs@0.11.0 (Confidence:Highest)

@pkgr/core:0.2.9

Description:

Shared core module for `@pkgr` packages or any package else

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?synckit:0.11.11/@pkgr/core:^0.2.9

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/synckit:0.11.11

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	JounQin <admin@1stg.me> (https://www.1stG.me)	Highest
Vendor	package.json	description	Shared core module for `@pkgr` packages or any package else	Highest
Vendor	package.json	homepage	https://github.com/un-ts/pkgr/blob/master/packages/core	Highest
Vendor	package.json	name	@pkgr/core	Highest
Vendor	package.json	name	@pkgr/core_project	Highest
Product	package.json	name	@pkgr/core	Highest
Version	package.json	version	0.2.9	Highest

Related Dependencies

Identifiers

pkg:npm/%40pkgr%2Fcore@0.2.9 (Confidence:Highest)

@rollup/plugin-terser:0.4.4

Description:

Generate minified bundle

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/@rollup/plugin-terser:0.4.4

Referenced In Project/Scope: owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Peter Placzek <peter.placzek1996@gmail.com>	Highest
Vendor	package.json	bugs	https://github.com/rollup/plugins/issues	Highest
Vendor	package.json	description	Generate minified bundle	Highest
Vendor	package.json	homepage	https://github.com/rollup/plugins/tree/master/packages/terser#readme	Highest
Vendor	package.json	name	@rollup/plugin-terser	Highest
Vendor	package.json	name	@rollup/plugin-terser_project	Highest
Product	package.json	name	@rollup/plugin-terser	Highest
Version	package.json	version	0.4.4	Highest

Identifiers

pkg:npm/%40rollup%2Fplugin-terser@0.4.4 (Confidence:Highest)

@rollup/rollup-linux-x64-gnu:4.50.1

Description:

Native bindings for Rollup

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/@rollup/rollup-linux-x64-gnu:4.50.1

Referenced In Project/Scope: owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Lukas Taegert-Atkinson	Highest
Vendor	package.json	description	Native bindings for Rollup	Highest
Vendor	package.json	homepage	https://rollupjs.org/	Highest
Vendor	package.json	name	@rollup/rollup-linux-x64-gnu	Highest
Vendor	package.json	name	@rollup/rollup-linux-x64-gnu_project	Highest
Product	package.json	name	@rollup/rollup-linux-x64-gnu	Highest
Version	package.json	version	4.50.1	Highest

Identifiers

pkg:npm/%40rollup%2Frollup-linux-x64-gnu@4.50.1 (Confidence:Highest)

@rollup/rollup-linux-x64-musl:4.50.1

Description:

Native bindings for Rollup

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/@rollup/rollup-linux-x64-musl:4.50.1

Referenced In Project/Scope: owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Lukas Taegert-Atkinson	Highest
Vendor	package.json	description	Native bindings for Rollup	Highest
Vendor	package.json	homepage	https://rollupjs.org/	Highest
Vendor	package.json	name	@rollup/rollup-linux-x64-musl	Highest
Vendor	package.json	name	@rollup/rollup-linux-x64-musl_project	Highest
Product	package.json	name	@rollup/rollup-linux-x64-musl	Highest
Version	package.json	version	4.50.1	Highest

Identifiers

pkg:npm/%40rollup%2Frollup-linux-x64-musl@4.50.1 (Confidence:Highest)

@sinonjs/commons:3.0.1

Description:

Simple functions shared among the sinon end user libraries

License:

BSD-3-Clause

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?sinon:21.0.0/@sinonjs/commons:^3.0.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/sinon:21.0.0
owasp-dependency-check:0.9.0/@sinonjs/fake-timers:13.0.5
owasp-dependency-check:0.9.0/@sinonjs/samsam:8.0.3

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author		Highest
Vendor	package.json	bugs.url	https://github.com/sinonjs/commons/issues	Highest
Vendor	package.json	description	Simple functions shared among the sinon end user libraries	Highest
Vendor	package.json	homepage	https://github.com/sinonjs/commons#readme	Highest
Vendor	package.json	name	@sinonjs/commons	Highest
Vendor	package.json	name	@sinonjs/commons_project	Highest
Product	package.json	name	@sinonjs/commons	Highest
Version	package.json	version	3.0.1	Highest

Related Dependencies

Identifiers

pkg:npm/%40sinonjs%2Fcommons@3.0.1 (Confidence:Highest)

@sinonjs/fake-timers:13.0.5

Description:

Fake JavaScript timers

License:

BSD-3-Clause

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?sinon:21.0.0/@sinonjs/fake-timers:^13.0.5

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/sinon:21.0.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Christian Johansen	Highest
Vendor	package.json	bugs.mail	christian@cjohansen.no	Highest
Vendor	package.json	bugs.url	https://github.com/sinonjs/fake-timers/issues	Highest
Vendor	package.json	description	Fake JavaScript timers	Highest
Vendor	package.json	homepage	https://github.com/sinonjs/fake-timers	Highest
Vendor	package.json	name	@sinonjs/fake-timers	Highest
Vendor	package.json	name	@sinonjs/fake-timers_project	Highest
Product	package.json	name	@sinonjs/fake-timers	Highest
Version	package.json	version	13.0.5	Highest

Related Dependencies

Identifiers

pkg:npm/%40sinonjs%2Ffake-timers@13.0.5 (Confidence:Highest)

@sinonjs/samsam:8.0.3

Description:

Value identification and comparison functions

License:

BSD-3-Clause

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?sinon:21.0.0/@sinonjs/samsam:^8.0.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/sinon:21.0.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Christian Johansen	Highest
Vendor	package.json	description	Value identification and comparison functions	Highest
Vendor	package.json	homepage	http://sinonjs.github.io/samsam/	Highest
Vendor	package.json	name	@sinonjs/samsam	Highest
Vendor	package.json	name	@sinonjs/samsam_project	Highest
Product	package.json	name	@sinonjs/samsam	Highest
Version	package.json	version	8.0.3	Highest

Related Dependencies

Identifiers

pkg:npm/%40sinonjs%2Fsamsam@8.0.3 (Confidence:Highest)

@tsconfig/node20:20.1.6

Description:

A base TSConfig for working with Node 20.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/@tsconfig/node20:20.1.6

Referenced In Project/Scope: owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	A base TSConfig for working with Node 20.	Highest
Vendor	package.json	name	@tsconfig/node20	Highest
Vendor	package.json	name	@tsconfig/node20_project	Highest
Product	package.json	name	@tsconfig/node20	Highest
Version	package.json	version	20.1.6	Highest

Identifiers

pkg:npm/%40tsconfig%2Fnode20@20.1.6 (Confidence:Highest)

@types/cross-spawn:6.0.6

Description:

TypeScript definitions for cross-spawn

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/@types/cross-spawn:6.0.6

Referenced In Project/Scope: owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	TypeScript definitions for cross-spawn	Highest
Vendor	package.json	homepage	https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/cross-spawn	Highest
Vendor	package.json	name	@types/cross-spawn	Highest
Vendor	package.json	name	@types/cross-spawn_project	Highest
Product	package.json	name	@types/cross-spawn	Highest
Version	package.json	version	6.0.6	Highest

Identifiers

pkg:npm/%40types%2Fcross-spawn@6.0.6 (Confidence:Highest)

@types/estree:1.0.8

Description:

TypeScript definitions for estree

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?rollup:4.50.1/@types/estree:1.0.8

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/rollup:4.50.1
owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/eslint:9.35.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	TypeScript definitions for estree	Highest
Vendor	package.json	homepage	https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/estree	Highest
Vendor	package.json	name	@types/estree	Highest
Vendor	package.json	name	@types/estree_project	Highest
Product	package.json	name	@types/estree	Highest
Version	package.json	version	1.0.8	Highest

Related Dependencies

Identifiers

pkg:npm/%40types%2Festree@1.0.8 (Confidence:Highest)

@types/istanbul-lib-coverage:2.0.6

Description:

TypeScript definitions for istanbul-lib-coverage

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?v8-to-istanbul:9.3.0/@types/istanbul-lib-coverage:^2.0.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/v8-to-istanbul:9.3.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	TypeScript definitions for istanbul-lib-coverage	Highest
Vendor	package.json	homepage	https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/istanbul-lib-coverage	Highest
Vendor	package.json	name	@types/istanbul-lib-coverage	Highest
Vendor	package.json	name	@types/istanbul-lib-coverage_project	Highest
Product	package.json	name	@types/istanbul-lib-coverage	Highest
Version	package.json	version	2.0.6	Highest

Related Dependencies

Identifiers

pkg:npm/%40types%2Fistanbul-lib-coverage@2.0.6 (Confidence:Highest)

@types/json-schema:7.0.15

Description:

TypeScript definitions for json-schema

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?purify-ts:2.1.2/@types/json-schema:7.0.15

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/purify-ts:2.1.2
owasp-dependency-check:0.9.0/@eslint/core:0.15.2
owasp-dependency-check:0.9.0/eslint:9.35.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	TypeScript definitions for json-schema	Highest
Vendor	package.json	homepage	https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/json-schema	Highest
Vendor	package.json	name	@types/json-schema	Highest
Vendor	package.json	name	@types/json-schema_project	Highest
Product	package.json	name	@types/json-schema	Highest
Version	package.json	version	7.0.15	Highest

Related Dependencies

Identifiers

pkg:npm/%40types%2Fjson-schema@7.0.15 (Confidence:Highest)

@types/node:20.19.14

Description:

TypeScript definitions for node

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?@types/yauzl:2.10.3/@types/node:*

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@types/cross-spawn:6.0.6
owasp-dependency-check:0.9.0/@types/yauzl:2.10.3

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	TypeScript definitions for node	Highest
Vendor	package.json	homepage	https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node	Highest
Vendor	package.json	name	@types/node	Highest
Vendor	package.json	name	@types/node_project	Highest
Product	package.json	name	@types/node	Highest
Version	package.json	version	20.19.14	Highest

Related Dependencies

Identifiers

pkg:npm/%40types%2Fnode@20.19.14 (Confidence:Highest)

@types/sinon:17.0.4

Description:

TypeScript definitions for sinon

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/@types/sinon:17.0.4

Referenced In Project/Scope: owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	TypeScript definitions for sinon	Highest
Vendor	package.json	homepage	https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/sinon	Highest
Vendor	package.json	name	@types/sinon	Highest
Vendor	package.json	name	@types/sinon_project	Highest
Product	package.json	name	@types/sinon	Highest
Version	package.json	version	17.0.4	Highest

Identifiers

pkg:npm/%40types%2Fsinon@17.0.4 (Confidence:Highest)

@types/sinonjs__fake-timers:8.1.5

Description:

TypeScript definitions for @sinonjs/fake-timers

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/@types/sinonjs__fake-timers:8.1.5

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@types/sinon:17.0.4

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	TypeScript definitions for @sinonjs/fake-timers	Highest
Vendor	package.json	homepage	https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/sinonjs__fake-timers	Highest
Vendor	package.json	name	@types/sinonjs__fake-timers	Highest
Vendor	package.json	name	@types/sinonjs__fake-timers_project	Highest
Product	package.json	name	@types/sinonjs__fake-timers	Highest
Version	package.json	version	8.1.5	Highest

Related Dependencies

Identifiers

pkg:npm/%40types%2Fsinonjs__fake-timers@8.1.5 (Confidence:Highest)

@types/yauzl:2.10.3

Description:

TypeScript definitions for yauzl

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/@types/yauzl:2.10.3

Referenced In Project/Scope: owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	TypeScript definitions for yauzl	Highest
Vendor	package.json	homepage	https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/yauzl	Highest
Vendor	package.json	name	@types/yauzl	Highest
Vendor	package.json	name	@types/yauzl_project	Highest
Product	package.json	name	@types/yauzl	Highest
Version	package.json	version	2.10.3	Highest

Identifiers

pkg:npm/%40types%2Fyauzl@2.10.3 (Confidence:Highest)

@typescript-eslint/eslint-plugin:8.43.0

Description:

TypeScript plugin for ESLint

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?typescript-eslint:8.43.0/@typescript-eslint/eslint-plugin:8.43.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/typescript-eslint:8.43.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.url	https://github.com/typescript-eslint/typescript-eslint/issues	Highest
Vendor	package.json	description	TypeScript plugin for ESLint	Highest
Vendor	package.json	homepage	https://typescript-eslint.io/packages/eslint-plugin	Highest
Vendor	package.json	name	@typescript-eslint/eslint-plugin	Highest
Vendor	package.json	name	@typescript-eslint/eslint-plugin_project	Highest
Product	package.json	name	@typescript-eslint/eslint-plugin	Highest
Version	package.json	version	8.43.0	Highest

Related Dependencies

Identifiers

pkg:npm/%40typescript-eslint%2Feslint-plugin@8.43.0 (Confidence:Highest)

@typescript-eslint/parser:8.43.0

Description:

An ESLint custom parser which leverages TypeScript ESTree

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?typescript-eslint:8.43.0/@typescript-eslint/parser:8.43.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/typescript-eslint:8.43.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.url	https://github.com/typescript-eslint/typescript-eslint/issues	Highest
Vendor	package.json	description	An ESLint custom parser which leverages TypeScript ESTree	Highest
Vendor	package.json	homepage	https://typescript-eslint.io/packages/parser	Highest
Vendor	package.json	name	@typescript-eslint/parser	Highest
Vendor	package.json	name	@typescript-eslint/parser_project	Highest
Product	package.json	name	@typescript-eslint/parser	Highest
Version	package.json	version	8.43.0	Highest

Related Dependencies

Identifiers

pkg:npm/%40typescript-eslint%2Fparser@8.43.0 (Confidence:Highest)

@typescript-eslint/project-service:8.43.0

Description:

Standalone TypeScript project service wrapper for linting.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?@typescript-eslint/typescript-estree:8.43.0/@typescript-eslint/project-service:8.43.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@typescript-eslint/typescript-estree:8.43.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.url	https://github.com/typescript-eslint/typescript-eslint/issues	Highest
Vendor	package.json	description	Standalone TypeScript project service wrapper for linting.	Highest
Vendor	package.json	homepage	https://typescript-eslint.io	Highest
Vendor	package.json	name	@typescript-eslint/project-service	Highest
Vendor	package.json	name	@typescript-eslint/project-service_project	Highest
Product	package.json	name	@typescript-eslint/project-service	Highest
Version	package.json	version	8.43.0	Highest

Related Dependencies

Identifiers

pkg:npm/%40typescript-eslint%2Fproject-service@8.43.0 (Confidence:Highest)

@typescript-eslint/scope-manager:8.43.0

Description:

TypeScript scope analyser for ESLint

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?@typescript-eslint/utils:8.43.0/@typescript-eslint/scope-manager:8.43.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/@typescript-eslint/utils:8.43.0
owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@typescript-eslint/eslint-plugin:8.43.0
owasp-dependency-check:0.9.0/@typescript-eslint/parser:8.43.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.url	https://github.com/typescript-eslint/typescript-eslint/issues	Highest
Vendor	package.json	description	TypeScript scope analyser for ESLint	Highest
Vendor	package.json	homepage	https://typescript-eslint.io/packages/scope-manager	Highest
Vendor	package.json	name	@typescript-eslint/scope-manager	Highest
Vendor	package.json	name	@typescript-eslint/scope-manager_project	Highest
Product	package.json	name	@typescript-eslint/scope-manager	Highest
Version	package.json	version	8.43.0	Highest

Related Dependencies

Identifiers

pkg:npm/%40typescript-eslint%2Fscope-manager@8.43.0 (Confidence:Highest)

@typescript-eslint/tsconfig-utils:8.43.0

Description:

Utilities for collecting TSConfigs for linting scenarios.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?@typescript-eslint/typescript-estree:8.43.0/@typescript-eslint/tsconfig-utils:8.43.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@typescript-eslint/project-service:8.43.0
owasp-dependency-check:0.9.0/@typescript-eslint/typescript-estree:8.43.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.url	https://github.com/typescript-eslint/typescript-eslint/issues	Highest
Vendor	package.json	description	Utilities for collecting TSConfigs for linting scenarios.	Highest
Vendor	package.json	homepage	https://typescript-eslint.io	Highest
Vendor	package.json	name	@typescript-eslint/tsconfig-utils	Highest
Vendor	package.json	name	@typescript-eslint/tsconfig-utils_project	Highest
Product	package.json	name	@typescript-eslint/tsconfig-utils	Highest
Version	package.json	version	8.43.0	Highest

Related Dependencies

Identifiers

pkg:npm/%40typescript-eslint%2Ftsconfig-utils@8.43.0 (Confidence:Highest)

@typescript-eslint/type-utils:8.43.0

Description:

Type utilities for working with TypeScript + ESLint together

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/@typescript-eslint/type-utils:8.43.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@typescript-eslint/eslint-plugin:8.43.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.url	https://github.com/typescript-eslint/typescript-eslint/issues	Highest
Vendor	package.json	description	Type utilities for working with TypeScript + ESLint together	Highest
Vendor	package.json	homepage	https://typescript-eslint.io	Highest
Vendor	package.json	name	@typescript-eslint/type-utils	Highest
Vendor	package.json	name	@typescript-eslint/type-utils_project	Highest
Product	package.json	name	@typescript-eslint/type-utils	Highest
Version	package.json	version	8.43.0	Highest

Related Dependencies

Identifiers

pkg:npm/%40typescript-eslint%2Ftype-utils@8.43.0 (Confidence:Highest)

@typescript-eslint/types:8.43.0

Description:

Types for the TypeScript-ESTree AST spec

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?@typescript-eslint/visitor-keys:8.43.0/@typescript-eslint/types:8.43.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/@typescript-eslint/utils:8.43.0
owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@typescript-eslint/type-utils:8.43.0
owasp-dependency-check:0.9.0/@typescript-eslint/scope-manager:8.43.0
owasp-dependency-check:0.9.0/@typescript-eslint/project-service:8.43.0
owasp-dependency-check:0.9.0/@typescript-eslint/typescript-estree:8.43.0
owasp-dependency-check:0.9.0/@typescript-eslint/parser:8.43.0
owasp-dependency-check:0.9.0/@typescript-eslint/visitor-keys:8.43.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.url	https://github.com/typescript-eslint/typescript-eslint/issues	Highest
Vendor	package.json	description	Types for the TypeScript-ESTree AST spec	Highest
Vendor	package.json	homepage	https://typescript-eslint.io	Highest
Vendor	package.json	name	@typescript-eslint/types	Highest
Vendor	package.json	name	@typescript-eslint/types_project	Highest
Product	package.json	name	@typescript-eslint/types	Highest
Version	package.json	version	8.43.0	Highest

Related Dependencies

Identifiers

pkg:npm/%40typescript-eslint%2Ftypes@8.43.0 (Confidence:Highest)

@typescript-eslint/typescript-estree:8.43.0

Description:

A parser that converts TypeScript source code into an ESTree compatible form

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?typescript-eslint:8.43.0/@typescript-eslint/typescript-estree:8.43.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/@typescript-eslint/utils:8.43.0
owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@typescript-eslint/type-utils:8.43.0
owasp-dependency-check:0.9.0/@typescript-eslint/parser:8.43.0
owasp-dependency-check:0.9.0/typescript-eslint:8.43.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.url	https://github.com/typescript-eslint/typescript-eslint/issues	Highest
Vendor	package.json	description	A parser that converts TypeScript source code into an ESTree compatible form	Highest
Vendor	package.json	homepage	https://typescript-eslint.io/packages/typescript-estree	Highest
Vendor	package.json	name	@typescript-eslint/typescript-estree	Highest
Vendor	package.json	name	@typescript-eslint/typescript-estree_project	Highest
Product	package.json	name	@typescript-eslint/typescript-estree	Highest
Version	package.json	version	8.43.0	Highest

Related Dependencies

Identifiers

pkg:npm/%40typescript-eslint%2Ftypescript-estree@8.43.0 (Confidence:Highest)

@typescript-eslint/utils:8.43.0

Description:

Utilities for working with TypeScript + ESLint together

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?typescript-eslint:8.43.0/@typescript-eslint/utils:8.43.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@typescript-eslint/type-utils:8.43.0
owasp-dependency-check:0.9.0/@typescript-eslint/eslint-plugin:8.43.0
owasp-dependency-check:0.9.0/typescript-eslint:8.43.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.url	https://github.com/typescript-eslint/typescript-eslint/issues	Highest
Vendor	package.json	description	Utilities for working with TypeScript + ESLint together	Highest
Vendor	package.json	homepage	https://typescript-eslint.io/packages/utils	Highest
Vendor	package.json	name	@typescript-eslint/utils	Highest
Vendor	package.json	name	@typescript-eslint/utils_project	Highest
Product	package.json	name	@typescript-eslint/utils	Highest
Version	package.json	version	8.43.0	Highest

