{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:5819fecb-69b7-4a13-b27f-8f6f71ad0c38",
  "version": 1,
  "metadata": {
    "timestamp": "2026-08-11T21:25:31Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "basic-auth-connect",
      "group": "",
      "version": "1.1.0",
      "description": "Basic auth middleware for node and connect",
      "purl": "pkg:npm/basic-auth-connect@1.1.0",
      "bom-ref": "pkg:npm/basic-auth-connect@1.1.0",
      "author": "Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/expressjs/basic-auth-connect.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@isaacs\\n@noble\\n@paralleldrive\\n@pkgjs"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "node_modules/@isaacs/cliui/package.json\\nnode_modules/@noble/hashes/package.json\\nnode_modules/@paralleldrive/cuid2/package.json\\nnode_modules/@pkgjs/parseargs/package.json\\nnode_modules/ansi-regex/package.json\\nnode_modules/ansi-styles/package.json\\nnode_modules/argparse/package.json\\nnode_modules/asap/package.json\\nnode_modules/asynckit/package.json\\nnode_modules/balanced-match/package.json\\nnode_modules/brace-expansion/package.json\\nnode_modules/browser-stdout/package.json\\nnode_modules/call-bind-apply-helpers/package.json\\nnode_modules/call-bound/package.json\\nnode_modules/camelcase/package.json\\nnode_modules/chalk/node_modules/supports-color/package.json\\nnode_modules/chalk/package.json\\nnode_modules/chokidar/package.json\\nnode_modules/cliui/node_modules/ansi-regex/package.json\\nnode_modules/cliui/node_modules/emoji-regex/package.json\\nnode_modules/cliui/node_modules/string-width/package.json\\nnode_modules/cliui/node_modules/strip-ansi/package.json\\nnode_modules/cliui/node_modules/wrap-ansi/package.json\\nnode_modules/cliui/package.json\\nnode_modules/color-convert/package.json\\nnode_modules/color-name/package.json\\nnode_modules/combined-stream/package.json\\nnode_modules/component-emitter/package.json\\nnode_modules/connect/package.json\\nnode_modules/cookie-signature/package.json\\nnode_modules/cookiejar/package.json\\nnode_modules/cross-spawn/package.json\\nnode_modules/debug/package.json\\nnode_modules/decamelize/package.json\\nnode_modules/delayed-stream/package.json\\nnode_modules/dezalgo/package.json\\nnode_modules/diff/package.json\\nnode_modules/dunder-proto/package.json\\nnode_modules/eastasianwidth/package.json\\nnode_modules/ee-first/package.json\\nnode_modules/emoji-regex/package.json\\nnode_modules/encodeurl/package.json\\nnode_modules/es-define-property/package.json\\nnode_modules/es-errors/package.json\\nnode_modules/es-object-atoms/package.json\\nnode_modules/es-set-tostringtag/package.json\\nnode_modules/escalade/package.json\\nnode_modules/escape-html/package.json\\nnode_modules/escape-string-regexp/package.json\\nnode_modules/fast-safe-stringify/package.json\\nnode_modules/finalhandler/package.json\\nnode_modules/find-up/package.json\\nnode_modules/flat/package.json\\nnode_modules/foreground-child/package.json\\nnode_modules/form-data/package.json\\nnode_modules/formidable/package.json\\nnode_modules/function-bind/package.json\\nnode_modules/get-caller-file/package.json\\nnode_modules/get-intrinsic/package.json\\nnode_modules/get-proto/package.json\\nnode_modules/glob/package.json\\nnode_modules/gopd/package.json\\nnode_modules/has-flag/package.json\\nnode_modules/has-symbols/package.json\\nnode_modules/has-tostringtag/package.json\\nnode_modules/hasown/package.json\\nnode_modules/he/package.json\\nnode_modules/is-fullwidth-code-point/package.json\\nnode_modules/is-path-inside/package.json\\nnode_modules/is-plain-obj/package.json\\nnode_modules/is-unicode-supported/package.json\\nnode_modules/isexe/package.json\\nnode_modules/jackspeak/package.json\\nnode_modules/js-yaml/package.json\\nnode_modules/locate-path/package.json\\nnode_modules/log-symbols/package.json\\nnode_modules/lru-cache/package.json\\nnode_modules/math-intrinsics/package.json\\nnode_modules/methods/package.json\\nnode_modules/mime-db/package.json\\nnode_modules/mime-types/package.json\\nnode_modules/mime/package.json\\nnode_modules/minimatch/package.json\\nnode_modules/minipass/package.json\\nnode_modules/mocha/node_modules/debug/package.json\\nnode_modules/mocha/node_modules/ms/package.json\\nnode_modules/mocha/package.json\\nnode_modules/ms/package.json\\nnode_modules/object-inspect/package.json\\nnode_modules/on-finished/package.json\\nnode_modules/once/package.json\\nnode_modules/p-limit/package.json\\nnode_modules/p-locate/package.json\\nnode_modules/package-json-from-dist/package.json\\nnode_modules/parseurl/package.json\\nnode_modules/path-exists/package.json\\nnode_modules/path-key/package.json\\nnode_modules/path-scurry/package.json\\nnode_modules/picocolors/package.json\\nnode_modules/qs/package.json\\nnode_modules/randombytes/package.json\\nnode_modules/readdirp/package.json\\nnode_modules/require-directory/package.json\\nnode_modules/safe-buffer/package.json\\nnode_modules/serialize-javascript/package.json\\nnode_modules/shebang-command/package.json\\nnode_modules/shebang-regex/package.json\\nnode_modules/should-equal/package.json\\nnode_modules/should-format/package.json\\nnode_modules/should-type-adaptors/package.json\\nnode_modules/should-type/package.json\\nnode_modules/should-util/package.json\\nnode_modules/should/package.json\\nnode_modules/side-channel-list/package.json\\nnode_modules/side-channel-map/package.json\\nnode_modules/side-channel-weakmap/package.json\\nnode_modules/side-channel/package.json\\nnode_modules/signal-exit/package.json\\nnode_modules/statuses/package.json\\nnode_modules/string-width-cjs/node_modules/ansi-regex/package.json\\nnode_modules/string-width-cjs/node_modules/emoji-regex/package.json\\nnode_modules/string-width-cjs/node_modules/strip-ansi/package.json\\nnode_modules/string-width-cjs/package.json\\nnode_modules/string-width/package.json\\nnode_modules/strip-ansi-cjs/node_modules/ansi-regex/package.json\\nnode_modules/strip-ansi-cjs/package.json\\nnode_modules/strip-ansi/package.json\\nnode_modules/strip-json-comments/package.json\\nnode_modules/superagent/node_modules/debug/package.json\\nnode_modules/superagent/node_modules/ms/package.json\\nnode_modules/superagent/package.json\\nnode_modules/supertest/package.json\\nnode_modules/supports-color/package.json\\nnode_modules/tsscmp/package.json\\nnode_modules/unpipe/package.json\\nnode_modules/utils-merge/package.json\\nnode_modules/which/package.json\\nnode_modules/workerpool/package.json\\nnode_modules/wrap-ansi-cjs/node_modules/ansi-regex/package.json\\nnode_modules/wrap-ansi-cjs/node_modules/emoji-regex/package.json\\nnode_modules/wrap-ansi-cjs/node_modules/string-width/package.json\\nnode_modules/wrap-ansi-cjs/node_modules/strip-ansi/package.json\\nnode_modules/wrap-ansi-cjs/package.json\\nnode_modules/wrap-ansi/node_modules/ansi-styles/package.json\\nnode_modules/wrap-ansi/package.json\\nnode_modules/wrappy/package.json\\nnode_modules/y18n/package.json\\nnode_modules/yargs-parser/package.json\\nnode_modules/yargs-unparser/package.json\\nnode_modules/yargs/node_modules/ansi-regex/package.json\\nnode_modules/yargs/node_modules/emoji-regex/package.json\\nnode_modules/yargs/node_modules/string-width/package.json\\nnode_modules/yargs/node_modules/strip-ansi/package.json\\nnode_modules/yargs/package.json\\nnode_modules/yocto-queue/package.json"
      }
    ]
  },
  "components": [
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "yocto-queue",
      "version": "0.1.0",
      "description": "Tiny queue data structure",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yocto-queue@0.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/yocto-queue@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/yocto-queue/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/yocto-queue/package.json"
              }
            ],
            "concludedValue": "node_modules/yocto-queue/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "André Cruz <andre@moxy.studio>"
        }
      ],
      "group": "",
      "name": "yargs-unparser",
      "version": "2.0.0",
      "description": "Converts back a yargs argv object to its original array form",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yargs-unparser@2.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/yargs/yargs-unparser"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs-unparser@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/yargs-unparser/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/yargs-unparser/package.json"
              }
            ],
            "concludedValue": "node_modules/yargs-unparser/package.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "authors": [
        {
          "name": "Ben Coe <ben@npmjs.com>"
        }
      ],
      "group": "",
      "name": "yargs-parser",
      "version": "21.1.1",
      "description": "the mighty option parser used by yargs",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yargs-parser@21.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/yargs/yargs-parser.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs-parser@21.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/yargs-parser/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/yargs-parser/package.json"
              }
            ],
            "concludedValue": "node_modules/yargs-parser/package.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "yargs",
      "version": "17.7.3",
      "description": "yargs the modern, pirate-themed, successor to optimist.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yargs@17.7.3",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://yargs.js.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/yargs/yargs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs@17.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/yargs/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/yargs/package.json"
              }
            ],
            "concludedValue": "node_modules/yargs/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "strip-ansi",
      "version": "6.0.1",
      "description": "Strip ANSI escape codes from a string",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strip-ansi@6.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@6.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/yargs/node_modules/strip-ansi/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/wrap-ansi-cjs/node_modules/strip-ansi/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/strip-ansi-cjs/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/string-width-cjs/node_modules/strip-ansi/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/cliui/node_modules/strip-ansi/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cliui/node_modules/strip-ansi/package.json"
              }
            ],
            "concludedValue": "node_modules/cliui/node_modules/strip-ansi/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "string-width",
      "version": "4.2.3",
      "description": "Get the visual width of a string - the number of columns required to display it",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/string-width@4.2.3",
      "type": "library",
      "bom-ref": "pkg:npm/string-width@4.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/yargs/node_modules/string-width/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/wrap-ansi-cjs/node_modules/string-width/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/string-width-cjs/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/cliui/node_modules/string-width/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cliui/node_modules/string-width/package.json"
              }
            ],
            "concludedValue": "node_modules/cliui/node_modules/string-width/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Bynens (https://mathiasbynens.be/)"
        }
      ],
      "group": "",
      "name": "emoji-regex",
      "version": "8.0.0",
      "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/emoji-regex@8.0.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://mths.be/emoji-regex"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mathiasbynens/emoji-regex.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/emoji-regex@8.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/yargs/node_modules/emoji-regex/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/wrap-ansi-cjs/node_modules/emoji-regex/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/string-width-cjs/node_modules/emoji-regex/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/cliui/node_modules/emoji-regex/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cliui/node_modules/emoji-regex/package.json"
