{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:8b161d09-0d75-4d74-92ce-0ab1b853c595",
  "version": 1,
  "metadata": {
    "timestamp": "2026-07-24T15:48:06Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "argv",
      "group": "",
      "version": "0.0.2",
      "description": "CLI Argument Parser",
      "purl": "pkg:npm/argv@0.0.2",
      "bom-ref": "pkg:npm/argv@0.0.2",
      "author": "Corey Hart <corey@codenothing.com>",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        }
      ],
      "type": "application"
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "nlint",
      "version": "0.0.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4afbd8ab31af5c7f2318fcf8623f35af581ce3473cc360f0fcdb4976236bdf2f4073707617ab5e0c6b6967223273ea25cdafe2811096ec1795654d3b6177a764"
        }
      ],
      "purl": "pkg:npm/nlint@0.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/nlint/-/nlint-0.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nlint@0.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/nlint/-/nlint-0.0.4.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "nlint"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "build/lint.js#1"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "argv",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a4247ed00e8c023fafe5fe3abbb7c145633b98d67743c9f0553452c44873c76f0657b62f1096e1274d809701e2e3099d3e7170f07c2ae5b97df0c0e1056734ab"
        }
      ],
      "purl": "pkg:npm/argv@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/argv/-/argv-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/argv@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/argv/-/argv-0.0.1.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Package no longer supported. Contact Support at https://www.npmjs.com/support for more info."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "csslint",
      "version": "0.9.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c76abf27aa0da56a0f364f87788d18d677369a07022b5e561972eb65b1a7b76feca248837894f83f603ffe956f16dd68b7bf1999ba304259021ee5b93719f841"
        }
      ],
      "purl": "pkg:npm/csslint@0.9.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/csslint/-/csslint-0.9.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/csslint@0.9.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/csslint/-/csslint-0.9.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jshint",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7089ae04898e1554483030a45fb72c74f4464f3f7d210651e0d4932e59c5f701226f5cd27ae20323f0fc04e6fddb8d56e5b0544d49daa387638b92503d57ecf0"
        }
      ],
      "purl": "pkg:npm/jshint@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/jshint/-/jshint-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jshint@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/jshint/-/jshint-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cli",
      "version": "0.4.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "75b9f91f2789592394e7c470384885d555ab97b1d1bc3b0a2e9bb4ba223fbc4c47ea2368c94ce307932bdc8258e435547e76e97bdefddf1c380c5255cc2f6759"
        }
      ],
      "purl": "pkg:npm/cli@0.4.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/cli/-/cli-0.4.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cli@0.4.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/cli/-/cli-0.4.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "13.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5a3972ae89669bcb83a66fe8806c976576f567e09ad81f0d6c9c2a0558346b12bd19b05ea12ef2195eaf8d79d87469ba5f9de27a112ec716f288aa7c42637857"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0",
            "url": "https://opensource.org/licenses/BlueOak-1.0.0"
          }
        }
      ],
      "purl": "pkg:npm/glob@13.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/glob/-/glob-13.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@13.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/glob/-/glob-13.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "10.2.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3142e454b7ca1980c561e8cfd3b40ebab0cb2d0a5c8e4ec5c3eee35d2d91d9ccd1433479eb21d1bde5393432443af887fa111364a4a4224e5cf93db71a315432"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0",
            "url": "https://opensource.org/licenses/BlueOak-1.0.0"
          }
        }
      ],
      "purl": "pkg:npm/minimatch@10.2.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimatch/-/minimatch-10.2.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@10.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimatch/-/minimatch-10.2.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brace-expansion",
      "version": "5.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "559ce72e0b70867f8c69cb7db5f8b0c7ae1f03d7ab1c7fcc0971147c1ff46d7ffa173ea7cb91064d7625b4ca1caa0e31140419b673b70c75965e2f118ae37b71"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/brace-expansion@5.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/brace-expansion/-/brace-expansion-5.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@5.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/brace-expansion/-/brace-expansion-5.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "balanced-match",
      "version": "4.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "04bae011c453c17da8ea01b118e08dc8cbc64a9df96287ee633c3d87520c4d198aaadb40659554ebb6dd6fd3ebdaf50703cfa3de2dad25f8cee82ebee26c864c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/balanced-match@4.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/balanced-match/-/balanced-match-4.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/balanced-match@4.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/balanced-match/-/balanced-match-4.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minipass",
      "version": "7.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b44047a839c8a0cff5ad7304d738246bd83a43695ca029311cbb9cece0c9e41c5b3f977873667970682d5c092ee7ddb4d02c7b762b874ce61f4810fc9fa9a6f0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0",
            "url": "https://opensource.org/licenses/BlueOak-1.0.0"
          }
        }
      ],
      "purl": "pkg:npm/minipass@7.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minipass/-/minipass-7.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minipass@7.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minipass/-/minipass-7.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-scurry",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dcefe2555b0900fb0e9e9c1621e0fe77acffecf9aa029c9078f52d0a77636ad8fff48e4bca51efb79aa5b856814f7239877af57a37d1d39e9cf850aff8d9cd5e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0",
            "url": "https://opensource.org/licenses/BlueOak-1.0.0"
          }
        }
      ],
      "purl": "pkg:npm/path-scurry@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/path-scurry/-/path-scurry-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-scurry@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/path-scurry/-/path-scurry-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-cache",
      "version": "11.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "19ffcaa0bdc2fcc948ec1b743c623d23e4de4c2fc8eabfdcb14e7c37805235ce25a692c178ab0e7456242be757d0004350c24d7c21d3c8fa73c303b6d40c1ddc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0",
            "url": "https://opensource.org/licenses/BlueOak-1.0.0"
          }
        }
      ],
      "purl": "pkg:npm/lru-cache@11.3.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/lru-cache/-/lru-cache-11.3.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@11.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/lru-cache/-/lru-cache-11.3.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima",
      "version": "4.0.0-dev",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1fdcf8130bb75e3d78efbc0b5ad3f8853986222349d3871f15abfcd87793cb8eb5e7ee63b808e055ef651d7674a9ccf276dcf5b251ee97ae274cfffee754f46f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:npm/esprima@4.0.0-dev",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://github.com/ariya/esprima/tarball/master"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima@4.0.0-dev",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://github.com/ariya/esprima/tarball/master"
        },
        {
          "name": "cdx:npm:manifestSourceType",
          "value": "url"
        },
        {
          "name": "cdx:npm:manifestSource",
          "value": "https://github.com/ariya/esprima/tarball/master"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c892892f5837b68edfe02ffd2f31d74f3361e79d3128679f88296cf514be0c376c0e92a99dd638f540d95b9b23ff7c9e69cdc79763f1df0e5b4fc6ccfdd32b59"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/minimatch@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimatch/-/minimatch-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimatch/-/minimatch-0.4.0.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-cache",
      "version": "2.7.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5a989b589eb4737020033f1ada2604ac3adc4f60bb3a62a7b168487073a39141c58e45e770986d2f1352a949b147146e9e96f923c569addeda35277636d92c25"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/lru-cache@2.7.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/lru-cache/-/lru-cache-2.7.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@2.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/lru-cache/-/lru-cache-2.7.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sigmund",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7c2bc45df87a356a66f984ae6366e95dbfd522286a580ea12ec81ba02fb49e5ef543b37ba3679a096f2625afcd2ef421b3a8e9777559578522510955ebe95cf2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/sigmund@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/sigmund/-/sigmund-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sigmund@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/sigmund/-/sigmund-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "peakle",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "54a3511eef96bd44097f0e98f3a85b4444c67cd72bfff9f43e219f46de57b049b5e6e3486182120f8a69f51fc7579bb14fae7c7d50f570ee5b794705c28598bb"
        }
      ],
      "purl": "pkg:npm/peakle@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/peakle/-/peakle-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/peakle@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/peakle/-/peakle-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shelljs",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5245cb06e533009c246a5ff47989d0b3c2e95d0e20aca2f990fb40d11914ce18f592152fc3967677bd7b1914d17250d643e635e325a488cf5c257d82c121f1a7"
        }
      ],
      "purl": "pkg:npm/shelljs@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/shelljs/-/shelljs-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shelljs@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/shelljs/-/shelljs-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "underscore",
      "version": "1.4.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "66a1ab0206aaa9933b2c64733632e7c397a57af59be4cf0b1280cc69dc485b73966dcbfbdb030c80a77038aa5de45ab17bc721a0b0fc1cdde24a3dd3521fe089"
        }
      ],
      "purl": "pkg:npm/underscore@1.4.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/underscore/-/underscore-1.4.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/underscore@1.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/underscore/-/underscore-1.4.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-lint",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "42804c080a37b059c09769ef09caede4d9a3a8c45e8e582184cbd9d3292181f369a7bba4a75b5eedd3faab6a387e4be5d37b74f2def99e39e2fb2e92ee38872e"
        }
      ],
      "purl": "pkg:npm/json-lint@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/json-lint/-/json-lint-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-lint@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/json-lint/-/json-lint-0.1.0.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Package no longer supported. Contact Support at https://www.npmjs.com/support for more info."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json5",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8f3bb78711a1ced03395d80a4dbb16db8d26b4f22047a7e875dbbd1ea420a6fd0c2f645c8c4d268f22eba345c4f76600418a53a5c07263cd2f57394a38ceb8c4"
        }
      ],
      "purl": "pkg:npm/json5@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/json5/-/json5-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json5@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/json5/-/json5-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "munit",
      "version": "0.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5a5829f04b4e55af09511aecc9646bdad7636b7bd4b2d7e4ad28d41562eca3ac6d5f7fd91c88b55b46d6429416a53ecd2e824e49fa3e82f120905dfc22119d5b"
        }
      ],
      "purl": "pkg:npm/munit@0.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/munit/-/munit-0.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/munit@0.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/munit/-/munit-0.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/argv@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/csslint@0.9.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/balanced-match@4.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/brace-expansion@5.0.5",
      "dependsOn": [
        "pkg:npm/balanced-match@4.0.4"
      ]
    },
    {
      "ref": "pkg:npm/minimatch@10.2.5",
      "dependsOn": [
        "pkg:npm/brace-expansion@5.0.5"
      ]
    },
    {
      "ref": "pkg:npm/minipass@7.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lru-cache@11.3.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-scurry@2.0.2",
      "dependsOn": [
        "pkg:npm/lru-cache@11.3.6",
        "pkg:npm/minipass@7.1.3"
      ]
    },
    {
      "ref": "pkg:npm/glob@13.0.6",
      "dependsOn": [
        "pkg:npm/minimatch@10.2.5",
        "pkg:npm/minipass@7.1.3",
        "pkg:npm/path-scurry@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/cli@0.4.5",
      "dependsOn": [
        "pkg:npm/glob@13.0.6"
      ]
    },
    {
      "ref": "pkg:npm/esprima@4.0.0-dev",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lru-cache@2.7.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sigmund@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimatch@0.4.0",
      "dependsOn": [
        "pkg:npm/lru-cache@2.7.3",
        "pkg:npm/sigmund@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/peakle@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shelljs@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/underscore@1.4.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jshint@1.1.0",
      "dependsOn": [
        "pkg:npm/cli@0.4.5",
        "pkg:npm/esprima@4.0.0-dev",
        "pkg:npm/minimatch@0.4.0",
        "pkg:npm/peakle@0.0.1",
        "pkg:npm/shelljs@0.1.4",
        "pkg:npm/underscore@1.4.4"
      ]
    },
    {
      "ref": "pkg:npm/json-lint@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json5@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/nlint@0.0.4",
      "dependsOn": [
        "pkg:npm/argv@0.0.1",
        "pkg:npm/csslint@0.9.10",
        "pkg:npm/jshint@1.1.0",
        "pkg:npm/json-lint@0.1.0",
        "pkg:npm/json5@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/munit@0.0.5",
      "dependsOn": [
        "pkg:npm/argv@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/argv@0.0.2",
      "dependsOn": [
        "pkg:npm/munit@0.0.5",
        "pkg:npm/nlint@0.0.4"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/argv@0.0.2"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-07-24T15:48:06Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Friday, July 24, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'argv' with version '0.0.2'."
    }
  ]
}