{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:b191de8e-da26-4ee8-a104-ff75eb13f0ca",
  "version": 1,
  "metadata": {
    "timestamp": "2026-07-29T09:56:00Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "byte-size",
      "group": "",
      "version": "5.0.1",
      "description": "Convert a bytes (and octets) value to a more human-readable format. Choose between metric or IEC units.",
      "purl": "pkg:npm/byte-size@5.0.1",
      "bom-ref": "pkg:npm/byte-size@5.0.1",
      "author": "Lloyd Brookes <75pound@gmail.com>",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "test, test:js, test:mjs, docs, cover, dist"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@types"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "coveralls",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4efd0b29efcc9013a2947dafed60624c176e760d8285f19b75769f73fb37df4763a45df328e9ae7a14de4708d759cee9cdf8fd16b0d44c0eed131e838aff0d17"
        }
      ],
      "purl": "pkg:npm/coveralls@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/coveralls/-/coveralls-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/coveralls@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/coveralls/-/coveralls-3.0.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/coveralls"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "growl",
      "version": "1.10.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a81af83ae10b9213de9d6ea0a0a5578afe3b512ddc95bdff21bb9617d28d2848a3032f68787c54f488338ef2611e453385a8fbace503efe6065aa5232e9e6848"
        }
      ],
      "purl": "pkg:npm/growl@1.10.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/growl/-/growl-1.10.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/growl@1.10.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/growl/-/growl-1.10.5.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/growl"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-yaml",
      "version": "3.12.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3c8b76727c263df2f884a370a9e8aecf86ca7e7cc74c1bfa1f25608da840ea63cbc0f0f38c35aba652413231d417192efcddc5966adbc8f72569df88fb8989dc"
        }
      ],
      "purl": "pkg:npm/js-yaml@3.12.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.12.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-yaml@3.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.12.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/js-yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "argparse",
      "version": "1.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a39468cbab4d1b848bfc53a408037a4738e26a4652db944b605adc32db49a9b75df015ab9c0f9f1b3e7b88de4f6f4ea9bc11af979810d01e3c74996c957be84e"
        }
      ],
      "purl": "pkg:npm/argparse@1.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/argparse@1.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/argparse"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sprintf-js",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "04e6926f662895354f3dd015203633b857297e2c"
        }
      ],
      "purl": "pkg:npm/sprintf-js@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sprintf-js@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/sprintf-js"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "786b85170ed4a5d6be838a7e407be75b44724d7fd255e2410ccfe00ad30044ed1c2ee4f61dc10a9d33ef86357a6867aaac207fb1b368a742acce6d23b1a594e0"
        }
      ],
      "purl": "pkg:npm/esprima@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/esprima"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lcov-parse",
      "version": "0.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1b0b8ff9ac9c7889250582b70b71315d9da6d9a3"
        }
      ],
      "purl": "pkg:npm/lcov-parse@0.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lcov-parse/-/lcov-parse-0.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lcov-parse@0.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lcov-parse/-/lcov-parse-0.0.10.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/lcov-parse"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "log-driver",
      "version": "1.2.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "53b28298b76ab061c12de5aa625140d15d1297a3f4f0413566b980f5cc63504d1656a4fdaa7c950cfcf5933a4510fd23749b859dab1621f49dedfb1a3579296e"
        }
      ],
      "purl": "pkg:npm/log-driver@1.2.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/log-driver/-/log-driver-1.2.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/log-driver@1.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/log-driver/-/log-driver-1.2.7.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/log-driver"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "driver"
      ]
    },
    {
      "group": "",
      "name": "minimist",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a35008b20f41383eec1fb914f4cd5df79a264284"
        }
      ],
      "purl": "pkg:npm/minimist@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "http://registry.npmjs.org/minimist/-/minimist-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "http://registry.npmjs.org/minimist/-/minimist-1.2.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/minimist"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "request",
      "version": "2.88.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "340a814ab8a318b65d33459936c2272c9a6426890bef65d88d4a670748b0b1183187b741e823ab1e74c137037413e9470c0273bbb90b0240de634f33dbf03486"
        }
      ],
      "purl": "pkg:npm/request@2.88.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/request/-/request-2.88.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/request@2.88.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/request/-/request-2.88.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/request"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aws-sign2",
      "version": "0.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b46e890934a9591f2d2f6f86d7e6a9f1b3fe76a8"
        }
      ],
      "purl": "pkg:npm/aws-sign2@0.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/aws-sign2@0.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.7.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/aws-sign2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aws4",
      "version": "1.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "45e671bcd1c83aff3c1654fbaf17172080b47cfb78299a996ce962bf25ad5cbb7c112c7ce3377790c0ba88ae6355e4b6aadfa0edfb52ef27b87e2d3a5f9aed45"
        }
      ],
      "purl": "pkg:npm/aws4@1.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/aws4/-/aws4-1.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/aws4@1.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/aws4/-/aws4-1.8.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/aws4"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caseless",
      "version": "0.12.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1b681c21ff84033c826543090689420d187151dc"
        }
      ],
      "purl": "pkg:npm/caseless@0.12.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/caseless/-/caseless-0.12.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/caseless@0.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/caseless/-/caseless-0.12.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/caseless"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "combined-stream",
      "version": "1.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6eb5a5f72eaf381d7160f65ca5975edcdf730c1c974e8b0078c0e8e29d70ce8e9430e5f8bee981f933f5459efab1f13a31debc4343494ab13f81b7b3778525fb"
        }
      ],
      "purl": "pkg:npm/combined-stream@1.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/combined-stream@1.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.7.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/combined-stream"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "delayed-stream",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "df3ae199acadfb7d440aaae0b29e2272b24ec619"
        }
      ],
      "purl": "pkg:npm/delayed-stream@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/delayed-stream@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/delayed-stream"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extend",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e3aae0b9f5c0fb0b25babab3572b4141b9f9197288861bcd304ee3ee8d7e7dd1c0794ed967db4136501e12fd601156a8577df665d8b3604be81074f2088a6fe"
        }
      ],
      "purl": "pkg:npm/extend@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extend/-/extend-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extend@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extend/-/extend-3.0.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/extend"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "forever-agent",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fbc71f0c41adeb37f96c577ad1ed42d8fdacca91"
        }
      ],
      "purl": "pkg:npm/forever-agent@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/forever-agent/-/forever-agent-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/forever-agent@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/forever-agent/-/forever-agent-0.6.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/forever-agent"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "form-data",
      "version": "2.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d652ca07632edda18fd50ff67823b1d1f35b44c7bb5ddc24b703abba17eaa9dd2b2095b03780e1f84de1acf4a50c25e7491ed4b59d4ddfcad55e6fbaf8c12125"
        }
      ],
      "purl": "pkg:npm/form-data@2.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/form-data/-/form-data-2.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/form-data@2.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/form-data/-/form-data-2.3.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/form-data"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asynckit",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c79ed97f7f34cb8f2ba1bc9790bcc366474b4b79"
        }
      ],
      "purl": "pkg:npm/asynckit@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asynckit@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/asynckit"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-types",
      "version": "2.1.20",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1eb92b3da3fdbc6b966cb2b507515f80091ba8d8c8bb2e1e1e52189c58bb91a999c8b2eb1a5a369a9731d1b0663692aa06d62d01f19ba1d0dd74881d752242d8"
        }
      ],
      "purl": "pkg:npm/mime-types@2.1.20",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.20.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-types@2.1.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.20.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/mime-types"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-db",
      "version": "1.36.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2fec6fc83f4c92860c5dbd63026cc8fe559803100c08fbc80525aeaf43d9e6739fe5eb9a8512d5a87fff14a5bd996a76964a948188973e09337cc5058b8cd50f"
        }
      ],
      "purl": "pkg:npm/mime-db@1.36.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime-db/-/mime-db-1.36.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-db@1.36.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-db/-/mime-db-1.36.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/mime-db"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "har-validator",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "faa9e636323839f1f68a943d5503b0db76c177f89bb5f6d574ad9f61b63869c4c3a8a4d6fd80e9f4c7229997436c6f2257d7d98b352a40c0f9c6fae2075e3a4c"
