Software bill of materials: summary
Product: COOK version 2.0.0
Manufacturer: Bilal El Homsi
Generated: 2026-10-24 by cra-dossier 0.1.0 from the repository cook at commit cd17b114fbab
Regulation: Regulation (EU) 2024/2847 (Cyber Resilience Act), OJ L, 2024/2847, 20.11.2024, http://data.europa.eu/eli/reg/2024/2847/oj
DRAFT generated from the repository for the manufacturer to review, complete and sign. This is not legal advice. This document makes no claim that the product conforms to Regulation (EU) 2024/2847 and no claim about CE marking; conformity is declared only by the manufacturer, on its sole responsibility, after completing the human items in the gap list.
Annex I, Part II, point (1): a software bill of materials in a commonly used and machine-readable format covering at the very least the top-level dependencies. Article 13(24): the Commission may specify the format by implementing act (none found on 2026-10-24). Annex VII, point 8: provided to a market surveillance authority on reasoned request. Annex II, point 9: publication to users is the manufacturer's choice.
- File:
sbom.cdx.json(CycloneDX 1.7, serial urn:uuid:1460219f-d290-471a-bc7e-caa8d0f739cf) - Tool: cdxgen
- Components: 814 (29 top-level)
- Generated: 2026-10-24
Attempts
| Tool | Result | Note |
|---|---|---|
| cdxgen | ok |
Top-level dependencies
- bn.js@5.2.0
- bn.js@5.2.5
- buffer@6.0.3
- cp-amm-sdk@1.4.10
- dynamic-bonding-curve-sdk@1.5.10
- expo-clipboard@57.0.2
- expo-file-system@57.0.7
- expo-font@57.0.4
- expo-image-picker@57.0.2
- expo-image-picker@57.0.20
- expo-secure-store@57.0.4
- expo-sharing@57.0.22
- expo-status-bar@57.0.0
- expo-status-bar@57.0.1
- expo@57.0.26
- expo@57.0.4
- mobile-wallet-adapter-protocol-web3js@2.2.9
- pump-sdk@1.36.0
- react-native-get-random-values@1.11.0
- react-native-safe-area-context@5.7.0
- react-native-view-shot@5.1.0
- react-native@0.86.0
- react-native@0.86.3
- react-test-renderer@19.2.3
- react@19.2.17
- react@19.2.3
- ts-node@10.9.2
- typescript@5.9.3
- web3.js@1.98.4
Licences (count of components)
| Licence | Components |
|---|---|
| MIT | 647 |
| Apache-2.0 | 52 |
| ISC | 29 |
| MPL-2.0 | 24 |
| BSD-3-Clause | 14 |
| LGPL-3.0-or-later | 10 |
| BSD-2-Clause | 6 |
| BlueOak-1.0.0 | 6 |
| MIT OR Apache-2.0 | 5 |
| unknown | 3 |
| Apache-2.0 AND LGPL-3.0-or-later | 3 |
| 0BSD | 2 |
| CC0-1.0 | 2 |
| CC-BY-4.0 | 2 |
| MIT OR CC0-1.0 | 2 |
| Unlicense | 2 |
| LGPL-3.0-only | 1 |
| MIT AND Zlib | 1 |
| BSD-3-Clause OR GPL-2.0-only | 1 |
| Python-2.0 | 1 |
| Apache-2.0 AND LGPL-3.0-or-later AND MIT | 1 |
Coverage notes: application code ecosystems only; platform-native dependencies (Android Gradle, iOS CocoaPods) and the runtime (React Native, Hermes, the operating system) appear only where the tool resolved them. State in the technical file which parts of the product this SBOM covers.