resources/lib/foreign-resources.yaml

   1 # ## Format of this file
   2 #
   3 # The top-level keys in this file correspond with directories under resources/lib/.
   4 # These in turn are registered as module bundles in Resources.php.
   5 #
   6 # ## How to install a foreign resource
   7 #
   8 # 1. Add or update the url(s) for the upstream module to this YAML file.
   9 #
  10 #    Look at other modules for examples. To install a module from npm,
  11 #    we use the tarball distribution from npmjs.org. This is the same as what
  12 #    the npm CLI uses. For example, to install jquery-client@9.2.0, use:
  13 #    <https://registry.npmjs.org/jquery-client/-/jquery-client-9.2.0.tgz>.
  14 #
  15 # 2. If the upstream maintainers publish an integrity hash, set that as well.
  16 #    Otherwise, use manageForeignResources.php to compute the integrity hash.
  17 #
  18 #    Run `php manageForeignResources.php make-sri "my module name"`
  19 #
  20 #    This will download the specified file(s) and print their integrity hashes,
  21 #    already formatted in YAML, ready for copying to this file.
  22 #
  23 # 3. Last but not least, decide where files go.
  24 #
  25 #    If you specified a direct url to JavaScript or CSS file, this step is
  26 #    optional. See the corresponding documentation section below for more
  27 #    information and examples for "dest" keys. Once you've set any "dest" keys,
  28 #    run `php manageForeignResources.php update "my module name"`.
  29 #
  30 # ## Package formats
  31 #
  32 # Each top-level key must use one of these types:
  33 #
  34 # - `file`: For a plain file.
  35 # - `multi-file`: For multiple plain files.
  36 # - `tar`: For a tarball archive (file may be compressed).
  37 # - `zip`: For a zipped archive (file may be compressed).
  38 # - `doc-only`: For documenting that a package is used, without managing it
  39 #
  40 # ### Shared fields
  41 #
  42 # The following fields are shared by all package types:
  43 # * `license` : SPDX license identifier
  44 # * `purl` : [optional] package-url specifier ( https://github.com/package-url/purl-spec )
  45 # * `homepage` : [optional] Homepage URL of library, to be shown on Special:Version
  46 # * `authors` : [optional] Authors string of library, to be shown on Special:Version
  47 # * `version` : [optional] Version string of library, to be shown on Special:Version
  48 #
  49 # ### The "file" type
  50 #
  51 # Besides the shared ones, the following fields are used:
  52 # * `src`: Full URL to the remote resource.
  53 # * `integrity`: Cryptographic hash (integrity metadata format per <https://www.w3.org/TR/SRI/>).
  54 # * `dest`: [optional] The file name to use in the module directory. Default: Basename of URL.
  55 #
  56 # For example, the following would produce resources/lib/mymodule/x.js:
  57 #
  58 #     mymodule:
  59 #       type: file
  60 #       src: https://mymodule.example/1.2.3/x.js
  61 #       integrity: sha384-Je+NE+saisQuoi
  62 #
  63 # ### The "multi-file" type
  64 #
  65 # Besides the shared ones, the following fields are used:
  66 # * `files`: An object mapping destination paths to `src` and `integrity` keys.
  67 #
  68 # For example:
  69 #
  70 #     mymodule:
  71 #       type: multi-file
  72 #       files:
  73 #         x.js:
  74 #           src: https://mymodule.example/1.2.3/x.js
  75 #           integrity: sha384-Je+NE+saisQuoi
  76 #         x.css:
  77 #           src: https://mymodule.example/1.2.3/x.css
  78 #           integrity: sha384-Je+NE+saisQuoi
  79 #
  80 # ### The "tar" type
  81 #
  82 # Besides the shared ones, the following fields are used:
  83 # * `src`: Full URL to the remote resource.
  84 # * `integrity`: Cryptographic hash (integrity metadata format per <https://www.w3.org/TR/SRI/>).
  85 # * `dest`: [optional] The default is to extract all files from the package.
