{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:cf4c48ef-dbf8-4879-807a-f6d73e488bf0",
  "version": 1,
  "metadata": {
    "timestamp": "2026-08-23T06:54:17Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "apollo-upload-client",
      "group": "",
      "version": "19.0.0",
      "description": "A terminating Apollo Link for Apollo Client that fetches a GraphQL multipart request if the GraphQL variables contain files (by default FileList, File, or Blob instances), or else fetches a regular GraphQL POST or GET request (depending on the config and GraphQL operation).",
      "purl": "pkg:npm/apollo-upload-client@19.0.0",
      "bom-ref": "pkg:npm/apollo-upload-client@19.0.0",
      "author": "Jayden Seric <me@jaydenseric.com> (https://jaydenseric.com)",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "prettier, eslint, types, test, check, prepublishOnly"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jaydenseric/apollo-upload-client#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/jaydenseric/apollo-upload-client.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@apollo\\n@bcoe\\n@esbuild\\n@eslint\\n@eslint-community\\n@graphql-typed-document-node\\n@humanfs\\n@humanwhocodes\\n@types\\n@wry"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "node_modules/@apollo/client/package.json\\nnode_modules/@bcoe/v8-coverage/dist/lib/package.json\\nnode_modules/@bcoe/v8-coverage/package.json\\nnode_modules/@esbuild/linux-x64/package.json\\nnode_modules/@eslint-community/eslint-utils/node_modules/eslint-visitor-keys/package.json\\nnode_modules/@eslint-community/eslint-utils/package.json\\nnode_modules/@eslint-community/regexpp/package.json\\nnode_modules/@eslint/config-array/package.json\\nnode_modules/@eslint/config-helpers/package.json\\nnode_modules/@eslint/core/package.json\\nnode_modules/@eslint/eslintrc/package.json\\nnode_modules/@eslint/js/package.json\\nnode_modules/@eslint/object-schema/package.json\\nnode_modules/@eslint/plugin-kit/package.json\\nnode_modules/@graphql-typed-document-node/core/package.json\\nnode_modules/@humanfs/core/package.json\\nnode_modules/@humanfs/node/package.json\\nnode_modules/@humanfs/types/package.json\\nnode_modules/@humanwhocodes/module-importer/package.json\\nnode_modules/@humanwhocodes/retry/package.json\\nnode_modules/@types/estree/package.json\\nnode_modules/@types/json-schema/package.json\\nnode_modules/@types/node/package.json\\nnode_modules/@wry/caches/package.json\\nnode_modules/@wry/context/package.json\\nnode_modules/@wry/equality/package.json\\nnode_modules/@wry/trie/package.json\\nnode_modules/acorn-jsx/package.json\\nnode_modules/acorn/package.json\\nnode_modules/ajv/package.json\\nnode_modules/ansi-styles/package.json\\nnode_modules/argparse/package.json\\nnode_modules/balanced-match/package.json\\nnode_modules/brace-expansion/package.json\\nnode_modules/callsites/package.json\\nnode_modules/chalk/package.json\\nnode_modules/color-convert/package.json\\nnode_modules/color-name/package.json\\nnode_modules/concat-map/package.json\\nnode_modules/coverage-node/package.json\\nnode_modules/cross-spawn/package.json\\nnode_modules/debug/package.json\\nnode_modules/deep-is/package.json\\nnode_modules/disposable-directory/package.json\\nnode_modules/duplexer/package.json\\nnode_modules/esbuild/package.json\\nnode_modules/escape-string-regexp/package.json\\nnode_modules/eslint-plugin-optimal-modules/package.json\\nnode_modules/eslint-plugin-simple-import-sort/package.json\\nnode_modules/eslint-scope/package.json\\nnode_modules/eslint-visitor-keys/package.json\\nnode_modules/eslint/package.json\\nnode_modules/espree/package.json\\nnode_modules/esquery/package.json\\nnode_modules/esrecurse/package.json\\nnode_modules/estraverse/package.json\\nnode_modules/esutils/package.json\\nnode_modules/extract-files/package.json\\nnode_modules/fast-deep-equal/package.json\\nnode_modules/fast-json-stable-stringify/package.json\\nnode_modules/fast-levenshtein/package.json\\nnode_modules/file-entry-cache/package.json\\nnode_modules/find-up/package.json\\nnode_modules/flat-cache/package.json\\nnode_modules/flatted/package.json\\nnode_modules/glob-parent/package.json\\nnode_modules/globals/package.json\\nnode_modules/graphql-tag/package.json\\nnode_modules/graphql/package.json\\nnode_modules/gzip-size/package.json\\nnode_modules/has-flag/package.json\\nnode_modules/ignore/package.json\\nnode_modules/import-fresh/package.json\\nnode_modules/imurmurhash/package.json\\nnode_modules/is-extglob/package.json\\nnode_modules/is-glob/package.json\\nnode_modules/is-plain-obj/package.json\\nnode_modules/isexe/package.json\\nnode_modules/js-yaml/package.json\\nnode_modules/json-buffer/package.json\\nnode_modules/json-schema-traverse/package.json\\nnode_modules/json-stable-stringify-without-jsonify/package.json\\nnode_modules/keyv/package.json\\nnode_modules/kleur/package.json\\nnode_modules/levn/package.json\\nnode_modules/locate-path/package.json\\nnode_modules/lodash.merge/package.json\\nnode_modules/minimatch/package.json\\nnode_modules/ms/package.json\\nnode_modules/natural-compare/package.json\\nnode_modules/optimism/package.json\\nnode_modules/optionator/package.json\\nnode_modules/p-limit/package.json\\nnode_modules/p-locate/package.json\\nnode_modules/parent-module/package.json\\nnode_modules/path-exists/package.json\\nnode_modules/path-key/package.json\\nnode_modules/prelude-ls/package.json\\nnode_modules/prettier/package.json\\nnode_modules/punycode/package.json\\nnode_modules/resolve-from/package.json\\nnode_modules/revertable-globals/package.json\\nnode_modules/rxjs/ajax/package.json\\nnode_modules/rxjs/fetch/package.json\\nnode_modules/rxjs/operators/package.json\\nnode_modules/rxjs/package.json\\nnode_modules/rxjs/testing/package.json\\nnode_modules/rxjs/webSocket/package.json\\nnode_modules/shebang-command/package.json\\nnode_modules/shebang-regex/package.json\\nnode_modules/strip-json-comments/package.json\\nnode_modules/supports-color/package.json\\nnode_modules/tslib/package.json\\nnode_modules/type-check/package.json\\nnode_modules/typescript/package.json\\nnode_modules/undici-types/package.json\\nnode_modules/uri-js/package.json\\nnode_modules/which/package.json\\nnode_modules/word-wrap/package.json\\nnode_modules/yocto-queue/package.json"
      }
    ]
  },
  "components": [
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "yocto-queue",
      "version": "0.1.0",
      "description": "Tiny queue data structure",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yocto-queue@0.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/yocto-queue@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/yocto-queue/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/yocto-queue/package.json"
              }
            ],
            "concludedValue": "node_modules/yocto-queue/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "word-wrap",
      "version": "1.2.5",
      "description": "Wrap words to a specified length.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/word-wrap@1.2.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/word-wrap"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/word-wrap@1.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/word-wrap/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/word-wrap/package.json"
              }
            ],
            "concludedValue": "node_modules/word-wrap/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)"
        }
      ],
      "group": "",
      "name": "which",
      "version": "2.0.2",
      "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/which@2.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/node-which.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/which/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/which/package.json"
              }
            ],
            "concludedValue": "node_modules/which/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Gary Court <gary.court@gmail.com>"
        }
      ],
      "group": "",
      "name": "uri-js",
      "version": "4.4.1",
      "description": "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/uri-js@4.4.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/garycourt/uri-js"
        },
        {
          "type": "vcs",
          "url": "http://github.com/garycourt/uri-js"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uri-js@4.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/uri-js/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/uri-js/package.json"
              }
            ],
            "concludedValue": "node_modules/uri-js/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "undici-types",
      "version": "7.18.2",
      "description": "A stand-alone types package for Undici",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/undici-types@7.18.2",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://undici.nodejs.org"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/nodejs/undici.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/undici-types@7.18.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/undici-types/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/undici-types/package.json"
              }
            ],
            "concludedValue": "node_modules/undici-types/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Microsoft Corp."