        }
      ],
      "purl": "pkg:npm/har-validator@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/har-validator/-/har-validator-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/har-validator@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/har-validator/-/har-validator-5.1.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/har-validator"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ajv",
      "version": "5.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "73b5eeca3fab653e3d3f9422b341ad42205dc965"
        }
      ],
      "purl": "pkg:npm/ajv@5.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ajv/-/ajv-5.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ajv@5.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ajv/-/ajv-5.5.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/ajv"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "co",
      "version": "4.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6ea6bdf3d853ae54ccb8e47bfa0bf3f9031fb184"
        }
      ],
      "purl": "pkg:npm/co@4.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/co/-/co-4.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/co@4.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/co/-/co-4.6.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/co"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-deep-equal",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c053477817c86b51daa853c81e059b733d023614"
        }
      ],
      "purl": "pkg:npm/fast-deep-equal@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-deep-equal@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-1.1.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/fast-deep-equal"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-json-stable-stringify",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d5142c0caee6b1189f87d3a76111064f86c8bbf2"
        }
      ],
      "purl": "pkg:npm/fast-json-stable-stringify@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-json-stable-stringify/-/fast-json-stable-stringify-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-json-stable-stringify@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-json-stable-stringify/-/fast-json-stable-stringify-2.0.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/fast-json-stable-stringify"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-schema-traverse",
      "version": "0.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "349a6d44c53a51de89b40805c5d5e59b417d3340"
        }
      ],
      "purl": "pkg:npm/json-schema-traverse@0.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-0.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-schema-traverse@0.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-0.3.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/json-schema-traverse"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "har-schema",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a94c2224ebcac04782a0d9035521f24735b7ec92"
        }
      ],
      "purl": "pkg:npm/har-schema@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/har-schema/-/har-schema-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/har-schema@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/har-schema/-/har-schema-2.0.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/har-schema"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-signature",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9aecd925114772f3d95b65a60abb8f7c18fbace1"
        }
      ],
      "purl": "pkg:npm/http-signature@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-signature/-/http-signature-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-signature@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-signature/-/http-signature-1.2.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/http-signature"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "assert-plus",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f12e0f3c5d77b0b1cdd9146942e4e96c1e4dd525"
        }
      ],
      "purl": "pkg:npm/assert-plus@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/assert-plus/-/assert-plus-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/assert-plus@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/assert-plus/-/assert-plus-1.0.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/assert-plus"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsprim",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "313e66bc1e5cc06e438bc1b7499c2e5c56acb6a2"
        }
      ],
      "purl": "pkg:npm/jsprim@1.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsprim/-/jsprim-1.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsprim@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsprim/-/jsprim-1.4.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/jsprim"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extsprintf",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "96918440e3041a7a414f8c52e3c574eb3c3e1e05"
        }
      ],
      "purl": "pkg:npm/extsprintf@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extsprintf/-/extsprintf-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extsprintf@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extsprintf/-/extsprintf-1.3.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/extsprintf"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-schema",
      "version": "0.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b480c892e59a2f05954ce727bd3f2a4e882f9e13"
        }
      ],
      "purl": "pkg:npm/json-schema@0.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-schema/-/json-schema-0.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-schema@0.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-schema/-/json-schema-0.2.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/json-schema"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "verror",
      "version": "1.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3a105ca17053af55d6e270c1f8288682e18da400"
        }
      ],
      "purl": "pkg:npm/verror@1.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/verror/-/verror-1.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/verror@1.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/verror/-/verror-1.10.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/verror"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "core-util-is",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b5fd54220aa2bc5ab57aab7140c940754503c1a7"
        }
      ],
      "purl": "pkg:npm/core-util-is@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-util-is@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/core-util-is"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sshpk",
      "version": "1.15.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9927603546a2764f9d454e4c858b4df7379b773176886d1c34f5b2f071be5bccbe7d3d499d2921d1fcf3a6339ad0becff22d51b1ccf7f2dd21e203dc2b3e37c4"
        }
      ],
      "purl": "pkg:npm/sshpk@1.15.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sshpk/-/sshpk-1.15.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sshpk@1.15.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sshpk/-/sshpk-1.15.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/sshpk"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asn1",
      "version": "0.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8f1c334292d08d29965e0c1a09913d373fa09401b4d721754275a06e11b01c8e40e85448118e8856ab478487a91ea23bfe4c84c9011a8010b998110594862f76"
        }
      ],
      "purl": "pkg:npm/asn1@0.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/asn1/-/asn1-0.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asn1@0.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/asn1/-/asn1-0.2.4.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/asn1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safer-buffer",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "619a372bcd920fb462ca2d04d4440fa232f3ee4a5ea6749023d2323db1c78355d75debdbe5d248eeda72376003c467106c71bbbdcc911e4d1c6f0a9c42b894b6"
        }
      ],
      "purl": "pkg:npm/safer-buffer@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safer-buffer@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/safer-buffer"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bcrypt-pbkdf",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a4301d389b6a43f9b67ff3ca11a3f6637e360e9e"
        }
      ],
      "purl": "pkg:npm/bcrypt-pbkdf@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bcrypt-pbkdf@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/bcrypt-pbkdf"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tweetnacl",
      "version": "0.14.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5ae68177f192d4456269d108afa93ff8743f4f64"
        }
      ],
      "purl": "pkg:npm/tweetnacl@0.14.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tweetnacl/-/tweetnacl-0.14.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tweetnacl@0.14.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tweetnacl/-/tweetnacl-0.14.5.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/tweetnacl"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dashdash",
      "version": "1.14.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "853cfa0f7cbe2fed5de20326b8dd581035f6e2f0"
        }
      ],
      "purl": "pkg:npm/dashdash@1.14.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dashdash/-/dashdash-1.14.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dashdash@1.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dashdash/-/dashdash-1.14.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/dashdash"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ecc-jsbn",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3a83a904e54353287874c564b7549386849a98c9"
        }
      ],
      "purl": "pkg:npm/ecc-jsbn@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ecc-jsbn/-/ecc-jsbn-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ecc-jsbn@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ecc-jsbn/-/ecc-jsbn-0.1.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/ecc-jsbn"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsbn",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a5e654c2e5a2deb5f201d96cefbca80c0ef2f513"
        }
      ],
      "purl": "pkg:npm/jsbn@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsbn/-/jsbn-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsbn@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsbn/-/jsbn-0.1.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/jsbn"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "getpass",
      "version": "0.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5eff8e3e684d569ae4cb2b1282604e8ba62149fa"
        }
      ],
      "purl": "pkg:npm/getpass@0.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/getpass/-/getpass-0.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/getpass@0.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/getpass/-/getpass-0.1.7.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/getpass"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-typedarray",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e479c80858df0c1b11ddda6940f96011fcda4a9a"
        }
      ],
      "purl": "pkg:npm/is-typedarray@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-typedarray/-/is-typedarray-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-typedarray@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-typedarray/-/is-typedarray-1.0.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/is-typedarray"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isstream",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "47e63f7af55afa6f92e1500e690eb8b8529c099a"
        }
      ],
      "purl": "pkg:npm/isstream@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isstream/-/isstream-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isstream@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isstream/-/isstream-0.1.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/isstream"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-stringify-safe",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1296a2d58fd45f19a0f6ce01d65701e2c735b6eb"
        }
      ],
      "purl": "pkg:npm/json-stringify-safe@5.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-stringify-safe@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/json-stringify-safe"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "oauth-sign",
      "version": "0.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7dec6150514f4c657cc9b02d48819b57a80e912bfc52d45b0c19c0c8b430e103ca920365b07d81c8f1ad314a9d5a4a2ce98091980a958b0819ac973f9910f365"
        }
      ],
      "purl": "pkg:npm/oauth-sign@0.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/oauth-sign@0.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.9.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/oauth-sign"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "performance-now",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6309f4e0e5fa913ec1c69307ae364b4b377c9e7b"
        }
      ],
      "purl": "pkg:npm/performance-now@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/performance-now/-/performance-now-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/performance-now@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/performance-now/-/performance-now-2.1.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/performance-now"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "6.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3796405f8fcbc49985fbbc0def8a540faa8087dff09ef750723abd4d98debef5f3494a3b6df9b0f75b1aa8c8f3192db1abdd7fa1d376756fd63a5eea40734318"
        }
      ],
      "purl": "pkg:npm/qs@6.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-6.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@6.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-6.5.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/qs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-buffer",
      "version": "5.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "19dd94641243917958ec66c9c5fb04f3f9ef2a45045351b7f1cd6c88de903fa6bd3d3f4c98707c1a7a6c71298c252a05f0b388aedf2e77fc0fb688f2b381bafa"
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/safe-buffer"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tough-cookie",
      "version": "2.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "439b2b93fe2f0cce78589b098a8dd7367e8adac086f8243c1b95b3e9b661459a007bff93c63581fc69450276046e461594e37d14c93f7c4de1d912e93d7a3895"
        }
      ],
      "purl": "pkg:npm/tough-cookie@2.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-2.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tough-cookie@2.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-2.4.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/tough-cookie"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "psl",
      "version": "1.1.29",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "01e526434a0b374d9f9551d75a1f6c48917b99c745ab4a6989dfc9904aee7dcde118857f00c6bc168f55803a3f713da315d396a05bc7a7dd2aa811f9e16fa08d"
        }
      ],
      "purl": "pkg:npm/psl@1.1.29",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/psl/-/psl-1.1.29.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/psl@1.1.29",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/psl/-/psl-1.1.29.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/psl"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "punycode",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c0d5a63b2718800ad8e1eb0fa5269c84dd41845e"
        }
      ],
      "purl": "pkg:npm/punycode@1.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/punycode/-/punycode-1.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/punycode@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/punycode/-/punycode-1.4.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/punycode"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tunnel-agent",
      "version": "0.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "27a5dea06b36b04a0a9966774b290868f0fc40fd"
        }
      ],
      "purl": "pkg:npm/tunnel-agent@0.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tunnel-agent@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.6.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/tunnel-agent"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uuid",
      "version": "3.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c9726678d6b0dc39e728038a244e75b0bfd96987d6251975a4af5daf5f58142bb439b4b6df5001d7f2dba93291010e64c3c03dd2b03a7ebe2b88e5294d9bd064"
        }
      ],
      "purl": "pkg:npm/uuid@3.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uuid/-/uuid-3.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uuid@3.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uuid/-/uuid-3.3.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/uuid"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsdoc-to-markdown",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2c7251a0ba0bc8377135c0a896090ba01feb146e6244ff8f3498cc20b234c7ef7921d100b728d2b74c09e9994ac51a6484162d4174d0435d7d84ca8f2146734d"
        }
      ],
      "purl": "pkg:npm/jsdoc-to-markdown@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsdoc-to-markdown/-/jsdoc-to-markdown-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsdoc-to-markdown@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsdoc-to-markdown/-/jsdoc-to-markdown-4.0.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/jsdoc-to-markdown"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-back",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "789bf8a4b2ee7cfde0e64719af2d23e965e921bcd8c3d1940789952599e8f707f0881c5b8b34e71c2c375496f4edc06285b157e3c63ba12ad6f72fa0b78825cb"
        }
      ],
      "purl": "pkg:npm/array-back@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-back/-/array-back-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-back@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-back/-/array-back-2.0.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/array-back"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typical",
      "version": "2.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5c080e5d661cbbe38259d2e70a3c7253e873881d"
        }
      ],
      "purl": "pkg:npm/typical@2.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typical/-/typical-2.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typical@2.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typical/-/typical-2.6.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/typical"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "command-line-tool",
      "version": "0.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5f0d7c1d5c7f433415dd2739935bf2de482d39e1a6b0a22ac2d145a328c8e1b6dca52827c360965542efb5a932c38b3a7e1c80748eaca104215dcd8ecc9cbada"
        }
      ],
      "purl": "pkg:npm/command-line-tool@0.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/command-line-tool/-/command-line-tool-0.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/command-line-tool@0.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/command-line-tool/-/command-line-tool-0.8.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/command-line-tool"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-escape-sequences",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bfed305bd59ecf0b326f4b85e1a0550a3992aa2b7746eecf645ce2185d28d8ac13bcddb359f4e2dc144babd124245760dde05bc844571939ed5690711f527af1"
        }
      ],
      "purl": "pkg:npm/ansi-escape-sequences@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-escape-sequences/-/ansi-escape-sequences-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-escape-sequences@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-escape-sequences/-/ansi-escape-sequences-4.0.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/ansi-escape-sequences"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "command-line-args",
      "version": "5.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fea3dc6cbf33a6a839df1e2b01aa8c165455e28a4dde96e56bb23b93dc7c932381310a064fa5a5b6337ab1766ec4e5f0e8381d2bb01dfa28d84b982372beef94"
        }
      ],
      "purl": "pkg:npm/command-line-args@5.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/command-line-args/-/command-line-args-5.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/command-line-args@5.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/command-line-args/-/command-line-args-5.0.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/command-line-args"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "argv-tools",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "09cd1d06fc7876fae38caa720c0eb0f1194d030f12bb7d0dbd96d697f4eff5900b11594b564590887322f38434c4d7e956e49a8906d891d9962bc8353cb1a12b"
        }
      ],
      "purl": "pkg:npm/argv-tools@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/argv-tools/-/argv-tools-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/argv-tools@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/argv-tools/-/argv-tools-0.1.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/argv-tools"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-replace",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f30e8dc5a5adf414b201b21e830839cc375296da0e102a4a8a99e8e522681663aedd0c53d7ff1f4a87fa29fc62b9db60dc8505c4bc38bfc03e3c1ca5b8f5739"
        }
      ],
      "purl": "pkg:npm/find-replace@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-replace/-/find-replace-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-replace@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-replace/-/find-replace-2.0.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/find-replace"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "test-value",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b1500274059c664494f71ec03a6268e53a84f86c8d2649c7687b0cad1e999e18d595537d631e858c7aec299dc18c8a4f093ebccd87ac3d691a92b36ea707ce4d"
        }
      ],
      "purl": "pkg:npm/test-value@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/test-value/-/test-value-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/test-value@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/test-value/-/test-value-3.0.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/test-value"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.camelcase",
      "version": "4.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b28aa6288a2b9fc651035c7711f65ab6190331a6"