Related Dependencies

Identifiers

pkg:npm/%40typescript-eslint%2Futils@8.43.0 (Confidence:Highest)

@typescript-eslint/visitor-keys:8.43.0

Description:

Visitor keys used to help traverse the TypeScript-ESTree AST

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/@typescript-eslint/visitor-keys:8.43.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@typescript-eslint/scope-manager:8.43.0
owasp-dependency-check:0.9.0/@typescript-eslint/typescript-estree:8.43.0
owasp-dependency-check:0.9.0/@typescript-eslint/eslint-plugin:8.43.0
owasp-dependency-check:0.9.0/@typescript-eslint/parser:8.43.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.url	https://github.com/typescript-eslint/typescript-eslint/issues	Highest
Vendor	package.json	description	Visitor keys used to help traverse the TypeScript-ESTree AST	Highest
Vendor	package.json	homepage	https://typescript-eslint.io	Highest
Vendor	package.json	name	@typescript-eslint/visitor-keys	Highest
Vendor	package.json	name	@typescript-eslint/visitor-keys_project	Highest
Product	package.json	name	@typescript-eslint/visitor-keys	Highest
Version	package.json	version	8.43.0	Highest

Related Dependencies

Identifiers

pkg:npm/%40typescript-eslint%2Fvisitor-keys@8.43.0 (Confidence:Highest)

acorn-jsx:5.3.2

Description:

Modern, fast React.js JSX parser

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?espree:10.4.0/acorn-jsx:^5.3.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/espree:10.4.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	Modern, fast React.js JSX parser	Highest
Vendor	package.json	homepage	https://github.com/acornjs/acorn-jsx	Highest
Vendor	package.json	maintainers.email	me@rreverser.com	Highest
Vendor	package.json	maintainers.name	Ingvar Stepanyan	Highest
Vendor	package.json	maintainers.web	http://rreverser.com/	Highest
Vendor	package.json	name	acorn-jsx	Highest
Vendor	package.json	name	acorn-jsx_project	Highest
Product	package.json	name	acorn-jsx	Highest
Version	package.json	version	5.3.2	Highest

Related Dependencies

Identifiers

pkg:npm/acorn-jsx@5.3.2 (Confidence:Highest)

acorn:8.15.0

Description:

ECMAScript parser

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?terser:5.44.0/acorn:^8.15.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/espree:10.4.0
owasp-dependency-check:0.9.0/terser:5.44.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	ECMAScript parser	Highest
Vendor	package.json	homepage	https://github.com/acornjs/acorn	Highest
Vendor	package.json	maintainers.email	marijnh@gmail.com	Highest
Vendor	package.json	maintainers.email	me@rreverser.com	Highest
Vendor	package.json	maintainers.name	Adrian Heine	Highest
Vendor	package.json	maintainers.name	Ingvar Stepanyan	Highest
Vendor	package.json	maintainers.name	Marijn Haverbeke	Highest
Vendor	package.json	maintainers.web	http://adrianheine.de	Highest
Vendor	package.json	maintainers.web	https://marijnhaverbeke.nl	Highest
Vendor	package.json	maintainers.web	https://rreverser.com/	Highest
Vendor	package.json	name	acorn	Highest
Vendor	package.json	name	acorn_project	Highest
Product	package.json	name	acorn	Highest
Version	package.json	version	8.15.0	Highest

Related Dependencies

Identifiers

pkg:npm/acorn@8.15.0 (Confidence:Highest)

ajv:6.12.6

Description:

Another JSON Schema Validator

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?eslint:9.35.0/ajv:^6.12.4

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@eslint/eslintrc:3.3.1
owasp-dependency-check:0.9.0/eslint:9.35.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Evgeny Poberezkin	Highest
Vendor	package.json	bugs.url	https://github.com/ajv-validator/ajv/issues	Highest
Vendor	package.json	description	Another JSON Schema Validator	Highest
Vendor	package.json	homepage	https://github.com/ajv-validator/ajv	Highest
Vendor	package.json	name	ajv	Highest
Vendor	package.json	name	ajv_project	Highest
Product	package.json	name	ajv	Highest
Version	package.json	version	6.12.6	Highest

Related Dependencies

Identifiers

pkg:npm/ajv@6.12.6 (Confidence:Highest)
cpe:2.3:a:ajv.js:ajv:6.12.6:*:*:*:*:*:*:* (Confidence:Highest)

ansi-regex:6.2.2

Description:

Regular expression for matching ANSI escape codes

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?strip-ansi:7.1.2/ansi-regex:^6.0.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/strip-ansi-cjs:6.0.1
owasp-dependency-check:0.9.0/strip-ansi:7.1.2
owasp-dependency-check:0.9.0/strip-ansi:6.0.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	https://sindresorhus.com	Highest
Vendor	package.json	description	Regular expression for matching ANSI escape codes	Highest
Vendor	package.json	name	ansi-regex	Highest
Vendor	package.json	name	ansi-regex_project	Highest
Product	package.json	name	ansi-regex	Highest
Version	package.json	version	6.2.2	Highest

Related Dependencies

Identifiers

pkg:npm/ansi-regex@6.2.2 (Confidence:Highest)
cpe:2.3:a:ansi-regex_project:ansi-regex:6.2.2:*:*:*:*:*:*:* (Confidence:Highest)

ansi-styles:4.3.0

Description:

ANSI escape codes for styling strings in the terminal

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?wrap-ansi-cjs:7.0.0/ansi-styles:^4.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/wrap-ansi-cjs:7.0.0
owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/wrap-ansi:7.0.0
owasp-dependency-check:0.9.0/chalk:4.1.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	sindresorhus.com	Highest
Vendor	package.json	description	ANSI escape codes for styling strings in the terminal	Highest
Vendor	package.json	name	ansi-styles	Highest
Vendor	package.json	name	ansi-styles_project	Highest
Product	package.json	name	ansi-styles	Highest
Version	package.json	version	4.3.0	Highest

Related Dependencies

Identifiers

pkg:npm/ansi-styles@4.3.0 (Confidence:Highest)

ansi-styles:6.2.3

Description:

ANSI escape codes for styling strings in the terminal

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/ansi-styles:6.2.3

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/wrap-ansi:8.1.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	https://sindresorhus.com	Highest
Vendor	package.json	description	ANSI escape codes for styling strings in the terminal	Highest
Vendor	package.json	name	ansi-styles	Highest
Vendor	package.json	name	ansi-styles_project	Highest
Product	package.json	name	ansi-styles	Highest
Version	package.json	version	6.2.3	Highest

Related Dependencies

Identifiers

pkg:npm/ansi-styles@6.2.3 (Confidence:Highest)

ansis:4.1.0

Description:

ANSI color lib

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/ansis:4.1.0

Referenced In Project/Scope: owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	webdiscus	Highest
Vendor	package.json	description	ANSI color lib	Highest
Vendor	package.json	name	ansis	Highest
Vendor	package.json	name	ansis_project	Highest
Product	package.json	name	ansis	Highest
Version	package.json	version	4.1.0	Highest

Identifiers

pkg:npm/ansis@4.1.0 (Confidence:Highest)

argparse:2.0.1

Description:

CLI arguments parser. Native port of python's argparse.

License:

Python-2.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?js-yaml:4.1.0/argparse:^2.0.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/js-yaml:4.1.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	CLI arguments parser. Native port of python's argparse.	Highest
Vendor	package.json	name	argparse	Highest
Vendor	package.json	name	argparse_project	Highest
Product	package.json	name	argparse	Highest
Version	package.json	version	2.0.1	Highest

Related Dependencies

Identifiers

pkg:npm/argparse@2.0.1 (Confidence:Highest)

async:3.2.6

Description:

Higher-order functions and common patterns for asynchronous code

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?jake:10.9.4/async:^3.2.6

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/jake:10.9.4

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Caolan McMahon	Highest
Vendor	package.json	bugs.url	https://github.com/caolan/async/issues	Highest
Vendor	package.json	description	Higher-order functions and common patterns for asynchronous code	Highest
Vendor	package.json	homepage	https://caolan.github.io/async/	Highest
Vendor	package.json	name	async	Highest
Vendor	package.json	name	async_project	Highest
Product	package.json	name	async	Highest
Version	package.json	version	3.2.6	Highest

Related Dependencies

Identifiers

pkg:npm/async@3.2.6 (Confidence:Highest)
cpe:2.3:a:async_project:async:3.2.6:*:*:*:*:*:*:* (Confidence:Highest)

balanced-match:1.0.2

Description:

Match balanced character pairs, like "{" and "}"

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?brace-expansion:2.0.2/balanced-match:^1.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/brace-expansion:2.0.2
owasp-dependency-check:0.9.0/brace-expansion:1.1.12

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	mail@juliangruber.com	Highest
Vendor	package.json	author.name	Julian Gruber	Highest
Vendor	package.json	author.url	http://juliangruber.com	Highest
Vendor	package.json	description	Match balanced character pairs, like "{" and "}"	Highest
Vendor	package.json	homepage	https://github.com/juliangruber/balanced-match	Highest
Vendor	package.json	name	balanced-match	Highest
Vendor	package.json	name	balanced-match_project	Highest
Product	package.json	name	balanced-match	Highest
Version	package.json	version	1.0.2	Highest

Related Dependencies

Identifiers

pkg:npm/balanced-match@1.0.2 (Confidence:Highest)

brace-expansion:1.1.12

Description:

Brace expansion as known from sh/bash

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?minimatch:3.1.2/brace-expansion:^1.1.7

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/minimatch:9.0.5
owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/minimatch:5.1.6
owasp-dependency-check:0.9.0/minimatch:3.1.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	mail@juliangruber.com	Highest
Vendor	package.json	author.name	Julian Gruber	Highest
Vendor	package.json	author.url	http://juliangruber.com	Highest
Vendor	package.json	description	Brace expansion as known from sh/bash	Highest
Vendor	package.json	homepage	https://github.com/juliangruber/brace-expansion	Highest
Vendor	package.json	name	brace-expansion	Highest
Vendor	package.json	name	brace-expansion_project	Highest
Product	package.json	name	brace-expansion	Highest
Version	package.json	version	1.1.12	Highest

Related Dependencies

Identifiers

pkg:npm/brace-expansion@1.1.12 (Confidence:Highest)
cpe:2.3:a:brace_expansion_project:brace_expansion:1.1.12:*:*:*:*:*:*:* (Confidence:Highest)

braces:3.0.3

Description:

Bash-like brace expansion, implemented in JavaScript. Safer than other brace expansion libs, with complete support for the Bash 4.3 braces specification, without sacrificing speed.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?micromatch:4.0.8/braces:^3.0.3

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/micromatch:4.0.8

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Jon Schlinkert (https://github.com/jonschlinkert)	Highest
Vendor	package.json	bugs.url	https://github.com/micromatch/braces/issues	Highest
Vendor	package.json	description	Bash-like brace expansion, implemented in JavaScript. Safer than other brace expansion libs, with complete support for the Bash 4.3 braces specification, without sacrificing speed.	Highest
Vendor	package.json	homepage	https://github.com/micromatch/braces	Highest
Vendor	package.json	name	braces	Highest
Vendor	package.json	name	braces_project	Highest
Product	package.json	name	braces	Highest
Version	package.json	version	3.0.3	Highest

Related Dependencies

Identifiers

pkg:npm/braces@3.0.3 (Confidence:Highest)
cpe:2.3:a:braces_project:braces:3.0.3:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:jonschlinkert:braces:3.0.3:*:*:*:*:*:*:* (Confidence:Highest)

buffer-crc32:0.2.13

Description:

A pure javascript CRC32 algorithm that plays nice with binary data

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?yauzl:2.10.0/buffer-crc32:~0.2.3

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/yauzl:2.10.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Brian J. Brennan <brianloveswords@gmail.com>	Highest
Vendor	package.json	description	A pure javascript CRC32 algorithm that plays nice with binary data	Highest
Vendor	package.json	homepage	https://github.com/brianloveswords/buffer-crc32	Highest
Vendor	package.json	name	buffer-crc32	Highest
Vendor	package.json	name	buffer-crc32_project	Highest
Product	package.json	name	buffer-crc32	Highest
Version	package.json	version	0.2.13	Highest

Related Dependencies

Identifiers

pkg:npm/buffer-crc32@0.2.13 (Confidence:Highest)

buffer-from:1.1.2

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?source-map-support:0.5.21/buffer-from:^1.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/source-map-support:0.5.21

Evidence

Related Dependencies

Identifiers

pkg:npm/buffer-from@1.1.2 (Confidence:Highest)

c8:10.1.3

Description:

output coverage reports using Node.js' built in coverage

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/c8:10.1.3

Referenced In Project/Scope: owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Ben Coe <ben@npmjs.com>	Highest
Vendor	package.json	description	output coverage reports using Node.js' built in coverage	Highest
Vendor	package.json	name	c8	Highest
Vendor	package.json	name	c8_project	Highest
Product	package.json	name	c8	Highest
Version	package.json	version	10.1.3	Highest

Identifiers

pkg:npm/c8@10.1.3 (Confidence:Highest)

callsites:3.1.0

Description:

Get callsites from the V8 stack trace API

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?parent-module:1.0.1/callsites:^3.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/parent-module:1.0.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	sindresorhus.com	Highest
Vendor	package.json	description	Get callsites from the V8 stack trace API	Highest
Vendor	package.json	name	callsites	Highest
Vendor	package.json	name	callsites_project	Highest
Product	package.json	name	callsites	Highest
Version	package.json	version	3.1.0	Highest

Related Dependencies

Identifiers

pkg:npm/callsites@3.1.0 (Confidence:Highest)

chalk:4.1.2

Description:

Terminal string styling done right

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?eslint:9.35.0/chalk:^4.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/eslint:9.35.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	Terminal string styling done right	Highest
Vendor	package.json	name	chalk	Highest
Vendor	package.json	name	chalk_project	Highest
Product	package.json	name	chalk	Highest
Version	package.json	version	4.1.2	Highest

Related Dependencies

Identifiers

pkg:npm/chalk@4.1.2 (Confidence:Highest)

cliui:8.0.1

Description:

easily create complex multi-column command-line-interfaces

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?yargs:17.7.2/cliui:^8.0.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/yargs:17.7.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Ben Coe <ben@npmjs.com>	Highest
Vendor	package.json	description	easily create complex multi-column command-line-interfaces	Highest
Vendor	package.json	name	cliui	Highest
Vendor	package.json	name	cliui_project	Highest
Product	package.json	name	cliui	Highest
Version	package.json	version	8.0.1	Highest

Related Dependencies

Identifiers

pkg:npm/cliui@8.0.1 (Confidence:Highest)

color-convert:2.0.1

Description:

Plain color conversion functions

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/color-convert:2.0.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/ansi-styles:4.3.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Heather Arthur <fayearthur@gmail.com>	Highest
Vendor	package.json	description	Plain color conversion functions	Highest
Vendor	package.json	name	color-convert	Highest
Vendor	package.json	name	color-convert_project	Highest
Product	package.json	name	color-convert	Highest
Version	package.json	version	2.0.1	Highest

Related Dependencies

Identifiers

pkg:npm/color-convert@2.0.1 (Confidence:Highest)

color-name:1.1.4

Description:

A list of color names and its values

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/color-name:1.1.4

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/color-convert:2.0.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	DY <dfcreative@gmail.com>	Highest
Vendor	package.json	bugs.url	https://github.com/colorjs/color-name/issues	Highest
Vendor	package.json	description	A list of color names and its values	Highest
Vendor	package.json	homepage	https://github.com/colorjs/color-name	Highest
Vendor	package.json	name	color-name	Highest
Vendor	package.json	name	color-name_project	Highest
Product	package.json	name	color-name	Highest
Version	package.json	version	1.1.4	Highest

Related Dependencies

Identifiers

pkg:npm/color-name@1.1.4 (Confidence:Highest)

commander:14.0.1

Description:

the complete solution for node.js command-line programs

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/commander:14.0.1

Referenced In Project/Scope: owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	TJ Holowaychuk <tj@vision-media.ca>	Highest
Vendor	package.json	description	the complete solution for node.js command-line programs	Highest
Vendor	package.json	name	commander	Highest
Vendor	package.json	name	commander_project	Highest
Product	package.json	name	commander	Highest
Version	package.json	version	14.0.1	Highest

Identifiers

pkg:npm/commander@14.0.1 (Confidence:Highest)

commander:2.20.3

Description:

the complete solution for node.js command-line programs

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/commander:2.20.3

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/terser:5.44.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	TJ Holowaychuk <tj@vision-media.ca>	Highest
Vendor	package.json	description	the complete solution for node.js command-line programs	Highest
Vendor	package.json	name	commander	Highest
Vendor	package.json	name	commander_project	Highest
Product	package.json	name	commander	Highest
Version	package.json	version	2.20.3	Highest

Related Dependencies

Identifiers

pkg:npm/commander@2.20.3 (Confidence:Highest)

commander:7.2.0

Description:

the complete solution for node.js command-line programs

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/commander:7.2.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/genversion:3.2.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	TJ Holowaychuk <tj@vision-media.ca>	Highest
Vendor	package.json	description	the complete solution for node.js command-line programs	Highest
Vendor	package.json	name	commander	Highest
Vendor	package.json	name	commander_project	Highest
Product	package.json	name	commander	Highest
Version	package.json	version	7.2.0	Highest

Related Dependencies

Identifiers

pkg:npm/commander@7.2.0 (Confidence:Highest)

concat-map:0.0.1

Description:

concatenative mapdashery

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/concat-map:0.0.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/brace-expansion:1.1.12

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	mail@substack.net	Highest
Vendor	package.json	author.name	James Halliday	Highest
Vendor	package.json	author.url	http://substack.net	Highest
Vendor	package.json	description	concatenative mapdashery	Highest
Vendor	package.json	name	concat-map	Highest
Vendor	package.json	name	concat-map_project	Highest
Product	package.json	name	concat-map	Highest
Version	package.json	version	0.0.1	Highest

Related Dependencies

Identifiers

pkg:npm/concat-map@0.0.1 (Confidence:Highest)

convert-source-map:2.0.0

Description:

Converts a source-map from/to  different formats and allows adding/changing properties.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?v8-to-istanbul:9.3.0/convert-source-map:^2.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/v8-to-istanbul:9.3.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	thlorenz@gmx.de	Highest
Vendor	package.json	author.name	Thorsten Lorenz	Highest
Vendor	package.json	author.url	http://thlorenz.com	Highest
Vendor	package.json	description	Converts a source-map from/to different formats and allows adding/changing properties.	Highest
Vendor	package.json	homepage	https://github.com/thlorenz/convert-source-map	Highest
Vendor	package.json	name	convert-source-map	Highest
Vendor	package.json	name	convert-source-map_project	Highest
Product	package.json	name	convert-source-map	Highest
Version	package.json	version	2.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/convert-source-map@2.0.0 (Confidence:Highest)

cross-spawn:7.0.6

Description:

Cross platform child_process#spawn and child_process#spawnSync

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?foreground-child:3.3.1/cross-spawn:^7.0.6

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/foreground-child:3.3.1
owasp-dependency-check:0.9.0/eslint:9.35.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	André Cruz <andre@moxy.studio>	Highest
Vendor	package.json	description	Cross platform child_process#spawn and child_process#spawnSync	Highest
Vendor	package.json	homepage	https://github.com/moxystudio/node-cross-spawn	Highest
Vendor	package.json	name	cross-spawn	Highest
Vendor	package.json	name	cross-spawn_project	Highest
Product	package.json	name	cross-spawn	Highest
Version	package.json	version	7.0.6	Highest

Related Dependencies

Identifiers

pkg:npm/cross-spawn@7.0.6 (Confidence:Highest)

debug:4.4.3

Description:

Lightweight debugging utility for Node.js and the browser

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?extract-zip:2.0.1/debug:^4.1.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@typescript-eslint/type-utils:8.43.0
owasp-dependency-check:0.9.0/@typescript-eslint/project-service:8.43.0
owasp-dependency-check:0.9.0/@typescript-eslint/typescript-estree:8.43.0
owasp-dependency-check:0.9.0/@eslint/eslintrc:3.3.1
owasp-dependency-check:0.9.0/@eslint/config-array:0.21.0
owasp-dependency-check:0.9.0/eslint:9.35.0
owasp-dependency-check:0.9.0/@typescript-eslint/parser:8.43.0
owasp-dependency-check:0.9.0/extract-zip:2.0.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Josh Junon (https://github.com/qix-)	Highest
Vendor	package.json	description	Lightweight debugging utility for Node.js and the browser	Highest
Vendor	package.json	name	debug	Highest
Vendor	package.json	name	debug_project	Highest
Product	package.json	name	debug	Highest
Version	package.json	version	4.4.3	Highest

Related Dependencies

Identifiers

pkg:npm/debug@4.4.3 (Confidence:Highest)
cpe:2.3:a:debug_project:debug:4.4.3:*:*:*:*:*:*:* (Confidence:Highest)

deep-is:0.1.4

Description:

node's assert.deepEqual algorithm except for NaN being equal to NaN

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?optionator:0.9.4/deep-is:^0.1.3

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/optionator:0.9.4

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	thlorenz@gmx.de	Highest
Vendor	package.json	author.name	Thorsten Lorenz	Highest
Vendor	package.json	author.url	http://thlorenz.com	Highest
Vendor	package.json	description	node's assert.deepEqual algorithm except for NaN being equal to NaN	Highest
Vendor	package.json	name	deep-is	Highest
Vendor	package.json	name	deep-is_project	Highest
Product	package.json	name	deep-is	Highest
Version	package.json	version	0.1.4	Highest

Related Dependencies

Identifiers

pkg:npm/deep-is@0.1.4 (Confidence:Highest)

diff:7.0.0

Description:

A JavaScript text diff implementation.

