aboutsummaryrefslogtreecommitdiffstats
path: root/resources/lib/foreign-resources.yaml
blob: d0a58cc23824805488960c791c4f890fab4db22d (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
# ## Format of this file
#
# The top-level keys in this file correspond with directories under resources/lib/.
# These in turn are registered as module bundles in Resources.php.
#
# ## How to install a foreign resource
#
# 1. Add or update the url(s) for the upstream module to this YAML file.
#
#    Look at other modules for examples. To install a module from npm,
#    we use the tarball distribution from npmjs.org. This is the same as what
#    the npm CLI uses. For example, to install jquery-client@9.2.0, use:
#    <https://registry.npmjs.org/jquery-client/-/jquery-client-9.2.0.tgz>.
#
# 2. If the upstream maintainers publish an integrity hash, set that as well.
#    Otherwise, use manageForeignResources.php to compute the integrity hash.
#
#    Run `php manageForeignResources.php make-sri "my module name"`
#
#    This will download the specified file(s) and print their integrity hashes,
#    already formatted in YAML, ready for copying to this file.
#
# 3. Last but not least, decide where files go.
#
#    If you specified a direct url to JavaScript or CSS file, this step is
#    optional. See the corresponding documentation section below for more
#    information and examples for "dest" keys. Once you've set any "dest" keys,
#    run `php manageForeignResources.php update "my module name"`.
#
# ## Package formats
#
# Each top-level key must use one of these types:
#
# - `file`: For a plain file.
# - `multi-file`: For multiple plain files.
# - `tar`: For a tarball archive (file may be compressed).
# - `zip`: For a zipped archive (file may be compressed).
# - `doc-only`: For documenting that a package is used, without managing it
#
# ### Shared fields
#
# The following fields are shared by all package types:
# * `license` : SPDX license identifier
# * `purl` : [optional] package-url specifier ( https://github.com/package-url/purl-spec )
# * `homepage` : [optional] Homepage URL of library, to be shown on Special:Version
# * `authors` : [optional] Authors string of library, to be shown on Special:Version
# * `version` : [optional] Version string of library, to be shown on Special:Version
#
# ### The "file" type
#
# Besides the shared ones, the following fields are used:
# * `src`: Full URL to the remote resource.
# * `integrity`: Cryptographic hash (integrity metadata format per <https://www.w3.org/TR/SRI/>).
# * `dest`: [optional] The file name to use in the module directory. Default: Basename of URL.
#
# For example, the following would produce resources/lib/mymodule/x.js:
#
#     mymodule:
#       type: file
#       src: https://mymodule.example/1.2.3/x.js
#       integrity: sha384-Je+NE+saisQuoi
#
# ### The "multi-file" type
#
# Besides the shared ones, the following fields are used:
# * `files`: An object mapping destination paths to `src` and `integrity` keys.
#
# For example:
#
#     mymodule:
#       type: multi-file
#       files:
#         x.js:
#           src: https://mymodule.example/1.2.3/x.js
#           integrity: sha384-Je+NE+saisQuoi
#         x.css:
#           src: https://mymodule.example/1.2.3/x.css
#           integrity: sha384-Je+NE+saisQuoi
#
# ### The "tar" type
#
# Besides the shared ones, the following fields are used:
# * `src`: Full URL to the remote resource.
# * `integrity`: Cryptographic hash (integrity metadata format per <https://www.w3.org/TR/SRI/>).
# * `dest`: [optional] The default is to extract all files from the package.
#    To only extract some of the files or directories, use "dest" to specify
#    files, directories, and/or glob patterns. You can use a site like https://unpkg.com/
#    to easily inspect an npm package, like <https://unpkg.com/jquery-client@2.0.2/>.
#    This field can also be used to extract files to a subdirectory (by default the files and
#    directories listed in "dest" are extracted to the module directory root).
#
# For example:
#
#     mymodule:
#       type: tar
#       src: https://registry.npmjs.org/jquery-client/-/jquery-client-9.2.0.tgz
#       integrity: sha384-Je+NE+saisQuoi
#       dest:
#         package/dist/x.js:
#         package/dist/i18n:
#         package/dist/style/*.css: themes
#
# This would extract the "x.js" file, the "i18n" directory (recursive),
# and any "*.css" files from the "style" directory. They will end up in mymodule/x.js,
# mymodule/i18n and mymodule/themes, respectively.
#
# ### The "doc-only" type
#
# This type can be used for packages which are managed in some custom way (e.g. they require a
# manual build step). manageForeignResources.php will ignore these records, but they will still
# be shown on Special:Version. Only the shared fields are used.
#

