package.json

{
  "name": "github-sbom-toolkit",
  "version": "0.1.0",
  "private": true,
  "type": "module",
  "description": "CLI tool to collect all repository SBOMs for a GitHub Enterprise or Organization and enable interactive dependency PURL search or matching to malware advisories.",
  "bin": {
    "github-sbom-toolkit": "dist/cli.js"
  },
  "scripts": {
    "build": "tsc --project tsconfig.json",
    "start": "node dist/cli.js",
    "dev": "tsx src/cli.ts",
    "lint": "eslint . --ext .ts --max-warnings=0",
    "test": "node dist/test-fixture-match.js && node dist/test-branch-search.js"
  },
  "engines": {
    "node": ">=18.0.0"
  },
  "dependencies": {
    "@github/dependency-submission-toolkit": "^2.0.5",
    "@octokit/core": "^7.0.6",
    "@octokit/graphql": "^9.0.1",
    "@octokit/plugin-paginate-rest": "^14.0.0",
    "@octokit/plugin-rest-endpoint-methods": "^17.0.0",
    "@octokit/plugin-retry": "^8.0.3",
    "@octokit/plugin-throttling": "^11.0.3",
    "chalk": "^5.6.2",
    "cross-fetch": "^4.1.0",
    "inquirer": "^12.11.1",
    "octokit": "^5.0.5",
    "p-limit": "^7.2.0",
    "packageurl-js": "^2.0.1",
    "semver": "^7.7.3",
    "yaml": "^2.8.2",
    "yargs": "^18.0.0"
  },
  "devDependencies": {
    "@types/inquirer": "^9.0.9",
    "@types/node": "^24.10.1",
    "@types/semver": "^7.7.1",
    "@types/yargs": "^17.0.35",
    "@typescript-eslint/eslint-plugin": "^8.48.0",
    "@typescript-eslint/parser": "^8.48.1",
    "eslint": "^9.39.1",
    "tsx": "^4.20.6",
    "typescript": "^5.9.3"
  }
}