        }
      ],
      "group": "",
      "name": "typescript",
      "version": "5.9.3",
      "description": "TypeScript is a language for application scale JavaScript development",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/typescript@5.9.3",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.typescriptlang.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/microsoft/TypeScript.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typescript@5.9.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/typescript/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/typescript/package.json"
              }
            ],
            "concludedValue": "node_modules/typescript/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "George Zahariev <z@georgezahariev.com>"
        }
      ],
      "group": "",
      "name": "type-check",
      "version": "0.4.0",
      "description": "type-check allows you to check the types of JavaScript values at runtime with a Haskell like type syntax.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/type-check@0.4.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/gkz/type-check"
        },
        {
          "type": "vcs",
          "url": "git://github.com/gkz/type-check.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-check@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/type-check/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/type-check/package.json"
              }
            ],
            "concludedValue": "node_modules/type-check/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Microsoft Corp."
        }
      ],
      "group": "",
      "name": "tslib",
      "version": "2.8.1",
      "description": "Runtime library for TypeScript helper functions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "0BSD",
            "url": "https://opensource.org/licenses/0BSD",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tslib@2.8.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.typescriptlang.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/Microsoft/tslib.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tslib@2.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tslib/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tslib/package.json"
              }
            ],
            "concludedValue": "node_modules/tslib/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "supports-color",
      "version": "7.2.0",
      "description": "Detect whether a terminal supports color",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/supports-color@7.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@7.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/supports-color/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/supports-color/package.json"
              }
            ],
            "concludedValue": "node_modules/supports-color/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "strip-json-comments",
      "version": "3.1.1",
      "description": "Strip comments from JSON. Lets you use comments in your JSON files!",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strip-json-comments@3.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/strip-json-comments@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/strip-json-comments/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/strip-json-comments/package.json"
              }
            ],
            "concludedValue": "node_modules/strip-json-comments/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "shebang-regex",
      "version": "3.0.0",
      "description": "Regular expression for matching a shebang line",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/shebang-regex@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/shebang-regex@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/shebang-regex/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/shebang-regex/package.json"
              }
            ],
            "concludedValue": "node_modules/shebang-regex/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Kevin Mårtensson <kevinmartensson@gmail.com> (github.com/kevva)"
        }
      ],
      "group": "",
      "name": "shebang-command",
      "version": "2.0.0",
      "description": "Get the command from a shebang",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/shebang-command@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/shebang-command@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/shebang-command/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/shebang-command/package.json"
              }
            ],
            "concludedValue": "node_modules/shebang-command/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Lesh <ben@benlesh.com>"
        }
      ],
      "group": "",
      "name": "rxjs",
      "version": "7.8.2",
      "description": "Reactive Extensions for modern JavaScript",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/rxjs@7.8.2",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://rxjs.dev"
        },
        {
          "type": "vcs",
          "url": "https://github.com/reactivex/rxjs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rxjs@7.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/rxjs/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "rxjs/internal/Observable,Observable,rxjs/internal/Observable/Observable"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/rxjs/package.json"
              }
            ],
            "concludedValue": "node_modules/rxjs/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "UploadHttpLink.mjs",
            "line": 16
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rxjs/webSocket",
      "version": "",
      "scope": "optional",
      "purl": "pkg:npm/rxjs%2FwebSocket",
      "type": "library",
      "bom-ref": "pkg:npm/rxjs/webSocket",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/rxjs/webSocket/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/rxjs/webSocket/package.json"
              }
            ],
            "concludedValue": "node_modules/rxjs/webSocket/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rxjs/testing",
      "version": "",
      "scope": "optional",
      "purl": "pkg:npm/rxjs%2Ftesting",
      "type": "library",
      "bom-ref": "pkg:npm/rxjs/testing",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/rxjs/testing/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/rxjs/testing/package.json"
              }
            ],
            "concludedValue": "node_modules/rxjs/testing/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rxjs/operators",
      "version": "",
      "scope": "optional",
      "purl": "pkg:npm/rxjs%2Foperators",
      "type": "library",
      "bom-ref": "pkg:npm/rxjs/operators",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/rxjs/operators/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/rxjs/operators/package.json"
              }
            ],
            "concludedValue": "node_modules/rxjs/operators/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rxjs/fetch",
      "version": "",
      "scope": "optional",
      "purl": "pkg:npm/rxjs%2Ffetch",
      "type": "library",
      "bom-ref": "pkg:npm/rxjs/fetch",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/rxjs/fetch/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/rxjs/fetch/package.json"
              }
            ],
            "concludedValue": "node_modules/rxjs/fetch/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rxjs/ajax",
      "version": "",
      "scope": "optional",
      "purl": "pkg:npm/rxjs%2Fajax",
      "type": "library",
      "bom-ref": "pkg:npm/rxjs/ajax",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/rxjs/ajax/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/rxjs/ajax/package.json"
              }
            ],
            "concludedValue": "node_modules/rxjs/ajax/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jayden Seric <me@jaydenseric.com> (https://jaydenseric.com)"
        }
      ],
      "group": "",
      "name": "revertable-globals",
      "version": "4.0.0",
      "description": "Sets globals that can be easily reverted to restore the original environment; useful for testing code that relies on the presence of certain globals.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/revertable-globals@4.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jaydenseric/revertable-globals#readme"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/revertable-globals@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/revertable-globals/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "revertable-globals"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/revertable-globals/package.json"
              }
            ],
            "concludedValue": "node_modules/revertable-globals/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 11
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 51
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 120
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "resolve-from",
      "version": "4.0.0",
      "description": "Resolve the path of a module like `require.resolve()` but from a given path",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/resolve-from@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/resolve-from@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/resolve-from/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/resolve-from/package.json"
              }
            ],
            "concludedValue": "node_modules/resolve-from/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Bynens (https://mathiasbynens.be/)"
        }
      ],
      "group": "",
      "name": "punycode",
      "version": "2.3.1",
      "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/punycode@2.3.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://mths.be/punycode"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mathiasbynens/punycode.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/punycode@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/punycode/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/punycode/package.json"
              }
            ],
            "concludedValue": "node_modules/punycode/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Long"
        }
      ],
      "group": "",
      "name": "prettier",
      "version": "3.9.6",
      "description": "Prettier is an opinionated code formatter",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/prettier@3.9.6",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://prettier.io"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prettier@3.9.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/prettier/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/prettier/package.json"
              }
            ],
            "concludedValue": "node_modules/prettier/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "George Zahariev <z@georgezahariev.com>"
        }
      ],
      "group": "",
      "name": "prelude-ls",
      "version": "1.2.1",
      "description": "prelude.ls is a functionally oriented utility library. It is powerful and flexible. Almost all of its functions are curried. It is written in, and is the recommended base library for, LiveScript.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/prelude-ls@1.2.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://preludels.com"
        },
        {
          "type": "vcs",
          "url": "git://github.com/gkz/prelude-ls.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prelude-ls@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/prelude-ls/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/prelude-ls/package.json"
              }
            ],
            "concludedValue": "node_modules/prelude-ls/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "path-key",
      "version": "3.1.1",