License:

BSD-3-Clause

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?sinon:21.0.0/diff:^7.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/sinon:21.0.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.email	kpdecker@gmail.com	Highest
Vendor	package.json	bugs.url	http://github.com/kpdecker/jsdiff/issues	Highest
Vendor	package.json	description	A JavaScript text diff implementation.	Highest
Vendor	package.json	name	diff	Highest
Vendor	package.json	name	diff_project	Highest
Product	package.json	name	diff	Highest
Version	package.json	version	7.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/diff@7.0.0 (Confidence:Highest)

eastasianwidth:0.2.0

Description:

Get East Asian Width from a character.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?string-width:5.1.2/eastasianwidth:^0.2.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/string-width:5.1.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Masaki Komagata	Highest
Vendor	package.json	description	Get East Asian Width from a character.	Highest
Vendor	package.json	name	eastasianwidth	Highest
Vendor	package.json	name	eastasianwidth_project	Highest
Product	package.json	name	eastasianwidth	Highest
Version	package.json	version	0.2.0	Highest

Related Dependencies

Identifiers

pkg:npm/eastasianwidth@0.2.0 (Confidence:Highest)

ejs:3.1.10

Description:

Embedded JavaScript templates

License:

Apache-2.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?genversion:3.2.0/ejs:^3.1.9

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/genversion:3.2.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Matthew Eernisse <mde@fleegix.org> (http://fleegix.org)	Highest
Vendor	package.json	bugs	https://github.com/mde/ejs/issues	Highest
Vendor	package.json	description	Embedded JavaScript templates	Highest
Vendor	package.json	homepage	https://github.com/mde/ejs	Highest
Vendor	package.json	name	ejs	Highest
Vendor	package.json	name	ejs_project	Highest
Product	package.json	name	ejs	Highest
Version	package.json	version	3.1.10	Highest

Related Dependencies

Identifiers

pkg:npm/ejs@3.1.10 (Confidence:Highest)
cpe:2.3:a:ejs:ejs:3.1.10:*:*:*:*:*:*:* (Confidence:Highest)

emoji-regex:9.2.2

Description:

A regular expression to match all Emoji-only symbols as per the Unicode Standard.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?string-width:5.1.2/emoji-regex:^9.2.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/string-width:4.2.3
owasp-dependency-check:0.9.0/string-width-cjs:4.2.3
owasp-dependency-check:0.9.0/string-width:5.1.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.name	Mathias Bynens	Highest
Vendor	package.json	author.url	https://mathiasbynens.be/	Highest
Vendor	package.json	bugs	https://github.com/mathiasbynens/emoji-regex/issues	Highest
Vendor	package.json	description	A regular expression to match all Emoji-only symbols as per the Unicode Standard.	Highest
Vendor	package.json	homepage	https://mths.be/emoji-regex	Highest
Vendor	package.json	name	emoji-regex	Highest
Vendor	package.json	name	emoji-regex_project	Highest
Product	package.json	name	emoji-regex	Highest
Version	package.json	version	9.2.2	Highest

Related Dependencies

Identifiers

pkg:npm/emoji-regex@9.2.2 (Confidence:Highest)

end-of-stream:1.4.5

Description:

Call a callback when a readable/writable/duplex stream has completed or failed.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?pump:3.0.3/end-of-stream:^1.1.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/pump:3.0.3
owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Mathias Buus <mathiasbuus@gmail.com>	Highest
Vendor	package.json	bugs.url	https://github.com/mafintosh/end-of-stream/issues	Highest
Vendor	package.json	description	Call a callback when a readable/writable/duplex stream has completed or failed.	Highest
Vendor	package.json	homepage	https://github.com/mafintosh/end-of-stream	Highest
Vendor	package.json	name	end-of-stream	Highest
Vendor	package.json	name	end-of-stream_project	Highest
Product	package.json	name	end-of-stream	Highest
Version	package.json	version	1.4.5	Highest

Related Dependencies

Identifiers

pkg:npm/end-of-stream@1.4.5 (Confidence:Highest)

escalade:3.2.0

Description:

A tiny (183B to 210B) and fast utility to ascend parent directories

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?yargs:17.7.2/escalade:^3.1.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/yargs:17.7.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	luke.edwards05@gmail.com	Highest
Vendor	package.json	author.name	Luke Edwards	Highest
Vendor	package.json	author.url	https://lukeed.com	Highest
Vendor	package.json	description	A tiny (183B to 210B) and fast utility to ascend parent directories	Highest
Vendor	package.json	name	escalade	Highest
Vendor	package.json	name	escalade_project	Highest
Product	package.json	name	escalade	Highest
Version	package.json	version	3.2.0	Highest

Related Dependencies

Identifiers

pkg:npm/escalade@3.2.0 (Confidence:Highest)

escape-string-regexp:4.0.0

Description:

Escape RegExp special characters

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?eslint:9.35.0/escape-string-regexp:^4.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/eslint:9.35.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	https://sindresorhus.com	Highest
Vendor	package.json	description	Escape RegExp special characters	Highest
Vendor	package.json	name	escape-string-regexp	Highest
Vendor	package.json	name	escape-string-regexp_project	Highest
Product	package.json	name	escape-string-regexp	Highest
Version	package.json	version	4.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/escape-string-regexp@4.0.0 (Confidence:Highest)

eslint-config-prettier:10.1.8

Description:

Turns off all rules that are unnecessary or might conflict with Prettier.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/eslint-config-prettier:10.1.8

Referenced In Project/Scope: owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Simon Lydell	Highest
Vendor	package.json	description	Turns off all rules that are unnecessary or might conflict with Prettier.	Highest
Vendor	package.json	homepage	https://github.com/prettier/eslint-config-prettier#readme	Highest
Vendor	package.json	name	eslint-config-prettier	Highest
Vendor	package.json	name	eslint-config-prettier_project	Highest
Product	package.json	name	eslint-config-prettier	Highest
Version	package.json	version	10.1.8	Highest

Identifiers

pkg:npm/eslint-config-prettier@10.1.8 (Confidence:Highest)

eslint-plugin-prettier:5.5.4

Description:

Runs prettier as an eslint rule

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/eslint-plugin-prettier:5.5.4

Referenced In Project/Scope: owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Teddy Katz	Highest
Vendor	package.json	description	Runs prettier as an eslint rule	Highest
Vendor	package.json	homepage	https://github.com/prettier/eslint-plugin-prettier#readme	Highest
Vendor	package.json	name	eslint-plugin-prettier	Highest
Vendor	package.json	name	eslint-plugin-prettier_project	Highest
Product	package.json	name	eslint-plugin-prettier	Highest
Version	package.json	version	5.5.4	Highest

Identifiers

pkg:npm/eslint-plugin-prettier@5.5.4 (Confidence:Highest)

eslint-scope:8.4.0

Description:

ECMAScript scope analyzer for ESLint

License:

BSD-2-Clause

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/eslint-scope:8.4.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/eslint:9.35.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.url	https://github.com/eslint/js/issues	Highest
Vendor	package.json	description	ECMAScript scope analyzer for ESLint	Highest
Vendor	package.json	homepage	https://github.com/eslint/js/blob/main/packages/eslint-scope/README.md	Highest
Vendor	package.json	name	eslint-scope	Highest
Vendor	package.json	name	eslint-scope_project	Highest
Product	package.json	name	eslint-scope	Highest
Version	package.json	version	8.4.0	Highest

Related Dependencies

Identifiers

pkg:npm/eslint-scope@8.4.0 (Confidence:Highest)

eslint-visitor-keys:3.4.3

Description:

Constants and utilities about visitor keys to traverse AST.

License:

Apache-2.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/eslint-visitor-keys:3.4.3

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@eslint-community/eslint-utils:4.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Toru Nagashima (https://github.com/mysticatea)	Highest
Vendor	package.json	bugs.url	https://github.com/eslint/eslint-visitor-keys/issues	Highest
Vendor	package.json	description	Constants and utilities about visitor keys to traverse AST.	Highest
Vendor	package.json	homepage	https://github.com/eslint/eslint-visitor-keys#readme	Highest
Vendor	package.json	name	eslint-visitor-keys	Highest
Vendor	package.json	name	eslint-visitor-keys_project	Highest
Product	package.json	name	eslint-visitor-keys	Highest
Version	package.json	version	3.4.3	Highest

Related Dependencies

Identifiers

pkg:npm/eslint-visitor-keys@3.4.3 (Confidence:Highest)

eslint-visitor-keys:4.2.1

Description:

Constants and utilities about visitor keys to traverse AST.

License:

Apache-2.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?espree:10.4.0/eslint-visitor-keys:^4.2.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/espree:10.4.0
owasp-dependency-check:0.9.0/eslint:9.35.0
owasp-dependency-check:0.9.0/@typescript-eslint/visitor-keys:8.43.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Toru Nagashima (https://github.com/mysticatea)	Highest
Vendor	package.json	bugs.url	https://github.com/eslint/js/issues	Highest
Vendor	package.json	description	Constants and utilities about visitor keys to traverse AST.	Highest
Vendor	package.json	homepage	https://github.com/eslint/js/blob/main/packages/eslint-visitor-keys/README.md	Highest
Vendor	package.json	name	eslint-visitor-keys	Highest
Vendor	package.json	name	eslint-visitor-keys_project	Highest
Product	package.json	name	eslint-visitor-keys	Highest
Version	package.json	version	4.2.1	Highest

Related Dependencies

Identifiers

pkg:npm/eslint-visitor-keys@4.2.1 (Confidence:Highest)

eslint:9.35.0

Description:

An AST-based pattern checker for JavaScript.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/eslint:9.35.0

Referenced In Project/Scope: owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Nicholas C. Zakas <nicholas+npm@nczconsulting.com>	Highest
Vendor	package.json	bugs	https://github.com/eslint/eslint/issues/	Highest
Vendor	package.json	description	An AST-based pattern checker for JavaScript.	Highest
Vendor	package.json	homepage	https://eslint.org	Highest
Vendor	package.json	name	eslint	Highest
Vendor	package.json	name	eslint_project	Highest
Product	package.json	name	eslint	Highest
Version	package.json	version	9.35.0	Highest

Identifiers

pkg:npm/eslint@9.35.0 (Confidence:Highest)

espree:10.4.0

Description:

An Esprima-compatible JavaScript parser built on Acorn

License:

BSD-2-Clause

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/espree:10.4.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@eslint/eslintrc:3.3.1
owasp-dependency-check:0.9.0/eslint:9.35.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Nicholas C. Zakas <nicholas+npm@nczconsulting.com>	Highest
Vendor	package.json	bugs.url	https://github.com/eslint/js/issues	Highest
Vendor	package.json	description	An Esprima-compatible JavaScript parser built on Acorn	Highest
Vendor	package.json	homepage	https://github.com/eslint/js/blob/main/packages/espree/README.md	Highest
Vendor	package.json	name	espree	Highest
Vendor	package.json	name	espree_project	Highest
Product	package.json	name	espree	Highest
Version	package.json	version	10.4.0	Highest

Related Dependencies

Identifiers

pkg:npm/espree@10.4.0 (Confidence:Highest)

esquery:1.6.0

Description:

A query library for ECMAScript AST using a CSS selector like query language.

License:

BSD-3-Clause

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/esquery:1.6.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/eslint:9.35.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Joel Feenstra <jrfeenst+esquery@gmail.com>	Highest
Vendor	package.json	bugs	https://github.com/estools/esquery/issues	Highest
Vendor	package.json	description	A query library for ECMAScript AST using a CSS selector like query language.	Highest
Vendor	package.json	homepage	https://github.com/estools/esquery/	Highest
Vendor	package.json	name	esquery	Highest
Vendor	package.json	name	esquery_project	Highest
Product	package.json	name	esquery	Highest
Version	package.json	version	1.6.0	Highest

Related Dependencies

Identifiers

pkg:npm/esquery@1.6.0 (Confidence:Highest)

esrecurse:4.3.0

Description:

ECMAScript AST recursive visitor

License:

BSD-2-Clause

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/esrecurse:4.3.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/eslint-scope:8.4.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	ECMAScript AST recursive visitor	Highest
Vendor	package.json	homepage	https://github.com/estools/esrecurse	Highest
Vendor	package.json	maintainers.email	utatane.tea@gmail.com	Highest
Vendor	package.json	maintainers.name	Yusuke Suzuki	Highest
Vendor	package.json	maintainers.web	https://github.com/Constellation	Highest
Vendor	package.json	name	esrecurse	Highest
Vendor	package.json	name	esrecurse_project	Highest
Product	package.json	name	esrecurse	Highest
Version	package.json	version	4.3.0	Highest

Related Dependencies

Identifiers

pkg:npm/esrecurse@4.3.0 (Confidence:Highest)

estraverse:5.3.0

Description:

ECMAScript JS AST traversal functions

License:

BSD-2-Clause

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/estraverse:5.3.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/esquery:1.6.0
owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/esrecurse:4.3.0
owasp-dependency-check:0.9.0/eslint-scope:8.4.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	ECMAScript JS AST traversal functions	Highest
Vendor	package.json	homepage	https://github.com/estools/estraverse	Highest
Vendor	package.json	maintainers.email	utatane.tea@gmail.com	Highest
Vendor	package.json	maintainers.name	Yusuke Suzuki	Highest
Vendor	package.json	maintainers.web	http://github.com/Constellation	Highest
Vendor	package.json	name	estraverse	Highest
Vendor	package.json	name	estraverse_project	Highest
Product	package.json	name	estraverse	Highest
Version	package.json	version	5.3.0	Highest

Related Dependencies

Identifiers

pkg:npm/estraverse@5.3.0 (Confidence:Highest)

esutils:2.0.3

Description:

utility box for ECMAScript language tools

License:

BSD-2-Clause

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/esutils:2.0.3

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/eslint:9.35.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	utility box for ECMAScript language tools	Highest
Vendor	package.json	homepage	https://github.com/estools/esutils	Highest
Vendor	package.json	maintainers.email	utatane.tea@gmail.com	Highest
Vendor	package.json	maintainers.name	Yusuke Suzuki	Highest
Vendor	package.json	maintainers.web	http://github.com/Constellation	Highest
Vendor	package.json	name	esutils	Highest
Vendor	package.json	name	esutils_project	Highest
Product	package.json	name	esutils	Highest
Version	package.json	version	2.0.3	Highest

Related Dependencies

Identifiers

pkg:npm/esutils@2.0.3 (Confidence:Highest)

extract-zip:2.0.1

Description:

unzip a zip file into a directory using 100% javascript

License:

BSD-2-Clause

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/extract-zip:2.0.1

Referenced In Project/Scope: owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	max ogden	Highest
Vendor	package.json	description	unzip a zip file into a directory using 100% javascript	Highest
Vendor	package.json	name	extract-zip	Highest
Vendor	package.json	name	extract-zip_project	Highest
Product	package.json	name	extract-zip	Highest
Version	package.json	version	2.0.1	Highest

Identifiers

pkg:npm/extract-zip@2.0.1 (Confidence:Highest)

fast-deep-equal:3.1.3

Description:

Fast deep equal

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/fast-deep-equal:3.1.3

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/ajv:6.12.6
owasp-dependency-check:0.9.0/eslint:9.35.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Evgeny Poberezkin	Highest
Vendor	package.json	bugs.url	https://github.com/epoberezkin/fast-deep-equal/issues	Highest
Vendor	package.json	description	Fast deep equal	Highest
Vendor	package.json	homepage	https://github.com/epoberezkin/fast-deep-equal#readme	Highest
Vendor	package.json	name	fast-deep-equal	Highest
Vendor	package.json	name	fast-deep-equal_project	Highest
Product	package.json	name	fast-deep-equal	Highest
Version	package.json	version	3.1.3	Highest

Related Dependencies

Identifiers

pkg:npm/fast-deep-equal@3.1.3 (Confidence:Highest)

fast-diff:1.3.0

Description:

Fast Javascript text diff

License:

Apache-2.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?prettier-linter-helpers:1.0.0/fast-diff:^1.1.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/prettier-linter-helpers:1.0.0
owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Jason Chen <jhchen7@gmail.com>	Highest
Vendor	package.json	bugs.url	https://github.com/jhchen/fast-diff/issues	Highest
Vendor	package.json	description	Fast Javascript text diff	Highest
Vendor	package.json	name	fast-diff	Highest
Vendor	package.json	name	fast-diff_project	Highest
Product	package.json	name	fast-diff	Highest
Version	package.json	version	1.3.0	Highest

Related Dependencies

Identifiers

pkg:npm/fast-diff@1.3.0 (Confidence:Highest)

fast-glob:3.3.3

Description:

It's a very fast and efficient glob library for Node.js

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?knip:5.63.1/fast-glob:^3.3.3

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@typescript-eslint/typescript-estree:8.43.0
owasp-dependency-check:0.9.0/knip:5.63.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.name	Denis Malinochkin	Highest
Vendor	package.json	author.url	https://mrmlnc.com	Highest
Vendor	package.json	description	It's a very fast and efficient glob library for Node.js	Highest
Vendor	package.json	name	fast-glob	Highest
Vendor	package.json	name	fast-glob_project	Highest
Product	package.json	name	fast-glob	Highest
Version	package.json	version	3.3.3	Highest

Related Dependencies

Identifiers

pkg:npm/fast-glob@3.3.3 (Confidence:Highest)

fast-json-stable-stringify:2.1.0

Description:

deterministic `JSON.stringify()` - a faster version of substack's json-stable-strigify without jsonify

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/fast-json-stable-stringify:2.1.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/ajv:6.12.6

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	mail@substack.net	Highest
Vendor	package.json	author.name	James Halliday	Highest
Vendor	package.json	author.url	http://substack.net	Highest
Vendor	package.json	description	deterministic `JSON.stringify()` - a faster version of substack's json-stable-strigify without jsonify	Highest
Vendor	package.json	homepage	https://github.com/epoberezkin/fast-json-stable-stringify	Highest
Vendor	package.json	name	fast-json-stable-stringify	Highest
Vendor	package.json	name	fast-json-stable-stringify_project	Highest
Product	package.json	name	fast-json-stable-stringify	Highest
Version	package.json	version	2.1.0	Highest

Related Dependencies

Identifiers

pkg:npm/fast-json-stable-stringify@2.1.0 (Confidence:Highest)

fast-levenshtein:2.0.6

Description:

Efficient implementation of Levenshtein algorithm  with locale-specific collator support.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?optionator:0.9.4/fast-levenshtein:^2.0.6

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/optionator:0.9.4

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Ramesh Nair <ram@hiddentao.com> (http://www.hiddentao.com/)	Highest
Vendor	package.json	description	Efficient implementation of Levenshtein algorithm with locale-specific collator support.	Highest
Vendor	package.json	name	fast-levenshtein	Highest
Vendor	package.json	name	fast-levenshtein_project	Highest
Product	package.json	name	fast-levenshtein	Highest
Version	package.json	version	2.0.6	Highest

Related Dependencies

Identifiers

pkg:npm/fast-levenshtein@2.0.6 (Confidence:Highest)

fastq:1.19.1

Description:

Fast, in memory work queue

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/fastq:1.19.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@nodelib/fs.walk:1.2.8

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Matteo Collina <hello@matteocollina.com>	Highest
Vendor	package.json	bugs.url	https://github.com/mcollina/fastq/issues	Highest
Vendor	package.json	description	Fast, in memory work queue	Highest
Vendor	package.json	homepage	https://github.com/mcollina/fastq#readme	Highest
Vendor	package.json	name	fastq	Highest
Vendor	package.json	name	fastq_project	Highest
Product	package.json	name	fastq	Highest
Version	package.json	version	1.19.1	Highest

Related Dependencies

Identifiers

pkg:npm/fastq@1.19.1 (Confidence:Highest)

fd-package-json:2.0.0

Description:

Utilities for finding the closest package.json file

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?formatly:0.3.0/fd-package-json:^2.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/formatly:0.3.0
owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	James Garbutt (https://github.com/43081j)	Highest
Vendor	package.json	bugs.url	https://github.com/es-tooling/fd-package-json/issues	Highest
Vendor	package.json	description	Utilities for finding the closest package.json file	Highest
Vendor	package.json	homepage	https://github.com/es-tooling/fd-package-json#readme	Highest
Vendor	package.json	name	fd-package-json	Highest
Vendor	package.json	name	fd-package-json_project	Highest
Product	package.json	name	fd-package-json	Highest
Version	package.json	version	2.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/fd-package-json@2.0.0 (Confidence:Highest)

fd-slicer:1.1.0

Description:

safely create multiple ReadStream or WriteStream objects from the same file descriptor

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?yauzl:2.10.0/fd-slicer:~1.1.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/yauzl:2.10.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Andrew Kelley <superjoe30@gmail.com>	Highest
Vendor	package.json	bugs.url	https://github.com/andrewrk/node-fd-slicer/issues	Highest
Vendor	package.json	description	safely create multiple ReadStream or WriteStream objects from the same file descriptor	Highest
Vendor	package.json	name	fd-slicer	Highest
Vendor	package.json	name	fd-slicer_project	Highest
Product	package.json	name	fd-slicer	Highest
Version	package.json	version	1.1.0	Highest

Related Dependencies

Identifiers

pkg:npm/fd-slicer@1.1.0 (Confidence:Highest)

file-entry-cache:8.0.0

Description:

Super simple cache for file metadata, useful for process that work o a given series of files and that only need to repeat the job on the changed ones since the previous run of the process

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/file-entry-cache:8.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/eslint:9.35.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.name	Jared Wray	Highest
Vendor	package.json	author.url	https://jaredwray.com	Highest
Vendor	package.json	description	Super simple cache for file metadata, useful for process that work o a given series of files and that only need to repeat the job on the changed ones since the previous run of the process	Highest
Vendor	package.json	name	file-entry-cache	Highest
Vendor	package.json	name	file-entry-cache_project	Highest
Product	package.json	name	file-entry-cache	Highest
Version	package.json	version	8.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/file-entry-cache@8.0.0 (Confidence:Highest)

filelist:1.0.4

Description:

Lazy-evaluating list of files, based on globs or regex patterns

License:

Apache-2.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?jake:10.9.4/filelist:^1.0.4

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/jake:10.9.4

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Matthew Eernisse <mde@fleegix.org> (http://fleegix.org)	Highest
Vendor	package.json	bugs.url	https://github.com/mde/filelist/issues	Highest
Vendor	package.json	description	Lazy-evaluating list of files, based on globs or regex patterns	Highest
Vendor	package.json	homepage	https://github.com/mde/filelist	Highest
Vendor	package.json	name	filelist	Highest
Vendor	package.json	name	filelist_project	Highest
Product	package.json	name	filelist	Highest
Version	package.json	version	1.0.4	Highest

Related Dependencies

Identifiers

pkg:npm/filelist@1.0.4 (Confidence:Highest)

fill-range:7.1.1

Description:

Fill in a range of numbers or letters, optionally passing an increment or `step` to use, or create a regex-compatible range with `options.toRegex`

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/fill-range:7.1.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/braces:3.0.3

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Jon Schlinkert (https://github.com/jonschlinkert)	Highest
Vendor	package.json	bugs.url	https://github.com/jonschlinkert/fill-range/issues	Highest
Vendor	package.json	description	Fill in a range of numbers or letters, optionally passing an increment or `step` to use, or create a regex-compatible range with `options.toRegex`	Highest
Vendor	package.json	homepage	https://github.com/jonschlinkert/fill-range	Highest
Vendor	package.json	name	fill-range	Highest
Vendor	package.json	name	fill-range_project	Highest
Product	package.json	name	fill-range	Highest
Version	package.json	version	7.1.1	Highest

Related Dependencies

Identifiers

pkg:npm/fill-range@7.1.1 (Confidence:Highest)

find-package:1.0.0

Description:

Find the nearest package.json in your current node module

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?genversion:3.2.0/find-package:^1.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/genversion:3.2.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Javier Alba	Highest
Vendor	package.json	bugs.url	https://github.com/jalba/find-package/issues	Highest
Vendor	package.json	description	Find the nearest package.json in your current node module	Highest
Vendor	package.json	homepage	https://github.com/jalba/find-package	Highest
Vendor	package.json	name	find-package	Highest
Vendor	package.json	name	find-package_project	Highest
Product	package.json	name	find-package	Highest
Version	package.json	version	1.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/find-package@1.0.0 (Confidence:Highest)

find-up:5.0.0

Description:

Find a file or directory by walking up parent directories

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/find-up:5.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/c8:10.1.3
owasp-dependency-check:0.9.0/eslint:9.35.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	https://sindresorhus.com	Highest
Vendor	package.json	description	Find a file or directory by walking up parent directories	Highest
Vendor	package.json	name	find-up	Highest
Vendor	package.json	name	find-up_project	Highest
Product	package.json	name	find-up	Highest
Version	package.json	version	5.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/find-up@5.0.0 (Confidence:Highest)

flat-cache:4.0.1

Description:

A stupidly simple key/value storage using files to persist some data

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/flat-cache:4.0.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/file-entry-cache:8.0.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.name	Jared Wray	Highest
Vendor	package.json	author.url	https://jaredwray.com	Highest
Vendor	package.json	description	A stupidly simple key/value storage using files to persist some data	Highest
Vendor	package.json	name	flat-cache	Highest
Vendor	package.json	name	flat-cache_project	Highest
Product	package.json	name	flat-cache	Highest
Version	package.json	version	4.0.1	Highest

Related Dependencies

Identifiers

pkg:npm/flat-cache@4.0.1 (Confidence:Highest)

flatted:3.3.3

Description:

A super light and fast circular JSON parser.

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/flatted:3.3.3

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/flat-cache:4.0.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Andrea Giammarchi	Highest
Vendor	package.json	bugs.url	https://github.com/WebReflection/flatted/issues	Highest
Vendor	package.json	description	A super light and fast circular JSON parser.	Highest
Vendor	package.json	homepage	https://github.com/WebReflection/flatted#readme	Highest
Vendor	package.json	name	flatted	Highest
Vendor	package.json	name	flatted_project	Highest
Product	package.json	name	flatted	Highest
Version	package.json	version	3.3.3	Highest

Related Dependencies

Identifiers

pkg:npm/flatted@3.3.3 (Confidence:Highest)

foreground-child:3.3.1

Description:

Run a child as if it's the foreground process. Give it stdio. Exit when it exits.

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?glob:11.0.3/foreground-child:^3.3.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/glob:11.0.3
owasp-dependency-check:0.9.0/glob:10.4.5
owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/c8:10.1.3

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)	Highest
Vendor	package.json	description	Run a child as if it's the foreground process. Give it stdio. Exit when it exits.	Highest
Vendor	package.json	name	foreground-child	Highest
Vendor	package.json	name	foreground-child_project	Highest
Product	package.json	name	foreground-child	Highest
Version	package.json	version	3.3.1	Highest

Related Dependencies

Identifiers

pkg:npm/foreground-child@3.3.1 (Confidence:Highest)

formatly:0.3.0

Description:

Formats your code with whatever formatter your project is already using. 🧼

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?knip:5.63.1/formatly:^0.3.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/knip:5.63.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	npm@joshuakgoldberg.com	Highest
Vendor	package.json	author.name	Josh Goldberg ✨	Highest
Vendor	package.json	description	Formats your code with whatever formatter your project is already using. 🧼	Highest
Vendor	package.json	name	formatly	Highest
Vendor	package.json	name	formatly_project	Highest
Product	package.json	name	formatly	Highest
Version	package.json	version	0.3.0	Highest

Related Dependencies

Identifiers

pkg:npm/formatly@0.3.0 (Confidence:Highest)

genversion:3.2.0

Description:

A command line utility to read version from package.json and attach it into your module as a property

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/genversion:3.2.0

Referenced In Project/Scope: owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	akseli.palen@gmail.com	Highest
Vendor	package.json	author.name	Akseli Palen	Highest
Vendor	package.json	description	A command line utility to read version from package.json and attach it into your module as a property	Highest
Vendor	package.json	homepage	https://github.com/axelpale/genversion	Highest
Vendor	package.json	name	genversion	Highest
Vendor	package.json	name	genversion_project	Highest
Product	package.json	name	genversion	Highest
Version	package.json	version	3.2.0	Highest

Identifiers

pkg:npm/genversion@3.2.0 (Confidence:Highest)

get-caller-file:2.0.5

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?yargs:17.7.2/get-caller-file:^2.0.5

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/yargs:17.7.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Stefan Penner	Highest
Vendor	package.json	bugs.url	https://github.com/stefanpenner/get-caller-file/issues	Highest
Vendor	package.json	description		Highest
Vendor	package.json	homepage	https://github.com/stefanpenner/get-caller-file#readme	Highest
Vendor	package.json	name	get-caller-file	Highest
Vendor	package.json	name	get-caller-file_project	Highest
Product	package.json	name	get-caller-file	Highest
Version	package.json	version	2.0.5	Highest

Related Dependencies

Identifiers

pkg:npm/get-caller-file@2.0.5 (Confidence:Highest)

get-stream:5.2.0

Description:

Get a stream as a string, buffer, or array

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/get-stream:5.2.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/extract-zip:2.0.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	https://sindresorhus.com	Highest
Vendor	package.json	description	Get a stream as a string, buffer, or array	Highest
Vendor	package.json	name	get-stream	Highest
Vendor	package.json	name	get-stream_project	Highest
Product	package.json	name	get-stream	Highest
Version	package.json	version	5.2.0	Highest

Related Dependencies

Identifiers

pkg:npm/get-stream@5.2.0 (Confidence:Highest)

glob-parent:5.1.2

Description:

Extract the non-magic parent path from a glob string.

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/glob-parent:5.1.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/fast-glob:3.3.3

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Gulp Team <team@gulpjs.com> (https://gulpjs.com/)	Highest
Vendor	package.json	description	Extract the non-magic parent path from a glob string.	Highest
Vendor	package.json	name	glob-parent	Highest
Vendor	package.json	name	glob-parent_project	Highest
Product	package.json	name	glob-parent	Highest
Version	package.json	version	5.1.2	Highest

Related Dependencies

Identifiers

pkg:npm/glob-parent@5.1.2 (Confidence:Highest)
cpe:2.3:a:gulpjs:glob-parent:5.1.2:*:*:*:*:*:*:* (Confidence:Highest)

glob-parent:6.0.2

Description:

Extract the non-magic parent path from a glob string.

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/glob-parent:6.0.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/eslint:9.35.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Gulp Team <team@gulpjs.com> (https://gulpjs.com/)	Highest
Vendor	package.json	description	Extract the non-magic parent path from a glob string.	Highest
Vendor	package.json	name	glob-parent	Highest
Vendor	package.json	name	glob-parent_project	Highest
Product	package.json	name	glob-parent	Highest
Version	package.json	version	6.0.2	Highest

Related Dependencies

Identifiers

pkg:npm/glob-parent@6.0.2 (Confidence:Highest)
cpe:2.3:a:gulpjs:glob-parent:6.0.2:*:*:*:*:*:*:* (Confidence:Highest)

glob:10.4.5

Description:

the most correct and second fastest glob implementation in JavaScript

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?test-exclude:7.0.1/glob:^10.4.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/test-exclude:7.0.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Isaac Z. Schlueter <i@izs.me> (https://blog.izs.me/)	Highest
Vendor	package.json	description	the most correct and second fastest glob implementation in JavaScript	Highest
Vendor	package.json	name	glob	Highest
Vendor	package.json	name	glob_project	Highest
Product	package.json	name	glob	Highest
Version	package.json	version	10.4.5	Highest

Related Dependencies

Identifiers

pkg:npm/glob@10.4.5 (Confidence:Highest)

glob:11.0.3

Description:

the most correct and second fastest glob implementation in JavaScript

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/glob:11.0.3

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/rimraf:6.0.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Isaac Z. Schlueter <i@izs.me> (https://blog.izs.me/)	Highest
Vendor	package.json	description	the most correct and second fastest glob implementation in JavaScript	Highest
Vendor	package.json	name	glob	Highest
Vendor	package.json	name	glob_project	Highest
Product	package.json	name	glob	Highest
Version	package.json	version	11.0.3	Highest

Related Dependencies

Identifiers

pkg:npm/glob@11.0.3 (Confidence:Highest)

globals:14.0.0

Description:

Global identifiers from different JavaScript environments

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/globals:14.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@eslint/eslintrc:3.3.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	https://sindresorhus.com	Highest
Vendor	package.json	description	Global identifiers from different JavaScript environments	Highest
Vendor	package.json	name	globals	Highest
Vendor	package.json	name	globals_project	Highest
Product	package.json	name	globals	Highest
Version	package.json	version	14.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/globals@14.0.0 (Confidence:Highest)

graphemer:1.4.0

Description:

A JavaScript library that breaks strings into their individual user-perceived characters (including emojis!)

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/graphemer:1.4.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@typescript-eslint/eslint-plugin:8.43.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Matt Davies <matt@filament.so> (https://github.com/mattpauldavies)	Highest
Vendor	package.json	bugs	https://github.com/flmnt/graphemer/issues	Highest
Vendor	package.json	description	A JavaScript library that breaks strings into their individual user-perceived characters (including emojis!)	Highest
Vendor	package.json	homepage	https://github.com/flmnt/graphemer	Highest
Vendor	package.json	name	graphemer	Highest
Vendor	package.json	name	graphemer_project	Highest
Product	package.json	name	graphemer	Highest
Version	package.json	version	1.4.0	Highest

Related Dependencies

Identifiers

pkg:npm/graphemer@1.4.0 (Confidence:Highest)

has-flag:4.0.0

Description:

Check if argv has a specific flag

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?supports-color:7.2.0/has-flag:^4.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/supports-color:7.2.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	sindresorhus.com	Highest
Vendor	package.json	description	Check if argv has a specific flag	Highest
Vendor	package.json	name	has-flag	Highest
Vendor	package.json	name	has-flag_project	Highest
Product	package.json	name	has-flag	Highest
Version	package.json	version	4.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/has-flag@4.0.0 (Confidence:Highest)

html-escaper:2.0.2

Description:

fast and safe way to escape and unescape &<>'" chars

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?istanbul-reports:3.2.0/html-escaper:^2.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/istanbul-reports:3.2.0
owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Andrea Giammarchi	Highest
Vendor	package.json	bugs.url	https://github.com/WebReflection/html-escaper/issues	Highest
Vendor	package.json	description	fast and safe way to escape and unescape &<>'" chars	Highest
Vendor	package.json	homepage	https://github.com/WebReflection/html-escaper	Highest
Vendor	package.json	name	html-escaper	Highest
Vendor	package.json	name	html-escaper_project	Highest
Product	package.json	name	html-escaper	Highest
Version	package.json	version	2.0.2	Highest

Related Dependencies

Identifiers

pkg:npm/html-escaper@2.0.2 (Confidence:Highest)

ignore:5.3.2

Description:

Ignore is a manager and filter for .gitignore rules, the one used by eslint, gitbook and many others.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/ignore:5.3.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@eslint/eslintrc:3.3.1
owasp-dependency-check:0.9.0/eslint:9.35.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	kael	Highest
Vendor	package.json	bugs.url	https://github.com/kaelzhang/node-ignore/issues	Highest
Vendor	package.json	description	Ignore is a manager and filter for .gitignore rules, the one used by eslint, gitbook and many others.	Highest
Vendor	package.json	name	ignore	Highest
Vendor	package.json	name	ignore_project	Highest
Product	package.json	name	ignore	Highest
Version	package.json	version	5.3.2	Highest

Related Dependencies

Identifiers

pkg:npm/ignore@5.3.2 (Confidence:Highest)

ignore:7.0.5

Description:

Ignore is a manager and filter for .gitignore rules, the one used by eslint, gitbook and many others.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/ignore:7.0.5

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@typescript-eslint/eslint-plugin:8.43.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	kael	Highest
Vendor	package.json	bugs.url	https://github.com/kaelzhang/node-ignore/issues	Highest
Vendor	package.json	description	Ignore is a manager and filter for .gitignore rules, the one used by eslint, gitbook and many others.	Highest
Vendor	package.json	name	ignore	Highest
Vendor	package.json	name	ignore_project	Highest
Product	package.json	name	ignore	Highest
Version	package.json	version	7.0.5	Highest

Related Dependencies

Identifiers

pkg:npm/ignore@7.0.5 (Confidence:Highest)

import-fresh:3.3.1

Description:

Import a module while bypassing the cache

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/import-fresh:3.3.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@eslint/eslintrc:3.3.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	https://sindresorhus.com	Highest
Vendor	package.json	description	Import a module while bypassing the cache	Highest
Vendor	package.json	name	import-fresh	Highest
Vendor	package.json	name	import-fresh_project	Highest
Product	package.json	name	import-fresh	Highest
Version	package.json	version	3.3.1	Highest

Related Dependencies

Identifiers

pkg:npm/import-fresh@3.3.1 (Confidence:Highest)

imurmurhash:0.1.4

Description:

An incremental implementation of MurmurHash3

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/imurmurhash:0.1.4

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/eslint:9.35.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	jensyt@gmail.com	Highest
Vendor	package.json	author.name	Jens Taylor	Highest
Vendor	package.json	author.url	https://github.com/homebrewing	Highest
Vendor	package.json	bugs.url	https://github.com/jensyt/imurmurhash-js/issues	Highest
Vendor	package.json	description	An incremental implementation of MurmurHash3	Highest
Vendor	package.json	homepage	https://github.com/jensyt/imurmurhash-js	Highest
Vendor	package.json	name	imurmurhash	Highest
Vendor	package.json	name	imurmurhash_project	Highest
Product	package.json	name	imurmurhash	Highest
Version	package.json	version	0.1.4	Highest

Related Dependencies

Identifiers

pkg:npm/imurmurhash@0.1.4 (Confidence:Highest)

is-extglob:2.1.1

Description:

Returns true if a string has an extglob.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?is-glob:4.0.3/is-extglob:^2.1.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/is-glob:4.0.3

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Jon Schlinkert (https://github.com/jonschlinkert)	Highest
Vendor	package.json	bugs.url	https://github.com/jonschlinkert/is-extglob/issues	Highest
Vendor	package.json	description	Returns true if a string has an extglob.	Highest
Vendor	package.json	homepage	https://github.com/jonschlinkert/is-extglob	Highest
Vendor	package.json	name	is-extglob	Highest
Vendor	package.json	name	is-extglob_project	Highest
Product	package.json	name	is-extglob	Highest
Version	package.json	version	2.1.1	Highest

Related Dependencies

Identifiers

pkg:npm/is-extglob@2.1.1 (Confidence:Highest)

is-fullwidth-code-point:3.0.0

Description:

Check if the character represented by a given Unicode code point is fullwidth

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?string-width:4.2.3/is-fullwidth-code-point:^3.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/string-width:4.2.3
owasp-dependency-check:0.9.0/string-width-cjs:4.2.3

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	sindresorhus.com	Highest
Vendor	package.json	description	Check if the character represented by a given Unicode code point is fullwidth	Highest
Vendor	package.json	name	is-fullwidth-code-point	Highest
Vendor	package.json	name	is-fullwidth-code-point_project	Highest
Product	package.json	name	is-fullwidth-code-point	Highest
Version	package.json	version	3.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/is-fullwidth-code-point@3.0.0 (Confidence:Highest)

is-glob:4.0.3

Description:

Returns `true` if the given string looks like a glob pattern or an extglob pattern. This makes it easy to create code that only uses external modules like node-glob when necessary, resulting in much faster code execution and initialization time, and a better user experience.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/is-glob:4.0.3

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@typescript-eslint/typescript-estree:8.43.0
owasp-dependency-check:0.9.0/glob-parent:5.1.2
owasp-dependency-check:0.9.0/eslint:9.35.0
owasp-dependency-check:0.9.0/glob-parent:6.0.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Jon Schlinkert (https://github.com/jonschlinkert)	Highest
Vendor	package.json	bugs.url	https://github.com/micromatch/is-glob/issues	Highest
Vendor	package.json	description	Returns `true` if the given string looks like a glob pattern or an extglob pattern. This makes it easy to create code that only uses external modules like node-glob when necessary, resulting in much faster code execution and initialization time, and a better user experience.	Highest
Vendor	package.json	homepage	https://github.com/micromatch/is-glob	Highest
Vendor	package.json	name	is-glob	Highest
Vendor	package.json	name	is-glob_project	Highest
Product	package.json	name	is-glob	Highest
Version	package.json	version	4.0.3	Highest

Related Dependencies

Identifiers

pkg:npm/is-glob@4.0.3 (Confidence:Highest)

is-number:7.0.0

Description:

Returns true if a number or string value is a finite number. Useful for regex matches, parsing, user input, etc.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?to-regex-range:5.0.1/is-number:^7.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/to-regex-range:5.0.1
owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Jon Schlinkert (https://github.com/jonschlinkert)	Highest
Vendor	package.json	bugs.url	https://github.com/jonschlinkert/is-number/issues	Highest
Vendor	package.json	description	Returns true if a number or string value is a finite number. Useful for regex matches, parsing, user input, etc.	Highest
Vendor	package.json	homepage	https://github.com/jonschlinkert/is-number	Highest
Vendor	package.json	name	is-number	Highest
Vendor	package.json	name	is-number_project	Highest
Product	package.json	name	is-number	Highest
Version	package.json	version	7.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/is-number@7.0.0 (Confidence:Highest)

isexe:2.0.0

Description:

Minimal module to check if a file is executable.