  86 #    To only extract some of the files or directories, use "dest" to specify
  87 #    files, directories, and/or glob patterns. You can use a site like https://unpkg.com/
  88 #    to easily inspect an npm package, like <https://unpkg.com/jquery-client@2.0.2/>.
  89 #    This field can also be used to extract files to a subdirectory (by default the files and
  90 #    directories listed in "dest" are extracted to the module directory root).
  91 #
  92 # For example:
  93 #
  94 #     mymodule:
  95 #       type: tar
  96 #       src: https://registry.npmjs.org/jquery-client/-/jquery-client-9.2.0.tgz
  97 #       integrity: sha384-Je+NE+saisQuoi
  98 #       dest:
  99 #         package/dist/x.js:
 100 #         package/dist/i18n:
 101 #         package/dist/style/*.css: themes
 102 #
 103 # This would extract the "x.js" file, the "i18n" directory (recursive),
 104 # and any "*.css" files from the "style" directory. They will end up in mymodule/x.js,
 105 # mymodule/i18n and mymodule/themes, respectively.
 106 #
 107 # ### The "doc-only" type
 108 #
 109 # This type can be used for packages which are managed in some custom way (e.g. they require a
 110 # manual build step). manageForeignResources.php will ignore these records, but they will still
 111 # be shown on Special:Version. Only the shared fields are used.
 112 #
 113
 114 CLDRPluralRuleParser:
 115   license: MIT
 116   homepage: https://github.com/santhoshtr/CLDRPluralRuleParser
 117   authors: Santhosh Thottingal
 118   version: 1.3.1-0dda851
 119   purl: pkg:github/santhoshtr/CLDRPluralRuleParser@0dda851#src/CLDRPluralRuleParser.js
 120   type: file
 121   src: https://raw.githubusercontent.com/santhoshtr/CLDRPluralRuleParser/0dda851/src/CLDRPluralRuleParser.js
 122   integrity: sha384-M4taeYYG2+9Ob1/La16iO+zlRRmBV5lBR3xUKkQT6kfkJ0aLbCi6yc0RYI1BDzdh
 123
 124 codex:
 125   license: GPL-2.0+
 126   homepage: https://doc.wikimedia.org/codex/
 127   authors: Design System team, Wikimedia Foundation
 128   version: 1.18.0
 129   purl: pkg:npm/@wikimedia/codex@1.18.0
 130   type: tar
 131   src: https://registry.npmjs.org/@wikimedia/codex/-/codex-1.18.0.tgz
 132   integrity: sha384-hIHDvtu2GpT8nbSfSNIqTUcK6NLFX1bebg7YmNfY4/AfRihR+DpEDD7TEqAXDs+j
 133   dest:
 134     package/dist/codex.cjs:
 135     package/dist/codex.js:
 136     package/dist/codex.umd.cjs:
 137     package/dist/codex.*.css:
 138     package/dist/modules/*: modules
 139     package/dist/mixins/*: mixins
 140     package/dist/messageKeys.json:
 141     package/LICENSE:
 142     package/README.md:
 143     package/CHANGELOG.md:
 144
 145 codex-design-tokens:
 146   license: GPL-2.0+
 147   homepage: https://doc.wikimedia.org/codex/
 148   authors: Design System team, Wikimedia Foundation
 149   version: 1.18.0
 150   purl: pkg:npm/@wikimedia/codex-design-tokens@1.18.0
 151   type: tar
 152   src: https://registry.npmjs.org/@wikimedia/codex-design-tokens/-/codex-design-tokens-1.18.0.tgz
 153   integrity: sha384-/9LDUY4xMAkV9y6BXZIHXvQ4Eip29u362ilrcIgLT0qy/UUVxQmuP1YBxCbEuuyH
 154   dest:
 155     package/dist/theme-*.less:
 156     package/dist/theme-wikimedia-ui-root.css:
 157     package/dist/theme-wikimedia-ui-mode-dark.css:
 158     package/LICENSE:
 159     package/README.md:
 160
 161 codex-icons:
 162   license: MIT
 163   homepage: https://doc.wikimedia.org/codex/
 164   authors: Design System team, Wikimedia Foundation
 165   version: 1.18.0
 166   purl: pkg:npm/@wikimedia/codex-icons@1.18.0
 167   type: tar
 168   src: https://registry.npmjs.org/@wikimedia/codex-icons/-/codex-icons-1.18.0.tgz
 169   integrity: sha384-vQcpR6Uudxf1pJD7kkAuFkZy79hAi1d+HkP6VUofRm9np6WBoiMmda1tWtcX/DNU
 170   dest:
 171     package/dist/codex-icons.json:
 172     package/dist/codex-icon-paths.less:
 173     package/LICENSE:
 174     package/README.md:
 175
 176 url:
 177   license: MIT
 178   homepage: https://github.com/mrhenry/polyfill-library
 179   authors: Financial Times
 180   version: 3.111.0-0ece79ce32
 181   purl: pkg:github/mrhenry/polyfill-library@0ece79ce32
 182   type: multi-file
 183   files:
 184     URL.js:
 185       src: https://raw.githubusercontent.com/mrhenry/polyfill-library/0ece79ce32/polyfills/URL/polyfill.js
 186       integrity: sha384-ZAFKMtnv4166IfCOoSoxGM1b4JQx/njgDOWwnaSQPESHAqvjE0e5gXmYBYyjQEl8
 187     URL-toJSON.js:
 188       src: https://raw.githubusercontent.com/mrhenry/polyfill-library/0ece79ce32/polyfills/URL/prototype/toJSON/polyfill.js
 189       integrity: sha384-Fy884Llzghu/2ag7WG9GtW4BhSprpT9ZdbSKfetBSoD7V6VW1AE5hx1PA0LXVqlC
 190     LICENSE.md:
 191       src: https://raw.githubusercontent.com/mrhenry/polyfill-library/0ece79ce32/LICENSE.md
 192       integrity: sha384-kXXDJ+mVdRawUrEAkIAPr1Lz40TzWjVxllGDCxB9+fHcLXtNsSYrKIvzNgTBF+En
 193
 194 fetch-polyfill:
 195   license: MIT
 196   homepage: https://github.com/github/fetch#readme
 197   authors: GitHub, Inc.
 198   version: 3.6.2
 199   type: tar
 200   src: https://registry.npmjs.com/whatwg-fetch/-/whatwg-fetch-3.6.2.tgz
 201   integrity: sha384-MKKGEwKprHZSo8G05laATm+iES1Lbsp/Dy7riDibahMr2TyJS7HClsxKjcGk+3FJ
 202   dest:
 203     package/dist/fetch.umd.js:
 204     package/LICENSE:
 205     package/README.md:
 206
 207 intersection-observer:
 208   license: Apache-2.0
 209   homepage: https://github.com/GoogleChromeLabs/intersection-observer
 210   authors: Philip Walton
 211   version: 0.12.0
 212   purl: pkg:npm/intersection-observer@0.12.0
 213   type: tar
 214   src: https://registry.npmjs.org/intersection-observer/-/intersection-observer-0.12.0.tgz
 215   integrity: sha384-zCaiM7krKokKgwmrn87MtEtBUfsddhfofL0x+6KiGr+nHRa4b/ZdcfkBUSEtuEUw
 216   dest:
 217     package/intersection-observer.js:
 218     package/README.md:
 219
 220 jquery:
 221   license: MIT
 222   homepage: https://jquery.com
 223   authors: OpenJS Foundation and other contributors
 224   version: 3.7.1
 225   type: multi-file
 226   files:
 227     # Integrities from link modals https://code.jquery.com/jquery/
 228     jquery.js:
 229       src: https://code.jquery.com/jquery-3.7.1.js
 230       integrity: sha256-eKhayi8LEQwp4NKxN+CfCh+3qOVUtJn3QNZ0TciWLP4=
 231
 232 jquery.chosen:
 233   license: MIT
 234   homepage: https://harvesthq.github.io/chosen/
 235   authors: Patrick Filler for Harvest, Matthew Lettini, Patrick Filler, Ken Earley, Christophe Coevoet, Koen Punt, and T.J. Schuck.
