{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:aaaba04e-a7cf-4239-9dc6-6704803885ed",
  "version": 1,
  "metadata": {
    "timestamp": "2026-07-27T18:43:12Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "bare-semver",
      "group": "",
      "version": "1.1.0",
      "description": "Minimal semantic versioning library for Bare",
      "purl": "pkg:npm/bare-semver@1.1.0",
      "bom-ref": "pkg:npm/bare-semver@1.1.0",
      "author": "Holepunch",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "format, lint, test"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/holepunchto/bare-semver#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/holepunchto/bare-semver.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@jridgewell\\n@types"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "brittle",
      "version": "3.19.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e1379dd4cb7da3d07aa0803a2262490ad07f16ffbe64edc80cd42045c1ce5d6498191522760c5c85a1ab5016919fee26967797ae02273e408fce2d233bca8a6c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/brittle@3.19.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/brittle/-/brittle-3.19.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brittle@3.19.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/brittle/-/brittle-3.19.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "b4a",
      "version": "1.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6a2aab7b536bd01ffa0e0136379bf04dcfb6fe8419e16875b783739d8638134d32f0b0ade8da9d46ff35b28d34a28dbb0fc315293a546bf330514b412d70a80f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/b4a@1.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/b4a/-/b4a-1.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/b4a@1.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/b4a/-/b4a-1.8.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-assert",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "73abaf82f4c906ca530f1b559cf82b04a98b81ca56dc5a7bd8d54a0cb83aa13e108d06e11adbeb90732119830ad6c878be30473819ae51a972b7d852cd5dfb7d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-assert@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-assert/-/bare-assert-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-assert@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-assert/-/bare-assert-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-inspect",
      "version": "3.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8df5b929103ce28dd112923a56be276ef327fa1a95030f0653598c751c14b18e72268bd06a6c5878a195286a9dcecfbc65b1b88d1cc65173ffdc98bf0e7a9f3e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-inspect@3.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-inspect/-/bare-inspect-3.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-inspect@3.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-inspect/-/bare-inspect-3.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-ansi-escapes",
      "version": "2.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d36112e3f13645baed6529c727d2e7b4185890b03a94fa5211e3fc8aa4b731c701215855065126aee17523b1d9ab1e50f1a8937987d055eaa6ad4f583b6c98a1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-ansi-escapes@2.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-ansi-escapes/-/bare-ansi-escapes-2.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-ansi-escapes@2.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-ansi-escapes/-/bare-ansi-escapes-2.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-stream",
      "version": "2.13.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "569d1c9e3632ac40b8c21613ca643e6198baa41a5f8880993b771f446f2ccbaed93567bde75babbf5c78796d4128d9e0c3753eddf3d86f9250bc76c2b711fb3b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-stream@2.13.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-stream/-/bare-stream-2.13.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-stream@2.13.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-stream/-/bare-stream-2.13.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-events",
      "version": "2.8.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ae2263cafd7f9872c83d7e11c222bea16f7fe1cdd311478e44729e7ca00a9d9e64cac95b37e1d7a30b5b69512ab7820c501ece5e57e2c5cb3a82c15ea3f8e189"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-events@2.8.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-events/-/bare-events-2.8.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-events@2.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-events/-/bare-events-2.8.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "streamx",
      "version": "2.25.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d2742e1ba8dfd70fb075d344117085e274e0dcbb6e7d620d07978510dfb94cd656eca589a7ac7cefe2452f8def68050fc827c7d70203fa6355c96e8e1ed15a9a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/streamx@2.25.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/streamx/-/streamx-2.25.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/streamx@2.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/streamx/-/streamx-2.25.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "events-universal",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2d47797aebdb30ba70385f26ea2bcf09b85079289854d6fc56cd1f43c4235e8d094e4107a73f29c5d41fd204ad96d68fa70d0271af1bdfd2b1bcaf5c7ca46203"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/events-universal@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/events-universal/-/events-universal-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/events-universal@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/events-universal/-/events-universal-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-fifo",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fddf6c7e8b38cb1ce9c240e4b8dee4d92a852ad60d9824f381f129cfcdb1df820cf7fcdcf0a1b14285e0d6588d0bf8b3a5133f30176de38366c78d595aa93e15"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/fast-fifo@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/fast-fifo/-/fast-fifo-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-fifo@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/fast-fifo/-/fast-fifo-1.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "text-decoder",