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?which:2.0.2/isexe:^2.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/which:2.0.2
owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)	Highest
Vendor	package.json	bugs.url	https://github.com/isaacs/isexe/issues	Highest
Vendor	package.json	description	Minimal module to check if a file is executable.	Highest
Vendor	package.json	homepage	https://github.com/isaacs/isexe#readme	Highest
Vendor	package.json	name	isexe	Highest
Vendor	package.json	name	isexe_project	Highest
Product	package.json	name	isexe	Highest
Version	package.json	version	2.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/isexe@2.0.0 (Confidence:Highest)

istanbul-lib-coverage:3.2.2

Description:

Data library for istanbul coverage objects

License:

BSD-3-Clause

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?istanbul-lib-report:3.0.1/istanbul-lib-coverage:^3.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/c8:10.1.3
owasp-dependency-check:0.9.0/istanbul-lib-report:3.0.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Krishnan Anantheswaran <kananthmail-github@yahoo.com>	Highest
Vendor	package.json	bugs.url	https://github.com/istanbuljs/istanbuljs/issues	Highest
Vendor	package.json	description	Data library for istanbul coverage objects	Highest
Vendor	package.json	homepage	https://istanbul.js.org/	Highest
Vendor	package.json	name	istanbul-lib-coverage	Highest
Vendor	package.json	name	istanbul-lib-coverage_project	Highest
Product	package.json	name	istanbul-lib-coverage	Highest
Version	package.json	version	3.2.2	Highest

Related Dependencies

Identifiers

pkg:npm/istanbul-lib-coverage@3.2.2 (Confidence:Highest)

istanbul-lib-report:3.0.1

Description:

Base reporting library for istanbul

License:

BSD-3-Clause

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?istanbul-reports:3.2.0/istanbul-lib-report:^3.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/istanbul-reports:3.2.0
owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/c8:10.1.3

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Krishnan Anantheswaran <kananthmail-github@yahoo.com>	Highest
Vendor	package.json	bugs.url	https://github.com/istanbuljs/istanbuljs/issues	Highest
Vendor	package.json	description	Base reporting library for istanbul	Highest
Vendor	package.json	homepage	https://istanbul.js.org/	Highest
Vendor	package.json	name	istanbul-lib-report	Highest
Vendor	package.json	name	istanbul-lib-report_project	Highest
Product	package.json	name	istanbul-lib-report	Highest
Version	package.json	version	3.0.1	Highest

Related Dependencies

Identifiers

pkg:npm/istanbul-lib-report@3.0.1 (Confidence:Highest)

istanbul-reports:3.2.0

Description:

istanbul reports

License:

BSD-3-Clause

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/istanbul-reports:3.2.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/c8:10.1.3

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Krishnan Anantheswaran <kananthmail-github@yahoo.com>	Highest
Vendor	package.json	bugs.url	https://github.com/istanbuljs/istanbuljs/issues	Highest
Vendor	package.json	description	istanbul reports	Highest
Vendor	package.json	homepage	https://istanbul.js.org/	Highest
Vendor	package.json	name	istanbul-reports	Highest
Vendor	package.json	name	istanbul-reports_project	Highest
Product	package.json	name	istanbul-reports	Highest
Version	package.json	version	3.2.0	Highest

Related Dependencies

Identifiers

pkg:npm/istanbul-reports@3.2.0 (Confidence:Highest)

jackspeak:3.4.3

Description:

A very strict and proper argument parser.

License:

BlueOak-1.0.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/jackspeak:3.4.3

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/glob:11.0.3
owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/glob:10.4.5

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Isaac Z. Schlueter <i@izs.me>	Highest
Vendor	package.json	description	A very strict and proper argument parser.	Highest
Vendor	package.json	name	jackspeak	Highest
Vendor	package.json	name	jackspeak_project	Highest
Product	package.json	name	jackspeak	Highest
Version	package.json	version	3.4.3	Highest

Related Dependencies

Identifiers

pkg:npm/jackspeak@3.4.3 (Confidence:Highest)

jackspeak:4.1.1

Description:

A very strict and proper argument parser.

License:

BlueOak-1.0.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/jackspeak:4.1.1

Referenced In Project/Scope: owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Isaac Z. Schlueter <i@izs.me>	Highest
Vendor	package.json	description	A very strict and proper argument parser.	Highest
Vendor	package.json	name	jackspeak	Highest
Vendor	package.json	name	jackspeak_project	Highest
Product	package.json	name	jackspeak	Highest
Version	package.json	version	4.1.1	Highest

Identifiers

pkg:npm/jackspeak@4.1.1 (Confidence:Highest)

jake:10.9.4

Description:

JavaScript build tool, similar to Make or Rake

License:

Apache-2.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/jake:10.9.4

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/ejs:3.1.10

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Matthew Eernisse <mde@fleegix.org> (http://fleegix.org)	Highest
Vendor	package.json	description	JavaScript build tool, similar to Make or Rake	Highest
Vendor	package.json	name	jake	Highest
Vendor	package.json	name	jake_project	Highest
Product	package.json	name	jake	Highest
Version	package.json	version	10.9.4	Highest

Related Dependencies

Identifiers

pkg:npm/jake@10.9.4 (Confidence:Highest)

jiti:2.5.1

Description:

Runtime typescript and ESM support for Node.js

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?knip:5.63.1/jiti:^2.5.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/knip:5.63.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	Runtime typescript and ESM support for Node.js	Highest
Vendor	package.json	name	jiti	Highest
Vendor	package.json	name	jiti_project	Highest
Product	package.json	name	jiti	Highest
Version	package.json	version	2.5.1	Highest

Related Dependencies

Identifiers

pkg:npm/jiti@2.5.1 (Confidence:Highest)

js-yaml:4.1.0

Description:

YAML 1.2 parser and serializer

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?knip:5.63.1/js-yaml:^4.1.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/knip:5.63.1
owasp-dependency-check:0.9.0/@eslint/eslintrc:3.3.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Vladimir Zapparov <dervus.grim@gmail.com>	Highest
Vendor	package.json	description	YAML 1.2 parser and serializer	Highest
Vendor	package.json	name	js-yaml	Highest
Vendor	package.json	name	js-yaml_project	Highest
Product	package.json	name	js-yaml	Highest
Version	package.json	version	4.1.0	Highest

Related Dependencies

Identifiers

pkg:npm/js-yaml@4.1.0 (Confidence:Highest)
cpe:2.3:a:js-yaml_project:js-yaml:4.1.0:*:*:*:*:*:*:* (Confidence:Highest)

json-buffer:3.0.1

Description:

JSON parse & stringify that supports binary via bops & base64

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?keyv:4.5.4/json-buffer:3.0.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/keyv:4.5.4

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Dominic Tarr <dominic.tarr@gmail.com> (http://dominictarr.com)	Highest
Vendor	package.json	description	JSON parse & stringify that supports binary via bops & base64	Highest
Vendor	package.json	homepage	https://github.com/dominictarr/json-buffer	Highest
Vendor	package.json	name	json-buffer	Highest
Vendor	package.json	name	json-buffer_project	Highest
Product	package.json	name	json-buffer	Highest
Version	package.json	version	3.0.1	Highest

Related Dependencies

Identifiers

pkg:npm/json-buffer@3.0.1 (Confidence:Highest)

json-schema-traverse:0.4.1

Description:

Traverse JSON Schema passing each schema object to callback

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/json-schema-traverse:0.4.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/ajv:6.12.6

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Evgeny Poberezkin	Highest
Vendor	package.json	bugs.url	https://github.com/epoberezkin/json-schema-traverse/issues	Highest
Vendor	package.json	description	Traverse JSON Schema passing each schema object to callback	Highest
Vendor	package.json	homepage	https://github.com/epoberezkin/json-schema-traverse#readme	Highest
Vendor	package.json	name	json-schema-traverse	Highest
Vendor	package.json	name	json-schema-traverse_project	Highest
Product	package.json	name	json-schema-traverse	Highest
Version	package.json	version	0.4.1	Highest

Related Dependencies

Identifiers

pkg:npm/json-schema-traverse@0.4.1 (Confidence:Highest)

json-stable-stringify-without-jsonify:1.0.1

Description:

deterministic JSON.stringify() with custom sorting to get deterministic hashes from stringified results, with no public domain dependencies

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/json-stable-stringify-without-jsonify:1.0.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/eslint:9.35.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	mail@substack.net	Highest
Vendor	package.json	author.name	James Halliday	Highest
Vendor	package.json	author.url	http://substack.net	Highest
Vendor	package.json	description	deterministic JSON.stringify() with custom sorting to get deterministic hashes from stringified results, with no public domain dependencies	Highest
Vendor	package.json	homepage	https://github.com/samn/json-stable-stringify	Highest
Vendor	package.json	name	json-stable-stringify-without-jsonify	Highest
Vendor	package.json	name	json-stable-stringify-without-jsonify_project	Highest
Product	package.json	name	json-stable-stringify-without-jsonify	Highest
Version	package.json	version	1.0.1	Highest

Related Dependencies

Identifiers

pkg:npm/json-stable-stringify-without-jsonify@1.0.1 (Confidence:Highest)

keyv:4.5.4

Description:

Simple key-value storage with support for multiple backends

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/keyv:4.5.4

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/flat-cache:4.0.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Jared Wray <me@jaredwray.com> (http://jaredwray.com)	Highest
Vendor	package.json	bugs.url	https://github.com/jaredwray/keyv/issues	Highest
Vendor	package.json	description	Simple key-value storage with support for multiple backends	Highest
Vendor	package.json	homepage	https://github.com/jaredwray/keyv	Highest
Vendor	package.json	name	keyv	Highest
Vendor	package.json	name	keyv_project	Highest
Product	package.json	name	keyv	Highest
Version	package.json	version	4.5.4	Highest

Related Dependencies

Identifiers

pkg:npm/keyv@4.5.4 (Confidence:Highest)

knip:5.63.1

Description:

Find and fix unused dependencies, exports and files in your TypeScript and JavaScript projects

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/knip:5.63.1

Referenced In Project/Scope: owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	lars@webpro.nl	Highest
Vendor	package.json	author.name	Lars Kappert	Highest
Vendor	package.json	bugs	https://github.com/webpro-nl/knip/issues	Highest
Vendor	package.json	description	Find and fix unused dependencies, exports and files in your TypeScript and JavaScript projects	Highest
Vendor	package.json	homepage	https://knip.dev	Highest
Vendor	package.json	name	knip	Highest
Vendor	package.json	name	knip_project	Highest
Product	package.json	name	knip	Highest
Version	package.json	version	5.63.1	Highest

Identifiers

pkg:npm/knip@5.63.1 (Confidence:Highest)

levn:0.4.1

Description:

Light ECMAScript (JavaScript) Value Notation - human written, concise, typed, flexible

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?optionator:0.9.4/levn:^0.4.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/optionator:0.9.4
owasp-dependency-check:0.9.0/@eslint/plugin-kit:0.3.5

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	George Zahariev <z@georgezahariev.com>	Highest
Vendor	package.json	bugs	https://github.com/gkz/levn/issues	Highest
Vendor	package.json	description	Light ECMAScript (JavaScript) Value Notation - human written, concise, typed, flexible	Highest
Vendor	package.json	homepage	https://github.com/gkz/levn	Highest
Vendor	package.json	name	levn	Highest
Vendor	package.json	name	levn_project	Highest
Product	package.json	name	levn	Highest
Version	package.json	version	0.4.1	Highest

Related Dependencies

Identifiers

pkg:npm/levn@0.4.1 (Confidence:Highest)

locate-path:6.0.0

Description:

Get the first path that exists on disk of multiple paths

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/locate-path:6.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/find-up:5.0.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	https://sindresorhus.com	Highest
Vendor	package.json	description	Get the first path that exists on disk of multiple paths	Highest
Vendor	package.json	name	locate-path	Highest
Vendor	package.json	name	locate-path_project	Highest
Product	package.json	name	locate-path	Highest
Version	package.json	version	6.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/locate-path@6.0.0 (Confidence:Highest)

lodash.merge:4.6.2

Description:

The Lodash method `_.merge` exported as a module.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/lodash.merge:4.6.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/eslint:9.35.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	John-David Dalton <john.david.dalton@gmail.com>	Highest
Vendor	package.json	description	The Lodash method `_.merge` exported as a module.	Highest
Vendor	package.json	homepage	https://lodash.com/	Highest
Vendor	package.json	name	lodash.merge	Highest
Vendor	package.json	name	lodash.merge_project	Highest
Product	package.json	name	lodash.merge	Highest
Version	package.json	version	4.6.2	Highest

Related Dependencies

Identifiers

pkg:npm/lodash.merge@4.6.2 (Confidence:Highest)

lru-cache:10.4.3

Description:

A cache object that deletes the least-recently-used items.

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?path-scurry:1.11.1/lru-cache:^10.2.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/path-scurry:2.0.0
owasp-dependency-check:0.9.0/path-scurry:1.11.1
owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Isaac Z. Schlueter <i@izs.me>	Highest
Vendor	package.json	description	A cache object that deletes the least-recently-used items.	Highest
Vendor	package.json	name	lru-cache	Highest
Vendor	package.json	name	lru-cache_project	Highest
Product	package.json	name	lru-cache	Highest
Version	package.json	version	10.4.3	Highest

Related Dependencies

Identifiers

pkg:npm/lru-cache@10.4.3 (Confidence:Highest)

make-dir:4.0.0

Description:

Make a directory and its parents if needed - Think `mkdir -p`

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/make-dir:4.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/istanbul-lib-report:3.0.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	https://sindresorhus.com	Highest
Vendor	package.json	description	Make a directory and its parents if needed - Think `mkdir -p`	Highest
Vendor	package.json	name	make-dir	Highest
Vendor	package.json	name	make-dir_project	Highest
Product	package.json	name	make-dir	Highest
Version	package.json	version	4.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/make-dir@4.0.0 (Confidence:Highest)

merge2:1.4.1

Description:

Merge multiple streams into one stream in sequence or parallel.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/merge2:1.4.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/fast-glob:3.3.3

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	Merge multiple streams into one stream in sequence or parallel.	Highest
Vendor	package.json	homepage	https://github.com/teambition/merge2	Highest
Vendor	package.json	name	merge2	Highest
Vendor	package.json	name	merge2_project	Highest
Product	package.json	name	merge2	Highest
Version	package.json	version	1.4.1	Highest

Related Dependencies

Identifiers

pkg:npm/merge2@1.4.1 (Confidence:Highest)

micromatch:4.0.8

Description:

Glob matching for javascript/node.js. A replacement and faster alternative to minimatch and multimatch.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/micromatch:4.0.8

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/fast-glob:3.3.3

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Jon Schlinkert (https://github.com/jonschlinkert)	Highest
Vendor	package.json	bugs.url	https://github.com/micromatch/micromatch/issues	Highest
Vendor	package.json	description	Glob matching for javascript/node.js. A replacement and faster alternative to minimatch and multimatch.	Highest
Vendor	package.json	homepage	https://github.com/micromatch/micromatch	Highest
Vendor	package.json	name	micromatch	Highest
Vendor	package.json	name	micromatch_project	Highest
Product	package.json	name	micromatch	Highest
Version	package.json	version	4.0.8	Highest

Related Dependencies

Identifiers

pkg:npm/micromatch@4.0.8 (Confidence:Highest)
cpe:2.3:a:jonschlinkert:micromatch:4.0.8:*:*:*:*:*:*:* (Confidence:Highest)

minimatch:10.0.3

Description:

a glob matcher in javascript

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/minimatch:10.0.3

Referenced In Project/Scope: owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)	Highest
Vendor	package.json	description	a glob matcher in javascript	Highest
Vendor	package.json	name	minimatch	Highest
Vendor	package.json	name	minimatch_project	Highest
Product	package.json	name	minimatch	Highest
Version	package.json	version	10.0.3	Highest

Identifiers

pkg:npm/minimatch@10.0.3 (Confidence:Highest)
cpe:2.3:a:minimatch_project:minimatch:10.0.3:*:*:*:*:*:*:* (Confidence:Highest)

minimatch:3.1.2

Description:

a glob matcher in javascript

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/minimatch:3.1.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/glob:11.0.3
owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@eslint/eslintrc:3.3.1
owasp-dependency-check:0.9.0/@eslint/config-array:0.21.0
owasp-dependency-check:0.9.0/eslint:9.35.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)	Highest
Vendor	package.json	description	a glob matcher in javascript	Highest
Vendor	package.json	name	minimatch	Highest
Vendor	package.json	name	minimatch_project	Highest
Product	package.json	name	minimatch	Highest
Version	package.json	version	3.1.2	Highest

Related Dependencies

Identifiers

pkg:npm/minimatch@3.1.2 (Confidence:Highest)
cpe:2.3:a:minimatch_project:minimatch:3.1.2:*:*:*:*:*:*:* (Confidence:Highest)

minimatch:5.1.6

Description:

a glob matcher in javascript

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/minimatch:5.1.6

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/filelist:1.0.4

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)	Highest
Vendor	package.json	description	a glob matcher in javascript	Highest
Vendor	package.json	name	minimatch	Highest
Vendor	package.json	name	minimatch_project	Highest
Product	package.json	name	minimatch	Highest
Version	package.json	version	5.1.6	Highest

Related Dependencies

Identifiers

pkg:npm/minimatch@5.1.6 (Confidence:Highest)
cpe:2.3:a:minimatch_project:minimatch:5.1.6:*:*:*:*:*:*:* (Confidence:Highest)

minimatch:9.0.5

Description:

a glob matcher in javascript

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/minimatch:9.0.5

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/glob:10.4.5
owasp-dependency-check:0.9.0/@typescript-eslint/typescript-estree:8.43.0
owasp-dependency-check:0.9.0/test-exclude:7.0.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)	Highest
Vendor	package.json	description	a glob matcher in javascript	Highest
Vendor	package.json	name	minimatch	Highest
Vendor	package.json	name	minimatch_project	Highest
Product	package.json	name	minimatch	Highest
Version	package.json	version	9.0.5	Highest

Related Dependencies

Identifiers

pkg:npm/minimatch@9.0.5 (Confidence:Highest)
cpe:2.3:a:minimatch_project:minimatch:9.0.5:*:*:*:*:*:*:* (Confidence:Highest)

minimist:1.2.8

Description:

parse argument options

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/minimist:1.2.8

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/knip:5.63.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	mail@substack.net	Highest
Vendor	package.json	author.name	James Halliday	Highest
Vendor	package.json	author.url	http://substack.net	Highest
Vendor	package.json	description	parse argument options	Highest
Vendor	package.json	homepage	https://github.com/minimistjs/minimist	Highest
Vendor	package.json	name	minimist	Highest
Vendor	package.json	name	minimist_project	Highest
Product	package.json	name	minimist	Highest
Version	package.json	version	1.2.8	Highest