        }
      ],
      "purl": "pkg:npm/lodash.camelcase@4.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.camelcase/-/lodash.camelcase-4.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.camelcase@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.camelcase/-/lodash.camelcase-4.3.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/lodash.camelcase"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "command-line-usage",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3314bc01df7de4aa5d002d09a29a3fa2f188ae857f9b4287c3329f5f129a83a1473a41ac1fcfe5bf9ca381a6e5711c422490b4a0979432e3bf8266aaf96ab8ea"
        }
      ],
      "purl": "pkg:npm/command-line-usage@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/command-line-usage/-/command-line-usage-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/command-line-usage@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/command-line-usage/-/command-line-usage-4.1.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/command-line-usage"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "table-layout",
      "version": "0.4.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b8d691dd244c2707dda7d394af7e9ec848ba2cbb1b713a933bf85f4ec36f88ab0d7b23013c8089082ed05d1177fb4edb00fe8547003cadccc93c1a970dcd0291"
        }
      ],
      "purl": "pkg:npm/table-layout@0.4.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/table-layout/-/table-layout-0.4.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/table-layout@0.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/table-layout/-/table-layout-0.4.4.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/table-layout"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-extend",
      "version": "0.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2ce1f120e68f61d1e5251b4241f0c8559b5fc3fb9f33cfab563eb8f51207cdc9bfbc6c1045716de8e3ea2055ac9b65c432b34812d591eb8b18d4b10a0f6bc038"
        }
      ],
      "purl": "pkg:npm/deep-extend@0.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deep-extend/-/deep-extend-0.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deep-extend@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deep-extend/-/deep-extend-0.6.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/deep-extend"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.padend",
      "version": "4.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "53ccba047d06e158d311f45da625f4e49e6f166e"
        }
      ],
      "purl": "pkg:npm/lodash.padend@4.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.padend/-/lodash.padend-4.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.padend@4.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.padend/-/lodash.padend-4.6.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/lodash.padend"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wordwrapjs",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "98ef17b6ac8fbf29150acaf08f93253955af4a709d4fe0be4156e6e9b96b69d47b244c4085b919ee167d03ef4d52dc334aaae5528f5aebbc2cd048882ebbd1a7"
        }
      ],
      "purl": "pkg:npm/wordwrapjs@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wordwrapjs/-/wordwrapjs-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wordwrapjs@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wordwrapjs/-/wordwrapjs-3.0.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/wordwrapjs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "reduce-flatten",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "258c78efd153ddf93cb561237f61184f3696e327"
        }
      ],
      "purl": "pkg:npm/reduce-flatten@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/reduce-flatten/-/reduce-flatten-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/reduce-flatten@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/reduce-flatten/-/reduce-flatten-1.0.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/reduce-flatten"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "config-master",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "667663590505a283bf26a484d68489d74c5485da"
        }
      ],
      "purl": "pkg:npm/config-master@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/config-master/-/config-master-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/config-master@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/config-master/-/config-master-3.1.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/config-master"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "walk-back",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "554e2a9d874fac47a8cb006bf44c2f0c4998a0a4"
        }
      ],
      "purl": "pkg:npm/walk-back@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/walk-back/-/walk-back-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/walk-back@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/walk-back/-/walk-back-2.0.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/config-master/node_modules/walk-back"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dmd",
      "version": "3.0.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "155ff8d7b6c7d9cfc26297bc063144007a1a1da22d7099cf94a10b8bfab23d97665289bc8e8cae0bbf0e8617cf51dc8a0ff59ca2e4d0d8bc504f833f468889df"
        }
      ],
      "purl": "pkg:npm/dmd@3.0.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dmd/-/dmd-3.0.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dmd@3.0.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dmd/-/dmd-3.0.13.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/dmd"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cache-point",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e138167def5217e6d4cb9702aa5f20587a8a36bbe2b9f370498c4b8dfdaeb41d29638f9b75cb85c0c998d610c1fbaec6cff2f5be684536178f023253141b55f9"
        }
      ],
      "purl": "pkg:npm/cache-point@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cache-point/-/cache-point-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cache-point@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cache-point/-/cache-point-0.4.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/cache-point"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-then-native",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "19a124d94d90c22c8e045f2e8dd6ebea36d48c67"
        }
      ],
      "purl": "pkg:npm/fs-then-native@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs-then-native/-/fs-then-native-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs-then-native@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs-then-native/-/fs-then-native-2.0.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/fs-then-native"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "native"
      ]
    },
    {
      "group": "",
      "name": "mkdirp2",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4363ca078651e143ed8cb97be897f39604825198525750174200196b5aade5189a00b1633ff083ac6bc506b3b3ec293a31c3dcc0c0314ec26f58e523394f1733"
        }
      ],
      "purl": "pkg:npm/mkdirp2@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mkdirp2/-/mkdirp2-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp2@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mkdirp2/-/mkdirp2-1.0.4.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/mkdirp2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "common-sequence",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "30e07f3f8f6f7f9b3dee854f20b2d39eee086de8"
        }
      ],
      "purl": "pkg:npm/common-sequence@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/common-sequence/-/common-sequence-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/common-sequence@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/common-sequence/-/common-sequence-1.0.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/common-sequence"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "file-set",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e0394529811e856db7d872788bc34aa6d409bb3e735820091df9e5f146de362e26218dab28d168ae43e566acd76dc28b7233e70b09f679e8066bc923f742728"
        }
      ],
      "purl": "pkg:npm/file-set@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/file-set/-/file-set-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/file-set@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/file-set/-/file-set-2.0.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/file-set"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "7.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bdc7ee888c6880b5780e51811c850ec08d086eb27c1d63dce0c53b1f3be219e361a3f5090df8ba079a77b07796210d0a188534269c62e591f17a641f2e4900c1"
        }
      ],
      "purl": "pkg:npm/glob@7.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-7.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@7.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-7.1.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/glob"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs.realpath",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1504ad2523158caa40db4a2787cb01411994ea4f"
        }
      ],
      "purl": "pkg:npm/fs.realpath@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs.realpath@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/fs.realpath"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inflight",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "49bd6331d7d02d0c09bc910a1075ba8165b56df9"
        }
      ],
      "purl": "pkg:npm/inflight@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inflight@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/inflight"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "once",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "583b1aa775961d4b113ac17d9c50baef9dd76bd1"
        }
      ],
      "purl": "pkg:npm/once@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/once@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/once/-/once-1.4.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/once"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrappy",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b5243d8f3ec1aa35f1364605bc0d1036e30ab69f"
        }
      ],
      "purl": "pkg:npm/wrappy@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrappy@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/wrappy"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "633c2c83e3da42a502f52466022480f4208261de"
        }
      ],
      "purl": "pkg:npm/inherits@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/inherits"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c891d5404872a8f2d44e0b7d07cdcf5eee96debc7832fbc7bd252f4e8a20a70a060ce510fb20eb4741d1a2dfb23827423bbbb8857de959fb7a91604172a87450"
        }
      ],
      "purl": "pkg:npm/minimatch@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.4.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/minimatch"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brace-expansion",
      "version": "1.1.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688"
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@1.1.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/brace-expansion"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "balanced-match",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "89b4d199ab2bee49de164ea02b89ce462d71b767"
        }
      ],