      "description": "Get the PATH environment variable key cross-platform",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-key@3.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/path-key@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/path-key/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/path-key/package.json"
              }
            ],
            "concludedValue": "node_modules/path-key/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "path-exists",
      "version": "4.0.0",
      "description": "Check if a path exists",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-exists@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/path-exists@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/path-exists/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/path-exists/package.json"
              }
            ],
            "concludedValue": "node_modules/path-exists/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "parent-module",
      "version": "1.0.1",
      "description": "Get the path of the parent module",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/parent-module@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/parent-module@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/parent-module/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/parent-module/package.json"
              }
            ],
            "concludedValue": "node_modules/parent-module/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "p-locate",
      "version": "5.0.0",
      "description": "Get the first fulfilled promise that satisfies the provided testing function",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/p-locate@5.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/p-locate@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/p-locate/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/p-locate/package.json"
              }
            ],
            "concludedValue": "node_modules/p-locate/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "p-limit",
      "version": "3.1.0",
      "description": "Run multiple promise-returning & async functions with limited concurrency",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/p-limit@3.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/p-limit@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/p-limit/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/p-limit/package.json"
              }
            ],
            "concludedValue": "node_modules/p-limit/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "George Zahariev <z@georgezahariev.com>"
        }
      ],
      "group": "",
      "name": "optionator",
      "version": "0.9.4",
      "description": "option parsing and help generation",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/optionator@0.9.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/gkz/optionator"
        },
        {
          "type": "vcs",
          "url": "git://github.com/gkz/optionator.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/optionator@0.9.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/optionator/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/optionator/package.json"
              }
            ],
            "concludedValue": "node_modules/optionator/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Newman <ben@benjamn.com>"
        }
      ],
      "group": "",
      "name": "optimism",
      "version": "0.18.1",
      "description": "Composable reactive caching with efficient invalidation.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/optimism@0.18.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/benjamn/optimism#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/benjamn/optimism.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/optimism@0.18.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/optimism/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/optimism/package.json"
              }
            ],
            "concludedValue": "node_modules/optimism/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Lauri Rooden (https://github.com/litejs/natural-compare-lite)"
        }
      ],
      "group": "",
      "name": "natural-compare",
      "version": "1.4.0",
      "description": "Compare strings containing a mix of letters and numbers in the way a human being would in sort order.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/natural-compare@1.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/natural-compare@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/natural-compare/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/natural-compare/package.json"
              }
            ],
            "concludedValue": "node_modules/natural-compare/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.1.3",
      "description": "Tiny millisecond conversion utility",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ms@2.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ms/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ms/package.json"
              }
            ],
            "concludedValue": "node_modules/ms/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)"
        }
      ],
      "group": "",
      "name": "minimatch",
      "version": "3.1.5",
      "description": "a glob matcher in javascript",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimatch@3.1.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/minimatch.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@3.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/minimatch/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/minimatch/package.json"
              }
            ],
            "concludedValue": "node_modules/minimatch/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "John-David Dalton <john.david.dalton@gmail.com>"
        }
      ],
      "group": "",
      "name": "lodash.merge",
      "version": "4.6.2",
      "description": "The Lodash method `_.merge` exported as a module.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.merge@4.6.2",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://lodash.com/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.merge@4.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lodash.merge/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lodash.merge/package.json"
              }
            ],
            "concludedValue": "node_modules/lodash.merge/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "locate-path",
      "version": "6.0.0",
      "description": "Get the first path that exists on disk of multiple paths",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/locate-path@6.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/locate-path@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/locate-path/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/locate-path/package.json"
              }
            ],
            "concludedValue": "node_modules/locate-path/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "George Zahariev <z@georgezahariev.com>"
        }
      ],
      "group": "",
      "name": "levn",
      "version": "0.4.1",
      "description": "Light ECMAScript (JavaScript) Value Notation - human written, concise, typed, flexible",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/levn@0.4.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/gkz/levn"
        },
        {
          "type": "vcs",
          "url": "git://github.com/gkz/levn.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/levn@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/levn/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/levn/package.json"
              }
            ],
            "concludedValue": "node_modules/levn/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Luke Edwards <luke.edwards05@gmail.com> (https://lukeed.com)"
        }
      ],
      "group": "",
      "name": "kleur",
      "version": "4.1.5",
      "description": "The fastest Node.js library for formatting terminal text with ANSI colors~!",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/kleur@4.1.5",
      "type": "library",
      "bom-ref": "pkg:npm/kleur@4.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/kleur/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/kleur/package.json"
              }
            ],
            "concludedValue": "node_modules/kleur/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jared Wray <me@jaredwray.com> (http://jaredwray.com)"
        }
      ],
      "group": "",
      "name": "keyv",
      "version": "4.5.4",
      "description": "Simple key-value storage with support for multiple backends",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/keyv@4.5.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jaredwray/keyv"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/jaredwray/keyv.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/keyv@4.5.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/keyv/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/keyv/package.json"
              }
            ],
            "concludedValue": "node_modules/keyv/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "json-stable-stringify-without-jsonify",
      "version": "1.0.1",
      "description": "deterministic JSON.stringify() with custom sorting to get deterministic hashes from stringified results, with no public domain dependencies",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json-stable-stringify-without-jsonify@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/samn/json-stable-stringify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/samn/json-stable-stringify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-stable-stringify-without-jsonify@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/json-stable-stringify-without-jsonify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/json-stable-stringify-without-jsonify/package.json"
              }
            ],
            "concludedValue": "node_modules/json-stable-stringify-without-jsonify/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Evgeny Poberezkin"
        }
      ],
      "group": "",
      "name": "json-schema-traverse",
      "version": "0.4.1",
      "description": "Traverse JSON Schema passing each schema object to callback",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json-schema-traverse@0.4.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/epoberezkin/json-schema-traverse#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/epoberezkin/json-schema-traverse.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-schema-traverse@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/json-schema-traverse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/json-schema-traverse/package.json"
              }
            ],
            "concludedValue": "node_modules/json-schema-traverse/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Dominic Tarr <dominic.tarr@gmail.com> (http://dominictarr.com)"
        }
      ],
      "group": "",
      "name": "json-buffer",
      "version": "3.0.1",
      "description": "JSON parse & stringify that supports binary via bops & base64",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json-buffer@3.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/dominictarr/json-buffer"
        },
        {
          "type": "vcs",
          "url": "git://github.com/dominictarr/json-buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-buffer@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/json-buffer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/json-buffer/package.json"
              }
            ],
            "concludedValue": "node_modules/json-buffer/package.json"
          }
        ]
      },
      "tags": [
        "binary",
        "parse"
      ]
    },
    {
      "authors": [
        {
          "name": "Vladimir Zapparov <dervus.grim@gmail.com>"
        }
      ],
      "group": "",
      "name": "js-yaml",
      "version": "4.3.1",
      "description": "YAML 1.2 parser and serializer",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/js-yaml@4.3.1",
      "type": "library",