Related Dependencies

Identifiers

pkg:npm/minimist@1.2.8 (Confidence:Highest)
cpe:2.3:a:substack:minimist:1.2.8:*:*:*:*:*:*:* (Confidence:Highest)

minipass:7.1.2

Description:

minimal implementation of a PassThrough stream

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?path-scurry:2.0.0/minipass:^7.1.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/glob:11.0.3
owasp-dependency-check:0.9.0/path-scurry:2.0.0
owasp-dependency-check:0.9.0/path-scurry:1.11.1
owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/glob:10.4.5

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)	Highest
Vendor	package.json	description	minimal implementation of a PassThrough stream	Highest
Vendor	package.json	name	minipass	Highest
Vendor	package.json	name	minipass_project	Highest
Product	package.json	name	minipass	Highest
Version	package.json	version	7.1.2	Highest

Related Dependencies

Identifiers

pkg:npm/minipass@7.1.2 (Confidence:Highest)

ms:2.1.3

Description:

Tiny millisecond conversion utility

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/ms:2.1.3

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/debug:4.4.3

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	Tiny millisecond conversion utility	Highest
Vendor	package.json	name	ms	Highest
Vendor	package.json	name	ms_project	Highest
Product	package.json	name	ms	Highest
Version	package.json	version	2.1.3	Highest

Related Dependencies

Identifiers

pkg:npm/ms@2.1.3 (Confidence:Highest)

napi-postinstall:0.3.3

Description:

The `postinstall` script helper for handling native bindings in legacy `npm` versions

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?oxc-resolver:11.7.2/napi-postinstall:^0.3.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/oxc-resolver:11.7.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	JounQin <admin@1stg.me> (https://www.1stG.me)	Highest
Vendor	package.json	description	The `postinstall` script helper for handling native bindings in legacy `npm` versions	Highest
Vendor	package.json	name	napi-postinstall	Highest
Vendor	package.json	name	napi-postinstall_project	Highest
Product	package.json	name	napi-postinstall	Highest
Version	package.json	version	0.3.3	Highest

Related Dependencies

Identifiers

pkg:npm/napi-postinstall@0.3.3 (Confidence:Highest)

natural-compare:1.4.0

Description:

Compare strings containing a mix of letters and numbers in the way a human being would in sort order.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/natural-compare:1.4.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@typescript-eslint/eslint-plugin:8.43.0
owasp-dependency-check:0.9.0/eslint:9.35.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Lauri Rooden (https://github.com/litejs/natural-compare-lite)	Highest
Vendor	package.json	bugs.url	https://github.com/litejs/natural-compare-lite/issues	Highest
Vendor	package.json	description	Compare strings containing a mix of letters and numbers in the way a human being would in sort order.	Highest
Vendor	package.json	name	natural-compare	Highest
Vendor	package.json	name	natural-compare_project	Highest
Product	package.json	name	natural-compare	Highest
Version	package.json	version	1.4.0	Highest

Related Dependencies

Identifiers

pkg:npm/natural-compare@1.4.0 (Confidence:Highest)

once:1.4.0

Description:

Run a function exactly one time

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?pump:3.0.3/once:^1.3.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/pump:3.0.3
owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/end-of-stream:1.4.5

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)	Highest
Vendor	package.json	description	Run a function exactly one time	Highest
Vendor	package.json	name	once	Highest
Vendor	package.json	name	once_project	Highest
Product	package.json	name	once	Highest
Version	package.json	version	1.4.0	Highest

Related Dependencies

Identifiers

pkg:npm/once@1.4.0 (Confidence:Highest)

optionator:0.9.4

Description:

option parsing and help generation

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/optionator:0.9.4

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/eslint:9.35.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	George Zahariev <z@georgezahariev.com>	Highest
Vendor	package.json	bugs	https://github.com/gkz/optionator/issues	Highest
Vendor	package.json	description	option parsing and help generation	Highest
Vendor	package.json	homepage	https://github.com/gkz/optionator	Highest
Vendor	package.json	name	optionator	Highest
Vendor	package.json	name	optionator_project	Highest
Product	package.json	name	optionator	Highest
Version	package.json	version	0.9.4	Highest

Related Dependencies

Identifiers

pkg:npm/optionator@0.9.4 (Confidence:Highest)

oxc-resolver:11.7.2

Description:

Oxc Resolver Node API

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/oxc-resolver:11.7.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/knip:5.63.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	Oxc Resolver Node API	Highest
Vendor	package.json	homepage	https://oxc.rs	Highest
Vendor	package.json	name	oxc-resolver	Highest
Vendor	package.json	name	oxc-resolver_project	Highest
Product	package.json	name	oxc-resolver	Highest
Version	package.json	version	11.7.2	Highest

Related Dependencies

Identifiers

pkg:npm/oxc-resolver@11.7.2 (Confidence:Highest)

p-limit:3.1.0

Description:

Run multiple promise-returning & async functions with limited concurrency

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?p-locate:5.0.0/p-limit:^3.0.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/p-locate:5.0.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	https://sindresorhus.com	Highest
Vendor	package.json	description	Run multiple promise-returning & async functions with limited concurrency	Highest
Vendor	package.json	name	p-limit	Highest
Vendor	package.json	name	p-limit_project	Highest
Product	package.json	name	p-limit	Highest
Version	package.json	version	3.1.0	Highest

Related Dependencies

Identifiers

pkg:npm/p-limit@3.1.0 (Confidence:Highest)

p-locate:5.0.0

Description:

Get the first fulfilled promise that satisfies the provided testing function

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/p-locate:5.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/locate-path:6.0.0
owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	https://sindresorhus.com	Highest
Vendor	package.json	description	Get the first fulfilled promise that satisfies the provided testing function	Highest
Vendor	package.json	name	p-locate	Highest
Vendor	package.json	name	p-locate_project	Highest
Product	package.json	name	p-locate	Highest
Version	package.json	version	5.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/p-locate@5.0.0 (Confidence:Highest)

package-json-from-dist:1.0.1

Description:

Load the local package.json from either src or dist folder

License:

BlueOak-1.0.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?glob:11.0.3/package-json-from-dist:^1.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/glob:11.0.3
owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/glob:10.4.5
owasp-dependency-check:0.9.0/rimraf:6.0.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Isaac Z. Schlueter <i@izs.me> (https://izs.me)	Highest
Vendor	package.json	description	Load the local package.json from either src or dist folder	Highest
Vendor	package.json	name	package-json-from-dist	Highest
Vendor	package.json	name	package-json-from-dist_project	Highest
Product	package.json	name	package-json-from-dist	Highest
Version	package.json	version	1.0.1	Highest

Related Dependencies

Identifiers

pkg:npm/package-json-from-dist@1.0.1 (Confidence:Highest)

parent-module:1.0.1

Description:

Get the path of the parent module

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/parent-module:1.0.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/import-fresh:3.3.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	sindresorhus.com	Highest
Vendor	package.json	description	Get the path of the parent module	Highest
Vendor	package.json	name	parent-module	Highest
Vendor	package.json	name	parent-module_project	Highest
Product	package.json	name	parent-module	Highest
Version	package.json	version	1.0.1	Highest

Related Dependencies

Identifiers

pkg:npm/parent-module@1.0.1 (Confidence:Highest)

parents:1.0.1

Description:

return all the parent directories for a directory

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/parents:1.0.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/find-package:1.0.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	mail@substack.net	Highest
Vendor	package.json	author.name	James Halliday	Highest
Vendor	package.json	author.url	http://substack.net	Highest
Vendor	package.json	description	return all the parent directories for a directory	Highest
Vendor	package.json	homepage	https://github.com/substack/node-parents	Highest
Vendor	package.json	name	parents	Highest
Vendor	package.json	name	parents_project	Highest
Product	package.json	name	parents	Highest
Version	package.json	version	1.0.1	Highest

Related Dependencies

Identifiers

pkg:npm/parents@1.0.1 (Confidence:Highest)

path-exists:4.0.0

Description:

Check if a path exists

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/path-exists:4.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/find-up:5.0.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	sindresorhus.com	Highest
Vendor	package.json	description	Check if a path exists	Highest
Vendor	package.json	name	path-exists	Highest
Vendor	package.json	name	path-exists_project	Highest
Product	package.json	name	path-exists	Highest
Version	package.json	version	4.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/path-exists@4.0.0 (Confidence:Highest)

path-key:3.1.1

Description:

Get the PATH environment variable key cross-platform

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/path-key:3.1.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/cross-spawn:7.0.6

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	sindresorhus.com	Highest
Vendor	package.json	description	Get the PATH environment variable key cross-platform	Highest
Vendor	package.json	name	path-key	Highest
Vendor	package.json	name	path-key_project	Highest
Product	package.json	name	path-key	Highest
Version	package.json	version	3.1.1	Highest

Related Dependencies

Identifiers

pkg:npm/path-key@3.1.1 (Confidence:Highest)

path-platform:0.11.15

Description:

Provide access to win32 and posix path operations; sourced directly from upstream Node.js

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/path-platform:0.11.15

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/parents:1.0.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Timothy J Fontaine <tjfontaine@gmail.com> (http://atxconsulting.com)	Highest
Vendor	package.json	bugs.url	http://github.com/tjfontaine/node-path-platform/issues	Highest
Vendor	package.json	description	Provide access to win32 and posix path operations; sourced directly from upstream Node.js	Highest
Vendor	package.json	homepage	http://github.com/tjfontaine/node-path-platform	Highest
Vendor	package.json	name	path-platform	Highest
Vendor	package.json	name	path-platform_project	Highest
Product	package.json	name	path-platform	Highest
Version	package.json	version	0.11.15	Highest

Related Dependencies

Identifiers

pkg:npm/path-platform@0.11.15 (Confidence:Highest)

path-scurry:1.11.1

Description:

walk paths fast and efficiently

License:

BlueOak-1.0.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/path-scurry:1.11.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/glob:11.0.3
owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/glob:10.4.5

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Isaac Z. Schlueter <i@izs.me> (https://blog.izs.me)	Highest
Vendor	package.json	description	walk paths fast and efficiently	Highest
Vendor	package.json	name	path-scurry	Highest
Vendor	package.json	name	path-scurry_project	Highest
Product	package.json	name	path-scurry	Highest
Version	package.json	version	1.11.1	Highest

Related Dependencies

Identifiers

pkg:npm/path-scurry@1.11.1 (Confidence:Highest)

path-scurry:2.0.0

Description:

walk paths fast and efficiently

License:

BlueOak-1.0.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/path-scurry:2.0.0

Referenced In Project/Scope: owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Isaac Z. Schlueter <i@izs.me> (https://blog.izs.me)	Highest
Vendor	package.json	description	walk paths fast and efficiently	Highest
Vendor	package.json	name	path-scurry	Highest
Vendor	package.json	name	path-scurry_project	Highest
Product	package.json	name	path-scurry	Highest
Version	package.json	version	2.0.0	Highest

Identifiers

pkg:npm/path-scurry@2.0.0 (Confidence:Highest)

pend:1.2.0

Description:

dead-simple optimistic async helper

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/pend:1.2.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/fd-slicer:1.1.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Andrew Kelley <superjoe30@gmail.com>	Highest
Vendor	package.json	bugs.url	https://github.com/andrewrk/node-pend/issues	Highest
Vendor	package.json	description	dead-simple optimistic async helper	Highest
Vendor	package.json	name	pend	Highest
Vendor	package.json	name	pend_project	Highest
Product	package.json	name	pend	Highest
Version	package.json	version	1.2.0	Highest

Related Dependencies

Identifiers

pkg:npm/pend@1.2.0 (Confidence:Highest)

picocolors:1.1.1

Description:

The tiniest and the fastest library for terminal output formatting with ANSI colors

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/picocolors:1.1.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/knip:5.63.1
owasp-dependency-check:0.9.0/jake:10.9.4

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Alexey Raspopov	Highest
Vendor	package.json	description	The tiniest and the fastest library for terminal output formatting with ANSI colors	Highest
Vendor	package.json	name	picocolors	Highest
Vendor	package.json	name	picocolors_project	Highest
Product	package.json	name	picocolors	Highest
Version	package.json	version	1.1.1	Highest

Related Dependencies

Identifiers

pkg:npm/picocolors@1.1.1 (Confidence:Highest)

picomatch:2.3.1

Description:

Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/picomatch:2.3.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/micromatch:4.0.8

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Jon Schlinkert (https://github.com/jonschlinkert)	Highest
Vendor	package.json	bugs.url	https://github.com/micromatch/picomatch/issues	Highest
Vendor	package.json	description	Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.	Highest
Vendor	package.json	homepage	https://github.com/micromatch/picomatch	Highest
Vendor	package.json	name	picomatch	Highest
Vendor	package.json	name	picomatch_project	Highest
Product	package.json	name	picomatch	Highest
Version	package.json	version	2.3.1	Highest

Related Dependencies

Identifiers

pkg:npm/picomatch@2.3.1 (Confidence:Highest)

picomatch:4.0.3

Description:

Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/picomatch:4.0.3

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/knip:5.63.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Jon Schlinkert (https://github.com/jonschlinkert)	Highest
Vendor	package.json	bugs.url	https://github.com/micromatch/picomatch/issues	Highest
Vendor	package.json	description	Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.	Highest
Vendor	package.json	homepage	https://github.com/micromatch/picomatch	Highest
Vendor	package.json	name	picomatch	Highest
Vendor	package.json	name	picomatch_project	Highest
Product	package.json	name	picomatch	Highest
Version	package.json	version	4.0.3	Highest

Related Dependencies

Identifiers

pkg:npm/picomatch@4.0.3 (Confidence:Highest)

prelude-ls:1.2.1

Description:

prelude.ls is a functionally oriented utility library. It is powerful and flexible. Almost all of its functions are curried. It is written in, and is the recommended base library for, LiveScript.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?type-check:0.4.0/prelude-ls:^1.2.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/levn:0.4.1
owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/type-check:0.4.0
owasp-dependency-check:0.9.0/optionator:0.9.4

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	George Zahariev <z@georgezahariev.com>	Highest
Vendor	package.json	bugs	https://github.com/gkz/prelude-ls/issues	Highest
Vendor	package.json	description	prelude.ls is a functionally oriented utility library. It is powerful and flexible. Almost all of its functions are curried. It is written in, and is the recommended base library for, LiveScript.	Highest
Vendor	package.json	homepage	http://preludels.com	Highest
Vendor	package.json	name	prelude-ls	Highest
Vendor	package.json	name	prelude-ls_project	Highest
Product	package.json	name	prelude-ls	Highest
Version	package.json	version	1.2.1	Highest

Related Dependencies

Identifiers

pkg:npm/prelude-ls@1.2.1 (Confidence:Highest)

prettier-linter-helpers:1.0.0

Description:

Utilities to help expose prettier output in linting tools

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/prettier-linter-helpers:1.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/eslint-plugin-prettier:5.5.4
owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.url	https://github.com/prettier/prettier-linter-helpers/issues	Highest
Vendor	package.json	description	Utilities to help expose prettier output in linting tools	Highest
Vendor	package.json	homepage	https://github.com/prettier/prettier-linter-helpers#readme	Highest
Vendor	package.json	name	prettier-linter-helpers	Highest
Vendor	package.json	name	prettier-linter-helpers_project	Highest
Product	package.json	name	prettier-linter-helpers	Highest
Version	package.json	version	1.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/prettier-linter-helpers@1.0.0 (Confidence:Highest)

prettier:3.6.2

Description:

Prettier is an opinionated code formatter

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/prettier:3.6.2

Referenced In Project/Scope: owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	James Long	Highest
Vendor	package.json	description	Prettier is an opinionated code formatter	Highest
Vendor	package.json	homepage	https://prettier.io	Highest
Vendor	package.json	name	prettier	Highest
Vendor	package.json	name	prettier_project	Highest
Product	package.json	name	prettier	Highest
Version	package.json	version	3.6.2	Highest

Identifiers

pkg:npm/prettier@3.6.2 (Confidence:Highest)

property-expr:2.0.6

Description:

tiny util for getting and setting deep object props safely

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?yup:1.7.0/property-expr:^2.0.5

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/yup:1.7.0
owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	@monasticpanic Jason Quense	Highest
Vendor	package.json	description	tiny util for getting and setting deep object props safely	Highest
Vendor	package.json	name	property-expr	Highest
Vendor	package.json	name	property-expr_project	Highest
Product	package.json	name	property-expr	Highest
Version	package.json	version	2.0.6	Highest

Related Dependencies

Identifiers

pkg:npm/property-expr@2.0.6 (Confidence:Highest)
cpe:2.3:a:property-expr_project:property-expr:2.0.6:*:*:*:*:*:*:* (Confidence:Highest)

pump:3.0.3

Description:

pipe streams together and close all of them if one of them closes

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/pump:3.0.3

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/get-stream:5.2.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Mathias Buus Madsen <mathiasbuus@gmail.com>	Highest
Vendor	package.json	description	pipe streams together and close all of them if one of them closes	Highest
Vendor	package.json	name	pump	Highest
Vendor	package.json	name	pump_project	Highest
Product	package.json	name	pump	Highest
Version	package.json	version	3.0.3	Highest

Related Dependencies

Identifiers

pkg:npm/pump@3.0.3 (Confidence:Highest)

punycode:2.3.1

Description:

A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?uri-js:4.4.1/punycode:^2.1.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/uri-js:4.4.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.name	Mathias Bynens	Highest
Vendor	package.json	author.url	https://mathiasbynens.be/	Highest
Vendor	package.json	bugs	https://github.com/mathiasbynens/punycode.js/issues	Highest
Vendor	package.json	description	A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.	Highest
Vendor	package.json	homepage	https://mths.be/punycode	Highest
Vendor	package.json	name	punycode	Highest
Vendor	package.json	name	punycode_project	Highest
Product	package.json	name	punycode	Highest
Version	package.json	version	2.3.1	Highest

Related Dependencies

Identifiers

pkg:npm/punycode@2.3.1 (Confidence:Highest)

purify-ts:2.1.2

Description:

Functional programming standard library for TypeScript

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/purify-ts:2.1.2

Referenced In Project/Scope: owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	gigobyte <s.iliev3@gmail.com>	Highest
Vendor	package.json	description	Functional programming standard library for TypeScript	Highest
Vendor	package.json	name	purify-ts	Highest
Vendor	package.json	name	purify-ts_project	Highest
Product	package.json	name	purify-ts	Highest
Version	package.json	version	2.1.2	Highest

Identifiers

pkg:npm/purify-ts@2.1.2 (Confidence:Highest)

queue-microtask:1.2.3

Description:

fast, tiny `queueMicrotask` shim for modern engines

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?run-parallel:1.2.0/queue-microtask:^1.2.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/run-parallel:1.2.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	feross@feross.org	Highest
Vendor	package.json	author.name	Feross Aboukhadijeh	Highest
Vendor	package.json	author.url	https://feross.org	Highest
Vendor	package.json	bugs.url	https://github.com/feross/queue-microtask/issues	Highest
Vendor	package.json	description	fast, tiny `queueMicrotask` shim for modern engines	Highest
Vendor	package.json	homepage	https://github.com/feross/queue-microtask	Highest
Vendor	package.json	name	queue-microtask	Highest
Vendor	package.json	name	queue-microtask_project	Highest
Product	package.json	name	queue-microtask	Highest
Version	package.json	version	1.2.3	Highest

Related Dependencies

Identifiers

pkg:npm/queue-microtask@1.2.3 (Confidence:Highest)

randombytes:2.1.0

Description:

random bytes from browserify stand alone

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?serialize-javascript:6.0.2/randombytes:^2.1.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/serialize-javascript:6.0.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author		Highest
Vendor	package.json	bugs.url	https://github.com/crypto-browserify/randombytes/issues	Highest
Vendor	package.json	description	random bytes from browserify stand alone	Highest
Vendor	package.json	homepage	https://github.com/crypto-browserify/randombytes	Highest
Vendor	package.json	name	randombytes	Highest
Vendor	package.json	name	randombytes_project	Highest
Product	package.json	name	randombytes	Highest
Version	package.json	version	2.1.0	Highest

Related Dependencies

Identifiers

pkg:npm/randombytes@2.1.0 (Confidence:Highest)

require-directory:2.1.1

Description:

Recursively iterates over specified directory, require()'ing each file, and returning a nested hash structure containing those modules.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?yargs:17.7.2/require-directory:^2.1.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/yargs:17.7.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Troy Goode <troygoode@gmail.com> (http://github.com/troygoode/)	Highest
Vendor	package.json	bugs.url	http://github.com/troygoode/node-require-directory/issues/	Highest
Vendor	package.json	description	Recursively iterates over specified directory, require()'ing each file, and returning a nested hash structure containing those modules.	Highest
Vendor	package.json	homepage	https://github.com/troygoode/node-require-directory/	Highest
Vendor	package.json	name	require-directory	Highest
Vendor	package.json	name	require-directory_project	Highest
Product	package.json	name	require-directory	Highest
Version	package.json	version	2.1.1	Highest

Related Dependencies

Identifiers

pkg:npm/require-directory@2.1.1 (Confidence:Highest)

resolve-from:4.0.0

Description:

Resolve the path of a module like `require.resolve()` but from a given path

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/resolve-from:4.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/import-fresh:3.3.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	sindresorhus.com	Highest
Vendor	package.json	description	Resolve the path of a module like `require.resolve()` but from a given path	Highest
Vendor	package.json	name	resolve-from	Highest
Vendor	package.json	name	resolve-from_project	Highest
Product	package.json	name	resolve-from	Highest
Version	package.json	version	4.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/resolve-from@4.0.0 (Confidence:Highest)

reusify:1.1.0

Description:

Reuse objects and functions with style

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/reusify:1.1.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/fastq:1.19.1
owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Matteo Collina <hello@matteocollina.com>	Highest
Vendor	package.json	bugs.url	https://github.com/mcollina/reusify/issues	Highest
Vendor	package.json	description	Reuse objects and functions with style	Highest
Vendor	package.json	homepage	https://github.com/mcollina/reusify#readme	Highest
Vendor	package.json	name	reusify	Highest
Vendor	package.json	name	reusify_project	Highest
Product	package.json	name	reusify	Highest
Version	package.json	version	1.1.0	Highest

Related Dependencies

Identifiers

pkg:npm/reusify@1.1.0 (Confidence:Highest)

rimraf:6.0.1

Description:

A deep deletion module for node (like `rm -rf`)

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/rimraf:6.0.1

Referenced In Project/Scope: owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)	Highest
Vendor	package.json	description	A deep deletion module for node (like `rm -rf`)	Highest
Vendor	package.json	name	rimraf	Highest
Vendor	package.json	name	rimraf_project	Highest
Product	package.json	name	rimraf	Highest
Version	package.json	version	6.0.1	Highest

Identifiers

pkg:npm/rimraf@6.0.1 (Confidence:Highest)

rollup:4.50.1

Description:

Next-generation ES module bundler

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/rollup:4.50.1

Referenced In Project/Scope: owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Rich Harris	Highest
Vendor	package.json	bugs.url	https://github.com/rollup/rollup/issues	Highest
Vendor	package.json	description	Next-generation ES module bundler	Highest
Vendor	package.json	homepage	https://rollupjs.org/	Highest
Vendor	package.json	name	rollup	Highest
Vendor	package.json	name	rollup_project	Highest
Product	package.json	name	rollup	Highest
Version	package.json	version	4.50.1	Highest

Identifiers

pkg:npm/rollup@4.50.1 (Confidence:Highest)
cpe:2.3:a:rollupjs:rollup:4.50.1:*:*:*:*:*:*:* (Confidence:Highest)

run-parallel:1.2.0

Description:

Run an array of functions in parallel

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/run-parallel:1.2.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@nodelib/fs.scandir:2.1.5

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	feross@feross.org	Highest
Vendor	package.json	author.name	Feross Aboukhadijeh	Highest
Vendor	package.json	author.url	https://feross.org	Highest
Vendor	package.json	bugs.url	https://github.com/feross/run-parallel/issues	Highest
Vendor	package.json	description	Run an array of functions in parallel	Highest
Vendor	package.json	homepage	https://github.com/feross/run-parallel	Highest
Vendor	package.json	name	run-parallel	Highest
Vendor	package.json	name	run-parallel_project	Highest
Product	package.json	name	run-parallel	Highest
Version	package.json	version	1.2.0	Highest

Related Dependencies

Identifiers

pkg:npm/run-parallel@1.2.0 (Confidence:Highest)

safe-buffer:5.2.1

Description:

Safer Node.js Buffer API

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/safe-buffer:5.2.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/randombytes:2.1.0
owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	feross@feross.org	Highest
Vendor	package.json	author.name	Feross Aboukhadijeh	Highest
Vendor	package.json	author.url	https://feross.org	Highest
Vendor	package.json	bugs.url	https://github.com/feross/safe-buffer/issues	Highest
Vendor	package.json	description	Safer Node.js Buffer API	Highest
Vendor	package.json	homepage	https://github.com/feross/safe-buffer	Highest
Vendor	package.json	name	safe-buffer	Highest
Vendor	package.json	name	safe-buffer_project	Highest
Product	package.json	name	safe-buffer	Highest
Version	package.json	version	5.2.1	Highest

Related Dependencies

Identifiers

pkg:npm/safe-buffer@5.2.1 (Confidence:Highest)

semver:7.7.2

Description:

The semantic version parser used by npm.

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/semver:7.7.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/make-dir:4.0.0
owasp-dependency-check:0.9.0/@typescript-eslint/typescript-estree:8.43.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	GitHub Inc.	Highest
Vendor	package.json	description	The semantic version parser used by npm.	Highest
Vendor	package.json	name	semver	Highest
Vendor	package.json	name	semver_project	Highest
Product	package.json	name	semver	Highest
Version	package.json	version	7.7.2	Highest

Related Dependencies

Identifiers

pkg:npm/semver@7.7.2 (Confidence:Highest)

serialize-javascript:6.0.2

Description:

Serialize JavaScript to a superset of JSON that includes regular expressions and functions.

License:

BSD-3-Clause

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/serialize-javascript:6.0.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/@rollup/plugin-terser:0.4.4
owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Eric Ferraiuolo <edf@ericf.me>	Highest
Vendor	package.json	bugs.url	https://github.com/yahoo/serialize-javascript/issues	Highest
Vendor	package.json	description	Serialize JavaScript to a superset of JSON that includes regular expressions and functions.	Highest
Vendor	package.json	homepage	https://github.com/yahoo/serialize-javascript	Highest
Vendor	package.json	name	serialize-javascript	Highest
Vendor	package.json	name	serialize-javascript_project	Highest
Product	package.json	name	serialize-javascript	Highest
Version	package.json	version	6.0.2	Highest

Related Dependencies

Identifiers

pkg:npm/serialize-javascript@6.0.2 (Confidence:Highest)

shebang-command:2.0.0

Description:

Get the command from a shebang

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/shebang-command:2.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/cross-spawn:7.0.6

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	kevinmartensson@gmail.com	Highest
Vendor	package.json	author.name	Kevin Mårtensson	Highest
Vendor	package.json	author.url	github.com/kevva	Highest
Vendor	package.json	description	Get the command from a shebang	Highest
Vendor	package.json	name	shebang-command	Highest
Vendor	package.json	name	shebang-command_project	Highest
Product	package.json	name	shebang-command	Highest
Version	package.json	version	2.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/shebang-command@2.0.0 (Confidence:Highest)

shebang-regex:3.0.0

Description:

Regular expression for matching a shebang line

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/shebang-regex:3.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/shebang-command:2.0.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	sindresorhus.com	Highest
Vendor	package.json	description	Regular expression for matching a shebang line	Highest
Vendor	package.json	name	shebang-regex	Highest
Vendor	package.json	name	shebang-regex_project	Highest
Product	package.json	name	shebang-regex	Highest
Version	package.json	version	3.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/shebang-regex@3.0.0 (Confidence:Highest)

signal-exit:4.1.0

Description:

when you want to fire an event no matter how a process exits.

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/signal-exit:4.1.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/foreground-child:3.3.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Ben Coe <ben@npmjs.com>	Highest
Vendor	package.json	description	when you want to fire an event no matter how a process exits.	Highest
Vendor	package.json	name	signal-exit	Highest
Vendor	package.json	name	signal-exit_project	Highest
Product	package.json	name	signal-exit	Highest
Version	package.json	version	4.1.0	Highest

Related Dependencies

Identifiers

pkg:npm/signal-exit@4.1.0 (Confidence:Highest)

sinon:21.0.0

Description:

JavaScript test spies, stubs and mocks.

License:

BSD-3-Clause

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/sinon:21.0.0

Referenced In Project/Scope: owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Christian Johansen	Highest
Vendor	package.json	bugs.url	http://github.com/sinonjs/sinon/issues	Highest
Vendor	package.json	description	JavaScript test spies, stubs and mocks.	Highest
Vendor	package.json	homepage	https://sinonjs.org/	Highest
Vendor	package.json	name	sinon	Highest
Vendor	package.json	name	sinon_project	Highest
Product	package.json	name	sinon	Highest
Version	package.json	version	21.0.0	Highest

Identifiers

pkg:npm/sinon@21.0.0 (Confidence:Highest)

smob:1.5.0

Description:

Zero dependency library to safe merge objects.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/smob:1.5.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/@rollup/plugin-terser:0.4.4
owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	contact@tada5hi.net	Highest
Vendor	package.json	author.name	Peter Placzek	Highest
Vendor	package.json	author.url	https://github.com/tada5hi	Highest
Vendor	package.json	bugs.url	https://github.com/Tada5hi/smob/issues	Highest
Vendor	package.json	description	Zero dependency library to safe merge objects.	Highest
Vendor	package.json	homepage	https://github.com/Tada5hi/smob#readme	Highest
Vendor	package.json	name	smob	Highest
Vendor	package.json	name	smob_project	Highest
Product	package.json	name	smob	Highest
Version	package.json	version	1.5.0	Highest

Related Dependencies

Identifiers

pkg:npm/smob@1.5.0 (Confidence:Highest)

smol-toml:1.4.2

Description:

A small, fast, and correct TOML parser/serializer

License:

BSD-3-Clause

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/smol-toml:1.4.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/knip:5.63.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Cynthia <cyyynthia@borkenware.com>	Highest
Vendor	package.json	bugs	https://github.com/squirrelchat/smol-toml/issues	Highest
Vendor	package.json	description	A small, fast, and correct TOML parser/serializer	Highest
Vendor	package.json	name	smol-toml	Highest
Vendor	package.json	name	smol-toml_project	Highest
Product	package.json	name	smol-toml	Highest
Version	package.json	version	1.4.2	Highest

Related Dependencies

Identifiers

pkg:npm/smol-toml@1.4.2 (Confidence:Highest)

source-map-support:0.5.21

Description:

Fixes stack traces for files with source maps

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?terser:5.44.0/source-map-support:~0.5.20

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/terser:5.44.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.url	https://github.com/evanw/node-source-map-support/issues	Highest
Vendor	package.json	description	Fixes stack traces for files with source maps	Highest
Vendor	package.json	name	source-map-support	Highest
Vendor	package.json	name	source-map-support_project	Highest
Product	package.json	name	source-map-support	Highest
Version	package.json	version	0.5.21	Highest

Related Dependencies

Identifiers

pkg:npm/source-map-support@0.5.21 (Confidence:Highest)

source-map:0.6.1

Description:

Generates and consumes source maps

License:

BSD-3-Clause

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?source-map-support:0.5.21/source-map:^0.6.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/source-map-support:0.5.21

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Nick Fitzgerald <nfitzgerald@mozilla.com>	Highest
Vendor	package.json	description	Generates and consumes source maps	Highest
Vendor	package.json	homepage	https://github.com/mozilla/source-map	Highest
Vendor	package.json	name	source-map	Highest
Vendor	package.json	name	source-map_project	Highest
Product	package.json	name	source-map	Highest
Version	package.json	version	0.6.1	Highest

Related Dependencies

Identifiers

pkg:npm/source-map@0.6.1 (Confidence:Highest)

string-width:4.2.3

Description:

Get the visual width of a string - the number of columns required to display it

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/string-width:4.2.3

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/wrap-ansi-cjs:7.0.0
owasp-dependency-check:0.9.0/yargs:17.7.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	sindresorhus.com	Highest
Vendor	package.json	description	Get the visual width of a string - the number of columns required to display it	Highest
Vendor	package.json	name	string-width	Highest
Vendor	package.json	name	string-width_project	Highest
Product	package.json	name	string-width	Highest
Version	package.json	version	4.2.3	Highest

Related Dependencies

Identifiers

pkg:npm/string-width@4.2.3 (Confidence:Highest)

string-width:5.1.2

Description:

Get the visual width of a string - the number of columns required to display it

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?wrap-ansi:8.1.0/string-width:^5.0.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/wrap-ansi:8.1.0
owasp-dependency-check:0.9.0/wrap-ansi:7.0.0
owasp-dependency-check:0.9.0/@isaacs/cliui:8.0.2
owasp-dependency-check:0.9.0/cliui:8.0.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	https://sindresorhus.com	Highest
Vendor	package.json	description	Get the visual width of a string - the number of columns required to display it	Highest
Vendor	package.json	name	string-width	Highest
Vendor	package.json	name	string-width_project	Highest
Product	package.json	name	string-width	Highest
Version	package.json	version	5.1.2	Highest

Related Dependencies

Identifiers

pkg:npm/string-width@5.1.2 (Confidence:Highest)

strip-ansi:6.0.1

Description:

Strip ANSI escape codes from a string

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/strip-ansi:6.0.1

Referenced In Project/Scope: owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	sindresorhus.com	Highest
Vendor	package.json	description	Strip ANSI escape codes from a string	Highest
Vendor	package.json	name	strip-ansi	Highest
Vendor	package.json	name	strip-ansi_project	Highest
Product	package.json	name	strip-ansi	Highest
Version	package.json	version	6.0.1	Highest

Identifiers

pkg:npm/strip-ansi@6.0.1 (Confidence:Highest)

strip-ansi:7.1.2

Description:

Strip ANSI escape codes from a string

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?wrap-ansi:8.1.0/strip-ansi:^7.0.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/wrap-ansi-cjs:7.0.0
owasp-dependency-check:0.9.0/string-width:4.2.3
owasp-dependency-check:0.9.0/wrap-ansi:8.1.0
owasp-dependency-check:0.9.0/wrap-ansi:7.0.0
owasp-dependency-check:0.9.0/string-width-cjs:4.2.3
owasp-dependency-check:0.9.0/string-width:5.1.2
owasp-dependency-check:0.9.0/@isaacs/cliui:8.0.2
owasp-dependency-check:0.9.0/cliui:8.0.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	https://sindresorhus.com	Highest
Vendor	package.json	description	Strip ANSI escape codes from a string	Highest
Vendor	package.json	name	strip-ansi	Highest
Vendor	package.json	name	strip-ansi_project	Highest
Product	package.json	name	strip-ansi	Highest
Version	package.json	version	7.1.2	Highest

Related Dependencies

Identifiers

pkg:npm/strip-ansi@7.1.2 (Confidence:Highest)

strip-json-comments:3.1.1

Description:

Strip comments from JSON. Lets you use comments in your JSON files!

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/strip-json-comments:3.1.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@eslint/eslintrc:3.3.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	https://sindresorhus.com	Highest
Vendor	package.json	description	Strip comments from JSON. Lets you use comments in your JSON files!	Highest
Vendor	package.json	name	strip-json-comments	Highest
Vendor	package.json	name	strip-json-comments_project	Highest
Product	package.json	name	strip-json-comments	Highest
Version	package.json	version	3.1.1	Highest

Related Dependencies

Identifiers

pkg:npm/strip-json-comments@3.1.1 (Confidence:Highest)

strip-json-comments:5.0.2

Description:

Strip comments from JSON. Lets you use comments in your JSON files!

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/strip-json-comments:5.0.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/knip:5.63.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	https://sindresorhus.com	Highest
Vendor	package.json	description	Strip comments from JSON. Lets you use comments in your JSON files!	Highest
Vendor	package.json	name	strip-json-comments	Highest
Vendor	package.json	name	strip-json-comments_project	Highest
Product	package.json	name	strip-json-comments	Highest
Version	package.json	version	5.0.2	Highest

Related Dependencies

Identifiers

pkg:npm/strip-json-comments@5.0.2 (Confidence:Highest)

supports-color:7.2.0

Description:

Detect whether a terminal supports color

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/supports-color:7.2.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/sinon:21.0.0
owasp-dependency-check:0.9.0/istanbul-lib-report:3.0.1
owasp-dependency-check:0.9.0/chalk:4.1.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	sindresorhus.com	Highest
Vendor	package.json	description	Detect whether a terminal supports color	Highest
Vendor	package.json	name	supports-color	Highest
Vendor	package.json	name	supports-color_project	Highest
Product	package.json	name	supports-color	Highest
Version	package.json	version	7.2.0	Highest

Related Dependencies

Identifiers

pkg:npm/supports-color@7.2.0 (Confidence:Highest)

synckit:0.11.11

Description:

Perform async work synchronously in Node.js using `worker_threads` with first-class TypeScript support.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/synckit:0.11.11

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/eslint-plugin-prettier:5.5.4
owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	JounQin <admin@1stg.me> (https://www.1stG.me)	Highest
Vendor	package.json	description	Perform async work synchronously in Node.js using `worker_threads` with first-class TypeScript support.	Highest
Vendor	package.json	name	synckit	Highest
Vendor	package.json	name	synckit_project	Highest
Product	package.json	name	synckit	Highest
Version	package.json	version	0.11.11	Highest

Related Dependencies

Identifiers

pkg:npm/synckit@0.11.11 (Confidence:Highest)

terser:5.44.0

Description:

JavaScript parser, mangler/compressor and beautifier toolkit for ES6+

License:

BSD-2-Clause

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/terser:5.44.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/@rollup/plugin-terser:0.4.4
owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Mihai Bazon <mihai.bazon@gmail.com> (http://lisperator.net/)	Highest
Vendor	package.json	description	JavaScript parser, mangler/compressor and beautifier toolkit for ES6+	Highest
Vendor	package.json	homepage	https://terser.org	Highest
Vendor	package.json	name	terser	Highest
Vendor	package.json	name	terser_project	Highest
Product	package.json	name	terser	Highest
Version	package.json	version	5.44.0	Highest

Related Dependencies

Identifiers

pkg:npm/terser@5.44.0 (Confidence:Highest)
cpe:2.3:a:terser:terser:5.44.0:*:*:*:*:*:*:* (Confidence:Highest)

test-exclude:7.0.1

Description:

test for inclusion or exclusion of paths using globs

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/test-exclude:7.0.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/c8:10.1.3

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Ben Coe <ben@npmjs.com>	Highest
Vendor	package.json	bugs.url	https://github.com/istanbuljs/test-exclude/issues	Highest
Vendor	package.json	description	test for inclusion or exclusion of paths using globs	Highest
Vendor	package.json	homepage	https://istanbul.js.org/	Highest
Vendor	package.json	name	test-exclude	Highest
Vendor	package.json	name	test-exclude_project	Highest
Product	package.json	name	test-exclude	Highest
Version	package.json	version	7.0.1	Highest

Related Dependencies

Identifiers

pkg:npm/test-exclude@7.0.1 (Confidence:Highest)

tiny-case:1.0.3

Description:

Tiny Casing utils

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?yup:1.7.0/tiny-case:^1.0.3

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/yup:1.7.0
owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Jason Quense	Highest
Vendor	package.json	description	Tiny Casing utils	Highest
Vendor	package.json	name	tiny-case	Highest
Vendor	package.json	name	tiny-case_project	Highest
Product	package.json	name	tiny-case	Highest
Version	package.json	version	1.0.3	Highest

Related Dependencies

Identifiers

pkg:npm/tiny-case@1.0.3 (Confidence:Highest)

to-regex-range:5.0.1

Description:

Pass two numbers, get a regex-compatible source string for matching ranges. Validated against more than 2.78 million test assertions.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/to-regex-range:5.0.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/fill-range:7.1.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Jon Schlinkert (https://github.com/jonschlinkert)	Highest
Vendor	package.json	bugs.url	https://github.com/micromatch/to-regex-range/issues	Highest
Vendor	package.json	description	Pass two numbers, get a regex-compatible source string for matching ranges. Validated against more than 2.78 million test assertions.	Highest
Vendor	package.json	homepage	https://github.com/micromatch/to-regex-range	Highest
Vendor	package.json	name	to-regex-range	Highest
Vendor	package.json	name	to-regex-range_project	Highest
Product	package.json	name	to-regex-range	Highest
Version	package.json	version	5.0.1	Highest

Related Dependencies

Identifiers

pkg:npm/to-regex-range@5.0.1 (Confidence:Highest)

toposort:2.0.2

Description:

Topological sort of directed ascyclic graphs (like dependecy lists)

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?yup:1.7.0/toposort:^2.0.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/yup:1.7.0
owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Marcel Klehr <mklehr@gmx.net>	Highest
Vendor	package.json	description	Topological sort of directed ascyclic graphs (like dependecy lists)	Highest
Vendor	package.json	name	toposort	Highest
Vendor	package.json	name	toposort_project	Highest
Product	package.json	name	toposort	Highest
Version	package.json	version	2.0.2	Highest

Related Dependencies

Identifiers

pkg:npm/toposort@2.0.2 (Confidence:Highest)

ts-api-utils:2.1.0

Description:

Utility functions for working with TypeScript's API. Successor to the wonderful tsutils. 🛠️️

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/ts-api-utils:2.1.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@typescript-eslint/type-utils:8.43.0
owasp-dependency-check:0.9.0/@typescript-eslint/typescript-estree:8.43.0
owasp-dependency-check:0.9.0/@typescript-eslint/eslint-plugin:8.43.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	npm@joshuakgoldberg.com	Highest
Vendor	package.json	author.name	JoshuaKGoldberg	Highest
Vendor	package.json	description	Utility functions for working with TypeScript's API. Successor to the wonderful tsutils. 🛠️️	Highest
Vendor	package.json	name	ts-api-utils	Highest
Vendor	package.json	name	ts-api-utils_project	Highest
Product	package.json	name	ts-api-utils	Highest
Version	package.json	version	2.1.0	Highest

Related Dependencies

Identifiers

pkg:npm/ts-api-utils@2.1.0 (Confidence:Highest)

type-check:0.4.0

Description:

type-check allows you to check the types of JavaScript values at runtime with a Haskell like type syntax.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/type-check:0.4.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/levn:0.4.1
owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/optionator:0.9.4

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	George Zahariev <z@georgezahariev.com>	Highest
Vendor	package.json	bugs	https://github.com/gkz/type-check/issues	Highest
Vendor	package.json	description	type-check allows you to check the types of JavaScript values at runtime with a Haskell like type syntax.	Highest
Vendor	package.json	homepage	https://github.com/gkz/type-check	Highest
Vendor	package.json	name	type-check	Highest
Vendor	package.json	name	type-check_project	Highest
Product	package.json	name	type-check	Highest
Version	package.json	version	0.4.0	Highest

Related Dependencies

Identifiers

pkg:npm/type-check@0.4.0 (Confidence:Highest)

type-detect:4.0.8

Description:

Improved typeof detection for node.js and the browser.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/type-detect:4.0.8

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/@sinonjs/commons:3.0.1
owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Jake Luer <jake@alogicalparadox.com> (http://alogicalparadox.com)	Highest
Vendor	package.json	description	Improved typeof detection for node.js and the browser.	Highest
Vendor	package.json	name	type-detect	Highest
Vendor	package.json	name	type-detect_project	Highest
Product	package.json	name	type-detect	Highest
Version	package.json	version	4.0.8	Highest

Related Dependencies

Identifiers

pkg:npm/type-detect@4.0.8 (Confidence:Highest)

type-detect:4.1.0

Description:

Improved typeof detection for node.js and the browser.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/type-detect:4.1.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@sinonjs/samsam:8.0.3

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Jake Luer <jake@alogicalparadox.com> (http://alogicalparadox.com)	Highest
Vendor	package.json	description	Improved typeof detection for node.js and the browser.	Highest
Vendor	package.json	name	type-detect	Highest
Vendor	package.json	name	type-detect_project	Highest
Product	package.json	name	type-detect	Highest
Version	package.json	version	4.1.0	Highest

Related Dependencies

Identifiers

pkg:npm/type-detect@4.1.0 (Confidence:Highest)

type-fest:2.19.0

Description:

A collection of essential TypeScript types

License:

(MIT OR CC0-1.0)

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?yup:1.7.0/type-fest:^2.19.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/yup:1.7.0
owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	https://sindresorhus.com	Highest
Vendor	package.json	description	A collection of essential TypeScript types	Highest
Vendor	package.json	name	type-fest	Highest
Vendor	package.json	name	type-fest_project	Highest
Product	package.json	name	type-fest	Highest
Version	package.json	version	2.19.0	Highest

Related Dependencies

Identifiers

pkg:npm/type-fest@2.19.0 (Confidence:Highest)

typescript-eslint:8.43.0

Description:

Tooling which enables you to use TypeScript with ESLint

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/typescript-eslint:8.43.0

Referenced In Project/Scope: owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.url	https://github.com/typescript-eslint/typescript-eslint/issues	Highest
Vendor	package.json	description	Tooling which enables you to use TypeScript with ESLint	Highest
Vendor	package.json	homepage	https://typescript-eslint.io/packages/typescript-eslint	Highest
Vendor	package.json	name	typescript-eslint	Highest
Vendor	package.json	name	typescript-eslint_project	Highest
Product	package.json	name	typescript-eslint	Highest
Version	package.json	version	8.43.0	Highest

Identifiers

pkg:npm/typescript-eslint@8.43.0 (Confidence:Highest)

typescript:5.9.2

Description:

TypeScript is a language for application scale JavaScript development

License:

Apache-2.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/typescript:5.9.2

Referenced In Project/Scope: owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Microsoft Corp.	Highest
Vendor	package.json	bugs.url	https://github.com/microsoft/TypeScript/issues	Highest
Vendor	package.json	description	TypeScript is a language for application scale JavaScript development	Highest
Vendor	package.json	homepage	https://www.typescriptlang.org/	Highest
Vendor	package.json	name	typescript	Highest
Vendor	package.json	name	typescript_project	Highest
Product	package.json	name	typescript	Highest
Version	package.json	version	5.9.2	Highest

Identifiers

pkg:npm/typescript@5.9.2 (Confidence:Highest)
cpe:2.3:a:microsoft:typescript:5.9.2:*:*:*:*:*:*:* (Confidence:Highest)

undici-types:6.21.0

Description:

A stand-alone types package for Undici

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/undici-types:6.21.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0/@types/node:20.19.14
owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.url	https://github.com/nodejs/undici/issues	Highest
Vendor	package.json	description	A stand-alone types package for Undici	Highest
Vendor	package.json	homepage	https://undici.nodejs.org	Highest
Vendor	package.json	name	undici-types	Highest
Vendor	package.json	name	undici-types_project	Highest
Product	package.json	name	undici-types	Highest
Version	package.json	version	6.21.0	Highest

Related Dependencies

Identifiers

pkg:npm/undici-types@6.21.0 (Confidence:Highest)

undici:7.16.0

Description:

An HTTP/1.1 client, written from scratch for Node.js

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/undici:7.16.0

Referenced In Project/Scope: owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.url	https://github.com/nodejs/undici/issues	Highest
Vendor	package.json	description	An HTTP/1.1 client, written from scratch for Node.js	Highest
Vendor	package.json	homepage	https://undici.nodejs.org	Highest
Vendor	package.json	name	undici	Highest
Vendor	package.json	name	undici_project	Highest
Product	package.json	name	undici	Highest
Version	package.json	version	7.16.0	Highest

Identifiers

pkg:npm/undici@7.16.0 (Confidence:Highest)
cpe:2.3:a:nodejs:undici:7.16.0:*:*:*:*:*:*:* (Confidence:Highest)

uri-js:4.4.1

Description:

An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.

License:

BSD-2-Clause

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/uri-js:4.4.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/ajv:6.12.6

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Gary Court <gary.court@gmail.com>	Highest
Vendor	package.json	bugs.url	https://github.com/garycourt/uri-js/issues	Highest
Vendor	package.json	description	An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.	Highest
Vendor	package.json	homepage	https://github.com/garycourt/uri-js	Highest
Vendor	package.json	name	uri-js	Highest
Vendor	package.json	name	uri-js_project	Highest
Product	package.json	name	uri-js	Highest
Version	package.json	version	4.4.1	Highest

Related Dependencies

Identifiers

pkg:npm/uri-js@4.4.1 (Confidence:Highest)
cpe:2.3:a:garycourt:uri-js:4.4.1:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:uri.js_project:uri.js:4.4.1:*:*:*:*:*:*:* (Confidence:Highest)

v8-to-istanbul:9.3.0

Description:

convert from v8 coverage format to istanbul's format

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/v8-to-istanbul:9.3.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/c8:10.1.3

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Ben Coe <ben@npmjs.com>	Highest
Vendor	package.json	description	convert from v8 coverage format to istanbul's format	Highest
Vendor	package.json	name	v8-to-istanbul	Highest
Vendor	package.json	name	v8-to-istanbul_project	Highest
Product	package.json	name	v8-to-istanbul	Highest
Version	package.json	version	9.3.0	Highest

Related Dependencies

Identifiers

pkg:npm/v8-to-istanbul@9.3.0 (Confidence:Highest)

walk-up-path:4.0.0

Description:

Given a path string, return a generator that walks up the path, emitting each dirname.

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/walk-up-path:4.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/fd-package-json:2.0.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Isaac Z. Schlueter <i@izs.me> (https://izs.me)	Highest
Vendor	package.json	description	Given a path string, return a generator that walks up the path, emitting each dirname.	Highest
Vendor	package.json	name	walk-up-path	Highest
Vendor	package.json	name	walk-up-path_project	Highest
Product	package.json	name	walk-up-path	Highest
Version	package.json	version	4.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/walk-up-path@4.0.0 (Confidence:Highest)

which:2.0.2

Description:

Like which(1) unix command. Find the first instance of an executable in the PATH.

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/which:2.0.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/cross-spawn:7.0.6

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)	Highest
Vendor	package.json	description	Like which(1) unix command. Find the first instance of an executable in the PATH.	Highest
Vendor	package.json	name	which	Highest
Vendor	package.json	name	which_project	Highest
Product	package.json	name	which	Highest
Version	package.json	version	2.0.2	Highest

Related Dependencies

Identifiers

pkg:npm/which@2.0.2 (Confidence:Highest)

word-wrap:1.2.5

Description:

Wrap words to a specified length.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/word-wrap:1.2.5

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/optionator:0.9.4

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Jon Schlinkert (https://github.com/jonschlinkert)	Highest
Vendor	package.json	bugs.url	https://github.com/jonschlinkert/word-wrap/issues	Highest
Vendor	package.json	description	Wrap words to a specified length.	Highest
Vendor	package.json	homepage	https://github.com/jonschlinkert/word-wrap	Highest
Vendor	package.json	name	word-wrap	Highest
Vendor	package.json	name	word-wrap_project	Highest
Product	package.json	name	word-wrap	Highest
Version	package.json	version	1.2.5	Highest

Related Dependencies

Identifiers

pkg:npm/word-wrap@1.2.5 (Confidence:Highest)
cpe:2.3:a:word-wrap_project:word-wrap:1.2.5:*:*:*:*:*:*:* (Confidence:Highest)

wrap-ansi:7.0.0

Description:

Wordwrap a string with ANSI escape codes

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/wrap-ansi:7.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/cliui:8.0.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	https://sindresorhus.com	Highest
Vendor	package.json	description	Wordwrap a string with ANSI escape codes	Highest
Vendor	package.json	name	wrap-ansi	Highest
Vendor	package.json	name	wrap-ansi_project	Highest
Product	package.json	name	wrap-ansi	Highest
Version	package.json	version	7.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/wrap-ansi@7.0.0 (Confidence:Highest)

wrap-ansi:8.1.0

Description:

Wordwrap a string with ANSI escape codes

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/wrap-ansi:8.1.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/@isaacs/cliui:8.0.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	https://sindresorhus.com	Highest
Vendor	package.json	description	Wordwrap a string with ANSI escape codes	Highest
Vendor	package.json	name	wrap-ansi	Highest
Vendor	package.json	name	wrap-ansi_project	Highest
Product	package.json	name	wrap-ansi	Highest
Version	package.json	version	8.1.0	Highest

Related Dependencies

Identifiers

pkg:npm/wrap-ansi@8.1.0 (Confidence:Highest)

wrappy:1.0.2

Description:

Callback wrapping utility

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/wrappy:1.0.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/once:1.4.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)	Highest
Vendor	package.json	bugs.url	https://github.com/npm/wrappy/issues	Highest
Vendor	package.json	description	Callback wrapping utility	Highest
Vendor	package.json	homepage	https://github.com/npm/wrappy	Highest
Vendor	package.json	name	wrappy	Highest
Vendor	package.json	name	wrappy_project	Highest
Product	package.json	name	wrappy	Highest
Version	package.json	version	1.0.2	Highest

Related Dependencies

Identifiers

pkg:npm/wrappy@1.0.2 (Confidence:Highest)

y18n:5.0.8

Description:

the bare-bones internationalization library used by yargs

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?yargs:17.7.2/y18n:^5.0.5

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/yargs:17.7.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Ben Coe <bencoe@gmail.com>	Highest
Vendor	package.json	bugs.url	https://github.com/yargs/y18n/issues	Highest
Vendor	package.json	description	the bare-bones internationalization library used by yargs	Highest
Vendor	package.json	homepage	https://github.com/yargs/y18n	Highest
Vendor	package.json	name	y18n	Highest
Vendor	package.json	name	y18n_project	Highest
Product	package.json	name	y18n	Highest
Version	package.json	version	5.0.8	Highest

Related Dependencies

Identifiers

pkg:npm/y18n@5.0.8 (Confidence:Highest)
cpe:2.3:a:y18n_project:y18n:5.0.8:*:*:*:*:*:*:* (Confidence:Highest)

yargs-parser:21.1.1

Description:

the mighty option parser used by yargs

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/yargs-parser:21.1.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/c8:10.1.3
owasp-dependency-check:0.9.0/yargs:17.7.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Ben Coe <ben@npmjs.com>	Highest
Vendor	package.json	description	the mighty option parser used by yargs	Highest
Vendor	package.json	name	yargs-parser	Highest
Vendor	package.json	name	yargs-parser_project	Highest
Product	package.json	name	yargs-parser	Highest
Version	package.json	version	21.1.1	Highest

Related Dependencies

Identifiers

pkg:npm/yargs-parser@21.1.1 (Confidence:Highest)
cpe:2.3:a:yargs:yargs-parser:21.1.1:*:*:*:*:*:*:* (Confidence:Highest)

yargs:17.7.2

Description:

yargs the modern, pirate-themed, successor to optimist.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/yargs:17.7.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/c8:10.1.3

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	yargs the modern, pirate-themed, successor to optimist.	Highest
Vendor	package.json	homepage	https://yargs.js.org/	Highest
Vendor	package.json	name	yargs	Highest
Vendor	package.json	name	yargs_project	Highest
Product	package.json	name	yargs	Highest
Version	package.json	version	17.7.2	Highest

Related Dependencies

Identifiers

pkg:npm/yargs@17.7.2 (Confidence:Highest)

yauzl:2.10.0

Description:

yet another unzip library for node

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/yauzl:2.10.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/extract-zip:2.0.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Josh Wolfe <thejoshwolfe@gmail.com>	Highest
Vendor	package.json	bugs.url	https://github.com/thejoshwolfe/yauzl/issues	Highest
Vendor	package.json	description	yet another unzip library for node	Highest
Vendor	package.json	homepage	https://github.com/thejoshwolfe/yauzl	Highest
Vendor	package.json	name	yauzl	Highest
Vendor	package.json	name	yauzl_project	Highest
Product	package.json	name	yauzl	Highest
Version	package.json	version	2.10.0	Highest

Related Dependencies

Identifiers

pkg:npm/yauzl@2.10.0 (Confidence:Highest)

yocto-queue:0.1.0

Description:

Tiny queue data structure

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/yocto-queue:0.1.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/p-limit:3.1.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	https://sindresorhus.com	Highest
Vendor	package.json	description	Tiny queue data structure	Highest
Vendor	package.json	name	yocto-queue	Highest
Vendor	package.json	name	yocto-queue_project	Highest
Product	package.json	name	yocto-queue	Highest
Version	package.json	version	0.1.0	Highest

Related Dependencies

Identifiers

pkg:npm/yocto-queue@0.1.0 (Confidence:Highest)

yup:1.7.0

Description:

Dead simple Object schema validation

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/yup:1.7.0

Referenced In Project/Scope: owasp-dependency-check:0.9.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.name	@monasticpanic Jason Quense	Highest
Vendor	package.json	bugs.url	https://github.com/jquense/yup/issues	Highest
Vendor	package.json	description	Dead simple Object schema validation	Highest
Vendor	package.json	homepage	https://github.com/jquense/yup	Highest
Vendor	package.json	name	yup	Highest
Vendor	package.json	name	yup_project	Highest
Product	package.json	name	yup	Highest
Version	package.json	version	1.7.0	Highest

Identifiers

pkg:npm/yup@1.7.0 (Confidence:Highest)

zod-validation-error:3.5.3

Description:

Wrap zod validation errors in user-friendly readable messages

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/zod-validation-error:3.5.3

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/knip:5.63.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	dimitris@jmike.gr	Highest
Vendor	package.json	author.name	Dimitrios C. Michalakos	Highest
Vendor	package.json	author.url	https://github.com/jmike	Highest
Vendor	package.json	description	Wrap zod validation errors in user-friendly readable messages	Highest
Vendor	package.json	name	zod-validation-error	Highest
Vendor	package.json	name	zod-validation-error_project	Highest
Product	package.json	name	zod-validation-error	Highest
Version	package.json	version	3.5.3	Highest

Related Dependencies

Identifiers

pkg:npm/zod-validation-error@3.5.3 (Confidence:Highest)

zod:3.25.76

Description:

TypeScript-first schema declaration and validation library with static type inference

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/zod:3.25.76

Referenced In Projects/Scopes:

owasp-dependency-check:0.9.0
owasp-dependency-check:0.9.0/knip:5.63.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Colin McDonnell <zod@colinhacks.com>	Highest
Vendor	package.json	bugs.url	https://github.com/colinhacks/zod/issues	Highest
Vendor	package.json	description	TypeScript-first schema declaration and validation library with static type inference	Highest
Vendor	package.json	homepage	https://zod.dev	Highest
Vendor	package.json	name	zod	Highest
Vendor	package.json	name	zod_project	Highest
Product	package.json	name	zod	Highest
Version	package.json	version	3.25.76	Highest

Related Dependencies

Identifiers

pkg:npm/zod@3.25.76 (Confidence:Highest)
cpe:2.3:a:zod:zod:3.25.76:*:*:*:*:*:*:* (Confidence:Highest)

How to read the report | Suppressing false positives | Getting Help: github issues Sponsor

Project: owasp-dependency-check

Summary

Dependencies (vulnerable)

@bcoe/v8-coverage:1.0.2

Evidence

Related Dependencies

Identifiers

@commander-js/extra-typings:14.0.0

Evidence

Identifiers

@eslint-community/eslint-utils:4.9.0

Evidence

Related Dependencies

Identifiers

@eslint-community/regexpp:4.12.1

Evidence

Related Dependencies

Identifiers

@eslint/config-array:0.21.0

Evidence

Related Dependencies

Identifiers

@eslint/config-helpers:0.3.1

Evidence

Related Dependencies

Identifiers

@eslint/core:0.15.2

Evidence

Related Dependencies

Identifiers

@eslint/eslintrc:3.3.1

Evidence

Related Dependencies

Identifiers

@eslint/js:9.35.0

Evidence

Related Dependencies

Identifiers

@eslint/object-schema:2.1.6

Evidence

Related Dependencies

Identifiers

@eslint/plugin-kit:0.3.5

Evidence

Related Dependencies

Identifiers

@humanfs/core:0.19.1

Evidence

Related Dependencies

Identifiers

@humanfs/node:0.16.7

Evidence

Related Dependencies

Identifiers

@humanwhocodes/module-importer:1.0.1

Evidence

Related Dependencies

Identifiers

@humanwhocodes/retry:0.4.3

Evidence

Related Dependencies

Identifiers

@isaacs/balanced-match:4.0.1

Evidence

Related Dependencies

Identifiers

@isaacs/brace-expansion:5.0.0

Evidence

Related Dependencies

Identifiers

@isaacs/cliui:8.0.2

Evidence

Related Dependencies

Identifiers

@istanbuljs/schema:0.1.3

Evidence

Related Dependencies

Identifiers

@jridgewell/gen-mapping:0.3.13

How to read the report | Suppressing false positives | Getting Help: github issues

Sponsor