      "version": "1.2.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "be52f2b5791e3f8c6f12ada8b477897d24084725b1a3fa191846d7aed10417d1e79ab765cb9f6c51bcd9fd08325ae2d81dcb421f1145e2d45064d43d93ad04c5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/text-decoder@1.2.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/text-decoder/-/text-decoder-1.2.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/text-decoder@1.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/text-decoder/-/text-decoder-1.2.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "teex",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "79813a88423ad8d8b51fca086bb2a50d4eae401b6aaf811a8e78b7c17eeba5f5c3f32b05c7ccf4f9dae2f8a5843d6a41b315dfc6ee7cc7fd23bd3553d5e90e4a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/teex@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/teex/-/teex-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/teex@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/teex/-/teex-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-type",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2ddb679c411895d39cf3b0ebe06a6c2a74ad4ad664df37e0a04317cbccaf119917adc0aff51b580eb518585b01407b5a074b351145a672f4ba5e61196088f707"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-type@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-type/-/bare-type-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-type@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-type/-/bare-type-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-cov",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "77f6f81dd2f9a21643c01bc37a025e4a49a8d57d8c1a59b6da35f3b98d83ef09765b5fbb9e4fdbefe1cca20c2051afb38bcad55512502870873c7601269be5bf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-cov@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-cov/-/bare-cov-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-cov@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-cov/-/bare-cov-1.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-fs",
      "version": "4.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "58346cc95379d9e031fe505a98a0fabb2c3c1f8db6f21ff1d2c18619e80e6a633671decf6a0f3c19f3106a5a1b5c8f87684531a4291b290503390aadf706b047"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-fs@4.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-fs/-/bare-fs-4.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-fs@4.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-fs/-/bare-fs-4.7.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-path",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b727d6d9c41c07934df126a28eb86a9f4661ec09c536c9dccd172e58e0c7d1e6005c1b09e60571014b8dafbb6c1d20ba219efb700d128adcd3face3b928b7c33"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-path@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-path/-/bare-path-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-path@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-path/-/bare-path-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-os",
      "version": "3.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e8ce578dc9ecca040d3cc08c3d748adfbf71ac916267f00430d0661449905bc77fefcf554004efae2ca2e6bd076132fd4e4436eab9f79207531b76a2b1bad791"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-os@3.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-os/-/bare-os-3.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-os@3.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-os/-/bare-os-3.9.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-url",
      "version": "2.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "29c72973b0027d76b17de2277ea29c66d5b8a53e58067d667ac738b02b2e9fab11c2d6c9e21fac34e6a4b14a5810950a7cdeb96160ba070d8e2441622b1abc9d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-url@2.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-url/-/bare-url-2.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-url@2.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-url/-/bare-url-2.4.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-inspector",
      "version": "6.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "acbf9a289ef816117eea2252d9c5770bc8ecf27185dfb1f4e65762c8ca238053ff3797984a167f9a149b4dc0e1d72ae25b98e775877ac56414d04fc2135e138b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-inspector@6.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-inspector/-/bare-inspector-6.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-inspector@6.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-inspector/-/bare-inspector-6.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-tcp",
      "version": "2.2.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e0a40f82a62e82f2ba4317129d519b97ced7b2505e6f199796fec695fe0cf62c30a120832ad6260b5b7acec31cb53361cca5db58221dee607847da8b5a3dc933"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-tcp@2.2.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-tcp/-/bare-tcp-2.2.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-tcp@2.2.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-tcp/-/bare-tcp-2.2.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-dns",
      "version": "2.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "69bc231e6a56a9244d07b579eb5e50c4f1fdd8bef5015cc59bf90a4ecf15622353022db155da27a6fd018c9d21c172f0a26a16fb1b1238f8d6e8f64f3b5e1ab2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-dns@2.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-dns/-/bare-dns-2.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-dns@2.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-dns/-/bare-dns-2.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-http1",
      "version": "4.5.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "df5380c0c91253ecf556e50e0a4eb9871dda59083309f1ffcd0e8b1b16c9b668b2d82cecc34faebce04cf5892a68beb35124d2606da92db2f4bff4e3304dc1bb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-http1@4.5.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-http1/-/bare-http1-4.5.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-http1@4.5.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-http1/-/bare-http1-4.5.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-http-parser",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0cbfbb7d31145b30048ff05ac3d7bf07034089d0116f1b947f96e89d0fd6b7754f51d24dc9fe7adb275aa27a3d664401014c3437277360423deeb4acffddebb8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-http-parser@1.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-http-parser/-/bare-http-parser-1.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-http-parser@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-http-parser/-/bare-http-parser-1.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "bare-ws",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ab6bf45084347054015d0329fb41516a84a4d44a1880e8733bbca2a344ea055e9191fa2df7b99b058c5bd6cb30e5f6950a2b15685c50618f35d7748c2d8401a3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-ws@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-ws/-/bare-ws-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-ws@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-ws/-/bare-ws-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-crypto",
      "version": "1.13.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5a2ba9f66d9829243f1f751751b16bc18b0a221e94170cc700fe0d3a8e0d4cd1b43de4e8488f8fe444f2dc8067c5120afa7b09863893c019019a8b9e3fc26f8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-crypto@1.13.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-crypto/-/bare-crypto-1.13.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-crypto@1.13.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-crypto/-/bare-crypto-1.13.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "crypto"
      ]
    },
    {
      "group": "",
      "name": "bare-https",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5b5191482ce7fb15ca7f96cc70fb3f860e866b56f13ea6fba3019f4beb6f94141f3dee50d924dc6a746e299ae053ad2fe6e2ab8571f97205b033e0cbaaf5d981"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-https@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-https/-/bare-https-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-https@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-https/-/bare-https-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-tls",
      "version": "3.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3988c75281c1d01f362ded4ed0444f3caf02eea9b653d64ccdb97bbd617a2f710ffbc63ddc5c9fe0c995056cab74eea611f933b9b4ffd0ce793464b4db34439d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-tls@3.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-tls/-/bare-tls-3.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-tls@3.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-tls/-/bare-tls-3.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-net",
      "version": "2.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "332a52a832a90d4d97b7b1487dace7e721af467574f6015c20f1c65acb56d20c6ecc0e2db9c4dcc094997a8b3dec2e05f3dbed539a06c170cdfc7ac637a63827"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-net@2.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-net/-/bare-net-2.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-net@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-net/-/bare-net-2.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-pipe",
      "version": "4.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e8e7f1686f094a4461dc67388731d1b3136dfb2bb63e937b96bbf557e4fbf067649d6424546c2212fbb89bed676df93c70c550d131b146f43dd17038ae19d3bb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-pipe@4.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-pipe/-/bare-pipe-4.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-pipe@4.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-pipe/-/bare-pipe-4.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-process",
      "version": "4.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "25f713b729aae9a92a3366ddc93b0fe00e0660971e0736fdd64fc40a6169b3be6e15feae3b7dd23356ce66c440ab245713169bb1024b9f94b8d4d065f074cce0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-process@4.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-process/-/bare-process-4.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-process@4.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-process/-/bare-process-4.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-abort",
      "version": "2.0.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cdd73c97cf1e075d49b33e6b0ddeac08082fda45055e076b656a0c96053a24c91f022d7fbae1850b72041ecc0a6c84504e4e47dd3e4232e79c86c5d8c6268795"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-abort@2.0.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-abort/-/bare-abort-2.0.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-abort@2.0.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-abort/-/bare-abort-2.0.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-env",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d2ef7ae0fe592c0c538be956e0a8e9ed8449439819afdc9c60eb632f1b12aeea60333dec9f967d9f8487fc92227c7c2f69db1fd5bac0d890233fef48396c138b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-env@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-env/-/bare-env-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-env@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-env/-/bare-env-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-hrtime",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "54c6f7b47a34e60b276eedce5d39a40e2c138cc94eb1b4262a8cac2aa284c91d3d9bbed3b83ad815b8f7439186935d1d00ab141eb9d79b009a789ab356907964"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-hrtime@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-hrtime/-/bare-hrtime-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-hrtime@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-hrtime/-/bare-hrtime-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-signals",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7cd1cc39d408958b93bcc0773a1f40a64f7d84b2a7df9d7e22bf2fcfe92188f4dc3aa232186e2e5968dd2d3cf159d606b00d1e4fe59edf2d0aef88638f69eaec"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-signals@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-signals/-/bare-signals-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-signals@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-signals/-/bare-signals-4.