      "bom-ref": "pkg:npm/js-yaml@4.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/js-yaml/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/js-yaml/package.json"
              }
            ],
            "concludedValue": "node_modules/js-yaml/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "isexe",
      "version": "2.0.0",
      "description": "Minimal module to check if a file is executable.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/isexe@2.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/isexe#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/isexe.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isexe@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/isexe/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/isexe/package.json"
              }
            ],
            "concludedValue": "node_modules/isexe/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "is-plain-obj",
      "version": "4.1.0",
      "description": "Check if a value is a plain object",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-plain-obj@4.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-plain-obj@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-plain-obj/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-plain-obj/package.json"
              }
            ],
            "concludedValue": "node_modules/is-plain-obj/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "is-glob",
      "version": "4.0.3",
      "description": "Returns `true` if the given string looks like a glob pattern or an extglob pattern. This makes it easy to create code that only uses external modules like node-glob when necessary, resulting in much faster code execution and initialization time, and a better user experience.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-glob@4.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/micromatch/is-glob"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-glob@4.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-glob/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-glob/package.json"
              }
            ],
            "concludedValue": "node_modules/is-glob/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "is-extglob",
      "version": "2.1.1",
      "description": "Returns true if a string has an extglob.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-extglob@2.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/is-extglob"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-extglob@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-extglob/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-extglob/package.json"
              }
            ],
            "concludedValue": "node_modules/is-extglob/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jens Taylor <jensyt@gmail.com> (https://github.com/homebrewing)"
        }
      ],
      "group": "",
      "name": "imurmurhash",
      "version": "0.1.4",
      "description": "An incremental implementation of MurmurHash3",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/imurmurhash@0.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jensyt/imurmurhash-js"
        },
        {
          "type": "vcs",
          "url": "https://github.com/jensyt/imurmurhash-js"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/imurmurhash@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/imurmurhash/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/imurmurhash/package.json"
              }
            ],
            "concludedValue": "node_modules/imurmurhash/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "import-fresh",
      "version": "3.3.1",
      "description": "Import a module while bypassing the cache",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/import-fresh@3.3.1",
      "type": "library",
      "bom-ref": "pkg:npm/import-fresh@3.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/import-fresh/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/import-fresh/package.json"
              }
            ],
            "concludedValue": "node_modules/import-fresh/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "kael"
        }
      ],
      "group": "",
      "name": "ignore",
      "version": "5.3.2",
      "description": "Ignore is a manager and filter for .gitignore rules, the one used by eslint, gitbook and many others.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ignore@5.3.2",
      "type": "library",
      "bom-ref": "pkg:npm/ignore@5.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ignore/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ignore/package.json"
              }
            ],
            "concludedValue": "node_modules/ignore/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "has-flag",
      "version": "4.0.0",
      "description": "Check if argv has a specific flag",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/has-flag@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/has-flag@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/has-flag/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/has-flag/package.json"
              }
            ],
            "concludedValue": "node_modules/has-flag/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "gzip-size",
      "version": "7.0.0",
      "description": "Get the gzipped size of a string or buffer",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/gzip-size@7.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/gzip-size@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/gzip-size/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/gzip-size/package.json"
              }
            ],
            "concludedValue": "node_modules/gzip-size/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graphql-tag",
      "version": "2.12.7",
      "description": "A JavaScript template literal tag that parses GraphQL queries",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/graphql-tag@2.12.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/apollographql/graphql-tag#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/apollographql/graphql-tag.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graphql-tag@2.12.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/graphql-tag/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "graphql-tag,graphql-tag/gql"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/graphql-tag/package.json"
              }
            ],
            "concludedValue": "node_modules/graphql-tag/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 10
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 68
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 137
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 231
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 302
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 373
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 447
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 523
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 591
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 658
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 728
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 810
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 868
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 955
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 1033
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 1067
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 1129
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 1196
          }
        ]
      },
      "tags": [
        "template"
      ]
    },
    {
      "group": "",
      "name": "graphql",
      "version": "16.14.2",
      "description": "A Query Language and Runtime which can target any service.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/graphql@16.14.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/graphql/graphql-js"
        },
        {
          "type": "vcs",
          "url": "https://github.com/graphql/graphql-js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graphql@16.14.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/graphql/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "graphql,stripIgnoredCharacters,graphql/stripIgnoredCharacters"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/graphql/package.json"
              }
            ],
            "concludedValue": "node_modules/graphql/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 9
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 511
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 555
          }
        ]
      },
      "tags": [
        "service"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "globals",
      "version": "14.0.0",
      "description": "Global identifiers from different JavaScript environments",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/globals@14.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/globals@14.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/globals/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "globals"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/globals/package.json"
              }
            ],
            "concludedValue": "node_modules/globals/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "eslint.config.mjs",
            "line": 8
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Gulp Team <team@gulpjs.com> (https://gulpjs.com/)"
        }
      ],
      "group": "",
      "name": "glob-parent",
      "version": "6.0.2",
      "description": "Extract the non-magic parent path from a glob string.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/glob-parent@6.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/glob-parent@6.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/glob-parent/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/glob-parent/package.json"
              }
            ],
            "concludedValue": "node_modules/glob-parent/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Andrea Giammarchi"
        }
      ],
      "group": "",
      "name": "flatted",
      "version": "3.4.4",
      "description": "A super light and fast circular JSON parser.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/flatted@3.4.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/WebReflection/flatted#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/WebReflection/flatted.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/flatted@3.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/flatted/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/flatted/package.json"
              }
            ],
            "concludedValue": "node_modules/flatted/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Jared Wray (https://jaredwray.com)"
        }
      ],
      "group": "",
      "name": "flat-cache",
      "version": "4.0.1",
      "description": "A stupidly simple key/value storage using files to persist some data",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/flat-cache@4.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/flat-cache@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/flat-cache/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/flat-cache/package.json"
              }
            ],
            "concludedValue": "node_modules/flat-cache/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "find-up",
      "version": "5.0.0",
      "description": "Find a file or directory by walking up parent directories",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/find-up@5.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/find-up@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/find-up/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/find-up/package.json"
              }
            ],
            "concludedValue": "node_modules/find-up/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jared Wray (https://jaredwray.com)"
        }
      ],
      "group": "",
      "name": "file-entry-cache",
      "version": "8.0.0",