CLDRPluralRuleParser:
  license: MIT
  homepage: https://github.com/santhoshtr/CLDRPluralRuleParser
  authors: Santhosh Thottingal
  version: 1.3.1-0dda851
  purl: pkg:github/santhoshtr/CLDRPluralRuleParser@0dda851#src/CLDRPluralRuleParser.js
  type: file
  src: https://raw.githubusercontent.com/santhoshtr/CLDRPluralRuleParser/0dda851/src/CLDRPluralRuleParser.js
  integrity: sha384-M4taeYYG2+9Ob1/La16iO+zlRRmBV5lBR3xUKkQT6kfkJ0aLbCi6yc0RYI1BDzdh

codex:
  license: GPL-2.0+
  homepage: https://doc.wikimedia.org/codex/
  authors: Design System team, Wikimedia Foundation
  version: 1.22.0
  purl: pkg:npm/@wikimedia/codex@1.22.0
  type: tar
  src: https://registry.npmjs.org/@wikimedia/codex/-/codex-1.22.0.tgz
  integrity: sha384-nGqTfvtHZr6ZBOuQJiPhX9+36riAGzx9pUyAp5nK4IKpQEBzbw5A+9go7FJTY2u7
  dest:
    package/dist/codex.cjs:
    package/dist/codex.js:
    package/dist/codex.umd.cjs:
    package/dist/codex.*.css:
    package/dist/modules/*: modules
    package/dist/mixins/*: mixins
    package/dist/messageKeys.json:
    package/LICENSE:
    package/README.md:
    package/CHANGELOG.md:

codex-design-tokens:
  license: GPL-2.0+
  homepage: https://doc.wikimedia.org/codex/
  authors: Design System team, Wikimedia Foundation
  version: 1.22.0
  purl: pkg:npm/@wikimedia/codex-design-tokens@1.22.0
  type: tar
  src: https://registry.npmjs.org/@wikimedia/codex-design-tokens/-/codex-design-tokens-1.22.0.tgz
  integrity: sha384-K4YGaIFfpS8dGmrn7B7jr1UpjRg+HQagsxtk+9ONpuVwzQkvZyIiTyYMHlpV4lPp
  dest:
    package/dist/theme-*.less:
    package/dist/theme-wikimedia-ui-root.css:
    package/dist/theme-wikimedia-ui-mode-dark.css:
    package/LICENSE:
    package/README.md:

codex-icons:
  license: MIT
  homepage: https://doc.wikimedia.org/codex/
  authors: Design System team, Wikimedia Foundation
  version: 1.21.1
  purl: pkg:npm/@wikimedia/codex-icons@1.22.0
  type: tar
  src: https://registry.npmjs.org/@wikimedia/codex-icons/-/codex-icons-1.22.0.tgz
  integrity: sha384-Eyd6wjeqRhZqJEgIMl3aGfQvZCcIKZuVZwqQPRojj1I+DCmV5DiSCoH/wxZXObX1
  dest:
    package/dist/codex-icons.json:
    package/dist/codex-icon-paths.less:
    package/LICENSE:
    package/README.md:

url:
  license: MIT
  homepage: https://github.com/mrhenry/polyfill-library
  authors: Financial Times
  version: 3.111.0-0ece79ce32
  purl: pkg:github/mrhenry/polyfill-library@0ece79ce32
  type: multi-file
  files:
    URL.js:
      src: https://raw.githubusercontent.com/mrhenry/polyfill-library/0ece79ce32/polyfills/URL/polyfill.js
      integrity: sha384-ZAFKMtnv4166IfCOoSoxGM1b4JQx/njgDOWwnaSQPESHAqvjE0e5gXmYBYyjQEl8
    URL-toJSON.js:
      src: https://raw.githubusercontent.com/mrhenry/polyfill-library/0ece79ce32/polyfills/URL/prototype/toJSON/polyfill.js
      integrity: sha384-Fy884Llzghu/2ag7WG9GtW4BhSprpT9ZdbSKfetBSoD7V6VW1AE5hx1PA0LXVqlC
    LICENSE.md:
      src: https://raw.githubusercontent.com/mrhenry/polyfill-library/0ece79ce32/LICENSE.md
      integrity: sha384-kXXDJ+mVdRawUrEAkIAPr1Lz40TzWjVxllGDCxB9+fHcLXtNsSYrKIvzNgTBF+En

fetch-polyfill:
  license: MIT
  homepage: https://github.com/github/fetch#readme
  authors: GitHub, Inc.
  version: 3.6.2
  type: tar
  src: https://registry.npmjs.com/whatwg-fetch/-/whatwg-fetch-3.6.2.tgz
  integrity: sha384-MKKGEwKprHZSo8G05laATm+iES1Lbsp/Dy7riDibahMr2TyJS7HClsxKjcGk+3FJ
  dest:
    package/dist/fetch.umd.js:
    package/LICENSE:
    package/README.md:

intersection-observer:
  license: Apache-2.0
  homepage: https://github.com/GoogleChromeLabs/intersection-observer
  authors: Philip Walton
  version: 0.12.0
  purl: pkg:npm/intersection-observer@0.12.0
  type: tar
  src: https://registry.npmjs.org/intersection-observer/-/intersection-observer-0.12.0.tgz
  integrity: sha384-zCaiM7krKokKgwmrn87MtEtBUfsddhfofL0x+6KiGr+nHRa4b/ZdcfkBUSEtuEUw
  dest:
    package/intersection-observer.js:
    package/README.md:

jquery:
  license: MIT
  homepage: https://jquery.com
  authors: OpenJS Foundation and other contributors
  version: 3.7.1
  type: multi-file
  files:
    # Integrities from link modals https://code.jquery.com/jquery/
    jquery.js:
      src: https://code.jquery.com/jquery-3.7.1.js
      integrity: sha256-eKhayi8LEQwp4NKxN+CfCh+3qOVUtJn3QNZ0TciWLP4=

jquery.chosen:
  license: MIT
  homepage: https://harvesthq.github.io/chosen/
  authors: Patrick Filler for Harvest, Matthew Lettini, Patrick Filler, Ken Earley, Christophe Coevoet, Koen Punt, and T.J. Schuck.
  version: 1.8.2
  purl: pkg:github/harvesthq/chosen@1.8.2
  type: multi-file
  files:
    LICENSE:
      src: https://raw.githubusercontent.com/harvesthq/chosen/v1.8.2/LICENSE.md
      integrity: sha384-hxUqOVbJZTd9clMlf9yV18PjyKQ2rUOCXLgFNYlV/blpyeCyiUCpmVjAmNP0yc8M
    README.md:
      src: https://raw.githubusercontent.com/harvesthq/chosen/v1.8.2/README.md
      integrity: sha384-ps8fQiOF1anPibj6QMNii4OcAbZNcy+dkmdJUZzqBgmfjaPth9YDe0TRIk89lfID
    # Following files taken from CDN because they're built, and don't exist in the repo
    chosen-sprite.png:
      src: https://cdnjs.cloudflare.com/ajax/libs/chosen/1.8.2/chosen-sprite.png
      integrity: sha384-QL0lDMjIhfcd5uzKEIPehkhx7l0gHWxFo1taNsY2hdDuYdGAadNhiwKueQ91R8KW
    chosen-sprite@2x.png:
      src: https://cdnjs.cloudflare.com/ajax/libs/chosen/1.8.2/chosen-sprite%402x.png
      integrity: sha384-MSDzP+ofFO+lRrCZQn3dztHS/GdR8Ai907bxrRZeuGSi87G8XffEKTxxM99GTvr1
    chosen.css:
      src: https://cdnjs.cloudflare.com/ajax/libs/chosen/1.8.2/chosen.css
      integrity: sha384-VeNz/jFhcqEG5UB40sPZW8Bg8sdtbtXW1038aqBPAZy/z/6j1XsSQjRUJ7NEM3nE
    chosen.jquery.js:
      src: https://cdnjs.cloudflare.com/ajax/libs/chosen/1.8.2/chosen.jquery.js
      integrity: sha384-EzfvMGW4mwDo/InJrmR/UvtxTUUYUA0cfybfS8aqPG1ItoAQYYYDImWl1gaBzMfQ