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-stdio",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dd6243aadbd518fe1ffa3ebc932102d39ba6398370289d711be6005cbf3267ad395a036a891855685abe99522106dd9e28da7ba5ae6f0907613add69361efd48"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-stdio@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-stdio/-/bare-stdio-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-stdio@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-stdio/-/bare-stdio-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-tty",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1192ef5b803e5e22602374d6f9ed6930c13d3c826c7c45defc303f5922b3224abfbfb61aae9bffaef1ba679a469e9a3857f05dfaaa29c2708b491ef584c30160"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-tty@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-tty/-/bare-tty-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-tty@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-tty/-/bare-tty-5.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-v8-to-istanbul",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "08cd303e0c90b574d0ee1e2af0d8db4d9fc51f985ed09922c20a6ad25159640e6d915673990ffdba5e11ec4f9c365199248665419f6fe02c1b8156851b7cce00"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-v8-to-istanbul@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-v8-to-istanbul/-/bare-v8-to-istanbul-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-v8-to-istanbul@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-v8-to-istanbul/-/bare-v8-to-istanbul-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "bare-module",
      "version": "6.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0a80931bccbc1ca3e7356df5ece5b58729e5dbc0dab153ed6d7d37dd91005e4d10dd26025178b738e9cd02beb04eb0e0320a4eb16d2497b3627dca26e46187f1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-module@6.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-module/-/bare-module-6.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-module@6.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-module/-/bare-module-6.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-bundle",
      "version": "1.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e0b5659c9007af4d0787a56ee995094b7f2b704b494f76f7bc28574ac06c2769a4d53374950fa0cddf83c392f4695eeea8366ff38b26bb05be3b4d97ecf7c397"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-bundle@1.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-bundle/-/bare-bundle-1.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-bundle@1.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-bundle/-/bare-bundle-1.10.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-module-lexer",
      "version": "1.4.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d24954e1e32c8e1ff07318bc15d1e63689b68f61789269173a1c8914bf6a4da485a76944de6e81b5b2a030763c4799a2a82f6bf3f21f03cc335e70b93acd7858"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-module-lexer@1.4.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-module-lexer/-/bare-module-lexer-1.4.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-module-lexer@1.4.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-module-lexer/-/bare-module-lexer-1.4.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "require-addon",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "54d3c36656202184305a9f63313ce58f1fa4d19b5ab4a95cbce864b59fda9cd3c8ddd43d35793b72ad94e22275c1df48af2b519d887212870559b91d3dbf8c60"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/require-addon@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/require-addon/-/require-addon-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/require-addon@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/require-addon/-/require-addon-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-addon-resolve",
      "version": "1.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b127748e27912650da3833b38f4a1ed118c5542d502346488c621d3e46eb4d7b1d555b44360d7873e9471c0847c265826769d094c872f230376392d83dcfe2b0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-addon-resolve@1.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-addon-resolve/-/bare-addon-resolve-1.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-addon-resolve@1.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-addon-resolve/-/bare-addon-resolve-1.10.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-module-resolve",
      "version": "1.12.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8fe8620f993df6a79ce0a8c9bd8b08ebbab900e0627e6cbd246de878c5714e6beb867dac21da7c4adad4bd9bb860d8304e93be3619e2406d7a3751130ded64e7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-module-resolve@1.12.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-module-resolve/-/bare-module-resolve-1.12.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-module-resolve@1.12.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-module-resolve/-/bare-module-resolve-1.12.