      "purl": "pkg:npm/balanced-match@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/balanced-match@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/balanced-match"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concat-map",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d8a96bd77fd68df7793a73036a3ba0d5405d477b"
        }
      ],
      "purl": "pkg:npm/concat-map@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-map@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/concat-map"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-is-absolute",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "174b9268735534ffbc7ace6bf53a5a9e1b5c5f5f"
        }
      ],
      "purl": "pkg:npm/path-is-absolute@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-is-absolute@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/path-is-absolute"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "handlebars",
      "version": "4.0.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4619937a43fe1592fe5cd8704b559ff9b4d366974ba2e830b79a5c800d6dbb3e89731d1fa47ffbcf4a9def544a9d91c10b12110477c13a78a8e205623de98dcc"
        }
      ],
      "purl": "pkg:npm/handlebars@4.0.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/handlebars/-/handlebars-4.0.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/handlebars@4.0.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/handlebars/-/handlebars-4.0.12.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/handlebars"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "2.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7cd1222f6f8066de80940c3fdbd0abd140dee2c4401c2a441e1e7858ccfe05bed07cd705c38877968a1fc89a4b790b38631ef2baabbfd9d2e033984a3ace8795"
        }
      ],
      "purl": "pkg:npm/async@2.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async/-/async-2.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@2.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async/-/async-2.6.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/async"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash",
      "version": "4.17.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7102a1f22828e5052167b960dfc0d8580c4cbe3480286d00f3019256298fd3b4885042b650ef9aad244a6d1656b5e94cb4de55d07930879af23ada3f4ac85822"
        }
      ],
      "purl": "pkg:npm/lodash@4.17.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-4.17.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@4.17.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-4.17.11.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/lodash"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "optimist",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "da3ea74686fa21a19a111c326e90eb15a0196686"
        }
      ],
      "purl": "pkg:npm/optimist@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/optimist/-/optimist-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/optimist@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/optimist/-/optimist-0.6.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/optimist"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "0.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "de3f98543dbf96082be48ad1a0c7cda836301dcf"
        }
      ],
      "purl": "pkg:npm/minimist@0.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "http://registry.npmjs.org/minimist/-/minimist-0.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@0.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "http://registry.npmjs.org/minimist/-/minimist-0.0.10.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/optimist/node_modules/minimist"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wordwrap",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a3d5da6cd5c0bc0008d37234bbaf1bed63059107"
        }
      ],
      "purl": "pkg:npm/wordwrap@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wordwrap@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/wordwrap"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "52381aa6e99695b3219018334fb624739617513e3a17488abbc4865ead1b7303f9773fe1d0f963e9e9c9aa3cf565bab697959aa989eb55bc16396332177178ee"
        }
      ],
      "purl": "pkg:npm/source-map@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/source-map"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uglify-js",
      "version": "3.4.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f0226c6ca3ad11b9c9b13cafe8b13a9ba64a9e2a8c8855a69bdb116e8a5b906b3780c3cf7dddc587c888038624bf93206936ea1ebe016a818b24b64d86cad6d5"
        }
      ],
      "purl": "pkg:npm/uglify-js@3.4.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uglify-js/-/uglify-js-3.4.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uglify-js@3.4.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uglify-js/-/uglify-js-3.4.9.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/uglify-js"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "2.17.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c0f314b7a1671f6cb31bde5203a9b38d038429453768b683126cecd6d8bed44f61f82b2b66085196a10cfc42782ac72c4151bcb8d378b95ade51e4fcf9dae582"
        }
      ],
      "purl": "pkg:npm/commander@2.17.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-2.17.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.17.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-2.17.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/commander"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "marked",
      "version": "0.3.19",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "79ad9e1963aa3713dc5eff1dc8445d4abffa166cef5b0ce3331a5f181fec6cc71c5e872dfb163e62e90f0fe413519c32bcaec167072be26db5581396e35a4092"
        }
      ],
      "purl": "pkg:npm/marked@0.3.19",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "http://registry.npmjs.org/marked/-/marked-0.3.19.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/marked@0.3.19",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "http://registry.npmjs.org/marked/-/marked-0.3.19.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/marked"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-get",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "722bbdb60039efa47cad3c6dc2ce51a85c02c5ae"
        }
      ],
      "purl": "pkg:npm/object-get@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-get/-/object-get-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-get@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-get/-/object-get-2.1.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/object-get"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "reduce-unique",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7e586bcf87a4e32b6d7abd8277fad6cdec9f4803"
        }
      ],
      "purl": "pkg:npm/reduce-unique@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/reduce-unique/-/reduce-unique-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/reduce-unique@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/reduce-unique/-/reduce-unique-1.0.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/reduce-unique"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "reduce-without",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "68ad0ead11855c9a37d4e8256c15bbf87972fc8c"
        }
      ],
      "purl": "pkg:npm/reduce-without@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/reduce-without/-/reduce-without-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/reduce-without@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/reduce-without/-/reduce-without-1.0.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/reduce-without"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "test-value",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "11da6ff670f3471a73b625ca4f3fdcf7bb748291"
        }
      ],
      "purl": "pkg:npm/test-value@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/test-value/-/test-value-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/test-value@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/test-value/-/test-value-2.1.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/reduce-without/node_modules/test-value"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-back",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "644ba7f095f7ffcf7c43b5f0dc39d3c1f03c063b"
        }
      ],
      "purl": "pkg:npm/array-back@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-back/-/array-back-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-back@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-back/-/array-back-1.0.4.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/reduce-without/node_modules/array-back"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/stream-connect/node_modules/array-back"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/reduce-extract/node_modules/array-back"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/sort-array/node_modules/array-back"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/test-runner/node_modules/file-set/node_modules/array-back"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "walk-back",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2358787a35da91032dad5e92f80b12370d8795c5"
        }
      ],
      "purl": "pkg:npm/walk-back@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/walk-back/-/walk-back-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/walk-back@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/walk-back/-/walk-back-3.0.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/walk-back"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsdoc-api",
      "version": "4.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "75f62af49801f976a16345df484c3ddcf9979a8723c1872f27968cb90509fce74344659a99fd9248e9375b4e81b23f2a763a7f51d79fceaa4ffe6a70b2f1eebc"
        }
      ],
      "purl": "pkg:npm/jsdoc-api@4.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsdoc-api/-/jsdoc-api-4.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsdoc-api@4.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsdoc-api/-/jsdoc-api-4.0.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/jsdoc-api"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "collect-all",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d32d2b060a17f08cc88c10149ceef7484b526f832193722871e589ab9cd94b16fd9963918561fcc4b628e040d2384d634419352e199f8ea58516dd7487ff8c10"
        }
      ],
      "purl": "pkg:npm/collect-all@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/collect-all/-/collect-all-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/collect-all@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/collect-all/-/collect-all-1.0.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/collect-all"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-connect",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "18bc81f2edb35b8b5d9a8009200a985314428a97"
        }
      ],
      "purl": "pkg:npm/stream-connect@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stream-connect/-/stream-connect-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-connect@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stream-connect/-/stream-connect-1.0.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/stream-connect"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-via",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0c1a74952bd7e46f4a1910d3911fd1f9adbd1fe5a4db122d385f8ca592cb34359b115f6d18f9ea2cfc471188e68b3f311ad247448aa623e8428e6373aa80389d"
        }
      ],
      "purl": "pkg:npm/stream-via@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stream-via/-/stream-via-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-via@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stream-via/-/stream-via-1.0.4.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/stream-via"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsdoc",
      "version": "3.5.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e8fc41eb94c053858ed16cf2affe3f621946a2f5e5d045587e929ba52ae84a3d2a0714f8ff1a1dfe5e343a9926dfc7511d175081d798f37e8cd2e5672501bb92"
        }
      ],
      "purl": "pkg:npm/jsdoc@3.5.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsdoc/-/jsdoc-3.5.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsdoc@3.5.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsdoc/-/jsdoc-3.5.5.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/jsdoc"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babylon",
      "version": "7.0.0-beta.19",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "560d02f6cfd1117ebf5885cddfb50aa6fe598518ba038a631e5a64137e3ef3f6ba7365b543af769f786673e4991b994a467684c4b51bc6d2754954fe29a090fc"
        }
      ],
      "purl": "pkg:npm/babylon@7.0.0-beta.19",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babylon/-/babylon-7.0.0-beta.19.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babylon@7.0.0-beta.19",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babylon/-/babylon-7.0.0-beta.19.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/babylon"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bluebird",
      "version": "3.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7611d358c23b90cc79c213109ed97b56bf42e81bd5d749455c301ab27aa7acc6215d50b3ce4e883bd168d8bef98d71d3d3b5ab3a780bd560d73a9fb2612f7562"
        }
      ],
      "purl": "pkg:npm/bluebird@3.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bluebird/-/bluebird-3.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bluebird@3.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bluebird/-/bluebird-3.5.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/bluebird"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "catharsis",
      "version": "0.8.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "98cc890ca652dd2ef0e70b37925310ff9e90fc8b"
        }
      ],
      "purl": "pkg:npm/catharsis@0.8.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/catharsis/-/catharsis-0.8.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/catharsis@0.8.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/catharsis/-/catharsis-0.8.9.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/catharsis"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "underscore-contrib",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "665b66c24783f8fa2b18c9f8cbb0e2c7d48c26c7"
        }
      ],
      "purl": "pkg:npm/underscore-contrib@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/underscore-contrib/-/underscore-contrib-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/underscore-contrib@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/underscore-contrib/-/underscore-contrib-0.3.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/underscore-contrib"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "underscore",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8b38b10cacdef63337b8b24e4ff86d45aea529a8"
        }
      ],
      "purl": "pkg:npm/underscore@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/underscore/-/underscore-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/underscore@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/underscore/-/underscore-1.6.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/underscore-contrib/node_modules/underscore"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/requizzle/node_modules/underscore"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-string-regexp",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1b61c0562190a8dff6ae3bb2cf0200ca130b86d4"
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/escape-string-regexp"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js2xmlparser",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3fb60eaa089c5440f9319f51760ccd07e2499733"
        }
      ],
      "purl": "pkg:npm/js2xmlparser@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js2xmlparser/-/js2xmlparser-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js2xmlparser@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js2xmlparser/-/js2xmlparser-3.0.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/js2xmlparser"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "xmlcreate",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fa6bf762a60a413fb3dd8f4b03c5b269238d308f"
        }
      ],
      "purl": "pkg:npm/xmlcreate@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xmlcreate/-/xmlcreate-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xmlcreate@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xmlcreate/-/xmlcreate-1.0.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/xmlcreate"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "",
      "name": "klaw",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "59c128e0dc5ce410201151194eeb9cbf858650f6"
        }
      ],
      "purl": "pkg:npm/klaw@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/klaw/-/klaw-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/klaw@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/klaw/-/klaw-2.0.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/klaw"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "4.1.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0e8bdfe4d1ddb8854d64e04ea7c00e2a026e5658"
        }
      ],
      "purl": "pkg:npm/graceful-fs@4.1.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.1.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@4.1.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.1.11.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/graceful-fs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mkdirp",
      "version": "0.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "30057438eac6cf7f8c4767f38648d6697d75c903"
        }
      ],
      "purl": "pkg:npm/mkdirp@0.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "http://registry.npmjs.org/mkdirp/-/mkdirp-0.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@0.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "http://registry.npmjs.org/mkdirp/-/mkdirp-0.5.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/mkdirp"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "0.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "857fcabfc3397d2625b8228262e86aa7a011b05d"
        }
      ],
      "purl": "pkg:npm/minimist@0.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "http://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@0.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "http://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/mkdirp/node_modules/minimist"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "requizzle",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6943c3530c4d9a7e46f1cddd51c158fc670cdbde"
        }
      ],
      "purl": "pkg:npm/requizzle@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/requizzle/-/requizzle-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/requizzle@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/requizzle/-/requizzle-0.2.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/requizzle"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-json-comments",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3c531942e908c2697c0ec344858c286c7ca0a60a"
        }
      ],
      "purl": "pkg:npm/strip-json-comments@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-json-comments@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-2.0.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/strip-json-comments"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "taffydb",
      "version": "2.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7cbcb64b5a141b6a2efc2c5d2c67b4e150b2a268"
        }
      ],
      "purl": "pkg:npm/taffydb@2.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/taffydb/-/taffydb-2.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/taffydb@2.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/taffydb/-/taffydb-2.6.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/taffydb"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "underscore",
      "version": "1.8.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4f3fb53b106e6097fcf9cb4109f2a5e9bdfa5022"
        }
      ],
      "purl": "pkg:npm/underscore@1.8.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/underscore/-/underscore-1.8.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/underscore@1.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/underscore/-/underscore-1.8.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/underscore"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-to-spawn-args",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "77da8827f073d011c9e1b173f895781470246785"
        }
      ],
      "purl": "pkg:npm/object-to-spawn-args@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-to-spawn-args/-/object-to-spawn-args-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-to-spawn-args@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-to-spawn-args/-/object-to-spawn-args-1.1.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/object-to-spawn-args"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "temp-path",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "24b1543973ab442896d9ad367dd9cbdbfafe918b"
        }
      ],
      "purl": "pkg:npm/temp-path@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/temp-path/-/temp-path-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/temp-path@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/temp-path/-/temp-path-1.0.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/temp-path"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsdoc-parse",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ed64ba78c1897dd2f7007e09388681906ced7b88156b861dcb25130a64db5982788edc5f07d828f15e5774a300480755f137e8f76c071666764a3274a3de230"
        }
      ],
      "purl": "pkg:npm/jsdoc-parse@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsdoc-parse/-/jsdoc-parse-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsdoc-parse@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsdoc-parse/-/jsdoc-parse-3.0.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/jsdoc-parse"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.omit",
      "version": "4.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6eb19ae5a1ee1dd9df0b969e66ce0b7fa30b5e60"
        }
      ],
      "purl": "pkg:npm/lodash.omit@4.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.omit/-/lodash.omit-4.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.omit@4.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.omit/-/lodash.omit-4.5.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/lodash.omit"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.pick",
      "version": "4.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "52f05610fff9ded422611441ed1fc123a03001b3"
        }
      ],
      "purl": "pkg:npm/lodash.pick@4.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.pick/-/lodash.pick-4.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.pick@4.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.pick/-/lodash.pick-4.4.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/lodash.pick"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "reduce-extract",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "67f2385beda65061b5f5f4312662e8b080ca1525"
        }
      ],
      "purl": "pkg:npm/reduce-extract@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/reduce-extract/-/reduce-extract-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/reduce-extract@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/reduce-extract/-/reduce-extract-1.0.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/reduce-extract"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "test-value",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a09136f72ec043d27c893707c2b159bfad7de93f"
        }
      ],
      "purl": "pkg:npm/test-value@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/test-value/-/test-value-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/test-value@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/test-value/-/test-value-1.1.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/reduce-extract/node_modules/test-value"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sort-array",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "38a9c6da27fd7d147b42e60554f281187b4df472"
        }
      ],
      "purl": "pkg:npm/sort-array@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sort-array/-/sort-array-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sort-array@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sort-array/-/sort-array-2.0.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/sort-array"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rollup",
      "version": "0.68.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f0334aa2cda9fc1ee00e8c48e369322071d7f1df99b7e6f08635205e74ea9d23fe0923e444d3484321c8713a9e19d61647bd2a1ba7350da45cae3580886e8092"
        }
      ],
      "purl": "pkg:npm/rollup@0.68.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rollup/-/rollup-0.68.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rollup@0.68.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rollup/-/rollup-0.68.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/rollup"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "estree",
      "version": "0.0.39",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "118370a776d4fbdf1ca54e250166182fb673fb682bc961f5a9b7434e275577a864891eb07a4b1d6cc69dc9729734f12440585733e8553bd6728289875e9f8023"
        }
      ],
      "purl": "pkg:npm/%40types/estree@0.0.39",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/estree/-/estree-0.0.39.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/estree@0.0.39",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/estree/-/estree-0.0.39.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/estree"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "node",
      "version": "10.12.18",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e1fa902ab78c51ccf7ea03a7a1dd9db2e9fc996af448ba6be385a08bef9dfe4d59062868693decab246d897ed0f44fdab8185d342a379fb10f8f40d0dd59069"
        }
      ],
      "purl": "pkg:npm/%40types/node@10.12.18",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/node/-/node-10.12.18.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/node@10.12.18",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/node/-/node-10.12.18.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/node"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "test-runner",
      "version": "0.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c59039299719bcf01db6186b84428b8e74b2c788bdffb8de10dbb912a52729673b6aec090ee4ddbd80f831b9c6fd1092a0f4d2e69ba7d23e902eb9a628fc5370"
        }
      ],
      "purl": "pkg:npm/test-runner@0.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/test-runner/-/test-runner-0.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/test-runner@0.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/test-runner/-/test-runner-0.5.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/test-runner"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "file-set",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c435c8d3dc3e97e997c560f29bb7505f2dcf2dda3b0f2807940b519d0e9720c6b4898fea5fafb527be638f0080ac2778f320a2331dbe7d19f9d014c5778e7e8d"
        }
      ],
      "purl": "pkg:npm/file-set@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/file-set/-/file-set-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/file-set@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/file-set/-/file-set-1.1.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/test-runner/node_modules/file-set"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/growl@1.10.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sprintf-js@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/argparse@1.0.10",
      "dependsOn": [
        "pkg:npm/sprintf-js@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/esprima@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/js-yaml@3.12.0",
      "dependsOn": [
        "pkg:npm/argparse@1.0.10",
        "pkg:npm/esprima@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/lcov-parse@0.0.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/log-driver@1.2.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimist@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aws-sign2@0.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aws4@1.8.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/caseless@0.12.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/delayed-stream@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/combined-stream@1.0.7",
      "dependsOn": [
        "pkg:npm/delayed-stream@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/extend@3.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/forever-agent@0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/asynckit@0.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-db@1.36.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-types@2.1.20",
      "dependsOn": [
        "pkg:npm/mime-db@1.36.0"
      ]
    },
    {
      "ref": "pkg:npm/form-data@2.3.3",
      "dependsOn": [
        "pkg:npm/asynckit@0.4.0",
        "pkg:npm/combined-stream@1.0.7",
        "pkg:npm/mime-types@2.1.20"
      ]
    },
    {
      "ref": "pkg:npm/co@4.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-deep-equal@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-json-stable-stringify@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-schema-traverse@0.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ajv@5.5.2",
      "dependsOn": [
        "pkg:npm/co@4.6.0",
        "pkg:npm/fast-deep-equal@1.1.0",
        "pkg:npm/fast-json-stable-stringify@2.0.0",
        "pkg:npm/json-schema-traverse@0.3.1"
      ]
    },
    {
      "ref": "pkg:npm/har-schema@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/har-validator@5.1.0",
      "dependsOn": [
        "pkg:npm/ajv@5.5.2",
        "pkg:npm/har-schema@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/assert-plus@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/extsprintf@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-schema@0.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/core-util-is@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/verror@1.10.0",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/extsprintf@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/jsprim@1.4.1",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/extsprintf@1.3.0",
        "pkg:npm/json-schema@0.2.3",
        "pkg:npm/verror@1.10.0"
      ]
    },
    {
      "ref": "pkg:npm/safer-buffer@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/asn1@0.2.4",
      "dependsOn": [
        "pkg:npm/safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/tweetnacl@0.14.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bcrypt-pbkdf@1.0.2",
      "dependsOn": [
        "pkg:npm/tweetnacl@0.14.5"
      ]
    },
    {
      "ref": "pkg:npm/dashdash@1.14.1",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/jsbn@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ecc-jsbn@0.1.2",
      "dependsOn": [
        "pkg:npm/jsbn@0.1.1",
        "pkg:npm/safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/getpass@0.1.7",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/sshpk@1.15.1",
      "dependsOn": [
        "pkg:npm/asn1@0.2.4",
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/bcrypt-pbkdf@1.0.2",
        "pkg:npm/dashdash@1.14.1",
        "pkg:npm/ecc-jsbn@0.1.2",
        "pkg:npm/getpass@0.1.7",
        "pkg:npm/jsbn@0.1.1",
        "pkg:npm/safer-buffer@2.1.2",
        "pkg:npm/tweetnacl@0.14.5"
      ]
    },
    {
      "ref": "pkg:npm/http-signature@1.2.0",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/jsprim@1.4.1",
        "pkg:npm/sshpk@1.15.1"
      ]
    },
    {
      "ref": "pkg:npm/is-typedarray@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isstream@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-stringify-safe@5.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/oauth-sign@0.9.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/performance-now@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qs@6.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/safe-buffer@5.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/psl@1.1.29",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/punycode@1.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tough-cookie@2.4.3",
      "dependsOn": [
        "pkg:npm/psl@1.1.29",
        "pkg:npm/punycode@1.4.1"
      ]
    },
    {
      "ref": "pkg:npm/tunnel-agent@0.6.0",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "pkg:npm/uuid@3.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/request@2.88.0",
      "dependsOn": [
        "pkg:npm/aws-sign2@0.7.0",
        "pkg:npm/aws4@1.8.0",
        "pkg:npm/caseless@0.12.0",
        "pkg:npm/combined-stream@1.0.7",
        "pkg:npm/extend@3.0.2",
        "pkg:npm/forever-agent@0.6.1",
        "pkg:npm/form-data@2.3.3",
        "pkg:npm/har-validator@5.1.0",
        "pkg:npm/http-signature@1.2.0",
        "pkg:npm/is-typedarray@1.0.0",
        "pkg:npm/isstream@0.1.2",
        "pkg:npm/json-stringify-safe@5.0.1",
        "pkg:npm/mime-types@2.1.20",
        "pkg:npm/oauth-sign@0.9.0",
        "pkg:npm/performance-now@2.1.0",
        "pkg:npm/qs@6.5.2",
        "pkg:npm/safe-buffer@5.1.2",
        "pkg:npm/tough-cookie@2.4.3",
        "pkg:npm/tunnel-agent@0.6.0",
        "pkg:npm/uuid@3.3.2"
      ]
    },
    {
      "ref": "pkg:npm/coveralls@3.0.2",
      "dependsOn": [
        "pkg:npm/growl@1.10.5",
        "pkg:npm/js-yaml@3.12.0",
        "pkg:npm/lcov-parse@0.0.10",
        "pkg:npm/log-driver@1.2.7",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/request@2.88.0"
      ]
    },
    {
      "ref": "pkg:npm/typical@2.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-back@2.0.0",
      "dependsOn": [
        "pkg:npm/typical@2.6.1"
      ]
    },
    {
      "ref": "pkg:npm/ansi-escape-sequences@4.0.0",
      "dependsOn": [
        "pkg:npm/array-back@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/test-value@3.0.0",
      "dependsOn": [
        "pkg:npm/array-back@2.0.0",
        "pkg:npm/typical@2.6.1"
      ]
    },
    {
      "ref": "pkg:npm/find-replace@2.0.1",
      "dependsOn": [
        "pkg:npm/array-back@2.0.0",
        "pkg:npm/test-value@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/argv-tools@0.1.1",
      "dependsOn": [
        "pkg:npm/array-back@2.0.0",
        "pkg:npm/find-replace@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash.camelcase@4.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/command-line-args@5.0.2",
      "dependsOn": [
        "pkg:npm/argv-tools@0.1.1",
        "pkg:npm/array-back@2.0.0",
        "pkg:npm/find-replace@2.0.1",
        "pkg:npm/lodash.camelcase@4.3.0",
        "pkg:npm/typical@2.6.1"
      ]
    },
    {
      "ref": "pkg:npm/deep-extend@0.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.padend@4.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/reduce-flatten@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wordwrapjs@3.0.0",
      "dependsOn": [
        "pkg:npm/reduce-flatten@1.0.1",
        "pkg:npm/typical@2.6.1"
      ]
    },
    {
      "ref": "pkg:npm/table-layout@0.4.4",
      "dependsOn": [
        "pkg:npm/array-back@2.0.0",
        "pkg:npm/deep-extend@0.6.0",
        "pkg:npm/lodash.padend@4.6.1",
        "pkg:npm/typical@2.6.1",
        "pkg:npm/wordwrapjs@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/command-line-usage@4.1.0",
      "dependsOn": [
        "pkg:npm/ansi-escape-sequences@4.0.0",
        "pkg:npm/array-back@2.0.0",
        "pkg:npm/table-layout@0.4.4",
        "pkg:npm/typical@2.6.1"
      ]
    },
    {
      "ref": "pkg:npm/command-line-tool@0.8.0",
      "dependsOn": [
        "pkg:npm/ansi-escape-sequences@4.0.0",
        "pkg:npm/array-back@2.0.0",
        "pkg:npm/command-line-args@5.0.2",
        "pkg:npm/command-line-usage@4.1.0",
        "pkg:npm/typical@2.6.1"
      ]
    },
    {
      "ref": "pkg:npm/walk-back@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/config-master@3.1.0",
      "dependsOn": [
        "pkg:npm/walk-back@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/fs-then-native@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mkdirp2@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cache-point@0.4.1",
      "dependsOn": [
        "pkg:npm/array-back@2.0.0",
        "pkg:npm/fs-then-native@2.0.0",
        "pkg:npm/mkdirp2@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/common-sequence@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fs.realpath@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wrappy@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/once@1.4.0",
      "dependsOn": [
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/inflight@1.0.6",
      "dependsOn": [
        "pkg:npm/once@1.4.0",
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/inherits@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/balanced-match@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/concat-map@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/brace-expansion@1.1.11",
      "dependsOn": [
        "pkg:npm/balanced-match@1.0.0",
        "pkg:npm/concat-map@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/minimatch@3.0.4",
      "dependsOn": [
        "pkg:npm/brace-expansion@1.1.11"
      ]
    },
    {
      "ref": "pkg:npm/path-is-absolute@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob@7.1.3",
      "dependsOn": [
        "pkg:npm/fs.realpath@1.0.0",
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/once@1.4.0",
        "pkg:npm/path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/file-set@2.0.1",
      "dependsOn": [
        "pkg:npm/array-back@2.0.0",
        "pkg:npm/glob@7.1.3"
      ]
    },
    {
      "ref": "pkg:npm/lodash@4.17.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/async@2.6.1",
      "dependsOn": [
        "pkg:npm/lodash@4.17.11"
      ]
    },
    {
      "ref": "pkg:npm/minimist@0.0.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wordwrap@0.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/optimist@0.6.1",
      "dependsOn": [
        "pkg:npm/minimist@0.0.10",
        "pkg:npm/wordwrap@0.0.3"
      ]
    },
    {
      "ref": "pkg:npm/source-map@0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/commander@2.17.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uglify-js@3.4.9",
      "dependsOn": [
        "pkg:npm/commander@2.17.1",
        "pkg:npm/source-map@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/handlebars@4.0.12",
      "dependsOn": [
        "pkg:npm/async@2.6.1",
        "pkg:npm/optimist@0.6.1",
        "pkg:npm/source-map@0.6.1",
        "pkg:npm/uglify-js@3.4.9"
      ]
    },
    {
      "ref": "pkg:npm/marked@0.3.19",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object-get@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/reduce-unique@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-back@1.0.4",
      "dependsOn": [
        "pkg:npm/typical@2.6.1"
      ]
    },
    {
      "ref": "pkg:npm/test-value@2.1.0",
      "dependsOn": [
        "pkg:npm/array-back@1.0.4",
        "pkg:npm/typical@2.6.1"
      ]
    },
    {
      "ref": "pkg:npm/reduce-without@1.0.1",
      "dependsOn": [
        "pkg:npm/test-value@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/walk-back@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dmd@3.0.13",
      "dependsOn": [
        "pkg:npm/array-back@2.0.0",
        "pkg:npm/cache-point@0.4.1",
        "pkg:npm/common-sequence@1.0.2",
        "pkg:npm/file-set@2.0.1",
        "pkg:npm/handlebars@4.0.12",
        "pkg:npm/marked@0.3.19",
        "pkg:npm/object-get@2.1.0",
        "pkg:npm/reduce-flatten@1.0.1",
        "pkg:npm/reduce-unique@1.0.0",
        "pkg:npm/reduce-without@1.0.1",
        "pkg:npm/test-value@3.0.0",
        "pkg:npm/walk-back@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/stream-connect@1.0.2",
      "dependsOn": [
        "pkg:npm/array-back@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/stream-via@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/collect-all@1.0.3",
      "dependsOn": [
        "pkg:npm/stream-connect@1.0.2",
        "pkg:npm/stream-via@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/babylon@7.0.0-beta.19",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bluebird@3.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/underscore@1.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/underscore-contrib@0.3.0",
      "dependsOn": [
        "pkg:npm/underscore@1.6.0"
      ]
    },
    {
      "ref": "pkg:npm/catharsis@0.8.9",
      "dependsOn": [
        "pkg:npm/underscore-contrib@0.3.0"
      ]
    },
    {
      "ref": "pkg:npm/escape-string-regexp@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xmlcreate@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/js2xmlparser@3.0.0",
      "dependsOn": [
        "pkg:npm/xmlcreate@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/graceful-fs@4.1.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/klaw@2.0.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11"
      ]
    },
    {
      "ref": "pkg:npm/minimist@0.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mkdirp@0.5.1",
      "dependsOn": [
        "pkg:npm/minimist@0.0.8"
      ]
    },
    {
      "ref": "pkg:npm/requizzle@0.2.1",
      "dependsOn": [
        "pkg:npm/underscore@1.6.0"
      ]
    },
    {
      "ref": "pkg:npm/strip-json-comments@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/taffydb@2.6.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/underscore@1.8.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsdoc@3.5.5",
      "dependsOn": [
        "pkg:npm/babylon@7.0.0-beta.19",
        "pkg:npm/bluebird@3.5.2",
        "pkg:npm/catharsis@0.8.9",
        "pkg:npm/escape-string-regexp@1.0.5",
        "pkg:npm/js2xmlparser@3.0.0",
        "pkg:npm/klaw@2.0.0",
        "pkg:npm/marked@0.3.19",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/requizzle@0.2.1",
        "pkg:npm/strip-json-comments@2.0.1",
        "pkg:npm/taffydb@2.6.2",
        "pkg:npm/underscore@1.8.3"
      ]
    },
    {
      "ref": "pkg:npm/object-to-spawn-args@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/temp-path@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsdoc-api@4.0.3",
      "dependsOn": [
        "pkg:npm/array-back@2.0.0",
        "pkg:npm/cache-point@0.4.1",
        "pkg:npm/collect-all@1.0.3",
        "pkg:npm/file-set@2.0.1",
        "pkg:npm/fs-then-native@2.0.0",
        "pkg:npm/jsdoc@3.5.5",
        "pkg:npm/object-to-spawn-args@1.1.1",
        "pkg:npm/temp-path@1.0.0",
        "pkg:npm/walk-back@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/lodash.omit@4.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.pick@4.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/test-value@1.1.0",
      "dependsOn": [
        "pkg:npm/array-back@1.0.4",
        "pkg:npm/typical@2.6.1"
      ]
    },
    {
      "ref": "pkg:npm/reduce-extract@1.0.0",
      "dependsOn": [
        "pkg:npm/test-value@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/sort-array@2.0.0",
      "dependsOn": [
        "pkg:npm/array-back@1.0.4",
        "pkg:npm/object-get@2.1.0",
        "pkg:npm/typical@2.6.1"
      ]
    },
    {
      "ref": "pkg:npm/jsdoc-parse@3.0.1",
      "dependsOn": [
        "pkg:npm/array-back@2.0.0",
        "pkg:npm/lodash.omit@4.5.0",
        "pkg:npm/lodash.pick@4.4.0",
        "pkg:npm/reduce-extract@1.0.0",
        "pkg:npm/sort-array@2.0.0",
        "pkg:npm/test-value@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/jsdoc-to-markdown@4.0.1",
      "dependsOn": [
        "pkg:npm/array-back@2.0.0",
        "pkg:npm/command-line-tool@0.8.0",
        "pkg:npm/config-master@3.1.0",
        "pkg:npm/dmd@3.0.13",
        "pkg:npm/jsdoc-api@4.0.3",
        "pkg:npm/jsdoc-parse@3.0.1",
        "pkg:npm/walk-back@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@types/estree@0.0.39",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/node@10.12.18",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rollup@0.68.1",
      "dependsOn": [
        "pkg:npm/@types/estree@0.0.39",
        "pkg:npm/@types/node@10.12.18"
      ]
    },
    {
      "ref": "pkg:npm/file-set@1.1.2",
      "dependsOn": [
        "pkg:npm/array-back@1.0.4",
        "pkg:npm/glob@7.1.3"
      ]
    },
    {
      "ref": "pkg:npm/test-runner@0.5.1",
      "dependsOn": [
        "pkg:npm/ansi-escape-sequences@4.0.0",
        "pkg:npm/array-back@2.0.0",
        "pkg:npm/command-line-args@5.0.2",
        "pkg:npm/command-line-usage@4.1.0",
        "pkg:npm/file-set@1.1.2",
        "pkg:npm/reduce-flatten@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/byte-size@5.0.1",
      "dependsOn": [
        "pkg:npm/coveralls@3.0.2",
        "pkg:npm/jsdoc-to-markdown@4.0.1",
        "pkg:npm/rollup@0.68.1",
        "pkg:npm/test-runner@0.5.1"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/byte-size@5.0.1"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-07-29T09:56:00Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Wednesday, July 29, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'byte-size' with version '5.0.1'. The package type in this SBOM is npm with a single purl namespace '@types' described under components. The components were identified from the source files: package-lock.json."
    }
  ]
}