              }
            ],
            "concludedValue": "node_modules/cliui/node_modules/emoji-regex/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "ansi-regex",
      "version": "5.0.1",
      "description": "Regular expression for matching ANSI escape codes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ansi-regex@5.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/yargs/node_modules/ansi-regex/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/wrap-ansi-cjs/node_modules/ansi-regex/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/strip-ansi-cjs/node_modules/ansi-regex/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/string-width-cjs/node_modules/ansi-regex/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/cliui/node_modules/ansi-regex/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cliui/node_modules/ansi-regex/package.json"
              }
            ],
            "concludedValue": "node_modules/cliui/node_modules/ansi-regex/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Ben Coe <bencoe@gmail.com>"
        }
      ],
      "group": "",
      "name": "y18n",
      "version": "5.0.8",
      "description": "the bare-bones internationalization library used by yargs",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/y18n@5.0.8",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/yargs/y18n"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/y18n@5.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/y18n/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/y18n/package.json"
              }
            ],
            "concludedValue": "node_modules/y18n/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "wrappy",
      "version": "1.0.2",
      "description": "Callback wrapping utility",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/wrappy@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/wrappy"
        },
        {
          "type": "vcs",
          "url": "https://github.com/npm/wrappy"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrappy@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/wrappy/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/wrappy/package.json"
              }
            ],
            "concludedValue": "node_modules/wrappy/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "wrap-ansi",
      "version": "7.0.0",
      "description": "Wordwrap a string with ANSI escape codes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/wrap-ansi@7.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/wrap-ansi@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/wrap-ansi-cjs/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/cliui/node_modules/wrap-ansi/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cliui/node_modules/wrap-ansi/package.json"
              }
            ],
            "concludedValue": "node_modules/cliui/node_modules/wrap-ansi/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "wrap-ansi",
      "version": "8.1.0",
      "description": "Wordwrap a string with ANSI escape codes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/wrap-ansi@8.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/wrap-ansi@8.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/wrap-ansi/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/wrap-ansi/package.json"
              }
            ],
            "concludedValue": "node_modules/wrap-ansi/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "ansi-styles",
      "version": "6.2.3",
      "description": "ANSI escape codes for styling strings in the terminal",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ansi-styles@6.2.3",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@6.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/wrap-ansi/node_modules/ansi-styles/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/wrap-ansi/node_modules/ansi-styles/package.json"
              }
            ],
            "concludedValue": "node_modules/wrap-ansi/node_modules/ansi-styles/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Jos de Jong <wjosdejong@gmail.com> (https://github.com/josdejong)"
        }
      ],
      "group": "",
      "name": "workerpool",
      "version": "9.3.4",
      "description": "Offload tasks to a pool of workers on node.js and in the browser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/workerpool@9.3.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/josdejong/workerpool"
        },
        {
          "type": "vcs",
          "url": "git://github.com/josdejong/workerpool.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/workerpool@9.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/workerpool/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/workerpool/package.json"
              }
            ],
            "concludedValue": "node_modules/workerpool/package.json"
          }
        ]
      },
      "tags": [
        "pool"
      ]
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)"
        }
      ],
      "group": "",
      "name": "which",
      "version": "2.0.2",
      "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/which@2.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/node-which.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/which/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/which/package.json"
              }
            ],
            "concludedValue": "node_modules/which/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jared Hanson <jaredhanson@gmail.com> (http://www.jaredhanson.net/)"
        }
      ],
      "group": "",
      "name": "utils-merge",
      "version": "1.0.1",
      "description": "merge() utility function",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/utils-merge@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/jaredhanson/utils-merge.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/utils-merge@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/utils-merge/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/utils-merge/package.json"
              }
            ],
            "concludedValue": "node_modules/utils-merge/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Douglas Christopher Wilson <doug@somethingdoug.com>"
        }
      ],
      "group": "",
      "name": "unpipe",
      "version": "1.0.0",
      "description": "Unpipe a stream from all destinations",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/unpipe@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/unpipe@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/unpipe/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/unpipe/package.json"
              }
            ],
            "concludedValue": "node_modules/unpipe/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "suryagh"
        }
      ],
      "group": "",
      "name": "tsscmp",
      "version": "1.0.6",
      "description": "Timing safe string compare using double HMAC",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tsscmp@1.0.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/suryagh/tsscmp.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tsscmp@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tsscmp/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "tsscmp"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tsscmp/package.json"
              }
            ],
            "concludedValue": "node_modules/tsscmp/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "index.js",
            "line": 1
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "supports-color",
      "version": "8.1.1",
      "description": "Detect whether a terminal supports color",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/supports-color@8.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@8.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/supports-color/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/supports-color/package.json"
              }
            ],
            "concludedValue": "node_modules/supports-color/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk"
        }
      ],
      "group": "",
      "name": "supertest",
      "version": "7.2.2",
      "description": "SuperAgent driven library for testing HTTP servers",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/supertest@7.2.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ladjs/supertest.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supertest@7.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/supertest/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/supertest/package.json"
              }
            ],
            "concludedValue": "node_modules/supertest/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca>"
        }
      ],
      "group": "",
      "name": "superagent",
      "version": "10.3.0",
      "description": "elegant & feature rich browser / node HTTP with a fluent API",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/superagent@10.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ladjs/superagent"
        },
        {
          "type": "vcs",
          "url": "git://github.com/ladjs/superagent.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/superagent@10.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/superagent/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/superagent/package.json"
              }
            ],
            "concludedValue": "node_modules/superagent/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.1.3",
      "description": "Tiny millisecond conversion utility",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ms@2.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/superagent/node_modules/ms/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/mocha/node_modules/ms/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/mocha/node_modules/ms/package.json"
              }
            ],
            "concludedValue": "node_modules/mocha/node_modules/ms/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Josh Junon (https://github.com/qix-)"
        }
      ],
      "group": "",
      "name": "debug",
      "version": "4.4.3",
      "description": "Lightweight debugging utility for Node.js and the browser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/debug@4.4.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/debug-js/debug.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@4.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/superagent/node_modules/debug/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/mocha/node_modules/debug/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/mocha/node_modules/debug/package.json"
              }
            ],
            "concludedValue": "node_modules/mocha/node_modules/debug/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "strip-json-comments",
      "version": "3.1.1",
      "description": "Strip comments from JSON. Lets you use comments in your JSON files!",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strip-json-comments@3.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/strip-json-comments@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/strip-json-comments/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/strip-json-comments/package.json"
              }
            ],
            "concludedValue": "node_modules/strip-json-comments/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "strip-ansi",
      "version": "7.2.0",
      "description": "Strip ANSI escape codes from a string",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strip-ansi@7.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@7.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/strip-ansi/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/strip-ansi/package.json"
              }
            ],
            "concludedValue": "node_modules/strip-ansi/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "string-width",
      "version": "5.1.2",
      "description": "Get the visual width of a string - the number of columns required to display it",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/string-width@5.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/string-width@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/string-width/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/string-width/package.json"
              }
            ],
            "concludedValue": "node_modules/string-width/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "statuses",
      "version": "1.5.0",
      "description": "HTTP status utility",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/statuses@1.5.0",
      "type": "library",
      "bom-ref": "pkg:npm/statuses@1.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/statuses/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/statuses/package.json"
              }
            ],
            "concludedValue": "node_modules/statuses/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Coe <ben@npmjs.com>"
        }
      ],
      "group": "",
      "name": "signal-exit",
      "version": "4.1.0",
      "description": "when you want to fire an event no matter how a process exits.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/signal-exit@4.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/tapjs/signal-exit.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/signal-exit@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/signal-exit/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/signal-exit/package.json"
              }
            ],
            "concludedValue": "node_modules/signal-exit/package.json"
          }
        ]
      },
      "tags": [
        "event"
      ]
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "side-channel-weakmap",
      "version": "1.0.2",
      "description": "Store information about any JS value in a side channel. Uses WeakMap if available.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/side-channel-weakmap@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/side-channel-weakmap#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/side-channel-weakmap.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/side-channel-weakmap@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/side-channel-weakmap/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/side-channel-weakmap/package.json"
              }
            ],
            "concludedValue": "node_modules/side-channel-weakmap/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "side-channel-map",
      "version": "1.0.1",
      "description": "Store information about any JS value in a side channel, using a Map",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/side-channel-map@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/side-channel-map#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/side-channel-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/side-channel-map@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/side-channel-map/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/side-channel-map/package.json"
              }
            ],
            "concludedValue": "node_modules/side-channel-map/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "side-channel-list",
      "version": "1.0.1",
      "description": "Store information about any JS value in a side channel, using a linked list",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/side-channel-list@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/side-channel-list#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/side-channel-list.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/side-channel-list@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/side-channel-list/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/side-channel-list/package.json"
              }
            ],
            "concludedValue": "node_modules/side-channel-list/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "side-channel",
      "version": "1.1.1",
      "description": "Store information about any JS value in a side channel. Uses WeakMap if available.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/side-channel@1.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/side-channel#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/side-channel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/side-channel@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/side-channel/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/side-channel/package.json"
              }
            ],
            "concludedValue": "node_modules/side-channel/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Denis Bardadym <bardadymchik@gmail.com>"
        }
      ],
      "group": "",
      "name": "should-util",
      "version": "1.0.1",
      "description": "Utility functions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/should-util@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/shouldjs/util#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/shouldjs/util.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/should-util@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/should-util/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/should-util/package.json"
              }
            ],
            "concludedValue": "node_modules/should-util/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Denis Bardadym <bardadymchik@gmail.com>"
        }
      ],
      "group": "",
      "name": "should-type-adaptors",
      "version": "1.1.0",
      "description": "Small utility functions to use the same traversing etc code on different types",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/should-type-adaptors@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/shouldjs/type-adaptors#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/shouldjs/type-adaptors.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/should-type-adaptors@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/should-type-adaptors/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/should-type-adaptors/package.json"
              }
            ],
            "concludedValue": "node_modules/should-type-adaptors/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Denis Bardadym <bardadymchik@gmail.com>"
        }
      ],
      "group": "",
      "name": "should-type",
      "version": "1.4.0",
      "description": "Simple module to get instance type. Like a bit more advanced version of typeof",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/should-type@1.4.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/shouldjs/type"
        },
        {
          "type": "vcs",
          "url": "https://github.com/shouldjs/type.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/should-type@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/should-type/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/should-type/package.json"
              }
            ],
            "concludedValue": "node_modules/should-type/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Denis Bardadym <bardadymchik@gmail.com>"
        }
      ],
      "group": "",
      "name": "should-format",
      "version": "3.0.3",
      "description": "Formatting of objects for should.js",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/should-format@3.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/shouldjs/format.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/should-format@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/should-format/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/should-format/package.json"
              }
            ],
            "concludedValue": "node_modules/should-format/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Denis Bardadym <bardadymchik@gmail.com>"
        }
      ],
      "group": "",
      "name": "should-equal",
      "version": "2.0.0",
      "description": "Deep comparison of 2 instances for should.js",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/should-equal@2.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/shouldjs/equal"
        },
        {
          "type": "vcs",
          "url": "https://github.com/shouldjs/equal.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/should-equal@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/should-equal/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/should-equal/package.json"
              }
            ],
            "concludedValue": "node_modules/should-equal/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca>"
        },
        {
          "name": " Denis Bardadym <bardadymchik@gmail.com>"
        }
      ],
      "group": "",
      "name": "should",
      "version": "13.2.3",
      "description": "test framework agnostic BDD-style assertions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/should@13.2.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/shouldjs/should.js"
        },
        {
          "type": "vcs",
          "url": "https://github.com/shouldjs/should.js.git"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/should@13.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/should/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/should/package.json"
              }
            ],
            "concludedValue": "node_modules/should/package.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "shebang-regex",
      "version": "3.0.0",
      "description": "Regular expression for matching a shebang line",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/shebang-regex@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/shebang-regex@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/shebang-regex/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/shebang-regex/package.json"
              }
            ],
            "concludedValue": "node_modules/shebang-regex/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Kevin Mårtensson <kevinmartensson@gmail.com> (github.com/kevva)"
        }
      ],
      "group": "",
      "name": "shebang-command",
      "version": "2.0.0",
      "description": "Get the command from a shebang",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/shebang-command@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/shebang-command@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/shebang-command/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/shebang-command/package.json"
              }
            ],
            "concludedValue": "node_modules/shebang-command/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Eric Ferraiuolo <edf@ericf.me>"
        }
      ],
      "group": "",
      "name": "serialize-javascript",
      "version": "6.0.2",
      "description": "Serialize JavaScript to a superset of JSON that includes regular expressions and functions.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/serialize-javascript@6.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/yahoo/serialize-javascript"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/yahoo/serialize-javascript.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serialize-javascript@6.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/serialize-javascript/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/serialize-javascript/package.json"
              }
            ],
            "concludedValue": "node_modules/serialize-javascript/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Feross Aboukhadijeh <feross@feross.org> (https://feross.org)"
        }
      ],
      "group": "",
      "name": "safe-buffer",
      "version": "5.2.1",
      "description": "Safer Node.js Buffer API",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/feross/safe-buffer"
        },
        {
          "type": "vcs",
          "url": "git://github.com/feross/safe-buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/safe-buffer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/safe-buffer/package.json"
              }
            ],
            "concludedValue": "node_modules/safe-buffer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Troy Goode <troygoode@gmail.com> (http://github.com/troygoode/)"
        }
      ],
      "group": "",
      "name": "require-directory",
      "version": "2.1.1",
      "description": "Recursively iterates over specified directory, require()'ing each file, and returning a nested hash structure containing those modules.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/require-directory@2.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/troygoode/node-require-directory/"
        },
        {
          "type": "vcs",
          "url": "git://github.com/troygoode/node-require-directory.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/require-directory@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/require-directory/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/require-directory/package.json"
              }
            ],
            "concludedValue": "node_modules/require-directory/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Thorsten Lorenz <thlorenz@gmx.de> (thlorenz.com)"
        }
      ],
      "group": "",
      "name": "readdirp",
      "version": "4.1.2",
      "description": "Recursive version of fs.readdir with small RAM & CPU footprint.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/readdirp@4.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/paulmillr/readdirp"
        },
        {
          "type": "vcs",
          "url": "git://github.com/paulmillr/readdirp.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readdirp@4.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/readdirp/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/readdirp/package.json"
              }
            ],
            "concludedValue": "node_modules/readdirp/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "randombytes",
      "version": "2.1.0",
      "description": "random bytes from browserify stand alone",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/randombytes@2.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/randombytes"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/randombytes@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/randombytes/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/randombytes/package.json"
              }
            ],
            "concludedValue": "node_modules/randombytes/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "6.15.3",
      "description": "A querystring parser that supports nesting and arrays, with a depth limit",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/qs@6.15.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/qs"
        },
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/qs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@6.15.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/qs/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/qs/package.json"
              }
            ],
            "concludedValue": "node_modules/qs/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Alexey Raspopov"
        }
      ],
      "group": "",
      "name": "picocolors",
      "version": "1.1.1",
      "description": "The tiniest and the fastest library for terminal output formatting with ANSI colors",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/picocolors@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/picocolors@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/picocolors/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/picocolors/package.json"
              }
            ],
            "concludedValue": "node_modules/picocolors/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (https://blog.izs.me)"
        }
      ],
      "group": "",
      "name": "path-scurry",
      "version": "1.11.1",
      "description": "walk paths fast and efficiently",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0",
            "url": "https://opensource.org/licenses/BlueOak-1.0.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-scurry@1.11.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/path-scurry"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-scurry@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/path-scurry/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/path-scurry/package.json"
              }
            ],
            "concludedValue": "node_modules/path-scurry/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "path-key",
      "version": "3.1.1",
      "description": "Get the PATH environment variable key cross-platform",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-key@3.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/path-key@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/path-key/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/path-key/package.json"
              }
            ],
            "concludedValue": "node_modules/path-key/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "path-exists",
      "version": "4.0.0",
      "description": "Check if a path exists",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-exists@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/path-exists@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/path-exists/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/path-exists/package.json"
              }
            ],
            "concludedValue": "node_modules/path-exists/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parseurl",
      "version": "1.3.3",
      "description": "parse a url with memoization",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/parseurl@1.3.3",
      "type": "library",
      "bom-ref": "pkg:npm/parseurl@1.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/parseurl/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/parseurl/package.json"
              }
            ],
            "concludedValue": "node_modules/parseurl/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)"
        }
      ],
      "group": "",
      "name": "package-json-from-dist",
      "version": "1.0.1",
      "description": "Load the local package.json from either src or dist folder",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0",
            "url": "https://opensource.org/licenses/BlueOak-1.0.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/package-json-from-dist@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/package-json-from-dist.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/package-json-from-dist@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/package-json-from-dist/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/package-json-from-dist/package.json"
              }
            ],
            "concludedValue": "node_modules/package-json-from-dist/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "p-locate",
      "version": "5.0.0",
      "description": "Get the first fulfilled promise that satisfies the provided testing function",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/p-locate@5.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/p-locate@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/p-locate/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/p-locate/package.json"
              }
            ],
            "concludedValue": "node_modules/p-locate/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "p-limit",
      "version": "3.1.0",
      "description": "Run multiple promise-returning & async functions with limited concurrency",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/p-limit@3.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/p-limit@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/p-limit/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/p-limit/package.json"
              }
            ],
            "concludedValue": "node_modules/p-limit/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "once",
      "version": "1.4.0",
      "description": "Run a function exactly one time",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/once@1.4.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/once"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/once@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/once/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/once/package.json"
              }
            ],
            "concludedValue": "node_modules/once/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "on-finished",
      "version": "2.3.0",
      "description": "Execute a callback when a request closes, finishes, or errors",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/on-finished@2.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/on-finished@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/on-finished/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/on-finished/package.json"
              }
            ],
            "concludedValue": "node_modules/on-finished/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "object-inspect",
      "version": "1.13.4",
      "description": "string representations of objects in node and the browser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/object-inspect@1.13.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/object-inspect"
        },
        {
          "type": "vcs",
          "url": "git://github.com/inspect-js/object-inspect.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-inspect@1.13.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/object-inspect/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/object-inspect/package.json"
              }
            ],
            "concludedValue": "node_modules/object-inspect/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.0.0",
      "description": "Tiny milisecond conversion utility",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ms@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ms/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ms/package.json"
              }
            ],
            "concludedValue": "node_modules/ms/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca>"
        }
      ],
      "group": "",
      "name": "mocha",
      "version": "11.8.0",
      "description": "simple, flexible, fun test framework",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mocha@11.8.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://mochajs.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mochajs/mocha.git"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/mocha@11.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/mocha/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/mocha/package.json"
              }
            ],
            "concludedValue": "node_modules/mocha/package.json"
          }
        ]
      },
      "tags": [
        "framework",
        "test"
      ]
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "minipass",
      "version": "7.1.3",
      "description": "minimal implementation of a PassThrough stream",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0",
            "url": "https://opensource.org/licenses/BlueOak-1.0.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minipass@7.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/minipass@7.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/minipass/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/minipass/package.json"
              }
            ],
            "concludedValue": "node_modules/minipass/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)"
        }
      ],
      "group": "",
      "name": "minimatch",
      "version": "9.0.9",
      "description": "a glob matcher in javascript",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimatch@9.0.9",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/minimatch.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@9.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/minimatch/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/minimatch/package.json"
              }
            ],
            "concludedValue": "node_modules/minimatch/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-types",
      "version": "2.1.35",
      "description": "The ultimate javascript content-type utility.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mime-types@2.1.35",
      "type": "library",
      "bom-ref": "pkg:npm/mime-types@2.1.35",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/mime-types/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/mime-types/package.json"
              }
            ],
            "concludedValue": "node_modules/mime-types/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-db",
      "version": "1.52.0",
      "description": "Media Type Database",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mime-db@1.52.0",
      "type": "library",
      "bom-ref": "pkg:npm/mime-db@1.52.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/mime-db/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/mime-db/package.json"
              }
            ],
            "concludedValue": "node_modules/mime-db/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Robert Kieffer <robert@broofa.com> (http://github.com/broofa)"
        }
      ],
      "group": "",
      "name": "mime",
      "version": "2.6.0",
      "description": "A comprehensive library for mime-type mapping",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mime@2.6.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/broofa/mime"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime@2.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/mime/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/mime/package.json"
              }
            ],
            "concludedValue": "node_modules/mime/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "methods",
      "version": "1.1.2",
      "description": "HTTP methods that node supports",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/methods@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/methods@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/methods/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/methods/package.json"
              }
            ],
            "concludedValue": "node_modules/methods/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "math-intrinsics",
      "version": "1.1.0",
      "description": "ES Math-related intrinsics and helpers, robustly cached.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/math-intrinsics@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/es-shims/math-intrinsics#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/es-shims/math-intrinsics.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/math-intrinsics@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/math-intrinsics/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/math-intrinsics/package.json"
              }
            ],
            "concludedValue": "node_modules/math-intrinsics/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me>"
        }
      ],
      "group": "",
      "name": "lru-cache",
      "version": "10.4.3",
      "description": "A cache object that deletes the least-recently-used items.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lru-cache@10.4.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/node-lru-cache.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@10.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lru-cache/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lru-cache/package.json"
              }
            ],
            "concludedValue": "node_modules/lru-cache/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "log-symbols",
      "version": "4.1.0",
      "description": "Colored symbols for various log levels. Example: `✔︎ Success`",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/log-symbols@4.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/log-symbols@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/log-symbols/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/log-symbols/package.json"
              }
            ],
            "concludedValue": "node_modules/log-symbols/package.json"
          }
        ]
      },
      "tags": [
        "log"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "locate-path",
      "version": "6.0.0",
      "description": "Get the first path that exists on disk of multiple paths",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/locate-path@6.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/locate-path@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/locate-path/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/locate-path/package.json"
              }
            ],
            "concludedValue": "node_modules/locate-path/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Vladimir Zapparov <dervus.grim@gmail.com>"
        }
      ],
      "group": "",
      "name": "js-yaml",
      "version": "4.3.1",
      "description": "YAML 1.2 parser and serializer",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/js-yaml@4.3.1",
      "type": "library",
      "bom-ref": "pkg:npm/js-yaml@4.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/js-yaml/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/js-yaml/package.json"
              }
            ],
            "concludedValue": "node_modules/js-yaml/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me>"
        }
      ],
      "group": "",
      "name": "jackspeak",
      "version": "3.4.3",
      "description": "A very strict and proper argument parser.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0",
            "url": "https://opensource.org/licenses/BlueOak-1.0.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jackspeak@3.4.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/jackspeak.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jackspeak@3.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/jackspeak/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/jackspeak/package.json"
              }
            ],
            "concludedValue": "node_modules/jackspeak/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "isexe",
      "version": "2.0.0",
      "description": "Minimal module to check if a file is executable.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/isexe@2.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/isexe#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/isexe.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isexe@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/isexe/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/isexe/package.json"
              }
            ],
            "concludedValue": "node_modules/isexe/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "is-unicode-supported",
      "version": "0.1.0",
      "description": "Detect whether the terminal supports Unicode",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-unicode-supported@0.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-unicode-supported@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-unicode-supported/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-unicode-supported/package.json"
              }
            ],
            "concludedValue": "node_modules/is-unicode-supported/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "is-plain-obj",
      "version": "2.1.0",
      "description": "Check if a value is a plain object",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-plain-obj@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-plain-obj@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-plain-obj/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-plain-obj/package.json"
              }
            ],
            "concludedValue": "node_modules/is-plain-obj/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "is-path-inside",
      "version": "3.0.3",
      "description": "Check if a path is inside another path",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-path-inside@3.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/is-path-inside@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-path-inside/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-path-inside/package.json"
              }
            ],
            "concludedValue": "node_modules/is-path-inside/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "is-fullwidth-code-point",
      "version": "3.0.0",
      "description": "Check if the character represented by a given Unicode code point is fullwidth",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-fullwidth-code-point@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-fullwidth-code-point@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-fullwidth-code-point/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-fullwidth-code-point/package.json"
              }
            ],
            "concludedValue": "node_modules/is-fullwidth-code-point/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Bynens (https://mathiasbynens.be/)"
        }
      ],
      "group": "",
      "name": "he",
      "version": "1.2.0",
      "description": "A robust HTML entities encoder/decoder with full Unicode support.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/he@1.2.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://mths.be/he"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mathiasbynens/he.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/he@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/he/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/he/package.json"
              }
            ],
            "concludedValue": "node_modules/he/package.json"
          }
        ]
      },
      "tags": [
        "html"
      ]
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "hasown",
      "version": "2.0.4",
      "description": "A robust, ES3 compatible, \"has own property\" predicate.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/hasown@2.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/hasOwn#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/hasOwn.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hasown@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/hasown/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/hasown/package.json"
              }
            ],
            "concludedValue": "node_modules/hasown/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)"
        }
      ],
      "group": "",
      "name": "has-tostringtag",
      "version": "1.0.2",
      "description": "Determine if the JS environment has `Symbol.toStringTag` support. Supports spec, or shams.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/has-tostringtag@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/has-tostringtag#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/has-tostringtag.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-tostringtag@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/has-tostringtag/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/has-tostringtag/package.json"
              }
            ],
            "concludedValue": "node_modules/has-tostringtag/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)"
        }
      ],
      "group": "",
      "name": "has-symbols",
      "version": "1.1.0",
      "description": "Determine if the JS environment has Symbol support. Supports spec, or shams.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/has-symbols@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/has-symbols#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/inspect-js/has-symbols.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-symbols@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/has-symbols/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/has-symbols/package.json"
              }
            ],
            "concludedValue": "node_modules/has-symbols/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "has-flag",
      "version": "4.0.0",
      "description": "Check if argv has a specific flag",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/has-flag@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/has-flag@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/has-flag/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/has-flag/package.json"
              }
            ],
            "concludedValue": "node_modules/has-flag/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "gopd",
      "version": "1.2.0",
      "description": "`Object.getOwnPropertyDescriptor`, but accounts for IE's broken implementation.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/gopd@1.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/gopd#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/gopd.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gopd@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/gopd/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/gopd/package.json"
              }
            ],
            "concludedValue": "node_modules/gopd/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (https://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "glob",
      "version": "10.5.0",
      "description": "the most correct and second fastest glob implementation in JavaScript",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/glob@10.5.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/node-glob.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@10.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/glob/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/glob/package.json"
              }
            ],
            "concludedValue": "node_modules/glob/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "get-proto",
      "version": "1.0.1",
      "description": "Robustly get the [[Prototype]] of an object",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/get-proto@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/get-proto#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/get-proto.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-proto@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/get-proto/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/get-proto/package.json"
              }
            ],
            "concludedValue": "node_modules/get-proto/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "get-intrinsic",
      "version": "1.3.0",
      "description": "Get and robustly cache all JS language-level intrinsics at first require time",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/get-intrinsic@1.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/get-intrinsic#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/get-intrinsic.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-intrinsic@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/get-intrinsic/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/get-intrinsic/package.json"
              }
            ],
            "concludedValue": "node_modules/get-intrinsic/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Stefan Penner"
        }
      ],
      "group": "",
      "name": "get-caller-file",
      "version": "2.0.5",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/get-caller-file@2.0.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/stefanpenner/get-caller-file#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/stefanpenner/get-caller-file.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-caller-file@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/get-caller-file/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/get-caller-file/package.json"
              }
            ],
            "concludedValue": "node_modules/get-caller-file/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Raynos <raynos2@gmail.com>"
        }
      ],
      "group": "",
      "name": "function-bind",
      "version": "1.1.2",
      "description": "Implementation of Function.prototype.bind",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/function-bind@1.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/Raynos/function-bind"
        },
        {
          "type": "vcs",
          "url": "https://github.com/Raynos/function-bind.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/function-bind@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/function-bind/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/function-bind/package.json"
              }
            ],
            "concludedValue": "node_modules/function-bind/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "formidable",
      "version": "3.5.4",
      "description": "A node.js module for parsing form data, especially file uploads.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/formidable@3.5.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/node-formidable/formidable"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/formidable@3.5.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/formidable/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/formidable/package.json"
              }
            ],
            "concludedValue": "node_modules/formidable/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Felix Geisendörfer <felix@debuggable.com> (http://debuggable.com/)"
        }
      ],
      "group": "",
      "name": "form-data",
      "version": "4.0.6",
      "description": "A library to create readable \"multipart/form-data\" streams. Can be used to submit forms and file uploads to other web applications.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/form-data@4.0.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/form-data/form-data.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/form-data@4.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/form-data/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/form-data/package.json"
              }
            ],
            "concludedValue": "node_modules/form-data/package.json"
          }
        ]
      },
      "tags": [
        "web"
      ]
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "foreground-child",
      "version": "3.3.1",
      "description": "Run a child as if it's the foreground process. Give it stdio. Exit when it exits.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/foreground-child@3.3.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/tapjs/foreground-child.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/foreground-child@3.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/foreground-child/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/foreground-child/package.json"
              }
            ],
            "concludedValue": "node_modules/foreground-child/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Hugh Kennedy <hughskennedy@gmail.com> (http://hughskennedy.com)"
        }
      ],
      "group": "",
      "name": "flat",
      "version": "5.0.2",
      "description": "Take a nested Javascript object and flatten it, or unflatten an object with delimited keys",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/flat@5.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/hughsk/flat"
        },
        {
          "type": "vcs",
          "url": "git://github.com/hughsk/flat.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/flat@5.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/flat/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/flat/package.json"
              }
            ],
            "concludedValue": "node_modules/flat/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "find-up",
      "version": "5.0.0",
      "description": "Find a file or directory by walking up parent directories",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/find-up@5.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/find-up@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/find-up/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/find-up/package.json"
              }
            ],
            "concludedValue": "node_modules/find-up/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Douglas Christopher Wilson <doug@somethingdoug.com>"
        }
      ],
      "group": "",
      "name": "finalhandler",
      "version": "1.1.2",
      "description": "Node.js final http responder",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/finalhandler@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/finalhandler@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/finalhandler/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/finalhandler/package.json"
              }
            ],
            "concludedValue": "node_modules/finalhandler/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "David Mark Clements"
        }
      ],
      "group": "",
      "name": "fast-safe-stringify",
      "version": "2.1.1",
      "description": "Safely and quickly serialize JavaScript objects",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fast-safe-stringify@2.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/davidmarkclements/fast-safe-stringify#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/davidmarkclements/fast-safe-stringify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-safe-stringify@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/fast-safe-stringify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fast-safe-stringify/package.json"
              }
            ],
            "concludedValue": "node_modules/fast-safe-stringify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "escape-string-regexp",
      "version": "4.0.0",
      "description": "Escape RegExp special characters",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/escape-string-regexp/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/escape-string-regexp/package.json"
              }
            ],
            "concludedValue": "node_modules/escape-string-regexp/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-html",
      "version": "1.0.3",
      "description": "Escape string for use in HTML",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/escape-html@1.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/escape-html@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/escape-html/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/escape-html/package.json"
              }
            ],
            "concludedValue": "node_modules/escape-html/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Luke Edwards <luke.edwards05@gmail.com> (https://lukeed.com)"
        }
      ],
      "group": "",
      "name": "escalade",
      "version": "3.2.0",
      "description": "A tiny (183B to 210B) and fast utility to ascend parent directories",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/escalade@3.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/escalade@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/escalade/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/escalade/package.json"
              }
            ],
            "concludedValue": "node_modules/escalade/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "es-set-tostringtag",
      "version": "2.1.0",
      "description": "A helper to optimistically set Symbol.toStringTag, when possible.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/es-set-tostringtag@2.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/es-shims/es-set-tostringtag#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/es-shims/es-set-tostringtag.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-set-tostringtag@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/es-set-tostringtag/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/es-set-tostringtag/package.json"
              }
            ],
            "concludedValue": "node_modules/es-set-tostringtag/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "es-object-atoms",
      "version": "1.1.2",
      "description": "ES Object-related atoms: Object, ToObject, RequireObjectCoercible",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/es-object-atoms@1.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/es-object-atoms#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/es-object-atoms.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-object-atoms@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/es-object-atoms/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/es-object-atoms/package.json"
              }
            ],
            "concludedValue": "node_modules/es-object-atoms/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "es-errors",
      "version": "1.3.0",
      "description": "A simple cache for a few of the JS Error constructors.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/es-errors@1.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/es-errors#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/es-errors.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-errors@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/es-errors/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/es-errors/package.json"
              }
            ],
            "concludedValue": "node_modules/es-errors/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "es-define-property",
      "version": "1.0.1",
      "description": "`Object.defineProperty`, but not IE 8's broken one.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/es-define-property@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/es-define-property#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/es-define-property.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-define-property@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/es-define-property/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/es-define-property/package.json"
              }
            ],
            "concludedValue": "node_modules/es-define-property/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "encodeurl",
      "version": "1.0.2",
      "description": "Encode a URL to a percent-encoded form, excluding already-encoded sequences",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/encodeurl@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/encodeurl@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/encodeurl/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/encodeurl/package.json"
              }
            ],
            "concludedValue": "node_modules/encodeurl/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Bynens (https://mathiasbynens.be/)"
        }
      ],
      "group": "",
      "name": "emoji-regex",
      "version": "9.2.2",
      "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/emoji-regex@9.2.2",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://mths.be/emoji-regex"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mathiasbynens/emoji-regex.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/emoji-regex@9.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/emoji-regex/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/emoji-regex/package.json"
              }
            ],
            "concludedValue": "node_modules/emoji-regex/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)"
        }
      ],
      "group": "",
      "name": "ee-first",
      "version": "1.1.1",
      "description": "return the first event in a set of ee/event pairs",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ee-first@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/ee-first@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ee-first/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ee-first/package.json"
              }
            ],
            "concludedValue": "node_modules/ee-first/package.json"
          }
        ]
      },
      "tags": [
        "event"
      ]
    },
    {
      "authors": [
        {
          "name": "Masaki Komagata"
        }
      ],
      "group": "",
      "name": "eastasianwidth",
      "version": "0.2.0",
      "description": "Get East Asian Width from a character.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/eastasianwidth@0.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/eastasianwidth@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eastasianwidth/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eastasianwidth/package.json"
              }
            ],
            "concludedValue": "node_modules/eastasianwidth/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "dunder-proto",
      "version": "1.0.1",
      "description": "If available, the `Object.prototype.__proto__` accessor and mutator, call-bound",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/dunder-proto@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/es-shims/dunder-proto#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/es-shims/dunder-proto.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dunder-proto@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/dunder-proto/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/dunder-proto/package.json"
              }
            ],
            "concludedValue": "node_modules/dunder-proto/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diff",
      "version": "7.0.0",
      "description": "A JavaScript text diff implementation.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/diff@7.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/kpdecker/jsdiff.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/diff/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/diff/package.json"
              }
            ],
            "concludedValue": "node_modules/diff/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "dezalgo",
      "version": "1.0.4",
      "description": "Contain async insanity so that the dark pony lord doesn't eat souls",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/dezalgo@1.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/dezalgo"
        },
        {
          "type": "vcs",
          "url": "https://github.com/npm/dezalgo"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dezalgo@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/dezalgo/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/dezalgo/package.json"
              }
            ],
            "concludedValue": "node_modules/dezalgo/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Felix Geisendörfer <felix@debuggable.com> (http://debuggable.com/)"
        }
      ],
      "group": "",
      "name": "delayed-stream",
      "version": "1.0.0",
      "description": "Buffers events from a stream until you are ready to handle them.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/delayed-stream@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/felixge/node-delayed-stream"
        },
        {
          "type": "vcs",
          "url": "git://github.com/felixge/node-delayed-stream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/delayed-stream@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/delayed-stream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/delayed-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/delayed-stream/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "decamelize",
      "version": "4.0.0",
      "description": "Convert a camelized string into a lowercased one with a custom separator: unicornRainbow → unicorn_rainbow",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/decamelize@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/decamelize@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/decamelize/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/decamelize/package.json"
              }
            ],
            "concludedValue": "node_modules/decamelize/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca>"
        }
      ],
      "group": "",
      "name": "debug",
      "version": "2.6.9",
      "description": "small debugging utility",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/debug@2.6.9",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/visionmedia/debug.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@2.6.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/debug/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/debug/package.json"
              }
            ],
            "concludedValue": "node_modules/debug/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "André Cruz <andre@moxy.studio>"
        }
      ],
      "group": "",
      "name": "cross-spawn",
      "version": "7.0.6",
      "description": "Cross platform child_process#spawn and child_process#spawnSync",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cross-spawn@7.0.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/moxystudio/node-cross-spawn"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cross-spawn@7.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/cross-spawn/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cross-spawn/package.json"
              }
            ],
            "concludedValue": "node_modules/cross-spawn/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "bradleymeck"
        }
      ],
      "group": "",
      "name": "cookiejar",
      "version": "2.1.4",
      "description": "simple persistent cookiejar system",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cookiejar@2.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/bmeck/node-cookiejar.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookiejar@2.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/cookiejar/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cookiejar/package.json"
              }
            ],
            "concludedValue": "node_modules/cookiejar/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@learnboost.com>"
        }
      ],
      "group": "",
      "name": "cookie-signature",
      "version": "1.2.2",
      "description": "Sign and unsign cookies",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cookie-signature@1.2.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/visionmedia/node-cookie-signature.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie-signature@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/cookie-signature/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cookie-signature/package.json"
              }
            ],
            "concludedValue": "node_modules/cookie-signature/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca> (http://tjholowaychuk.com)"
        }
      ],
      "group": "",
      "name": "connect",
      "version": "3.7.0",
      "description": "High performance middleware framework",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/connect@3.7.0",
      "type": "framework",
      "bom-ref": "pkg:npm/connect@3.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/connect/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/connect/package.json"
              }
            ],
            "concludedValue": "node_modules/connect/package.json"
          }
        ]
      },
      "tags": [
        "framework",
        "middleware",
        "performance"
      ]
    },
    {
      "group": "",
      "name": "component-emitter",
      "version": "1.3.1",
      "description": "Event emitter",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/component-emitter@1.3.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/component-emitter.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/component-emitter@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/component-emitter/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/component-emitter/package.json"
              }
            ],
            "concludedValue": "node_modules/component-emitter/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Felix Geisendörfer <felix@debuggable.com> (http://debuggable.com/)"
        }
      ],
      "group": "",
      "name": "combined-stream",
      "version": "1.0.8",
      "description": "A stream that emits multiple other streams one after another.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/combined-stream@1.0.8",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/felixge/node-combined-stream"
        },
        {
          "type": "vcs",
          "url": "git://github.com/felixge/node-combined-stream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/combined-stream@1.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/combined-stream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/combined-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/combined-stream/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "DY <dfcreative@gmail.com>"
        }
      ],
      "group": "",
      "name": "color-name",
      "version": "1.1.4",
      "description": "A list of color names and its values",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/color-name@1.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/colorjs/color-name"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-name@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/color-name/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/color-name/package.json"
              }
            ],
            "concludedValue": "node_modules/color-name/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Heather Arthur <fayearthur@gmail.com>"
        }
      ],
      "group": "",
      "name": "color-convert",
      "version": "2.0.1",
      "description": "Plain color conversion functions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/color-convert@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/color-convert@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/color-convert/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/color-convert/package.json"
              }
            ],
            "concludedValue": "node_modules/color-convert/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Coe <ben@npmjs.com>"
        }
      ],
      "group": "",
      "name": "cliui",
      "version": "8.0.1",
      "description": "easily create complex multi-column command-line-interfaces",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cliui@8.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/cliui@8.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/cliui/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cliui/package.json"
              }
            ],
            "concludedValue": "node_modules/cliui/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Paul Miller (https://paulmillr.com)"
        }
      ],
      "group": "",
      "name": "chokidar",
      "version": "4.0.3",
      "description": "Minimal and efficient cross-platform file watching library",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/chokidar@4.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/paulmillr/chokidar"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/paulmillr/chokidar.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chokidar@4.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/chokidar/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/chokidar/package.json"
              }
            ],
            "concludedValue": "node_modules/chokidar/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "4.1.2",
      "description": "Terminal string styling done right",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/chalk@4.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/chalk@4.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/chalk/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/chalk/package.json"
              }
            ],
            "concludedValue": "node_modules/chalk/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "supports-color",
      "version": "7.2.0",
      "description": "Detect whether a terminal supports color",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/supports-color@7.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@7.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/chalk/node_modules/supports-color/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/chalk/node_modules/supports-color/package.json"
              }
            ],
            "concludedValue": "node_modules/chalk/node_modules/supports-color/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "camelcase",
      "version": "6.3.0",
      "description": "Convert a dash/dot/underscore/space separated string to camelCase or PascalCase: `foo-bar` → `fooBar`",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/camelcase@6.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@6.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/camelcase/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/camelcase/package.json"
              }
            ],
            "concludedValue": "node_modules/camelcase/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "call-bound",
      "version": "1.0.4",
      "description": "Robust call-bound JavaScript intrinsics, using `call-bind` and `get-intrinsic`.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/call-bound@1.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/call-bound#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/call-bound.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/call-bound@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/call-bound/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/call-bound/package.json"
              }
            ],
            "concludedValue": "node_modules/call-bound/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "call-bind-apply-helpers",
      "version": "1.0.2",
      "description": "Helper functions around Function call/apply/bind, for use in `call-bind`",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/call-bind-apply-helpers@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/call-bind-apply-helpers#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/call-bind-apply-helpers.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/call-bind-apply-helpers@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/call-bind-apply-helpers/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/call-bind-apply-helpers/package.json"
              }
            ],
            "concludedValue": "node_modules/call-bind-apply-helpers/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "kumavis"
        }
      ],
      "group": "",
      "name": "browser-stdout",
      "version": "1.3.1",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browser-stdout@1.3.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/kumavis/browser-stdout.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browser-stdout@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/browser-stdout/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browser-stdout/package.json"
              }
            ],
            "concludedValue": "node_modules/browser-stdout/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)"
        }
      ],
      "group": "",
      "name": "brace-expansion",
      "version": "2.1.4",
      "description": "Brace expansion as known from sh/bash",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/brace-expansion@2.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/juliangruber/brace-expansion"
        },
        {
          "type": "vcs",
          "url": "git://github.com/juliangruber/brace-expansion.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@2.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/brace-expansion/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/brace-expansion/package.json"
              }
            ],
            "concludedValue": "node_modules/brace-expansion/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)"
        }
      ],
      "group": "",
      "name": "balanced-match",
      "version": "1.0.2",
      "description": "Match balanced character pairs, like \"{\" and \"}\"",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/balanced-match@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/juliangruber/balanced-match"
        },
        {
          "type": "vcs",
          "url": "git://github.com/juliangruber/balanced-match.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/balanced-match@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/balanced-match/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/balanced-match/package.json"
              }
            ],
            "concludedValue": "node_modules/balanced-match/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Alex Indigo <iam@alexindigo.com>"
        }
      ],
      "group": "",
      "name": "asynckit",
      "version": "0.4.0",
      "description": "Minimal async jobs utility library, with streams support",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/asynckit@0.4.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/alexindigo/asynckit#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/alexindigo/asynckit.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asynckit@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/asynckit/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/asynckit/package.json"
              }
            ],
            "concludedValue": "node_modules/asynckit/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asap",
      "version": "2.0.6",
      "description": "High-priority task queue for Node.js and browsers",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/asap@2.0.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/kriskowal/asap.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asap@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/asap/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/asap/package.json"
              }
            ],
            "concludedValue": "node_modules/asap/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "argparse",
      "version": "2.0.1",
      "description": "CLI arguments parser. Native port of python's argparse.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Python-2.0",
            "url": "https://opensource.org/licenses/Python-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/argparse@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/argparse@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/argparse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/argparse/package.json"
              }
            ],
            "concludedValue": "node_modules/argparse/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "ansi-styles",
      "version": "4.3.0",
      "description": "ANSI escape codes for styling strings in the terminal",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ansi-styles@4.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ansi-styles/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ansi-styles/package.json"
              }
            ],
            "concludedValue": "node_modules/ansi-styles/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "ansi-regex",
      "version": "6.2.2",
      "description": "Regular expression for matching ANSI escape codes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ansi-regex@6.2.2",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@6.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ansi-regex/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ansi-regex/package.json"
              }
            ],
            "concludedValue": "node_modules/ansi-regex/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "group": "@pkgjs",
      "name": "parseargs",
      "version": "0.11.0",
      "description": "Polyfill of future proposal for `util.parseArgs()`",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40pkgjs/parseargs@0.11.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/pkgjs/parseargs#readme"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@pkgjs/parseargs@0.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@pkgjs/parseargs/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@pkgjs/parseargs/package.json"
              }
            ],
            "concludedValue": "node_modules/@pkgjs/parseargs/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Eric Elliott"
        }
      ],
      "group": "@paralleldrive",
      "name": "cuid2",
      "version": "2.3.1",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40paralleldrive/cuid2@2.3.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ericelliott/cuid2#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ericelliott/cuid2.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@paralleldrive/cuid2@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@paralleldrive/cuid2/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@paralleldrive/cuid2/package.json"
              }
            ],
            "concludedValue": "node_modules/@paralleldrive/cuid2/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Paul Miller (https://paulmillr.com)"
        }
      ],
      "group": "@noble",
      "name": "hashes",
      "version": "1.8.0",
      "description": "Audited & minimal 0-dependency JS implementation of SHA, RIPEMD, BLAKE, HMAC, HKDF, PBKDF & Scrypt",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40noble/hashes@1.8.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://paulmillr.com/noble/"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/paulmillr/noble-hashes.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@noble/hashes@1.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@noble/hashes/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@noble/hashes/package.json"
              }
            ],
            "concludedValue": "node_modules/@noble/hashes/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Coe <ben@npmjs.com>"
        }
      ],
      "group": "@isaacs",
      "name": "cliui",
      "version": "8.0.2",
      "description": "easily create complex multi-column command-line-interfaces",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40isaacs/cliui@8.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/@isaacs/cliui@8.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@isaacs/cliui/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@isaacs/cliui/package.json"
              }
            ],
            "concludedValue": "node_modules/@isaacs/cliui/package.json"
          }
        ]
      }
    }
  ],
  "dependencies": [],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/basic-auth-connect@1.1.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-08-11T21:25:31Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Tuesday, August 11, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'basic-auth-connect' with version '1.1.0'. The package type in this SBOM is npm with 4 purl namespaces described under components. The components were identified from 155 source files."
    }
  ]
}