/**
 * SBOM Generator — CycloneDX 1.6
 *
 * Generates a proper Software Bill of Materials from a project's
 * package.json + package-lock.json (npm v2+), including VEX statements
 * for suppressed findings. Falls back to an empty component list if no
 * manifest is found.
 */
import type { Finding, SbomDocument } from "./types.js";
/**
 * Generate a CycloneDX 1.6 SBOM document for the given project directory.
 *
 * Strategy:
 * 1. Try package-lock.json v2+ for full transitive component inventory
 * 2. Fall back to package.json direct deps if no lockfile
 * 3. Attach VEX statements for any suppressed findings
 */
export declare function generateSbomDocument(projectDir: string, findings: Finding[]): SbomDocument;
//# sourceMappingURL=sbom-generator.d.ts.map