jquery.client:
  license: MIT
  homepage: https://www.npmjs.com/package/jquery-client
  authors: Trevor Parscal, Timo Tijhof, and Roan Kattouw
  version: 3.0.0
  purl: pkg:npm/jquery-client@3.0.0
  type: tar
  src: https://registry.npmjs.org/jquery-client/-/jquery-client-3.0.0.tgz
  integrity: sha256-BRPTsJn7fViZ2ip0YUBT9L90wJ8s0BFE17ccpmLfPUk=
  dest:
    package/AUTHORS.txt:
    package/jquery.client.js:
    package/LICENSE-MIT:
    package/README.md:

jquery.i18n:
  license: MIT OR GPL-2.0-or-later
  homepage: https://github.com/wikimedia/jquery.i18n
  authors: Language Engineering team, Wikimedia Foundation
  version: 1.0.10
  purl: pkg:github/wikimedia/jquery.i18n@1.0.10
  type: tar
  src: https://codeload.github.com/wikimedia/jquery.i18n/tar.gz/72c45cd91d8c5cdb4c3ee7e341e54ebb194e71e2
  integrity: sha384-zP2+HbmfoQ+fSMuj3Auh9dlqk/FEVV76i38CabjTPnl5Rp41G+IfHeaGKRNPTGyn
  dest:
    jquery.i18n-*/CODE_OF_CONDUCT.md:
    jquery.i18n-*/CREDITS:
    jquery.i18n-*/GPL-LICENSE:
    jquery.i18n-*/MIT-LICENSE:
    jquery.i18n-*/README.md:
    jquery.i18n-*/src:

# Heavily modified; see the PATCHES file
jquery.ui:
  license: MIT
  homepage: https://jqueryui.com
  authors: OpenJS Foundation and other contributors
  version: 1.9.2
  type: doc-only

moment:
  license: MIT
  homepage: https://momentjs.com
  authors: JS Foundation and other contributors
  version: 2.30.1
  purl: pkg:github/moment/moment@2.30.1
  type: tar
  src: https://codeload.github.com/moment/moment/tar.gz/2.30.1
  integrity: sha384-PqvOPbeNfcZqJunZo/JI3zgtel3Y36u3wR6Da8vs6HKuNlPDUiacaXoe3+a8efyH
  dest:
    moment-2.30.1/moment.js:
    moment-2.30.1/CHANGELOG.md:
    moment-2.30.1/README.md:
    moment-2.30.1/LICENSE:
    moment-2.30.1/locale/*.js: locale

mustache:
  license: MIT
  homepage: https://github.com/janl/mustache.js
  authors: Michael Jackson, Jan Lehnardt, Phillip Johnsen, and other contributors
  version: 4.2.0
  purl: pkg:npm/mustache@4.2.0
  type: tar
  src: https://registry.npmjs.org/mustache/-/mustache-4.2.0.tgz
  integrity: sha384-JKpbW4FTGK4zdRNitERF8271K0N5EMpnxY9/yrm8CEUPUE+DZsiBstkkzGd89uJG
  dest:
    package/mustache.js:
    package/LICENSE:

oojs:
  license: MIT
  homepage: https://www.mediawiki.org/wiki/OOjs
  authors: OOjs Team and other contributors
  version: 7.0.1
  purl: pkg:npm/oojs@7.0.1
  type: tar
  src: https://registry.npmjs.org/oojs/-/oojs-7.0.1.tgz
  integrity: sha384-2O0mmkNNV9RilbKtQjCL8wUfIf3Eb+/5CKQEsC4yCbf1NAV1MM67O2GxcC1/cj9Q
  dest:
    package/dist/oojs.js:
    package/AUTHORS.txt:
    package/LICENSE-MIT:
    package/README.md:

ooui:
  license: MIT
  homepage: https://www.mediawiki.org/wiki/OOUI
  authors: OOUI Team and other contributors
  version: 0.51.7
  purl: pkg:npm/oojs-ui@0.51.7
  type: tar
  src: https://registry.npmjs.org/oojs-ui/-/oojs-ui-0.51.7.tgz
  integrity: sha384-4qCOHXoxweCN6ilkHmm2alWe91hQssdF3tieSwzFVTsPgGn57nNrMm0Zhp70TRvu

  dest:
    # Main stuff
    package/dist/oojs-ui-core.js{,.map.json}:
    package/dist/oojs-ui-core-{wikimediaui,apex}.css:
    package/dist/oojs-ui-widgets.js{,.map.json}:
    package/dist/oojs-ui-widgets-{wikimediaui,apex}.css:
    package/dist/oojs-ui-toolbars.js{,.map.json}:
    package/dist/oojs-ui-toolbars-{wikimediaui,apex}.css:
    package/dist/oojs-ui-windows.js{,.map.json}:
    package/dist/oojs-ui-windows-{wikimediaui,apex}.css:
    package/dist/oojs-ui-{wikimediaui,apex}.js{,.map.json}:
    package/dist/i18n:
    # WikimediaUI theme
    package/dist/themes/wikimediaui/images/icons/*.{svg,png}: themes/wikimediaui/images/icons
    package/dist/themes/wikimediaui/images/indicators/*.{svg,png}: themes/wikimediaui/images/indicators
    package/dist/themes/wikimediaui/*.json: themes/wikimediaui
    package/dist/wikimedia-ui-base.less:
    # Apex theme (icons and indicators)
    package/dist/themes/apex/*.json: themes/apex
    # Misc stuff
    package/dist/AUTHORS.txt:
    package/dist/History.md:
    package/dist/LICENSE-MIT:
    package/dist/README.md:

pako:
  license: MIT AND Zlib
  homepage: https://github.com/nodeca/pako
  authors: Andrei Tuputcyn, Vitaly Puzrin, Friedel Ziegelmayer, Kirill Efimov, Jean-loup Gailly, and Mark Adler
  version: 2.1.0
  purl: pkg:github/nodeca/pako@2.1.0
  type: multi-file
  files:
    pako_deflate.js:
      src: https://raw.githubusercontent.com/nodeca/pako/2.1.0/dist/pako_deflate.js
      integrity: sha384-OnIes9Zm3mAxdP2URZyV1WjDdCm6WcghykNJeIHvUSGUBwAYJuBE9oIMyHkDgWmL
    pako_deflate.min.js:
      src: https://raw.githubusercontent.com/nodeca/pako/2.1.0/dist/pako_deflate.min.js
      integrity: sha384-g47DZI9UNr0h29/i2S4PKozocdFoRssd5kkkeDdXjsIWnoRo0iNfgnaVvKFzhMr+
    README.md:
      src: https://raw.githubusercontent.com/nodeca/pako/2.1.0/README.md
      integrity: sha384-mQ9cShSJ6yG8JTPL7LkbnfUnTmc7LA2hnBMSNfb5X7xk6pTFzVTurK9gcSMgJu3B
    LICENSE:
      src: https://raw.githubusercontent.com/nodeca/pako/2.1.0/LICENSE
      integrity: sha384-9tg5LwdfxM6Fpdp6Sep9VI0qXS7Eg5gQRPvNrfV3DKIkVVL3EwSK2atu+zRoEwJg

pinia:
  license: MIT
  homepage: https://pinia.vuejs.org/
  authors: Eduardo San Martin Morote
  version: 2.0.16
  purl: pkg:npm/pinia@2.0.16
  type: tar
  src: https://registry.npmjs.org/pinia/-/pinia-2.0.16.tgz
  integrity: sha512-9/LMVO+/epny1NBfC77vnps4g3JRezxhhoF1xLUk8mZkUIxVnwfEAIRiAX8mYBTD/KCwZqnDMqXc8w3eU0FQGg==

  dest:
    package/README.md:
    package/LICENSE:
    package/dist/pinia.iife.js:
    package/dist/pinia.iife.prod.js:

qunitjs:
  license: MIT
  homepage: https://qunitjs.com
  authors: OpenJS Foundation and other contributors
  version: 2.24.1
  type: multi-file
  # Integrity from link modals at https://code.jquery.com/qunit/
  files:
    qunit.js:
      src: https://code.jquery.com/qunit/qunit-2.24.1.js
      integrity: sha256-YEdd4wYuxAQiI/6o35EYhVnRPryAlednh23dKtVxrZI=
    qunit.css:
      src: https://code.jquery.com/qunit/qunit-2.24.1.css
      integrity: sha256-EfwMSDkbaZPDKJNr29GUv+yTN8LvtHkmXIadx60UKrI=

sinonjs:
  license: BSD-3-Clause
  homepage: https://sinonjs.org/
  authors: Christian Johansen and other contributors
  version: 1.17.7
  type: file
  src: https://sinonjs.org/releases/sinon-1.17.7.js
  integrity: sha384-wR63Jwy75KqwBfzCmXd6gYws6uj3qV/XMAybzXrkEYGYG3AQ58ZWwr1fVpkHa5e8
  dest: sinon.js

swagger-ui:
  license: Apache-2.0
  homepage: https://swagger.io/tools/swagger-ui/
  version: 4.15.5
  authors: Kyle Shockey, Tony Tam, Vladimír Gorej, and others
  type: tar
  src: https://codeload.github.com/swagger-api/swagger-ui/tar.gz/refs/tags/v4.15.5
  integrity: sha384-pOwNNBDnfD+zlf8LtM3994vvCyIaaFpiyRhCRs3FI2GJ/ESZcfZ2YbJ8E4ECf+R7
  dest:
    swagger-ui-4.15.5/README.md:
    swagger-ui-4.15.5/LICENSE:
    swagger-ui-4.15.5/NOTICE:
    swagger-ui-4.15.5/dist/swagger-ui-bundle.js:
    swagger-ui-4.15.5/dist/swagger-ui-bundle.js.map:
    swagger-ui-4.15.5/dist/swagger-ui-standalone-preset.js:
    swagger-ui-4.15.5/dist/swagger-ui-standalone-preset.js.map:
    swagger-ui-4.15.5/dist/swagger-ui.css:
    swagger-ui-4.15.5/dist/swagger-ui.css.map:

vue-demi:
  license: MIT
  homepage: https://github.com/vueuse/vue-demi/
  authors: Anthony Fu
  version: 0.14.7
  purl: pkg:npm/vue-demi@0.14.7
  type: tar
  src: https://registry.npmjs.org/vue-demi/-/vue-demi-0.14.7.tgz
  integrity: sha384-QtuGGEowk/dEp/TbptrrLsk775PREnaIEH9eORfmFEy2r6uj71NS0BtNmuU0ITS6
  dest:
    package/README.md:
    package/LICENSE:
    package/lib/v3/index.cjs:

vue:
  license: MIT
  homepage: https://vuejs.org/
  authors: Yuxi (Evan) You
  version: 3.5.13
  purl: pkg:npm/vue@3.5.13
  type: tar
  src: https://registry.npmjs.org/vue/-/vue-3.5.13.tgz
  integrity: sha384-+0bU8/XSlZlbtiI2pM86YfxHl9QAVK5XQUByFz0bNM87zV7gdekl7B+rx9axKREU
  dest:
    package/README.md:
    package/LICENSE:
    package/dist/vue.global.js:
    package/dist/vue.global.prod.js:

vuex:
  license: MIT
  homepage: https://vuex.vuejs.org/
  authors: Yuxi (Evan) You
  version: 4.0.2
  purl: pkg:npm/vuex@4.0.2
  type: tar
  src: https://registry.npmjs.org/vuex/-/vuex-4.0.2.tgz
  integrity: sha512-M6r8uxELjZIK8kTKDGgZTYX/ahzblnzC4isU1tpmEuOIIKmV+TRdc+H4s8ds2NuZ7wpUTdGRzJRtoj+lI+pc0Q==

  dest:
    package/README.md:
    package/LICENSE:
    package/dist/vuex.global.js:
    package/dist/vuex.global.prod.js: