{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:ce401287-3e90-4d19-8742-911f2350eda6",
  "version": 1,
  "metadata": {
    "timestamp": "2026-07-24T19:49:12Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "binaryextensions",
      "group": "",
      "version": "2.3.0",
      "description": "A package that contains an array of every single file extension there is for binary files",
      "purl": "pkg:npm/binaryextensions@2.3.0",
      "bom-ref": "pkg:npm/binaryextensions@2.3.0",
      "author": "2013+ Bevry Pty Ltd <us@bevry.me> (http://bevry.me)",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "our:clean, our:compile, our:deploy, our:meta, our:meta:contributors, our:meta:projectz, our:release, our:release:check-changelog, our:release:check-dirty, our:release:prepare, our:release:push, our:release:tag, our:setup, our:setup:install, our:test, our:verify, our:verify:directory, test"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/bevry/binaryextensions"
        },
        {
          "type": "vcs",
          "url": "https://github.com/bevry/binaryextensions.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@bevry\\n@types"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "@bevry",
      "name": "update-contributors",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9ccb1cbfee7cc5c3de4e6fb41c8badde9a16430928234eb6e2c16aa684b192ffd92510a4dd15c307faf2637faafb8583278c76a6204ba7d8f37351418ecc86f4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40bevry/update-contributors@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@bevry/update-contributors/-/update-contributors-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@bevry/update-contributors@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@bevry/update-contributors/-/update-contributors-1.6.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@bevry/update-contributors"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "getcontributors",
      "version": "2.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f2ed5e208b8ef77fc556b5608971c0153825fe24fde9819d2908f089f6d08a967e3aa5c9623692fca7dbfa67b814a3d9065e48f071c58e05529835ee8d2211e9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/getcontributors@2.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/getcontributors/-/getcontributors-2.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/getcontributors@2.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/getcontributors/-/getcontributors-2.10.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/getcontributors"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "getcontributors has been renamed to @bevry/github-contributors: npm uninstall 'getcontributors' && npm install '@bevry/github-contributors' && open 'https://www.npmjs.com/package/@bevry/github-contributors'"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cross-fetch",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3121e0a6342a81b4fff780f80b200378da18879db3324097e29709bcf3f95aa3ec2c530a8ebd9308c837f35a31e6a2348a2d9d3f068bc7fd34e3bee49d7a9757"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/cross-fetch@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cross-fetch/-/cross-fetch-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cross-fetch@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cross-fetch/-/cross-fetch-3.0.4.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/cross-fetch"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-fetch",
      "version": "2.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f1d1b81f9ba37ef162a83995bbd7d0e5b387502d7924c8cc63f66e9afdbaa0ebef5498ccebb285f24a0258869b290d462486bdaf698c66c701abf4db74e72634"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/node-fetch@2.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-fetch@2.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/node-fetch"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "whatwg-fetch",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f46489520cf50f831fc8a53b291ab03a35c25d3a9674536f12bede50161c85089573be389aa2bf3335cf351d96b0f92690e6b8cb07e0f02da7f21fb5dc17b2d5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/whatwg-fetch@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/whatwg-fetch/-/whatwg-fetch-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/whatwg-fetch@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/whatwg-fetch/-/whatwg-fetch-3.0.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/whatwg-fetch"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fellow",
      "version": "6.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a1145d530a59d4309e9ffc0caaf84fbc564d63a9e14ab3024f4909075917a6eccea9d9d5a5cd660430544e5c73e5d763c8281c2a4aa0f9f773dd541d4c76d728"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/fellow@6.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fellow/-/fellow-6.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fellow@6.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fellow/-/fellow-6.8.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/fellow"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "getrepos",
      "version": "5.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3692b5385dd6b720eda6d11cf25f8518444ce9c9cb1d415584208e5a351f72094cf189900136ed81d7d4145cfb43221b5f9fb7c80a34bf854825e5a75c05210c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/getrepos@5.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/getrepos/-/getrepos-5.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/getrepos@5.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/getrepos/-/getrepos-5.4.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/getrepos"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "getrepos has been renamed to @bevry/github-repos: npm uninstall 'getrepos' && npm install '@bevry/github-repos' && open 'https://www.npmjs.com/package/@bevry/github-repos'"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "githubauthreq",
      "version": "5.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ac4cc2a42f89f25a69758e6b74ba3a28daef13e796f95f83a1627c0b9a54a24ab19adadc16a4617afff13f04973ebd730b3313c835bafb872ebe0b844ffe4c9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/githubauthreq@5.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/githubauthreq/-/githubauthreq-5.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/githubauthreq@5.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/githubauthreq/-/githubauthreq-5.5.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/githubauthreq"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "githubauthreq has been renamed to @bevry/github-api: npm uninstall 'githubauthreq' && npm install '@bevry/github-api' && open 'https://www.npmjs.com/package/@bevry/github-api'"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "editions",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d2000e530cc5d3998c497a8a23da45a302722c8be0270ac06e404601ccc2d59404d8f90f8b0feed334b98243e6948eaea1731976667565814716ecf79e9baea9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/editions@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/editions/-/editions-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/editions@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/editions/-/editions-3.1.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/editions"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "errlop",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "765ebb117ce6e2981737a0d67487ea3b3ef8bdaba2167f41983c85f54616659efbe6636fe87a2771dc86ff0dffd38c45a30e2da22efe764ce2677863860835d7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/errlop@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/errlop/-/errlop-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/errlop@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/errlop/-/errlop-3.1.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/errlop"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "6.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6f7f5305a4d27d5eb206b6a953cf69e5f29e904da6fcdc270e870e56bb90152d7fbde320773b8f72738cdf833a0b0c56f231ff97111ae6b0680de530bb91c74f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/semver@6.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-6.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@6.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-6.3.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/semver"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "simplytyped",
      "version": "3.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9b3e1168d74a4d989a297822e8fd64fdc76cc55de0cfecb55a1d8d5c7583e34744c64b4b8785f1fe1e8c15a9264163836478ffdab29ee7d69c69ca4bef866140"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/simplytyped@3.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/simplytyped/-/simplytyped-3.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/simplytyped@3.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/simplytyped/-/simplytyped-3.3.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/simplytyped"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typescript",
      "version": "6.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cb64efbb14993c3c906a490544f6472859be28a56a222b1d83dfc26709bd7edbca5cb3fc3515a3dfcfce0e335baf8dd2b285ea36e022b047f519d0b1a9671d07"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/typescript@6.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/typescript/-/typescript-6.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typescript@6.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/typescript/-/typescript-6.0.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/typescript"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "native-promise-pool",
      "version": "3.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0d56b6ebf0884cf05affa3f713b0bdf213b511f63e5ba2f8574f19d5e28c9401bb72048d2e4d97fbc0e5c3a2b3657720c3ebf0150c4ce57e9e6e28537ae9a85f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/native-promise-pool@3.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/native-promise-pool/-/native-promise-pool-3.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/native-promise-pool@3.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/native-promise-pool/-/native-promise-pool-3.3.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/native-promise-pool"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "native"
      ]
    },
    {
      "group": "",
      "name": "assert-helpers",
      "version": "6.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e3f5f8ee61c8cce202870141980dd284b92149227db5371ef3a7d5fce7ce7fe61ba732613ce19360e53bcc39a5d063dca107ee54afb1ba4876cd4761ec50493"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/assert-helpers@6.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/assert-helpers/-/assert-helpers-6.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/assert-helpers@6.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/assert-helpers/-/assert-helpers-6.5.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/assert-helpers"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "ansicolors",
      "version": "0.0.33",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7554b5596fc1a987706efd47d02829abc0a1578568c145f3f91ee960a1841e117e99d83f3226ee13ee84b7f181c60ea77ca28555fd99b10932afb5cd4764aac4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40types/ansicolors@0.0.33",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/ansicolors/-/ansicolors-0.0.33.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/ansicolors@0.0.33",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/ansicolors/-/ansicolors-0.0.33.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/ansicolors"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "diff",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9887a74dfb087b9f3aff2cecc9faa5ebd2919c0ef94bc4955d06d32e90de8d1ae31f441225ca6edc050e8bf5639edf483ac5cac4f8497c6a5050d32e7885357d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40types/diff@4.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/diff/-/diff-4.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/diff@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/diff/-/diff-4.0.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/diff"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "node",
      "version": "14.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93736a8a05d64734195410d2e43d54ef403913c424e0a87e1daff1e0cf01b7da45d17d397a081f9c2f7eeb752c73d43ddbc851508a4885341a5ec67064197813"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40types/node@14.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/node/-/node-14.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/node@14.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/node/-/node-14.0.4.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/node"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansicolors",
      "version": "0.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "665597de86a9ffe3aa9bfbe6cae5c6ea426b4979"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ansicolors@0.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansicolors/-/ansicolors-0.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansicolors@0.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansicolors/-/ansicolors-0.3.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/ansicolors"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diff",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e7c966c4a480e013722f3f871cc53394e129834f4557e7afe9931edef262860771ce073067c5681043e600b0991bd2e6a9f56834c30aa6db48613546eae0d8ec"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:npm/diff@4.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/diff/-/diff-4.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/diff/-/diff-4.0.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/diff"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "kava",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2be2a8859b0ef91106291dfe6859a3ce99d9c753e343aed8983857ebf4b54956b1e7fce0fcee18942e2f14cc93b5ed21919433f93cdd783f3000144106337880"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/kava@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/kava/-/kava-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kava@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/kava/-/kava-5.1.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/kava"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "event-emitter-grouped",
      "version": "4.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e2cf812330928bb201dd1e348068cd5e2607bb0b540bb1e8658bfab8d959dfc9600a268e0f875b07529f7db50550e5babe71c400b82b9850f4d741f3c804af94"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/event-emitter-grouped@4.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/event-emitter-grouped/-/event-emitter-grouped-4.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/event-emitter-grouped@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/event-emitter-grouped/-/event-emitter-grouped-4.3.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/event-emitter-grouped"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "taskgroup",
      "version": "7.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5864a7a2ebd05091329072ddb8b66e7b82f0f5486b1d88eba9903dee35d00f14ba6ad1e07da5502f4d3c584643ad3d4f3269e07ff8662142b23ba01c7b81c32"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/taskgroup@7.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/taskgroup/-/taskgroup-7.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/taskgroup@7.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/taskgroup/-/taskgroup-7.4.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/taskgroup"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ambi",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9e3e6c1cb3c577bbb638b987745b380c7b7780ae9e769370df98534482b223f55dd938797b88a8e74af0d6586609d50d3b6326e3fe059079afeac84400d01673"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ambi@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ambi/-/ambi-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ambi@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ambi/-/ambi-3.2.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/ambi"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "editions",
      "version": "2.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a6d1af9304ef19d19f0b485f84a834313f9344b44a1ad5225860489f13a6e69cfbb2c0037b36a18c251a62e67c0ebf82d39156d001022083ede1607154834484"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/editions@2.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/editions/-/editions-2.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/editions@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/editions/-/editions-2.3.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/ambi/node_modules/editions"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/typechecker/node_modules/editions"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "errlop",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7bae108fdfb8699ce3cf3169642ee9e649a6fdc702adb2e1009a6586c0d7405b3ced74ec5f03a91f8b35228dacf744dabbff2bda3f5fe25fed8610debd18f3c7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/errlop@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/errlop/-/errlop-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/errlop@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/errlop/-/errlop-2.2.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/ambi/node_modules/errlop"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/typechecker/node_modules/errlop"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typechecker",
      "version": "4.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "973dfd31cfddd5405c17fb9014be4ff0bfa859d227fecb6f9148077f4b4f456e1a13018612b7b0357a3635be967b65ac95689f9f4d2b85c1db6d15917131a1bb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/typechecker@4.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typechecker/-/typechecker-4.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typechecker@4.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typechecker/-/typechecker-4.11.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/typechecker"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eachr",
      "version": "4.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f48ebae115a9ea9f23bdc1d9230a3b6d66a249a526035c0d48b2b03591226988ea893011ab77068f246222e9eca2966fe103265f74f91ecd7b4283c0cdd6317e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/eachr@4.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eachr/-/eachr-4.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eachr@4.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eachr/-/eachr-4.5.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/eachr"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typechecker",
      "version": "6.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "11b3aefbdb33635de6865d04b2f2d79d1fa94c26b78131d040f2dd71eef6ba3702f5f4475e554504d5ed1de4618332f12e5294878cc0f42d2d7b32c382c85ff8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/typechecker@6.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typechecker/-/typechecker-6.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typechecker@6.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typechecker/-/typechecker-6.4.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/eachr/node_modules/typechecker"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extendr",
      "version": "5.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "092eebed611dc6d7da1886727de5c0d2d38e41a4ae6768b05b1659a1dfd07816b22bfa72842f2fa1dc1c491b03ba79372b7eb3a55c6dc9507172f3fc1a2fb1a7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/extendr@5.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extendr/-/extendr-5.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extendr@5.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extendr/-/extendr-5.3.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/extendr"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typechecker",
      "version": "7.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1328e36e304d497e6f0b81f20f1699fa37520b063911329bc38e151d862219b566d33c68629b4173803f8274fa24aa38d934f45f8d1f16fadb52f023224fd431"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/typechecker@7.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typechecker/-/typechecker-7.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typechecker@7.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typechecker/-/typechecker-7.2.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/extendr/node_modules/typechecker"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/projectz/node_modules/typechecker"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unbounded",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e705813a31d36969bfaa0d8d77f7f2c0c2b397923be2b2849efe5136f2dfc7c2b3a5f8a515f9e7788f7248c06a036443fd7b4bce50b42884a0259dc3fad56930"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/unbounded@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unbounded/-/unbounded-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unbounded@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unbounded/-/unbounded-3.1.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/unbounded"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "projectz",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "89dca36d6e0742600b39cbad3fd9255bcee00f1981447bce3870f396051b5e262c45b88e146b7424c4a510de4f8a37feff0286e679f905fa8194ec4ecab7cd3d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/projectz@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/projectz/-/projectz-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/projectz@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/projectz/-/projectz-2.2.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/projectz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "badges",
      "version": "4.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dd10399dc53bb8e55d28fb7a5d62866216854d6e7bc7dae3091687c0005dec2f2626934068ec13b839dda00ed120318e6017378d8fffe61efdcf924b05e6e9ca"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/badges@4.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/badges/-/badges-4.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/badges@4.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/badges/-/badges-4.5.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/badges"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caterpillar",
      "version": "5.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4650392480654bfd1f7b5c37f3ef1a3d456ec1bb048f64e1bfe9a0577a5a9e5e456952088420e0ac7115175f7ebffd5c2007aa20e0570f6bf70c64ad3b656791"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/caterpillar@5.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/caterpillar/-/caterpillar-5.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/caterpillar@5.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/caterpillar/-/caterpillar-5.3.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/caterpillar"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-current-line",
      "version": "5.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "db0d126da95f624e771750af202728fc6bb539803c9425a078ce4597625ed48967d1cdfe55ca1d34c5de1d0050c66df994d76cb5f9469ac363ebca7bf1bbd38d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/get-current-line@5.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-current-line/-/get-current-line-5.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-current-line@5.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-current-line/-/get-current-line-5.3.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/get-current-line"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rfc-log-levels",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "298d22de2d5457e31a1356f6aca61f662ace942b78e5dac9b9fedd289ac90641b4d986ea6b4782ed266f86b7387e1de971605e0438a58fb74a752208d5cf1c5c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/rfc-log-levels@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rfc-log-levels/-/rfc-log-levels-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rfc-log-levels@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rfc-log-levels/-/rfc-log-levels-3.2.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/rfc-log-levels"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caterpillar-filter",
      "version": "6.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d035be2374a3d792f0ca8e7b827d626678bedc630b232633bf0d74353747f7a59e46ec05614ba296aac3cea178aac6aef98d41f6a1b53fec21a3fa795d1eb6e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/caterpillar-filter@6.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/caterpillar-filter/-/caterpillar-filter-6.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/caterpillar-filter@6.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/caterpillar-filter/-/caterpillar-filter-6.3.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/caterpillar-filter"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "inlined within caterpillar: https://github.com/bevry/caterpillar/blob/master/HISTORY.md#v600-2020-july-24"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caterpillar-human",
      "version": "6.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d2b8ddb4b3d183fdfe94bfc21f9fb5df57825b15bcdc173c4e878b68c0ff7637be3e1134b4096145d7e75aa1ba21c6f64e77871358a797b224de4d4e362c03db"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/caterpillar-human@6.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/caterpillar-human/-/caterpillar-human-6.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/caterpillar-human@6.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/caterpillar-human/-/caterpillar-human-6.3.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/caterpillar-human"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "inlined within caterpillar: https://github.com/bevry/caterpillar/blob/master/HISTORY.md#v600-2020-july-24"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansistyles",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5de60415bda071bb37127854c864f41b23254539"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ansistyles@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansistyles/-/ansistyles-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansistyles@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansistyles/-/ansistyles-0.1.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/ansistyles"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cson-parser",
      "version": "4.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bde39b9f347d7c3b3ffa4be2a3423e8de6578ec27d8c5d23b62b25ee0fb3f49d18ce527452309a1ad6d477a26029c7c1945ed149a49bec630962f1aaa7ae2972"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:npm/cson-parser@4.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cson-parser/-/cson-parser-4.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cson-parser@4.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cson-parser/-/cson-parser-4.0.4.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/cson-parser"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "coffeescript",
      "version": "1.12.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a4b5c717140c3e4955a047a4a3093c6f77ab3729c2f83549cc28714bf2c2041811ebff002641e2be49bfff36e8c1c7dcec14c2023af2ba1c7a80fa8f45fb05a0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/coffeescript@1.12.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/coffeescript/-/coffeescript-1.12.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/coffeescript@1.12.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/coffeescript/-/coffeescript-1.12.7.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/coffeescript"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-cli-arg",
      "version": "5.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fdf549487d9cf8ff7f0ddc3ae938473d2414b248295aaff37415e6c8b33d3df99f22c854ebfa1556db2c2602b94bfcce1421440dc9b032e84734b2d29ece5ad2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/get-cli-arg@5.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-cli-arg/-/get-cli-arg-5.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-cli-arg@5.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-cli-arg/-/get-cli-arg-5.2.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/get-cli-arg"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "normalify",
      "version": "2.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "02585838f94b9240e5b19d8ef7b18e180164e0138ff17b10cec30384c59b51859ab78867bfb38915b33ec960879e6da32359eed5db30ce940d9f8f8a5eb541eb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/normalify@2.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/normalify/-/normalify-2.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalify@2.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/normalify/-/normalify-2.7.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/normalify"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-expression-parse",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "71ba87ba7b105a724d13a2a155232c31e1f91ff2fd129ca66f3a93437b8bc0d08b675438f35a166a87ea1fb9cee95d3bc655f063a3e141d43621e756c7f64ae1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/spdx-expression-parse@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-expression-parse@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/spdx-expression-parse"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-exceptions",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fed4eb60e0bb3cf2359d4020c77e21529a97bb2246f834c72539c850b1b8ac3ca08b8c6efed7e09aad5ed5c211c11cf0660a3834bc928beae270b919930e22e4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "CC-BY-3.0",
            "url": "https://opensource.org/licenses/CC-BY-3.0"
          }
        }
      ],
      "purl": "pkg:npm/spdx-exceptions@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-exceptions@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.3.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/spdx-exceptions"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-license-ids",
      "version": "3.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "27e156cd9a329c91171a9855212f97121de41528d95ffd62f6014169641c07efed9a97b6a94b12040069731ab19c0c45762505120017d5b8d8190bc8666a33f5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0",
            "url": "https://opensource.org/licenses/CC0-1.0"
          }
        }
      ],
      "purl": "pkg:npm/spdx-license-ids@3.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-license-ids@3.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.5.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/spdx-license-ids"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-license-list",
      "version": "6.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b07335790cfec98aca4483b98ffb73bb7c9685ba2e41cd916260a7e67342dbdea7573b56d154a5a49be682c58f28030422a8df8215f2defbc8c026c43893d21e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0",
            "url": "https://opensource.org/licenses/CC0-1.0"
          }
        }
      ],
      "purl": "pkg:npm/spdx-license-list@6.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-license-list/-/spdx-license-list-6.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-license-list@6.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-license-list/-/spdx-license-list-6.2.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/spdx-license-list"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "textextensions",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f7e8cd954e36cf2026cc439650570a3e3a3e7edb6b367695e6042cb96db1960dcb01bd6755ad6e57848ade29d7afc578512e5116f17311d0437c869d7337fe5d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/textextensions@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/textextensions/-/textextensions-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/textextensions@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/textextensions/-/textextensions-4.2.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/textextensions"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "valid-directory",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "213162e8581f5cf463c9746ae7f132bae50f34585c7fa1b4240384ef2d413178c7a2ad56ac1d331504ef6253c59a9a9b94fb02fe419026bd430c572aba0f95b5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/valid-directory@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/valid-directory/-/valid-directory-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/valid-directory@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/valid-directory/-/valid-directory-2.0.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/valid-directory"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readdir-cluster",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9d25b5146adccc0df73efc81fce9ed5dd6b6bccf7fc30d696112894fe458a0928b83b64b93fb4edb88152c172e129f190d66bed7b24534f373d06b6944b87399"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/readdir-cluster@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readdir-cluster/-/readdir-cluster-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readdir-cluster@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readdir-cluster/-/readdir-cluster-3.1.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/readdir-cluster"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "valid-filename",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3bdf6c75f85d182896a0de1cbfa527ab8789d84b97c11b0e2c2792c3e209c8c620c152b404f99a527ce1590c3913caa49cb4d5ad51310abeb1c53067441bedb1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/valid-filename@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/valid-filename/-/valid-filename-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/valid-filename@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/valid-filename/-/valid-filename-3.1.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/valid-filename"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "filename-reserved-regex",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "abf73dfab735d045440abfea2d91f389ebbfa229"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/filename-reserved-regex@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/filename-reserved-regex/-/filename-reserved-regex-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/filename-reserved-regex@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/filename-reserved-regex/-/filename-reserved-regex-2.0.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/filename-reserved-regex"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/node-fetch@2.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/whatwg-fetch@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cross-fetch@3.0.4",
      "dependsOn": [
        "pkg:npm/node-fetch@2.6.0",
        "pkg:npm/whatwg-fetch@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/fellow@6.8.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/errlop@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/semver@6.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/editions@3.1.0",
      "dependsOn": [
        "pkg:npm/errlop@3.1.0",
        "pkg:npm/semver@6.3.0"
      ]
    },
    {
      "ref": "pkg:npm/typescript@6.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/simplytyped@3.3.0",
      "dependsOn": [
        "pkg:npm/typescript@6.0.3"
      ]
    },
    {
      "ref": "pkg:npm/githubauthreq@5.5.0",
      "dependsOn": [
        "pkg:npm/editions@3.1.0",
        "pkg:npm/simplytyped@3.3.0"
      ]
    },
    {
      "ref": "pkg:npm/native-promise-pool@3.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/getrepos@5.4.0",
      "dependsOn": [
        "pkg:npm/cross-fetch@3.0.4",
        "pkg:npm/githubauthreq@5.5.0",
        "pkg:npm/native-promise-pool@3.3.0",
        "pkg:npm/simplytyped@3.3.0"
      ]
    },
    {
      "ref": "pkg:npm/getcontributors@2.10.0",
      "dependsOn": [
        "pkg:npm/cross-fetch@3.0.4",
        "pkg:npm/fellow@6.8.0",
        "pkg:npm/getrepos@5.4.0",
        "pkg:npm/githubauthreq@5.5.0",
        "pkg:npm/simplytyped@3.3.0"
      ]
    },
    {
      "ref": "pkg:npm/@bevry/update-contributors@1.6.0",
      "dependsOn": [
        "pkg:npm/getcontributors@2.10.0"
      ]
    },
    {
      "ref": "pkg:npm/@types/ansicolors@0.0.33",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/diff@4.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/node@14.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansicolors@0.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/diff@4.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/assert-helpers@6.5.0",
      "dependsOn": [
        "pkg:npm/@types/ansicolors@0.0.33",
        "pkg:npm/@types/diff@4.0.2",
        "pkg:npm/@types/node@14.0.4",
        "pkg:npm/ansicolors@0.3.2",
        "pkg:npm/diff@4.0.2",
        "pkg:npm/errlop@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/errlop@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/editions@2.3.1",
      "dependsOn": [
        "pkg:npm/errlop@2.2.0",
        "pkg:npm/semver@6.3.0"
      ]
    },
    {
      "ref": "pkg:npm/typechecker@4.11.0",
      "dependsOn": [
        "pkg:npm/editions@2.3.1"
      ]
    },
    {
      "ref": "pkg:npm/ambi@3.2.0",
      "dependsOn": [
        "pkg:npm/editions@2.3.1",
        "pkg:npm/typechecker@4.11.0"
      ]
    },
    {
      "ref": "pkg:npm/typechecker@6.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eachr@4.5.0",
      "dependsOn": [
        "pkg:npm/typechecker@6.4.0"
      ]
    },
    {
      "ref": "pkg:npm/typechecker@7.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/extendr@5.3.0",
      "dependsOn": [
        "pkg:npm/typechecker@7.2.0"
      ]
    },
    {
      "ref": "pkg:npm/unbounded@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/taskgroup@7.4.0",
      "dependsOn": [
        "pkg:npm/ambi@3.2.0",
        "pkg:npm/eachr@4.5.0",
        "pkg:npm/extendr@5.3.0",
        "pkg:npm/unbounded@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/event-emitter-grouped@4.3.0",
      "dependsOn": [
        "pkg:npm/taskgroup@7.4.0",
        "pkg:npm/unbounded@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/kava@5.1.0",
      "dependsOn": [
        "pkg:npm/event-emitter-grouped@4.3.0",
        "pkg:npm/taskgroup@7.4.0"
      ]
    },
    {
      "ref": "pkg:npm/badges@4.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-current-line@5.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rfc-log-levels@3.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/caterpillar@5.3.0",
      "dependsOn": [
        "pkg:npm/extendr@5.3.0",
        "pkg:npm/get-current-line@5.3.0",
        "pkg:npm/rfc-log-levels@3.2.0"
      ]
    },
    {
      "ref": "pkg:npm/caterpillar-filter@6.3.0",
      "dependsOn": [
        "pkg:npm/caterpillar@5.3.0"
      ]
    },
    {
      "ref": "pkg:npm/ansistyles@0.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/caterpillar-human@6.3.0",
      "dependsOn": [
        "pkg:npm/ansicolors@0.3.2",
        "pkg:npm/ansistyles@0.1.3",
        "pkg:npm/caterpillar@5.3.0"
      ]
    },
    {
      "ref": "pkg:npm/coffeescript@1.12.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cson-parser@4.0.4",
      "dependsOn": [
        "pkg:npm/coffeescript@1.12.7"
      ]
    },
    {
      "ref": "pkg:npm/normalify@2.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-cli-arg@5.2.0",
      "dependsOn": [
        "pkg:npm/normalify@2.7.0"
      ]
    },
    {
      "ref": "pkg:npm/spdx-exceptions@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/spdx-license-ids@3.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/spdx-expression-parse@3.0.1",
      "dependsOn": [
        "pkg:npm/spdx-exceptions@2.3.0",
        "pkg:npm/spdx-license-ids@3.0.5"
      ]
    },
    {
      "ref": "pkg:npm/spdx-license-list@6.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/projectz@2.2.0",
      "dependsOn": [
        "pkg:npm/badges@4.5.0",
        "pkg:npm/caterpillar-filter@6.3.0",
        "pkg:npm/caterpillar-human@6.3.0",
        "pkg:npm/caterpillar@5.3.0",
        "pkg:npm/cson-parser@4.0.4",
        "pkg:npm/fellow@6.8.0",
        "pkg:npm/get-cli-arg@5.2.0",
        "pkg:npm/spdx-expression-parse@3.0.1",
        "pkg:npm/spdx-license-list@6.2.0",
        "pkg:npm/typechecker@7.2.0"
      ]
    },
    {
      "ref": "pkg:npm/textextensions@4.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readdir-cluster@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/filename-reserved-regex@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/valid-filename@3.1.0",
      "dependsOn": [
        "pkg:npm/filename-reserved-regex@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/valid-directory@2.0.0",
      "dependsOn": [
        "pkg:npm/readdir-cluster@3.1.0",
        "pkg:npm/valid-filename@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/binaryextensions@2.3.0",
      "dependsOn": [
        "pkg:npm/@bevry/update-contributors@1.6.0",
        "pkg:npm/assert-helpers@6.5.0",
        "pkg:npm/kava@5.1.0",
        "pkg:npm/projectz@2.2.0",
        "pkg:npm/textextensions@4.2.0",
        "pkg:npm/valid-directory@2.0.0"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/binaryextensions@2.3.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-07-24T19:49:12Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Friday, July 24, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'binaryextensions' with version '2.3.0'. The package type in this SBOM is npm with 2 purl namespaces described under components. The components were identified from the source files: package-lock.json."
    }
  ]
}