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-semver",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1d2fc0df46e2dbe3e24497d4e91e3e2a9fba29e2d20920728d83368a2a1b38accb02fb6ed424fe4bcc567e253bc33d1eae49e3914a02fb25f2d74f2dcc8b8fe5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-semver@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-semver/-/bare-semver-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-semver@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-semver/-/bare-semver-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-utils",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5a1404224900c644a75bbbb5420ac8d007cd9b926932bb844d7798b1be6a9e4049d134df34aca0666b21eab9281c100d695f82ffb25e77b6c93fd3a61071bbad"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-utils@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-utils/-/bare-utils-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-utils@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-utils/-/bare-utils-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-debug-log",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "562e363e4310b0d57d3d4a71d8697586292c871e4ef45ccc27aa3d367a29b1e83ba8b0412bb365df577444771fc0b1007e670f029cada5cd1915fabaf2edb615"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-debug-log@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-debug-log/-/bare-debug-log-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-debug-log@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-debug-log/-/bare-debug-log-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-encoding",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2aa7feb7f6b3b35de551ec8ae136fb85ae3074b45729609743cc35ad59adecab683c23dd1c3fd7c2decb048b024b0c06825adc99b968e5538b6b96af909a942c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-encoding@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-encoding/-/bare-encoding-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-encoding@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-encoding/-/bare-encoding-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-format",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1acc1d8673a73fd42dc116eb7f8c0b029c39c2276468b32c2ded973acdf97d00f661f10dd40a681a46be719ecf7efcf13207d85e63218ffd8e1a5567e7f0f183"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-format@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-format/-/bare-format-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-format@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-format/-/bare-format-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-stylize",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "977323988978efa6d68a36167f745b13ea2c9788ae5d238cb9dce9d2f02acc82bb80f827ffe1b7a00c69f0e8a7f42145f75d4a04fd0b3bd92db3c0a2f2619969"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-stylize@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-stylize/-/bare-stylize-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-stylize@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-stylize/-/bare-stylize-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "v8-to-istanbul",
      "version": "9.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9221946a558dfab80127fd4e1d9b01b54e2b5d939f8ffeeb290c542ca948cf0cd04af3095143603f0244121ee053ac445710b46a1a0e06f376608f061fa14d80"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/v8-to-istanbul@9.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/v8-to-istanbul/-/v8-to-istanbul-9.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/v8-to-istanbul@9.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/v8-to-istanbul/-/v8-to-istanbul-9.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "@jridgewell",
      "name": "trace-mapping",
      "version": "0.3.31",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf3351f9275048327373c8e869e3fc410a0242bf0db98c76748232b65d507811191c9f6e5ba85e6ecad881bcfc849c1441aa374d608cb667d5f0dbb5b7038b03"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.31",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@jridgewell/trace-mapping/-/trace-mapping-0.3.31.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/trace-mapping@0.3.31",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@jridgewell/trace-mapping/-/trace-mapping-0.3.31.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "resolve-uri",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6d12128022233f6d3fb5b5923d63048b9e1054f45913192e0fd9492fe508c542adc15240f305b54eb6f58ccb354455e8d42053359ff98690bd42f98a59da292b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/resolve-uri@3.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/resolve-uri@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "sourcemap-codec",
      "version": "1.5.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "71843ddf5d20aeac6e7966e5f96b885086a251a0dc8fb58eab97d58449633558117ce52163d7f2db34ef7e8a96b2779b87c4a5ef45527056c80af2672ca0743a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.5.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/sourcemap-codec@1.5.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "istanbul-lib-coverage",
      "version": "2.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d9017fb7f6ae5a6d25b32f17b4a54f1b5f6fdec48e42525efd81d981f8dbfca0411ce19257e276abf4baef5adcabdb9306b2c05e6669a8989a41b313fb3354d7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40types/istanbul-lib-coverage@2.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@types/istanbul-lib-coverage/-/istanbul-lib-coverage-2.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/istanbul-lib-coverage@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@types/istanbul-lib-coverage/-/istanbul-lib-coverage-2.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "convert-source-map",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2afa78e7d1eb576144275080b22d4abbe318de46ac1f5f53172913cf6c5698c7aae9b936354dd75ef7c9f90eb59b4c64b56c2dfb51d261fdc966c4e6b3769126"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/convert-source-map@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/convert-source-map/-/convert-source-map-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/convert-source-map@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/convert-source-map/-/convert-source-map-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which-runtime",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e64c027d69a5efe6f634eecaacb321622863471d2d78a91ddf21a9d5793955a7f624675287eae05611002c00fd73fe7d74ff98c091d7a043bb7bc40fcbb80e93"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/which-runtime@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/which-runtime/-/which-runtime-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which-runtime@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/which-runtime/-/which-runtime-1.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "picomatch",
      "version": "4.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "40ff3c0402af31a9bfdcdc47eaf8f6a36d51e8c8f165401dea7970012fe99c6bcdf4854ba1c2c7c46608cc5860e9f510fb9b61e8fe1dbf8796f635f70d2223ec"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/picomatch@4.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/picomatch/-/picomatch-4.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/picomatch@4.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/picomatch/-/picomatch-4.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-subprocess",
      "version": "5.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d3bc30b30955eccdec0bd23291b65167f8c7024ad715654ba9d0561afd72d288c28a6b510fd846c31747991e455059835192cdb01993609350aa08a8e7e03ce5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-subprocess@5.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-subprocess/-/bare-subprocess-5.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-subprocess@5.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-subprocess/-/bare-subprocess-5.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "error-stack-parser",
      "version": "2.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4a4e55eb055accf86ae4c8693be014c499f9c7b5d25c697547ddd59fb8becd2d792835714228de8cd0abcfcdf8d3fd9b80b06347d1ad106f1954a38d0e372a19"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/error-stack-parser@2.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/error-stack-parser/-/error-stack-parser-2.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/error-stack-parser@2.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/error-stack-parser/-/error-stack-parser-2.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "stackframe",
      "version": "1.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a1e56db7b796412f8d6ba17ffd2e242762b655b4654bd0f8de6025332569556a2fcbda3e8df807f0ef5a83300dcda88b8dc940d2863351710ce0fbab85250287"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/stackframe@1.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/stackframe/-/stackframe-1.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stackframe@1.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/stackframe/-/stackframe-1.3.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globbie",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "85caf226629c7ed7fcdb17c15935b1b9421358822860edde735d38575ed230718597a54b6e6d5dd49bbd2d7f4bfa3c894f0202a5e997fdd98f23f1c66282abd4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/globbie@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/globbie/-/globbie-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globbie@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/globbie/-/globbie-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "paparam",
      "version": "1.10.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "be2c9023ae152236b465ade78c8ce1a043fc6559203e8c2164fb86d04f7a37005f609e99232aeb961586b453e474dede60b9762fc09358bfb095ad1ebe6d4a29"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/paparam@1.10.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/paparam/-/paparam-1.10.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/paparam@1.10.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/paparam/-/paparam-1.10.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "same-object",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "72c1d686f52c2db20e1c333f9cff8a1d633e04b3ec2335a415af076f3688d06ec1a8a5e0c7eec52692931a02d7cb3e5a99f758d8e5417265d3a9838c124d38a2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/same-object@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/same-object/-/same-object-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/same-object@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/same-object/-/same-object-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "test-tmp",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "195820c4683e8d7a8fd966e3bb9d0954ba3ef44fa720e3cfc96aa0afadc46ce9cd22d20abb57046c9a5358025e7e59f21aa5ceb5c308ee28c7469f3c19491f0c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/test-tmp@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/test-tmp/-/test-tmp-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/test-tmp@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/test-tmp/-/test-tmp-1.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tmatch",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "21bf4eb419291e7d3bb573f4e1294dd52611c4581393ac123361019a38f1ba0e2ee515cf4552e47452524b53e6ad089d69207c2ebbbd9d1b5589006c6f1cc4e5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/tmatch@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/tmatch/-/tmatch-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tmatch@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/tmatch/-/tmatch-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lunte",
      "version": "1.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ce773f7a549c7a5058abf37a8549e0afdacf740ac12a19f8c91f3aa1f9ee8faa90d0c007028f0a6a5018d9cfc304ac3774ee058d467d3d1f9808549b0a005c59"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/lunte@1.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/lunte/-/lunte-1.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lunte@1.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/lunte/-/lunte-1.8.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prettier",
      "version": "3.8.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ee280f4cce777061cc5bcc56b954f2762d8a3b6df754589337217984b26aa629477e69fc0bc80f7fe3d2edd513eb861c5c56e23066714bda424b12ff0f19bf27"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/prettier@3.8.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/prettier/-/prettier-3.8.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prettier@3.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/prettier/-/prettier-3.8.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prettier-config-holepunch",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "caeb2471d3d17d060b14f90e1afc52e1316609bed0bc0a308cef9868d2cf2c15917affaabba1d7a0a90f587f657cdb0bf60513855ec8799eadfc1d504aefe39e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/prettier-config-holepunch@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/prettier-config-holepunch/-/prettier-config-holepunch-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prettier-config-holepunch@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/prettier-config-holepunch/-/prettier-config-holepunch-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/b4a@1.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-events@2.8.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/events-universal@1.0.1",
      "dependsOn": [
        "pkg:npm/bare-events@2.8.2"
      ]
    },
    {
      "ref": "pkg:npm/fast-fifo@1.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/text-decoder@1.2.7",
      "dependsOn": [
        "pkg:npm/b4a@1.8.1"
      ]
    },
    {
      "ref": "pkg:npm/streamx@2.25.0",
      "dependsOn": [
        "pkg:npm/events-universal@1.0.1",
        "pkg:npm/fast-fifo@1.3.2",
        "pkg:npm/text-decoder@1.2.7"
      ]
    },
    {
      "ref": "pkg:npm/teex@1.0.1",
      "dependsOn": [
        "pkg:npm/streamx@2.25.0"
      ]
    },
    {
      "ref": "pkg:npm/bare-stream@2.13.1",
      "dependsOn": [
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/streamx@2.25.0",
        "pkg:npm/teex@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/bare-ansi-escapes@2.2.3",
      "dependsOn": [
        "pkg:npm/bare-stream@2.13.1"
      ]
    },
    {
      "ref": "pkg:npm/bare-type@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-inspect@3.1.4",
      "dependsOn": [
        "pkg:npm/bare-ansi-escapes@2.2.3",
        "pkg:npm/bare-type@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/bare-assert@1.2.0",
      "dependsOn": [
        "pkg:npm/bare-inspect@3.1.4"
      ]
    },
    {
      "ref": "pkg:npm/bare-os@3.9.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-path@3.0.0",
      "dependsOn": [
        "pkg:npm/bare-os@3.9.1"
      ]
    },
    {
      "ref": "pkg:npm/bare-url@2.4.3",
      "dependsOn": [
        "pkg:npm/bare-path@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/bare-fs@4.7.1",
      "dependsOn": [
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/bare-path@3.0.0",
        "pkg:npm/bare-stream@2.13.1",
        "pkg:npm/bare-url@2.4.3",
        "pkg:npm/fast-fifo@1.3.2"
      ]
    },
    {
      "ref": "pkg:npm/bare-dns@2.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-tcp@2.2.13",
      "dependsOn": [
        "pkg:npm/bare-dns@2.1.4",
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/bare-stream@2.13.1"
      ]
    },
    {
      "ref": "pkg:npm/bare-http-parser@1.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-http1@4.5.6",
      "dependsOn": [
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/bare-http-parser@1.1.4",
        "pkg:npm/bare-stream@2.13.1",
        "pkg:npm/bare-tcp@2.2.13",
        "pkg:npm/bare-url@2.4.3"
      ]
    },
    {
      "ref": "pkg:npm/bare-crypto@1.13.6",
      "dependsOn": [
        "pkg:npm/bare-assert@1.2.0",
        "pkg:npm/bare-stream@2.13.1"
      ]
    },
    {
      "ref": "pkg:npm/bare-pipe@4.1.5",
      "dependsOn": [
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/bare-stream@2.13.1"
      ]
    },
    {
      "ref": "pkg:npm/bare-net@2.3.1",
      "dependsOn": [
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/bare-pipe@4.1.5",
        "pkg:npm/bare-stream@2.13.1",
        "pkg:npm/bare-tcp@2.2.13"
      ]
    },
    {
      "ref": "pkg:npm/bare-tls@3.1.3",
      "dependsOn": [
        "pkg:npm/bare-net@2.3.1",
        "pkg:npm/bare-stream@2.13.1"
      ]
    },
    {
      "ref": "pkg:npm/bare-https@3.0.0",
      "dependsOn": [
        "pkg:npm/bare-http1@4.5.6",
        "pkg:npm/bare-tcp@2.2.13",
        "pkg:npm/bare-tls@3.1.3"
      ]
    },
    {
      "ref": "pkg:npm/bare-ws@3.0.0",
      "dependsOn": [
        "pkg:npm/bare-crypto@1.13.6",
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/bare-http1@4.5.6",
        "pkg:npm/bare-https@3.0.0",
        "pkg:npm/bare-stream@2.13.1",
        "pkg:npm/bare-url@2.4.3"
      ]
    },
    {
      "ref": "pkg:npm/bare-inspector@6.0.1",
      "dependsOn": [
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/bare-http1@4.5.6",
        "pkg:npm/bare-stream@2.13.1",
        "pkg:npm/bare-tcp@2.2.13",
        "pkg:npm/bare-url@2.4.3",
        "pkg:npm/bare-ws@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/bare-abort@2.0.13",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-env@3.0.0",
      "dependsOn": [
        "pkg:npm/bare-os@3.9.1"
      ]
    },
    {
      "ref": "pkg:npm/bare-hrtime@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-signals@4.2.0",
      "dependsOn": [
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/bare-os@3.9.1"
      ]
    },
    {
      "ref": "pkg:npm/bare-tty@5.1.0",
      "dependsOn": [
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/bare-signals@4.2.0",
        "pkg:npm/bare-stream@2.13.1"
      ]
    },
    {
      "ref": "pkg:npm/bare-stdio@1.0.2",
      "dependsOn": [
        "pkg:npm/bare-fs@4.7.1",
        "pkg:npm/bare-pipe@4.1.5",
        "pkg:npm/bare-tty@5.1.0"
      ]
    },
    {
      "ref": "pkg:npm/bare-process@4.4.1",
      "dependsOn": [
        "pkg:npm/bare-abort@2.0.13",
        "pkg:npm/bare-env@3.0.0",
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/bare-hrtime@2.1.1",
        "pkg:npm/bare-os@3.9.1",
        "pkg:npm/bare-signals@4.2.0",
        "pkg:npm/bare-stdio@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/bare-bundle@1.10.0",
      "dependsOn": [
        "pkg:npm/bare-url@2.4.3"
      ]
    },
    {
      "ref": "pkg:npm/bare-semver@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-module-resolve@1.12.2",
      "dependsOn": [
        "pkg:npm/bare-semver@1.0.3",
        "pkg:npm/bare-url@2.4.3"
      ]
    },
    {
      "ref": "pkg:npm/bare-addon-resolve@1.10.0",
      "dependsOn": [
        "pkg:npm/bare-module-resolve@1.12.2",
        "pkg:npm/bare-semver@1.0.3",
        "pkg:npm/bare-url@2.4.3"
      ]
    },
    {
      "ref": "pkg:npm/require-addon@1.2.0",
      "dependsOn": [
        "pkg:npm/bare-addon-resolve@1.10.0"
      ]
    },
    {
      "ref": "pkg:npm/bare-module-lexer@1.4.7",
      "dependsOn": [
        "pkg:npm/require-addon@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/bare-module@6.2.0",
      "dependsOn": [
        "pkg:npm/bare-bundle@1.10.0",
        "pkg:npm/bare-module-lexer@1.4.7",
        "pkg:npm/bare-module-resolve@1.12.2",
        "pkg:npm/bare-path@3.0.0",
        "pkg:npm/bare-url@2.4.3"
      ]
    },
    {
      "ref": "pkg:npm/bare-debug-log@2.0.0",
      "dependsOn": [
        "pkg:npm/bare-os@3.9.1"
      ]
    },
    {
      "ref": "pkg:npm/bare-encoding@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-format@1.0.2",
      "dependsOn": [
        "pkg:npm/bare-inspect@3.1.4"
      ]
    },
    {
      "ref": "pkg:npm/bare-stylize@0.0.1",
      "dependsOn": [
        "pkg:npm/bare-ansi-escapes@2.2.3",
        "pkg:npm/bare-process@4.4.1"
      ]
    },
    {
      "ref": "pkg:npm/bare-utils@1.6.0",
      "dependsOn": [
        "pkg:npm/bare-debug-log@2.0.0",
        "pkg:npm/bare-encoding@1.0.3",
        "pkg:npm/bare-format@1.0.2",
        "pkg:npm/bare-inspect@3.1.4",
        "pkg:npm/bare-stylize@0.0.1",
        "pkg:npm/bare-type@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/@jridgewell/resolve-uri@3.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/sourcemap-codec@1.5.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/trace-mapping@0.3.31",
      "dependsOn": [
        "pkg:npm/@jridgewell/resolve-uri@3.1.2",
        "pkg:npm/@jridgewell/sourcemap-codec@1.5.5"
      ]
    },
    {
      "ref": "pkg:npm/@types/istanbul-lib-coverage@2.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/convert-source-map@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/v8-to-istanbul@9.3.0",
      "dependsOn": [
        "pkg:npm/@jridgewell/trace-mapping@0.3.31",
        "pkg:npm/@types/istanbul-lib-coverage@2.0.6",
        "pkg:npm/convert-source-map@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/which-runtime@1.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-v8-to-istanbul@1.0.2",
      "dependsOn": [
        "pkg:npm/bare-assert@1.2.0",
        "pkg:npm/bare-fs@4.7.1",
        "pkg:npm/bare-module@6.2.0",
        "pkg:npm/bare-path@3.0.0",
        "pkg:npm/bare-process@4.4.1",
        "pkg:npm/bare-url@2.4.3",
        "pkg:npm/bare-utils@1.6.0",
        "pkg:npm/v8-to-istanbul@9.3.0",
        "pkg:npm/which-runtime@1.3.2"
      ]
    },
    {
      "ref": "pkg:npm/picomatch@4.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-cov@1.2.2",
      "dependsOn": [
        "pkg:npm/bare-fs@4.7.1",
        "pkg:npm/bare-inspector@6.0.1",
        "pkg:npm/bare-path@3.0.0",
        "pkg:npm/bare-process@4.4.1",
        "pkg:npm/bare-url@2.4.3",
        "pkg:npm/bare-v8-to-istanbul@1.0.2",
        "pkg:npm/picomatch@4.0.4",
        "pkg:npm/which-runtime@1.3.2"
      ]
    },
    {
      "ref": "pkg:npm/bare-subprocess@5.2.3",
      "dependsOn": [
        "pkg:npm/bare-env@3.0.0",
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/bare-os@3.9.1",
        "pkg:npm/bare-pipe@4.1.5",
        "pkg:npm/bare-url@2.4.3"
      ]
    },
    {
      "ref": "pkg:npm/stackframe@1.3.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/error-stack-parser@2.1.4",
      "dependsOn": [
        "pkg:npm/stackframe@1.3.4"
      ]
    },
    {
      "ref": "pkg:npm/globbie@1.0.3",
      "dependsOn": [
        "pkg:npm/bare-fs@4.7.1",
        "pkg:npm/bare-path@3.0.0",
        "pkg:npm/bare-process@4.4.1",
        "pkg:npm/picomatch@4.0.4"
      ]
    },
    {
      "ref": "pkg:npm/paparam@1.10.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/same-object@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/test-tmp@1.4.0",
      "dependsOn": [
        "pkg:npm/bare-fs@4.7.1",
        "pkg:npm/bare-os@3.9.1",
        "pkg:npm/bare-path@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/tmatch@5.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/brittle@3.19.1",
      "dependsOn": [
        "pkg:npm/b4a@1.8.1",
        "pkg:npm/bare-assert@1.2.0",
        "pkg:npm/bare-cov@1.2.2",
        "pkg:npm/bare-fs@4.7.1",
        "pkg:npm/bare-os@3.9.1",
        "pkg:npm/bare-path@3.0.0",
        "pkg:npm/bare-process@4.4.1",
        "pkg:npm/bare-subprocess@5.2.3",
        "pkg:npm/bare-url@2.4.3",
        "pkg:npm/error-stack-parser@2.1.4",
        "pkg:npm/globbie@1.0.3",
        "pkg:npm/paparam@1.10.1",
        "pkg:npm/same-object@1.0.2",
        "pkg:npm/test-tmp@1.4.0",
        "pkg:npm/tmatch@5.0.0"
      ]
    },
    {
      "ref": "pkg:npm/lunte@1.8.0",
      "dependsOn": [
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/bare-fs@4.7.1",
        "pkg:npm/bare-module@6.2.0",
        "pkg:npm/bare-os@3.9.1",
        "pkg:npm/bare-path@3.0.0",
        "pkg:npm/bare-process@4.4.1",
        "pkg:npm/bare-subprocess@5.2.3",
        "pkg:npm/bare-url@2.4.3",
        "pkg:npm/bare-utils@1.6.0",
        "pkg:npm/paparam@1.10.1"
      ]
    },
    {
      "ref": "pkg:npm/prettier@3.8.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/prettier-config-holepunch@2.0.0",
      "dependsOn": [
        "pkg:npm/prettier@3.8.3"
      ]
    },
    {
      "ref": "pkg:npm/bare-semver@1.1.0",
      "dependsOn": [
        "pkg:npm/brittle@3.19.1",
        "pkg:npm/lunte@1.8.0",
        "pkg:npm/prettier-config-holepunch@2.0.0",
        "pkg:npm/prettier@3.8.3"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/bare-semver@1.1.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-07-27T18:43:12Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Monday, July 27, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'bare-semver' with version '1.1.0'. The package type in this SBOM is npm with 2 purl namespaces described under components. The components were identified from the source files: package-lock.json."
    }
  ]
}