      "description": "Super simple cache for file metadata, useful for process that work o a given series of files and that only need to repeat the job on the changed ones since the previous run of the process",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/file-entry-cache@8.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/file-entry-cache@8.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/file-entry-cache/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/file-entry-cache/package.json"
              }
            ],
            "concludedValue": "node_modules/file-entry-cache/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ramesh Nair <ram@hiddentao.com> (http://www.hiddentao.com/)"
        }
      ],
      "group": "",
      "name": "fast-levenshtein",
      "version": "2.0.6",
      "description": "Efficient implementation of Levenshtein algorithm  with locale-specific collator support.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fast-levenshtein@2.0.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/hiddentao/fast-levenshtein.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-levenshtein@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/fast-levenshtein/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fast-levenshtein/package.json"
              }
            ],
            "concludedValue": "node_modules/fast-levenshtein/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "fast-json-stable-stringify",
      "version": "2.1.0",
      "description": "deterministic `JSON.stringify()` - a faster version of substack's json-stable-strigify without jsonify",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fast-json-stable-stringify@2.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/epoberezkin/fast-json-stable-stringify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/epoberezkin/fast-json-stable-stringify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-json-stable-stringify@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/fast-json-stable-stringify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fast-json-stable-stringify/package.json"
              }
            ],
            "concludedValue": "node_modules/fast-json-stable-stringify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Evgeny Poberezkin"
        }
      ],
      "group": "",
      "name": "fast-deep-equal",
      "version": "3.1.3",
      "description": "Fast deep equal",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fast-deep-equal@3.1.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/epoberezkin/fast-deep-equal#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/epoberezkin/fast-deep-equal.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-deep-equal@3.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/fast-deep-equal/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fast-deep-equal/package.json"
              }
            ],
            "concludedValue": "node_modules/fast-deep-equal/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jayden Seric <me@jaydenseric.com> (https://jaydenseric.com)"
        }
      ],
      "group": "",
      "name": "extract-files",
      "version": "13.0.0",
      "description": "A function to recursively extract files and their object paths within a value, replacing them with null in a deep clone without mutating the original value. FileList instances are treated as File instance arrays. Files are typically File and Blob instances.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/extract-files@13.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jaydenseric/extract-files#readme"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extract-files@13.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/extract-files/package.json"
        },
        {
          "name": "ExportedModules",
          "value": "extract-files/isExtractableFile"
        },
        {
          "name": "ImportedModules",
          "value": "extract-files/extractFiles.mjs,extract-files/isExtractableFile.mjs"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/extract-files/package.json"
              }
            ],
            "concludedValue": "node_modules/extract-files/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "UploadHttpLink.mjs",
            "line": 15
          },
          {
            "location": "UploadHttpLink.mjs",
            "line": 131
          },
          {
            "location": "isExtractableFile.mjs",
            "line": 9
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esutils",
      "version": "2.0.3",
      "description": "utility box for ECMAScript language tools",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/esutils@2.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/estools/esutils"
        },
        {
          "type": "vcs",
          "url": "http://github.com/estools/esutils.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esutils@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/esutils/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/esutils/package.json"
              }
            ],
            "concludedValue": "node_modules/esutils/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "estraverse",
      "version": "5.3.0",
      "description": "ECMAScript JS AST traversal functions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/estraverse@5.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/estools/estraverse"
        },
        {
          "type": "vcs",
          "url": "http://github.com/estools/estraverse.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/estraverse@5.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/estraverse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/estraverse/package.json"
              }
            ],
            "concludedValue": "node_modules/estraverse/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esrecurse",
      "version": "4.3.0",
      "description": "ECMAScript AST recursive visitor",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/esrecurse@4.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/estools/esrecurse"
        },
        {
          "type": "vcs",
          "url": "https://github.com/estools/esrecurse.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esrecurse@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/esrecurse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/esrecurse/package.json"
              }
            ],
            "concludedValue": "node_modules/esrecurse/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Joel Feenstra <jrfeenst+esquery@gmail.com>"
        }
      ],
      "group": "",
      "name": "esquery",
      "version": "1.7.0",
      "description": "A query library for ECMAScript AST using a CSS selector like query language.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/esquery@1.7.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/estools/esquery/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/estools/esquery.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esquery@1.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/esquery/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/esquery/package.json"
              }
            ],
            "concludedValue": "node_modules/esquery/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zakas <nicholas+npm@nczconsulting.com>"
        }
      ],
      "group": "",
      "name": "espree",
      "version": "10.4.0",
      "description": "An Esprima-compatible JavaScript parser built on Acorn",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/espree@10.4.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint/js/blob/main/packages/espree/README.md"
        },
        {
          "type": "vcs",
          "url": "https://github.com/eslint/js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/espree@10.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/espree/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/espree/package.json"
              }
            ],
            "concludedValue": "node_modules/espree/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Toru Nagashima (https://github.com/mysticatea)"
        }
      ],
      "group": "",
      "name": "eslint-visitor-keys",
      "version": "4.2.1",
      "description": "Constants and utilities about visitor keys to traverse AST.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/eslint-visitor-keys@4.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint/js/blob/main/packages/eslint-visitor-keys/README.md"
        },
        {
          "type": "vcs",
          "url": "https://github.com/eslint/js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-visitor-keys@4.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-visitor-keys/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-visitor-keys/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-visitor-keys/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-scope",
      "version": "8.4.0",
      "description": "ECMAScript scope analyzer for ESLint",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/eslint-scope@8.4.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint/js/blob/main/packages/eslint-scope/README.md"
        },
        {
          "type": "vcs",
          "url": "https://github.com/eslint/js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-scope@8.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-scope/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-scope/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-scope/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Simon Lydell"
        }
      ],
      "group": "",
      "name": "eslint-plugin-simple-import-sort",
      "version": "12.1.1",
      "description": "Easy autofixable import sorting",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/eslint-plugin-simple-import-sort@12.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-simple-import-sort@12.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-simple-import-sort/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "eslint-plugin-simple-import-sort"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-plugin-simple-import-sort/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-plugin-simple-import-sort/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "eslint.config.mjs",
            "line": 7
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jayden Seric <me@jaydenseric.com> (https://jaydenseric.com)"
        }
      ],
      "group": "",
      "name": "eslint-plugin-optimal-modules",
      "version": "3.0.0",
      "description": "An ESLint plugin to enforce optimal JavaScript module design.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/eslint-plugin-optimal-modules@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jaydenseric/eslint-plugin-optimal-modules#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/jaydenseric/eslint-plugin-optimal-modules.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-optimal-modules@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-optimal-modules/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "eslint-plugin-optimal-modules"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-plugin-optimal-modules/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-plugin-optimal-modules/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "eslint.config.mjs",
            "line": 6
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zakas <nicholas+npm@nczconsulting.com>"
        }
      ],
      "group": "",
      "name": "eslint",
      "version": "9.39.5",
      "description": "An AST-based pattern checker for JavaScript.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/eslint@9.39.5",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://eslint.org"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint@9.39.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "escape-string-regexp",
      "version": "4.0.0",
      "description": "Escape RegExp special characters",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/escape-string-regexp/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/escape-string-regexp/package.json"
              }
            ],
            "concludedValue": "node_modules/escape-string-regexp/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esbuild",
      "version": "0.25.12",
      "description": "An extremely fast JavaScript and CSS bundler and minifier.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/esbuild@0.25.12",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/evanw/esbuild.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esbuild@0.25.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/esbuild/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/esbuild/package.json"
              }
            ],
            "concludedValue": "node_modules/esbuild/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Raynos <raynos2@gmail.com>"
        }
      ],
      "group": "",
      "name": "duplexer",
      "version": "0.1.2",
      "description": "Creates a duplex stream",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/duplexer@0.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/Raynos/duplexer"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/duplexer@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/duplexer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/duplexer/package.json"
              }
            ],
            "concludedValue": "node_modules/duplexer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jayden Seric <me@jaydenseric.com> (https://jaydenseric.com)"
        }
      ],
      "group": "",
      "name": "disposable-directory",
      "version": "6.0.0",
      "description": "Asynchronously creates a disposable directory in the OS temporary directory that gets deleted after the callback is done or errors.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/disposable-directory@6.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jaydenseric/disposable-directory#readme"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/disposable-directory@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/disposable-directory/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/disposable-directory/package.json"
              }
            ],
            "concludedValue": "node_modules/disposable-directory/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Thorsten Lorenz <thlorenz@gmx.de> (http://thlorenz.com)"
        }
      ],
      "group": "",
      "name": "deep-is",
      "version": "0.1.4",
      "description": "node's assert.deepEqual algorithm except for NaN being equal to NaN",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/deep-is@0.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/thlorenz/deep-is.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deep-is@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/deep-is/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/deep-is/package.json"
              }
            ],
            "concludedValue": "node_modules/deep-is/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Josh Junon (https://github.com/qix-)"
        }
      ],
      "group": "",
      "name": "debug",
      "version": "4.4.3",
      "description": "Lightweight debugging utility for Node.js and the browser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/debug@4.4.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/debug-js/debug.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@4.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/debug/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/debug/package.json"
              }
            ],
            "concludedValue": "node_modules/debug/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "André Cruz <andre@moxy.studio>"
        }
      ],
      "group": "",
      "name": "cross-spawn",
      "version": "7.0.6",
      "description": "Cross platform child_process#spawn and child_process#spawnSync",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cross-spawn@7.0.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/moxystudio/node-cross-spawn"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cross-spawn@7.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/cross-spawn/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cross-spawn/package.json"
              }
            ],
            "concludedValue": "node_modules/cross-spawn/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jayden Seric <me@jaydenseric.com> (https://jaydenseric.com)"
        }
      ],
      "group": "",
      "name": "coverage-node",
      "version": "8.0.0",
      "description": "A simple CLI to run Node.js and report code coverage.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/coverage-node@8.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jaydenseric/coverage-node#readme"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/coverage-node@8.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/coverage-node/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/coverage-node/package.json"
              }
            ],
            "concludedValue": "node_modules/coverage-node/package.json"
          }
        ]
      },
      "tags": [
        "cli"
      ]
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "concat-map",
      "version": "0.0.1",
      "description": "concatenative mapdashery",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/concat-map@0.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/substack/node-concat-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-map@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/concat-map/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/concat-map/package.json"
              }
            ],
            "concludedValue": "node_modules/concat-map/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "DY <dfcreative@gmail.com>"
        }
      ],
      "group": "",
      "name": "color-name",
      "version": "1.1.4",
      "description": "A list of color names and its values",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/color-name@1.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/colorjs/color-name"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-name@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/color-name/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/color-name/package.json"
              }
            ],
            "concludedValue": "node_modules/color-name/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Heather Arthur <fayearthur@gmail.com>"
        }
      ],
      "group": "",
      "name": "color-convert",
      "version": "2.0.1",
      "description": "Plain color conversion functions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/color-convert@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/color-convert@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/color-convert/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/color-convert/package.json"
              }
            ],
            "concludedValue": "node_modules/color-convert/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "4.1.2",
      "description": "Terminal string styling done right",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/chalk@4.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/chalk@4.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/chalk/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/chalk/package.json"
              }
            ],
            "concludedValue": "node_modules/chalk/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "callsites",
      "version": "3.1.0",
      "description": "Get callsites from the V8 stack trace API",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/callsites@3.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/callsites@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/callsites/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/callsites/package.json"
              }
            ],
            "concludedValue": "node_modules/callsites/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)"
        }
      ],
      "group": "",
      "name": "brace-expansion",
      "version": "1.1.18",
      "description": "Brace expansion as known from sh/bash",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.18",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/juliangruber/brace-expansion"
        },
        {
          "type": "vcs",
          "url": "git://github.com/juliangruber/brace-expansion.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@1.1.18",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/brace-expansion/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/brace-expansion/package.json"
              }
            ],
            "concludedValue": "node_modules/brace-expansion/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)"
        }
      ],
      "group": "",
      "name": "balanced-match",
      "version": "1.0.2",
      "description": "Match balanced character pairs, like \"{\" and \"}\"",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/balanced-match@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/juliangruber/balanced-match"
        },
        {
          "type": "vcs",
          "url": "git://github.com/juliangruber/balanced-match.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/balanced-match@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/balanced-match/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/balanced-match/package.json"
              }
            ],
            "concludedValue": "node_modules/balanced-match/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "argparse",
      "version": "2.0.1",
      "description": "CLI arguments parser. Native port of python's argparse.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Python-2.0",
            "url": "https://opensource.org/licenses/Python-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/argparse@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/argparse@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/argparse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/argparse/package.json"
              }
            ],
            "concludedValue": "node_modules/argparse/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "ansi-styles",
      "version": "4.3.0",
      "description": "ANSI escape codes for styling strings in the terminal",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ansi-styles@4.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ansi-styles/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ansi-styles/package.json"
              }
            ],
            "concludedValue": "node_modules/ansi-styles/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Evgeny Poberezkin"
        }
      ],
      "group": "",
      "name": "ajv",
      "version": "6.15.0",
      "description": "Another JSON Schema Validator",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ajv@6.15.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ajv-validator/ajv"
        },
        {
          "type": "vcs",
          "url": "https://github.com/ajv-validator/ajv.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ajv@6.15.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ajv/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ajv/package.json"
              }
            ],
            "concludedValue": "node_modules/ajv/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "group": "",
      "name": "acorn-jsx",
      "version": "5.3.2",
      "description": "Modern, fast React.js JSX parser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/acorn-jsx@5.3.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/acornjs/acorn-jsx"
        },
        {
          "type": "vcs",
          "url": "https://github.com/acornjs/acorn-jsx"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn-jsx@5.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/acorn-jsx/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/acorn-jsx/package.json"
              }
            ],
            "concludedValue": "node_modules/acorn-jsx/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn",
      "version": "8.18.0",
      "description": "ECMAScript parser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/acorn@8.18.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/acornjs/acorn"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/acornjs/acorn.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn@8.18.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/acorn/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/acorn/package.json"
              }
            ],
            "concludedValue": "node_modules/acorn/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Newman <ben@eloper.dev>"
        }
      ],
      "group": "@wry",
      "name": "trie",
      "version": "0.5.0",
      "description": "https://en.wikipedia.org/wiki/Trie",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40wry/trie@0.5.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/benjamn/wryware"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/benjamn/wryware.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@wry/trie@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@wry/trie/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@wry/trie/package.json"
              }
            ],
            "concludedValue": "node_modules/@wry/trie/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Newman <ben@eloper.dev>"
        }
      ],
      "group": "@wry",
      "name": "equality",
      "version": "0.5.7",
      "description": "Structural equality checking for JavaScript values",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40wry/equality@0.5.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/benjamn/wryware"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/benjamn/wryware.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@wry/equality@0.5.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@wry/equality/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@wry/equality/package.json"
              }
            ],
            "concludedValue": "node_modules/@wry/equality/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Newman <ben@eloper.dev>"
        }
      ],
      "group": "@wry",
      "name": "context",
      "version": "0.7.4",
      "description": "Manage contextual information needed by (a)synchronous tasks without explicitly passing objects around",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40wry/context@0.7.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/benjamn/wryware"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/benjamn/wryware.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@wry/context@0.7.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@wry/context/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@wry/context/package.json"
              }
            ],
            "concludedValue": "node_modules/@wry/context/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Newman <ben@eloper.dev>"
        }
      ],
      "group": "@wry",
      "name": "caches",
      "version": "1.0.1",
      "description": "Various cache implementations",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40wry/caches@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/benjamn/wryware"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/benjamn/wryware.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@wry/caches@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@wry/caches/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@wry/caches/package.json"
              }
            ],
            "concludedValue": "node_modules/@wry/caches/package.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "node",
      "version": "24.13.3",
      "description": "TypeScript definitions for node",
      "scope": "excluded",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40types/node@24.13.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node"
        },
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/node@24.13.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@types/node/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@types/node/package.json"
              }
            ],
            "concludedValue": "node_modules/@types/node/package.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "json-schema",
      "version": "7.0.15",
      "description": "TypeScript definitions for json-schema",
      "scope": "excluded",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40types/json-schema@7.0.15",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/json-schema"
        },
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/json-schema@7.0.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@types/json-schema/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@types/json-schema/package.json"
              }
            ],
            "concludedValue": "node_modules/@types/json-schema/package.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "estree",
      "version": "1.0.9",
      "description": "TypeScript definitions for estree",
      "scope": "excluded",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40types/estree@1.0.9",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/estree"
        },
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/estree@1.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@types/estree/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@types/estree/package.json"
              }
            ],
            "concludedValue": "node_modules/@types/estree/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zaks"
        }
      ],
      "group": "@humanwhocodes",
      "name": "retry",
      "version": "0.4.3",
      "description": "A utility to retry failed async methods.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40humanwhocodes/retry@0.4.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/humanwhocodes/retry.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@humanwhocodes/retry@0.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@humanwhocodes/retry/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@humanwhocodes/retry/package.json"
              }
            ],
            "concludedValue": "node_modules/@humanwhocodes/retry/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zaks"
        }
      ],
      "group": "@humanwhocodes",
      "name": "module-importer",
      "version": "1.0.1",
      "description": "Universal module importer for Node.js",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40humanwhocodes/module-importer@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/humanwhocodes/module-importer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@humanwhocodes/module-importer@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@humanwhocodes/module-importer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@humanwhocodes/module-importer/package.json"
              }
            ],
            "concludedValue": "node_modules/@humanwhocodes/module-importer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zakas"
        }
      ],
      "group": "@humanfs",
      "name": "types",
      "version": "0.15.0",
      "description": "The TypeScript types for the hfs project.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40humanfs/types@0.15.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/humanwhocodes/humanfs#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/humanwhocodes/humanfs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@humanfs/types@0.15.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@humanfs/types/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@humanfs/types/package.json"
              }
            ],
            "concludedValue": "node_modules/@humanfs/types/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zakas"
        }
      ],
      "group": "@humanfs",
      "name": "node",
      "version": "0.16.8",
      "description": "The Node.js bindings of the humanfs library.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40humanfs/node@0.16.8",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/humanwhocodes/humanfs#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/humanwhocodes/humanfs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@humanfs/node@0.16.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@humanfs/node/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@humanfs/node/package.json"
              }
            ],
            "concludedValue": "node_modules/@humanfs/node/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zakas"
        }
      ],
      "group": "@humanfs",
      "name": "core",
      "version": "0.19.2",
      "description": "The core of the humanfs library.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40humanfs/core@0.19.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/humanwhocodes/humanfs#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/humanwhocodes/humanfs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@humanfs/core@0.19.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@humanfs/core/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@humanfs/core/package.json"
              }
            ],
            "concludedValue": "node_modules/@humanfs/core/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Dotan Simha <dotansimha@gmail.com>"
        }
      ],
      "group": "@graphql-typed-document-node",
      "name": "core",
      "version": "3.2.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40graphql-typed-document-node/core@3.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/@graphql-typed-document-node/core@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@graphql-typed-document-node/core/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@graphql-typed-document-node/core/package.json"
              }
            ],
            "concludedValue": "node_modules/@graphql-typed-document-node/core/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Toru Nagashima"
        }
      ],
      "group": "@eslint-community",
      "name": "regexpp",
      "version": "4.12.2",
      "description": "Regular expression parser for ECMAScript.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40eslint-community/regexpp@4.12.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint-community/regexpp#readme"
        },
        {
          "type": "vcs",
          "url": "https://github.com/eslint-community/regexpp"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@eslint-community/regexpp@4.12.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@eslint-community/regexpp/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@eslint-community/regexpp/package.json"
              }
            ],
            "concludedValue": "node_modules/@eslint-community/regexpp/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Toru Nagashima"
        }
      ],
      "group": "@eslint-community",
      "name": "eslint-utils",
      "version": "4.10.1",
      "description": "Utilities for ESLint plugins.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40eslint-community/eslint-utils@4.10.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint-community/eslint-utils#readme"
        },
        {
          "type": "vcs",
          "url": "https://github.com/eslint-community/eslint-utils"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@eslint-community/eslint-utils@4.10.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@eslint-community/eslint-utils/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@eslint-community/eslint-utils/package.json"
              }
            ],
            "concludedValue": "node_modules/@eslint-community/eslint-utils/package.json"
          }
        ]
      },
      "tags": [
        "plugins"
      ]
    },
    {
      "authors": [
        {
          "name": "Toru Nagashima (https://github.com/mysticatea)"
        }
      ],
      "group": "",
      "name": "eslint-visitor-keys",
      "version": "3.4.3",
      "description": "Constants and utilities about visitor keys to traverse AST.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/eslint-visitor-keys@3.4.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint/eslint-visitor-keys#readme"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-visitor-keys@3.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@eslint-community/eslint-utils/node_modules/eslint-visitor-keys/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@eslint-community/eslint-utils/node_modules/eslint-visitor-keys/package.json"
              }
            ],
            "concludedValue": "node_modules/@eslint-community/eslint-utils/node_modules/eslint-visitor-keys/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zakas"
        }
      ],
      "group": "@eslint",
      "name": "plugin-kit",
      "version": "0.4.1",
      "description": "Utilities for building ESLint plugins.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40eslint/plugin-kit@0.4.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint/rewrite/tree/main/packages/plugin-kit#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/eslint/rewrite.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@eslint/plugin-kit@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@eslint/plugin-kit/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@eslint/plugin-kit/package.json"
              }
            ],
            "concludedValue": "node_modules/@eslint/plugin-kit/package.json"
          }
        ]
      },
      "tags": [
        "plugins"
      ]
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zakas"
        }
      ],
      "group": "@eslint",
      "name": "object-schema",
      "version": "2.1.7",
      "description": "An object schema merger/validator",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40eslint/object-schema@2.1.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint/rewrite/tree/main/packages/object-schema#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/eslint/rewrite.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@eslint/object-schema@2.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@eslint/object-schema/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@eslint/object-schema/package.json"
              }
            ],
            "concludedValue": "node_modules/@eslint/object-schema/package.json"
          }
        ]
      }
    },
    {
      "group": "@eslint",
      "name": "js",
      "version": "9.39.5",
      "description": "ESLint JavaScript language implementation",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40eslint/js@9.39.5",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://eslint.org"
        },
        {
          "type": "vcs",
          "url": "https://github.com/eslint/eslint.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@eslint/js@9.39.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@eslint/js/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "@eslint/js"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@eslint/js/package.json"
              }
            ],
            "concludedValue": "node_modules/@eslint/js/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "eslint.config.mjs",
            "line": 5
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zakas"
        }
      ],
      "group": "@eslint",
      "name": "eslintrc",
      "version": "3.3.6",
      "description": "The legacy ESLintRC config file format for ESLint",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40eslint/eslintrc@3.3.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint/eslintrc#readme"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@eslint/eslintrc@3.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@eslint/eslintrc/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@eslint/eslintrc/package.json"
              }
            ],
            "concludedValue": "node_modules/@eslint/eslintrc/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zakas"
        }
      ],
      "group": "@eslint",
      "name": "core",
      "version": "0.17.0",
      "description": "Runtime-agnostic core of ESLint",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40eslint/core@0.17.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint/rewrite/tree/main/packages/core#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/eslint/rewrite.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@eslint/core@0.17.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@eslint/core/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@eslint/core/package.json"
              }
            ],
            "concludedValue": "node_modules/@eslint/core/package.json"
          }
        ]
      }
    },
    {
      "group": "@eslint",
      "name": "config-helpers",
      "version": "0.4.2",
      "description": "Helper utilities for creating ESLint configuration",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40eslint/config-helpers@0.4.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint/rewrite/tree/main/packages/config-helpers#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/eslint/rewrite.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@eslint/config-helpers@0.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@eslint/config-helpers/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@eslint/config-helpers/package.json"
              }
            ],
            "concludedValue": "node_modules/@eslint/config-helpers/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zakas"
        }
      ],
      "group": "@eslint",
      "name": "config-array",
      "version": "0.21.2",
      "description": "General purpose glob-based configuration matching.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40eslint/config-array@0.21.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint/rewrite/tree/main/packages/config-array#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/eslint/rewrite.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@eslint/config-array@0.21.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@eslint/config-array/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@eslint/config-array/package.json"
              }
            ],
            "concludedValue": "node_modules/@eslint/config-array/package.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-x64",
      "version": "0.25.12",
      "description": "The Linux 64-bit binary for esbuild, a JavaScript bundler.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-x64@0.25.12",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/evanw/esbuild.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-x64@0.25.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@esbuild/linux-x64/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@esbuild/linux-x64/package.json"
              }
            ],
            "concludedValue": "node_modules/@esbuild/linux-x64/package.json"
          }
        ]
      },
      "tags": [
        "binary"
      ]
    },
    {
      "authors": [
        {
          "name": "Charles Samborski <demurgos@demurgos.net> (https://demurgos.net)"
        }
      ],
      "group": "@bcoe",
      "name": "v8-coverage",
      "version": "0.2.3",
      "description": "Helper functions for V8 coverage files.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40bcoe/v8-coverage@0.2.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://demurgos.github.io/v8-coverage"
        },
        {
          "type": "vcs",
          "url": "git://github.com/demurgos/v8-coverage.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@bcoe/v8-coverage@0.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@bcoe/v8-coverage/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@bcoe/v8-coverage/dist/lib/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@bcoe/v8-coverage/dist/lib/package.json"
              }
            ],
            "concludedValue": "node_modules/@bcoe/v8-coverage/dist/lib/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "packages@apollographql.com"
        }
      ],
      "group": "@apollo",
      "name": "client",
      "version": "4.2.12",
      "description": "A fully-featured caching GraphQL client.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40apollo/client@4.2.12",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.apollographql.com/docs/react/"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/apollographql/apollo-client.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@apollo/client@4.2.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@apollo/client/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "@apollo/client/link,ApolloLink,@apollo/client/link/ApolloLink,execute,@apollo/client/link/execute,@apollo/client/link/http,defaultPrinter,@apollo/client/link/http/defaultPrinter,fallbackHttpConfig,@apollo/client/link/http/fallbackHttpConfig,parseAndCheckHttpResponse,@apollo/client/link/http/parseAndCheckHttpResponse,rewriteURIForGET,@apollo/client/link/http/rewriteURIForGET,selectHttpOptionsAndBodyInternal,@apollo/client/link/http/selectHttpOptionsAndBodyInternal,selectURI,@apollo/client/link/http/selectURI,@apollo/client/link/utils,filterOperationVariables,@apollo/client/link/utils/filterOperationVariables,@apollo/client/errors,ServerError,@apollo/client/errors/ServerError"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@apollo/client/package.json"
              }
            ],
            "concludedValue": "node_modules/@apollo/client/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "UploadHttpLink.mjs",
            "line": 5
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 7
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 8
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 65
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 134
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 217
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 282
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 283
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 359
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 433
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 508
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 577
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 644
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 713
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 796
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 854
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 931
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 1023
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 1060
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 1101
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 1180
          },
          {
            "location": "UploadHttpLink.mjs",
            "line": 13
          },
          {
            "location": "UploadHttpLink.mjs",
            "line": 105
          },
          {
            "location": "UploadHttpLink.mjs",
            "line": 141
          },
          {
            "location": "UploadHttpLink.mjs",
            "line": 190
          },
          {
            "location": "UploadHttpLink.mjs",
            "line": 251
          },
          {
            "location": "UploadHttpLink.mjs",
            "line": 14
          },
          {
            "location": "UploadHttpLink.mjs",
            "line": 126
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 6
          },
          {
            "location": "UploadHttpLink.test.mjs",
            "line": 1050
          }
        ]
      }
    }
  ],
  "dependencies": [],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/apollo-upload-client@19.0.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-08-23T06:54:17Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Sunday, August 23, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'apollo-upload-client' with version '19.0.0'. The package type in this SBOM is npm with 10 purl namespaces described under components. The components were identified from 120 source files."
    }
  ]
}