 236   version: 1.8.2
 237   purl: pkg:github/harvesthq/chosen@1.8.2
 238   type: multi-file
 239   files:
 240     LICENSE:
 241       src: https://raw.githubusercontent.com/harvesthq/chosen/v1.8.2/LICENSE.md
 242       integrity: sha384-hxUqOVbJZTd9clMlf9yV18PjyKQ2rUOCXLgFNYlV/blpyeCyiUCpmVjAmNP0yc8M
 243     README.md:
 244       src: https://raw.githubusercontent.com/harvesthq/chosen/v1.8.2/README.md
 245       integrity: sha384-ps8fQiOF1anPibj6QMNii4OcAbZNcy+dkmdJUZzqBgmfjaPth9YDe0TRIk89lfID
 246     # Following files taken from CDN because they're built, and don't exist in the repo
 247     chosen-sprite.png:
 248       src: https://cdnjs.cloudflare.com/ajax/libs/chosen/1.8.2/chosen-sprite.png
 249       integrity: sha384-QL0lDMjIhfcd5uzKEIPehkhx7l0gHWxFo1taNsY2hdDuYdGAadNhiwKueQ91R8KW
 250     chosen-sprite@2x.png:
 251       src: https://cdnjs.cloudflare.com/ajax/libs/chosen/1.8.2/chosen-sprite%402x.png
 252       integrity: sha384-MSDzP+ofFO+lRrCZQn3dztHS/GdR8Ai907bxrRZeuGSi87G8XffEKTxxM99GTvr1
 253     chosen.css:
 254       src: https://cdnjs.cloudflare.com/ajax/libs/chosen/1.8.2/chosen.css
 255       integrity: sha384-VeNz/jFhcqEG5UB40sPZW8Bg8sdtbtXW1038aqBPAZy/z/6j1XsSQjRUJ7NEM3nE
 256     chosen.jquery.js:
 257       src: https://cdnjs.cloudflare.com/ajax/libs/chosen/1.8.2/chosen.jquery.js
 258       integrity: sha384-EzfvMGW4mwDo/InJrmR/UvtxTUUYUA0cfybfS8aqPG1ItoAQYYYDImWl1gaBzMfQ
 259
 260 jquery.client:
 261   license: MIT
 262   homepage: https://www.npmjs.com/package/jquery-client
 263   authors: Trevor Parscal, Timo Tijhof, and Roan Kattouw
 264   version: 3.0.0
 265   purl: pkg:npm/jquery-client@3.0.0
 266   type: tar
 267   src: https://registry.npmjs.org/jquery-client/-/jquery-client-3.0.0.tgz
 268   integrity: sha256-BRPTsJn7fViZ2ip0YUBT9L90wJ8s0BFE17ccpmLfPUk=
 269   dest:
 270     package/AUTHORS.txt:
 271     package/jquery.client.js:
 272     package/LICENSE-MIT:
 273     package/README.md:
 274
 275 jquery.i18n:
 276   license: MIT OR GPL-2.0-or-later
 277   homepage: https://github.com/wikimedia/jquery.i18n
 278   authors: Language Engineering team, Wikimedia Foundation
 279   version: 1.0.10
 280   purl: pkg:github/wikimedia/jquery.i18n@1.0.10
 281   type: tar
 282   src: https://codeload.github.com/wikimedia/jquery.i18n/tar.gz/72c45cd91d8c5cdb4c3ee7e341e54ebb194e71e2
 283   integrity: sha384-zP2+HbmfoQ+fSMuj3Auh9dlqk/FEVV76i38CabjTPnl5Rp41G+IfHeaGKRNPTGyn
 284   dest:
 285     jquery.i18n-*/CODE_OF_CONDUCT.md:
 286     jquery.i18n-*/CREDITS:
 287     jquery.i18n-*/GPL-LICENSE:
 288     jquery.i18n-*/MIT-LICENSE:
 289     jquery.i18n-*/README.md:
 290     jquery.i18n-*/src:
 291
 292 # Heavily modified; see the PATCHES file
 293 jquery.ui:
 294   license: MIT
 295   homepage: https://jqueryui.com
 296   authors: OpenJS Foundation and other contributors
 297   version: 1.9.2
 298   type: doc-only
 299
 300 moment:
 301   license: MIT
 302   homepage: https://momentjs.com
 303   authors: JS Foundation and other contributors
 304   version: 2.25.2
 305   purl: pkg:github/moment/moment@2.25.2
 306   type: tar
 307   src: https://codeload.github.com/moment/moment/tar.gz/2.25.2
 308   integrity: sha384-Kdi8+psMUggMYwnp+uBCuy03sBfDbKFyjzdLWJks/4O8x4DwOFWzYbtm7RbJ4ISU
 309   dest:
 310     moment-2.25.2/moment.js:
 311     moment-2.25.2/CHANGELOG.md:
 312     moment-2.25.2/README.md:
 313     moment-2.25.2/LICENSE:
 314     moment-2.25.2/locale/*.js: locale
 315
 316 mustache:
 317   license: MIT
 318   homepage: https://github.com/janl/mustache.js
 319   authors: Michael Jackson, Jan Lehnardt, Phillip Johnsen, and other contributors
 320   version: 4.2.0
 321   purl: pkg:npm/mustache@4.2.0
 322   type: tar
 323   src: https://registry.npmjs.org/mustache/-/mustache-4.2.0.tgz
 324   integrity: sha384-JKpbW4FTGK4zdRNitERF8271K0N5EMpnxY9/yrm8CEUPUE+DZsiBstkkzGd89uJG
 325   dest:
 326     package/mustache.js:
 327     package/LICENSE:
 328
 329 oojs:
 330   license: MIT
 331   homepage: https://www.mediawiki.org/wiki/OOjs
 332   authors: OOjs Team and other contributors
 333   version: 7.0.1
 334   purl: pkg:npm/oojs@7.0.1
 335   type: tar
 336   src: https://registry.npmjs.org/oojs/-/oojs-7.0.1.tgz
 337   integrity: sha384-2O0mmkNNV9RilbKtQjCL8wUfIf3Eb+/5CKQEsC4yCbf1NAV1MM67O2GxcC1/cj9Q
 338   dest:
 339     package/dist/oojs.js:
 340     package/AUTHORS.txt:
 341     package/LICENSE-MIT:
 342     package/README.md:
 343
 344 ooui:
 345   license: MIT
 346   homepage: https://www.mediawiki.org/wiki/OOUI
 347   authors: OOUI Team and other contributors
 348   version: 0.51.4
 349   purl: pkg:npm/oojs-ui@0.51.4
 350   type: tar
 351   src: https://registry.npmjs.org/oojs-ui/-/oojs-ui-0.51.4.tgz
 352   integrity: sha384-i9Tl0Hf+yn3yFE8ffEGKoDMtEGjPBwXxfeYEb0yn8620n6EpW2rC/bZQQgDMwUXf
 353
 354   dest:
 355     # Main stuff
 356     package/dist/oojs-ui-core.js{,.map.json}:
 357     package/dist/oojs-ui-core-{wikimediaui,apex}.css:
 358     package/dist/oojs-ui-widgets.js{,.map.json}:
 359     package/dist/oojs-ui-widgets-{wikimediaui,apex}.css:
 360     package/dist/oojs-ui-toolbars.js{,.map.json}:
 361     package/dist/oojs-ui-toolbars-{wikimediaui,apex}.css:
 362     package/dist/oojs-ui-windows.js{,.map.json}:
 363     package/dist/oojs-ui-windows-{wikimediaui,apex}.css:
 364     package/dist/oojs-ui-{wikimediaui,apex}.js{,.map.json}:
 365     package/dist/i18n:
 366     # WikimediaUI theme
 367     package/dist/themes/wikimediaui/images/icons/*.{svg,png}: themes/wikimediaui/images/icons
 368     package/dist/themes/wikimediaui/images/indicators/*.{svg,png}: themes/wikimediaui/images/indicators
 369     package/dist/themes/wikimediaui/*.json: themes/wikimediaui
 370     package/dist/wikimedia-ui-base.less:
 371     # Apex theme (icons and indicators)
 372     package/dist/themes/apex/*.json: themes/apex
 373     # Misc stuff
 374     package/dist/AUTHORS.txt:
 375     package/dist/History.md:
 376     package/dist/LICENSE-MIT:
 377     package/dist/README.md:
 378
 379 pako:
 380   license: MIT AND Zlib
 381   homepage: https://github.com/nodeca/pako
 382   authors: Andrei Tuputcyn, Vitaly Puzrin, Friedel Ziegelmayer, Kirill Efimov, Jean-loup Gailly, and Mark Adler
 383   version: 2.1.0
 384   purl: pkg:github/nodeca/pako@2.1.0
 385   type: multi-file
 386   files:
 387     pako_deflate.js:
 388       src: https://raw.githubusercontent.com/nodeca/pako/2.1.0/dist/pako_deflate.js
 389       integrity: sha384-OnIes9Zm3mAxdP2URZyV1WjDdCm6WcghykNJeIHvUSGUBwAYJuBE9oIMyHkDgWmL
 390     pako_deflate.min.js:
 391       src: https://raw.githubusercontent.com/nodeca/pako/2.1.0/dist/pako_deflate.min.js
 392       integrity: sha384-g47DZI9UNr0h29/i2S4PKozocdFoRssd5kkkeDdXjsIWnoRo0iNfgnaVvKFzhMr+
 393     README.md:
 394       src: https://raw.githubusercontent.com/nodeca/pako/2.1.0/README.md
 395       integrity: sha384-mQ9cShSJ6yG8JTPL7LkbnfUnTmc7LA2hnBMSNfb5X7xk6pTFzVTurK9gcSMgJu3B
 396     LICENSE:
 397       src: https://raw.githubusercontent.com/nodeca/pako/2.1.0/LICENSE
 398       integrity: sha384-9tg5LwdfxM6Fpdp6Sep9VI0qXS7Eg5gQRPvNrfV3DKIkVVL3EwSK2atu+zRoEwJg
 399
 400 pinia:
 401   license: MIT
 402   homepage: https://pinia.vuejs.org/
 403   authors: Eduardo San Martin Morote
 404   version: 2.0.16
 405   purl: pkg:npm/pinia@2.0.16
 406   type: tar
 407   src: https://registry.npmjs.org/pinia/-/pinia-2.0.16.tgz
 408   integrity: sha512-9/LMVO+/epny1NBfC77vnps4g3JRezxhhoF1xLUk8mZkUIxVnwfEAIRiAX8mYBTD/KCwZqnDMqXc8w3eU0FQGg==
 409
 410   dest:
 411     package/README.md:
 412     package/LICENSE:
 413     package/dist/pinia.iife.js:
 414     package/dist/pinia.iife.prod.js:
 415
 416 qunitjs:
 417   license: MIT
 418   homepage: https://qunitjs.com
 419   authors: OpenJS Foundation and other contributors
 420   version: 2.20.0
 421   type: multi-file
 422   # Integrity from link modals at https://code.jquery.com/qunit/
 423   files:
 424     qunit.js:
 425       src: https://code.jquery.com/qunit/qunit-2.20.0.js
 426       integrity: sha256-qDPbT8viaD6gCaTrUd7FOE5lU5S9H5U5bbuQMADnrRY=
 427     qunit.css:
 428       src: https://code.jquery.com/qunit/qunit-2.20.0.css
 429       integrity: sha256-NN2oro7r8aYcRYA4fnBbijdLRS7Rc4Pz9ikcmlwWvl4=
 430
 431 sinonjs:
 432   license: BSD-3-Clause
 433   homepage: https://sinonjs.org/
 434   authors: Christian Johansen and other contributors
 435   version: 1.17.7
 436   type: file
 437   src: https://sinonjs.org/releases/sinon-1.17.7.js
 438   integrity: sha384-wR63Jwy75KqwBfzCmXd6gYws6uj3qV/XMAybzXrkEYGYG3AQ58ZWwr1fVpkHa5e8
 439   dest: sinon.js
 440
 441 swagger-ui:
 442   license: Apache-2.0
 443   homepage: https://swagger.io/tools/swagger-ui/
 444   version: 4.15.5
 445   authors: Kyle Shockey, Tony Tam, Vladimír Gorej, and others
 446   type: tar
 447   src: https://codeload.github.com/swagger-api/swagger-ui/tar.gz/refs/tags/v4.15.5
 448   integrity: sha384-pOwNNBDnfD+zlf8LtM3994vvCyIaaFpiyRhCRs3FI2GJ/ESZcfZ2YbJ8E4ECf+R7
 449   dest:
 450     swagger-ui-4.15.5/README.md:
 451     swagger-ui-4.15.5/LICENSE:
 452     swagger-ui-4.15.5/dist/swagger-ui-bundle.js:
 453     swagger-ui-4.15.5/dist/swagger-ui-bundle.js.map:
 454     swagger-ui-4.15.5/dist/swagger-ui-standalone-preset.js:
 455     swagger-ui-4.15.5/dist/swagger-ui-standalone-preset.js.map:
 456     swagger-ui-4.15.5/dist/swagger-ui.css:
 457     swagger-ui-4.15.5/dist/swagger-ui.css.map:
 458
 459 vue-demi:
 460   license: MIT
 461   homepage: https://github.com/vueuse/vue-demi/
 462   authors: Anthony Fu
 463   version: 0.14.7
 464   purl: pkg:npm/vue-demi@0.14.7
 465   type: tar
 466   src: https://registry.npmjs.org/vue-demi/-/vue-demi-0.14.7.tgz
 467   integrity: sha384-QtuGGEowk/dEp/TbptrrLsk775PREnaIEH9eORfmFEy2r6uj71NS0BtNmuU0ITS6
 468   dest:
 469     package/README.md:
 470     package/LICENSE:
 471     package/lib/v3/index.cjs:
 472
 473 vue:
 474   license: MIT
 475   homepage: https://vuejs.org/
 476   authors: Yuxi (Evan) You
 477   version: 3.4.27
 478   purl: pkg:npm/vue@3.4.27
 479   type: tar
 480   src: https://registry.npmjs.org/vue/-/vue-3.4.27.tgz
 481   integrity: sha384-NI/upbRDNmqZCbvCtpncGt32Iw2gOsS6j/l3D4wSfz9IVnSXqLhO5mHLbVblRHet
 482   dest:
 483     package/README.md:
 484     package/LICENSE:
 485     package/dist/vue.global.js:
 486     package/dist/vue.global.prod.js:
 487
 488 vuex:
 489   license: MIT
 490   homepage: https://vuex.vuejs.org/
 491   authors: Yuxi (Evan) You
 492   version: 4.0.2
 493   purl: pkg:npm/vuex@4.0.2
 494   type: tar
 495   src: https://registry.npmjs.org/vuex/-/vuex-4.0.2.tgz
 496   integrity: sha512-M6r8uxELjZIK8kTKDGgZTYX/ahzblnzC4isU1tpmEuOIIKmV+TRdc+H4s8ds2NuZ7wpUTdGRzJRtoj+lI+pc0Q==
 497
 498   dest:
 499     package/README.md:
 500     package/LICENSE:
 501     package/dist/vuex.global.js:
 502     package/dist/vuex.global.prod.js: