{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:3d13252a-2413-46da-9f10-7849a83a5fd3",
  "version": 1,
  "metadata": {
    "timestamp": "2026-07-24T21:47:53Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "case-sensitive-paths-webpack-plugin",
      "group": "",
      "version": "2.4.0",
      "description": "Enforces module path case sensitivity in Webpack",
      "purl": "pkg:npm/case-sensitive-paths-webpack-plugin@2.4.0",
      "bom-ref": "pkg:npm/case-sensitive-paths-webpack-plugin@2.4.0",
      "author": "Michael Pratt",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "test, lint, lintfix, version"
        }
      ],
      "type": "application",
      "components": [
        {
          "authors": [
            {
              "name": "Urthen & XML"
            }
          ],
          "group": "",
          "name": "casesensitivepathswebpackpluginDemo",
          "version": "0.0.1",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "url": "https://opensource.org/licenses/MIT"
              }
            }
          ],
          "purl": "pkg:npm/casesensitivepathswebpackpluginDemo@0.0.1",
          "type": "application",
          "bom-ref": "pkg:npm/casesensitivepathswebpackpluginDemo@0.0.1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/Urthen/case-sensitive-paths-webpack-plugin#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/Urthen/case-sensitive-paths-webpack-plugin.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@babel\\n@eslint\\n@istanbuljs\\n@types\\n@ungap\\n@webassemblyjs\\n@xtuc"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "demo/package-lock.json\\npackage-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "auto-changelog",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e5ca425f66b5e55940000c1a86a0dd5e9669edad1731ee81329b2601dcd44f119c6fd137d81df8af9b0cde8d4327c0075728281b40fa3b195e542ecde3c297f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/auto-changelog@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/auto-changelog/-/auto-changelog-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/auto-changelog@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/auto-changelog/-/auto-changelog-2.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3f40b2b0d0d0eebb55c3840842d9be311c55ebabca152be5b10bc6617656477a855348e530a1d9659830f1efbc0d26a1e140ca32a9e49d10d0cfec6e41743f66"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/commander@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-5.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "handlebars",
      "version": "4.7.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6807179b93807c4ffc21791c66f09ea4a5375735b5ff7f456f966ea8cb6023f853f17d9882832f058e5d2e1abf7293afc3b2e4d672bf505ef568b1bf66755844"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/handlebars@4.7.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/handlebars/-/handlebars-4.7.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/handlebars@4.7.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/handlebars/-/handlebars-4.7.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "1.2.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "14cf6735462b4410042d9413df179943b7e630e060ea758d989293720b0979a2ecb4ffd43835691acaf93a15e185783a7feaad27cba267e3d4c640d67202172f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/minimist@1.2.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimist/-/minimist-1.2.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@1.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimist/-/minimist-1.2.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "neo-async",
      "version": "2.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "61ddd4112e665824aa47ea8d4fddd2dd4a18524a8067d94b83c6bb83dae29ac5a66062bc7154e8038fec17746bb21772577b0018c5d5526a4c60ec3e74ba4ebb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/neo-async@2.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/neo-async/-/neo-async-2.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/neo-async@2.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/neo-async/-/neo-async-2.6.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "52381aa6e99695b3219018334fb624739617513e3a17488abbc4865ead1b7303f9773fe1d0f963e9e9c9aa3cf565bab697959aa989eb55bc16396332177178ee"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:npm/source-map@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wordwrap",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "27584810891456a4171c8d0226441ade90cbcaeb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/wordwrap@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wordwrap/-/wordwrap-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wordwrap@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wordwrap/-/wordwrap-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uglify-js",
      "version": "3.12.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7ef05eb973acbea8de714b45fe5d5dc2caeb7f9cb6042524f403891b319c9bab44eef7a092ee6efd8bea8f20da006af8db63cba0b9ebc60dc49d1bd3aac742d7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:npm/uglify-js@3.12.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uglify-js/-/uglify-js-3.12.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uglify-js@3.12.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uglify-js/-/uglify-js-3.12.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.uniqby",
      "version": "4.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d99c07a669e9e6d24e1362dfe266c67616af1302"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/lodash.uniqby@4.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.uniqby/-/lodash.uniqby-4.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.uniqby@4.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.uniqby/-/lodash.uniqby-4.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-fetch",
      "version": "2.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "57869883cf63128551c516f67c974083c147bc8edc13261d54087de071f45082bca09c547e48e50d037d45b331f9b1233fbfa080c885469ad2b62d37d8e8a9c7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/node-fetch@2.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-fetch@2.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-github-url",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "92005fe9abc26cedc29faf919f34462e452cbf8655aaffd57c062446cc8172092c84dbd5064467d45119716d096fe9e95d05a6daf1cf9e73aa16d799c5144637"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/parse-github-url@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-github-url/-/parse-github-url-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-github-url@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-github-url/-/parse-github-url-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "6.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6f7f5305a4d27d5eb206b6a953cf69e5f29e904da6fcdc270e870e56bb90152d7fbde320773b8f72738cdf833a0b0c56f231ff97111ae6b0680de530bb91c74f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/semver@6.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-6.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@6.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-6.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint",
      "version": "7.20.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a868b409370e18fd8eb42401816665423713b8fd17908a58163db95ed4534121c2fae98d9e9ed432c86bd86f122ec4456037403c57873ac8ad79a766307d3663"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/eslint@7.20.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint/-/eslint-7.20.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint@7.20.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint/-/eslint-7.20.0.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This version is no longer supported. Please see https://eslint.org/version-support for other options."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "code-frame",
      "version": "7.12.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "66dd72a1d071d5473289e3cc4a45a753884faa1c2aee11a2da714bd4b780dc4525faad8b431d7a3084a0274fb3edd9e682f3fd42d2257ae11318e88e1f545c23"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/code-frame@7.12.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.12.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/code-frame@7.12.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.12.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "highlight",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "92870342f21b80c2a55b15def5fa1fdd343e82420f394484621263a948ef28c7b3de4ad5eef6f36020eadfd3a3d7550054aec9a8f54640f96013ce5d3cd950c3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/highlight@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/highlight/-/highlight-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/highlight@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/highlight/-/highlight-7.12.13.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-validator-identifier",
      "version": "7.12.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9e9fe51b7b80445c9b9281e89095267f541f12f45508f6e641e510a4aa30e5c437c56ad5f62deb507a1d28324f41f4d55fad6a2a2f9475893c92293ce27ed73b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-validator-identifier@7.12.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.12.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-validator-identifier@7.12.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.12.11.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "2.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32d8be7fd96924d730178b5657cfcead34ed1758198be7fc16a97201da2eada95c156150585dbe3600874a18e409bf881412eaf5bb99c04d71724414e29792b9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/chalk@2.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chalk/-/chalk-2.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chalk@2.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chalk/-/chalk-2.4.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "3.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "553d1923a91945d4e1f18c89c3748c6d89bfbbe36a7ec03112958ed0f7fdb2af3f7bde16c713a93cac7d151d459720ad3950cd390fbc9ed96a17189173eaf9a8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ansi-styles@3.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-3.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@3.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-3.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-convert",
      "version": "1.9.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "41f014b5dfaf15d02d150702f020b262dd5f616c52a8088ad9c483eb30c1f0dddca6c10102f471a7dcce1a0e86fd21c7258013f3cfdacff22e0c600bb0d55b1a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/color-convert@1.9.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-convert/-/color-convert-1.9.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-convert@1.9.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-convert/-/color-convert-1.9.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-name",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a7d0558bd89c42f795dd42328f740831ca53bc25"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/color-name@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-name/-/color-name-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-name@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-name/-/color-name-1.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-string-regexp",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1b61c0562190a8dff6ae3bb2cf0200ca130b86d4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "5.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "423563c1d5c8b78d3c308880a825f8a142ac814d84a801b3b363e9926e1a4186e39be644584716e127c5353af8b8c35999ad1ecb87f99602eb901d1a5f440ca3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/supports-color@5.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-5.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@5.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-5.5.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-flag",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b5d454dc2199ae225699f3467e5a07f3b955bafd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/has-flag@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-flag/-/has-flag-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-flag@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-flag/-/has-flag-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-tokens",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "45d2547e5704ddc5332a232a420b02bb4e853eef5474824ed1b7986cf84737893a6a9809b627dca02b53f5b7313a9601b690f690233a49bce0e026aeb16fcf29"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/js-tokens@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-tokens@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@eslint",
      "name": "eslintrc",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d494ca82b38a007562bd2bce630fac24eba79018d43af8ea5a4d433e36bb6458484b6997ff81204d3f0cede4caf63aca84bfc5bd75c46d0c08b37a60d71a7776"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40eslint/eslintrc@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@eslint/eslintrc/-/eslintrc-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@eslint/eslintrc@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@eslint/eslintrc/-/eslintrc-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ajv",
      "version": "6.12.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8f77d52e0bd3a39dbb6a7c98c893864d825b1bebe79d062f1349b99a691cd532be9f1029a6408b3082f4699e1d6e55423681928619be933138654ca4068320e2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ajv@6.12.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ajv@6.12.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-deep-equal",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f1411ae7c4032dab8335fa5bad7e7943d8eb1874e1c3664c74e932e46975083b557890cf56b1b8271c7537c8f0da091669f7f9514b97d4a25dfbdcc67b607e64"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/fast-deep-equal@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-deep-equal@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-json-stable-stringify",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "96177fc05f8b93df076684c2b6556b687b5f8795d88a32236a55dc93bb1a52db9a9d20f22ccc671e149710326a1f10fb9ac47c0f4b829aa964c23095f31bf01f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/fast-json-stable-stringify@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-json-stable-stringify/-/fast-json-stable-stringify-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-json-stable-stringify@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-json-stable-stringify/-/fast-json-stable-stringify-2.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-schema-traverse",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5b6c21f9742614e53f0b704861ba1ec727cf075ee5b7aac237634cce64529f6441dca5688753f271ce4eb6f41aec69bfe63221d0b62f7030ffbce3944f7b756"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/json-schema-traverse@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-schema-traverse@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uri-js",
      "version": "4.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "298f45ae68abaa5f755f64208ebcb459de18f984ddadd661792f13170be46cb59ffc6e4a3490c287aa4a2f939972d116e3ed0169ae6274ad9942e10b4703f39d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:npm/uri-js@4.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uri-js/-/uri-js-4.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uri-js@4.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uri-js/-/uri-js-4.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "punycode",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5d1b118dd7fe8f99a5fb2ffa18a1cf65bac5ffca766206b424fb5da93218d977b9a2124f0fdb1a0c924b3efa7df8d481a6b56f7af7576726e78f672ff0e11dd0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/punycode@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/punycode/-/punycode-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/punycode@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/punycode/-/punycode-2.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "4.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "76813076f9b83c278ae0add140dd990b60585016b1c0b0110aa666323b45f1ae7527645bd31a559681519c2383c2a8e9c270286a8e297a537c97744976fde045"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/debug@4.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-4.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@4.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-4.3.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b0690fc7e56332d980e8c5f6ee80381411442c50996784b85ea7863970afebcb53fa36f7be4fd1c9a2963f43d32b25ad98b48cd1bf9a7544c4bdbb353c4687db"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ms@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "espree",
      "version": "7.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bf724234213ae2e9a41699a4146ab354ab0e4f4b4dd59afeb9ea8b65fa55d4e6fc7be08480f59af8ec42a061f7b6786298c2886819b89bfbda46927f92b473da"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:npm/espree@7.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/espree/-/espree-7.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/espree@7.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/espree/-/espree-7.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn",
      "version": "7.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9d0ca9d28d7f98d75b4ced4f3ba9079304ab9a0674313fe3082a4d8b06d48c6a11378765061a89b6842e0a710e2b3813570834656882a10cba4b131e6d0561f0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/acorn@7.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn/-/acorn-7.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn@7.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn/-/acorn-7.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn-jsx",
      "version": "5.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2b43ed9bfe3b38a7d0469350d89fe820dff741888ae85c16f9e25b20b86c7718765932dd97edf4a3c6867536e6e496df7e9145020fe0fb38b513e8ef2616b99e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/acorn-jsx@5.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn-jsx/-/acorn-jsx-5.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn-jsx@5.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn-jsx/-/acorn-jsx-5.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-visitor-keys",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e89ef637c50d6b8eb6c1afca14e0edfcf277214eb4483a42dd05c2d478dcd415d7a5f2f60bd479f8053b8e17b417a19112a54c87826ebbe358ef19fee9d8a951"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/eslint-visitor-keys@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-visitor-keys@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globals",
      "version": "12.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "056202bb3cc3bc3a07e78347282b1e0da9c0844dc2783a2b8032f9313e8b3175e3d960a777d502daccdd9380162df8dd80d0425cb51a9d761ca4104a392586c2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/globals@12.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/globals/-/globals-12.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globals@12.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/globals/-/globals-12.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-fest",
      "version": "0.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e1d6f3233aaf8ed822339af0d64e6b107b4100d2a676e7611b20446a3374d5f13285a00886ca0a372eb2efe20df7721fa45b7063d8aa8bb903fb1c0a850b0d24"
        }
      ],
      "licenses": [
        {
          "expression": "(MIT OR CC0-1.0)"
        }
      ],
      "purl": "pkg:npm/type-fest@0.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-fest/-/type-fest-0.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-fest@0.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-fest/-/type-fest-0.8.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ignore",
      "version": "4.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7321432aba9cfd875c5859e2261cc8e36f80cd2fa0370994cce485711090630c92b81041cbf2a3bb158b67f147107e8ca2ad4d8b330e056c9372ff0ee0e64832"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ignore@4.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ignore/-/ignore-4.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ignore@4.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ignore/-/ignore-4.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "import-fresh",
      "version": "3.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bde6188506be0f54012b39ef8541f16fc7dac65af0527c6c78301b029e39ec4d302cd8a8d9b3922a78d80e1323f98880abad71acc1a1424f625d593917381033"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/import-fresh@3.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/import-fresh/-/import-fresh-3.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/import-fresh@3.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/import-fresh/-/import-fresh-3.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parent-module",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "190d84591a5057cfe8f80c3c62ab5f6593df3515996246e2744f64e6ba65fe10b7bed1c705f1a6d887e2eaa595f9ca031a4ad42990311372e8b7991cb11961fa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/parent-module@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parent-module/-/parent-module-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parent-module@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parent-module/-/parent-module-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "callsites",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3fc06302c5ef652f95203508d7584709012fef8613ebb6148b924914d588a8bdb7e6c0668d7e3eab1f4cbaf96ce62bf234435cb71e3ac502d0dda4ee13bb2c69"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/callsites@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/callsites/-/callsites-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/callsites@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/callsites/-/callsites-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve-from",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a5bfcc6265ecb40932b11171f2988d235b4614d408140def904dc6ab812e035745ea01e9ffebe066ab021896a9bf2f0ddd0fb8a3b170beab8f25c9d9ed1632e2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/resolve-from@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve-from/-/resolve-from-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve-from@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve-from/-/resolve-from-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-yaml",
      "version": "3.14.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a24307ece5d727b62b37d3a4dff497ae7bb8897f723a4fb6e67a97e22992da7a6ebd36039a8fd0119a2ac199186880e4de356f04e4ce20480485a2ceca7052f6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/js-yaml@3.14.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-yaml@3.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "argparse",
      "version": "1.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a39468cbab4d1b848bfc53a408037a4738e26a4652db944b605adc32db49a9b75df015ab9c0f9f1b3e7b88de4f6f4ea9bc11af979810d01e3c74996c957be84e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/argparse@1.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/argparse@1.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sprintf-js",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "04e6926f662895354f3dd015203633b857297e2c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:npm/sprintf-js@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sprintf-js@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "786b85170ed4a5d6be838a7e407be75b44724d7fd255e2410ccfe00ad30044ed1c2ee4f61dc10a9d33ef86357a6867aaac207fb1b368a742acce6d23b1a594e0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:npm/esprima@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash",
      "version": "4.17.21",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bf690311ee7b95e713ba568322e3533f2dd1cb880b189e99d4edef13592b81764daec43e2c54c61d5c558dc5cfb35ecb85b65519e74026ff17675b6f8f916f4a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/lodash@4.17.21",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@4.17.21",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c891d5404872a8f2d44e0b7d07cdcf5eee96debc7832fbc7bd252f4e8a20a70a060ce510fb20eb4741d1a2dfb23827423bbbb8857de959fb7a91604172a87450"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/minimatch@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brace-expansion",
      "version": "1.1.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@1.1.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "balanced-match",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "89b4d199ab2bee49de164ea02b89ce462d71b767"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/balanced-match@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/balanced-match@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concat-map",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d8a96bd77fd68df7793a73036a3ba0d5405d477b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/concat-map@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-map@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-json-comments",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e9f3dcf91e22870a8fe8dfda22fd9fd60307f25395b56407a2a0b8c8aea8483555a1cba602c7c2aa39179ea89832198cc12fe61072e9ed57a196ddea97a9448a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/strip-json-comments@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-json-comments@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-3.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "37da1615c7a04b4b05afda21d68cf677b369a2ceaf368596f47bed0a0e4dd4a445a5485a021bd3bf9639f20f3cd1f65a11848d9b7a83cfc494d54ac6be9fa7ec"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/chalk@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chalk/-/chalk-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chalk@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chalk/-/chalk-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "4.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f551a3accb06d6f78fc5c4b0790b0ddb4298fdce3337487d7cb8ea01bc1b3df6a1337b7e34bf8cf470bcc5e5c6d88f295f93686a64c636ea26114148edf7148c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ansi-styles@4.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@4.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "color-name",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aebf8e432023c737bb1a05ab49a270c9d1d2b48847ab696f63704e0b6323eca9f323b5cad14c354ce39d23d943a1a8c46d258b898828a387f5479d5ead07e13d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40types/color-name@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/color-name/-/color-name-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/color-name@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/color-name/-/color-name-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-convert",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4511023ec8fb8aeff16f9a0a61cb051d2a6914d9ec8ffe763954d129be333f9a275f0545df3566993a0d70e7c60be0910e97cafd4e7ce1f320dfc64709a12529"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/color-convert@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-convert@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-name",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "74ecbedc0b96ddadb035b64722e319a537208c6b8b53fb812ffb9b71917d3976c3a3c7dfe0ef32569e417f479f4bcb84a18a39ab8171edd63d3a04065e002c40"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/color-name@1.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-name@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "7.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a11488a51f29c53d56af616ab9336719eb7bf5bdc15a58ea3aea16fe1e28061c49fc751b5f99d7e894abb9392f5c30853300cfbec6934dbbcc2ca6564b2d11e6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/supports-color@7.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-7.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@7.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-7.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-flag",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1329094ff4352a34d672da698080207d23b4b4a56e6548e180caf5ee4a93ba6325e807efdc421295e53ba99533a170c54c01d30c2e0d3a81bf67153712f94c3d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/has-flag@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-flag@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cross-spawn",
      "version": "7.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8910cf24a50f544343edd1cf3bcae46ce9cfa720f281c0c5b568e9796342832f163f6ad77315cbf13b2445e425e8eac1d86efe509ada82cd6ad7916e75cec6eb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/cross-spawn@7.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cross-spawn@7.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-key",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a2399e374a9dfb2d23b3312da18e3caf43deab97703049089423aee90e5fe3595f92cc17b8ab58ae18284e92e7c887079b6e1486ac7ee53aa6d889d2c0b844e9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/path-key@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-key@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shebang-command",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "907c6bdb366962d766acdd6a0e3aeb5ff675ad1d641bc0f1fa09292b51b87979af5ecc26704d614d6056614ce5ada630d7fc99a7a62e0d8efb62dbdb3747660c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/shebang-command@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shebang-command@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shebang-regex",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "efef9d161b5cc77df9dee05aabc0c347836ec417ad0730bb6503a19934089c711de9b4ab5dd884cb30af1b4ed9e3851874b4a1594c97b7933fca1cfc7a471bd4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/shebang-regex@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shebang-regex@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "04b2374e5d535b73ef97bd25df2ab763ae22f9ac29c17aac181616924a8cb676d782b303fb28fbae15b492e103c7325a6171a3116e6881aa4a34c10a34c8e26c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/which@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which/-/which-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which/-/which-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isexe",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e8fbf374dc556ff8947a10dcb0572d633f2cfa10"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/isexe@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isexe@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "doctrine",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c92f90e62de105fec6064778286f1aede04d3563462d3684c306165228c860cef3ae56033340455c78e33d6956675460ed469d7597880e68bd8c5dc79aa890db"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/doctrine@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/doctrine/-/doctrine-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/doctrine@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/doctrine/-/doctrine-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esutils",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "915b1ca97938382a7af126747648042958baffc8a3df4d0a0564c9ab7d8ffdd61e5934b02b8d56c93c5a94dd5e46603967d514fcb5fd0fb1564a657d480631ea"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:npm/esutils@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esutils/-/esutils-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esutils@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esutils/-/esutils-2.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "enquirer",
      "version": "2.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ca33673ebdf5e7f1634b8cc8b14c5882e6143cfd9ed4d2b877b13b64e2e2c9809c6c50624ccc880fedb0be6db0ebea59fe874c03b71192386c3db96dc013ab2e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/enquirer@2.3.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/enquirer/-/enquirer-2.3.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/enquirer@2.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/enquirer/-/enquirer-2.3.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-colors",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2685f46a919b1da50904d97ac85fa9e89005619ebaebf86108628de6df501636c940a514fe0f0c35b1436ef7eb80a5ef23542966994f3a7c08a3df655ff00098"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ansi-colors@4.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-colors/-/ansi-colors-4.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-colors@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-colors/-/ansi-colors-4.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-scope",
      "version": "5.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d8dc706c5fe16742a97a960dd1c35ba3e14de97a0aec6687950860c7f848665e956b46c5e3945038ec212c8cbc9500dbb8289a7522c20671f608562aba2b796f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:npm/eslint-scope@5.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-scope/-/eslint-scope-5.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-scope@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-scope/-/eslint-scope-5.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esrecurse",
      "version": "4.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2a67ca2f76fa1be457bcff0dd6faf74ead642ffa021609f63585c4b6a3fcfcbde929aa540381bc70555aa05dd2537db7083e17ca947f7df8a81e692d8bafd36a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:npm/esrecurse@4.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esrecurse/-/esrecurse-4.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esrecurse@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esrecurse/-/esrecurse-4.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "estraverse",
      "version": "5.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0716cd186366d11c9162f51d1e9230bfd216cde33d5c295b3b1c28013b8574e13b644eb01cbf874394fc8683ccfb31ef98acf3b04aa1832d06ad0e57d7769f89"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:npm/estraverse@5.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/estraverse/-/estraverse-5.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/estraverse@5.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/estraverse/-/estraverse-5.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "estraverse",
      "version": "4.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dfd9e729f7d6cfcc4dd4153fd9cefd9fd9c1f470f3a349e2614ab1eb1caa527ca8027432c96a4e4dd6447a209c87c041bb9d79b78c29f599a055f5619fd101a7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:npm/estraverse@4.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/estraverse/-/estraverse-4.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/estraverse@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/estraverse/-/estraverse-4.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-utils",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c3de1d418a1abb2be50dce375e7181f2553766def5def342860b78116c215c03f65e406f9dd7f117402022a28e39ab233c83f38fd26a8309306c2603d3f57766"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/eslint-utils@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-utils/-/eslint-utils-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-utils@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-utils/-/eslint-utils-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-visitor-keys",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "42e76d4fa6afe565de96cf568c833bab3d570f57161af5f88065efa7fcc19fd9d71b4d83d2eb5d537126da6fd08d39ebb24e9b063982ca0977ae68f5d7c9ac41"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/eslint-visitor-keys@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-visitor-keys@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esquery",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7020e2b295ade6f1c7b70318d98ac043889b16400bf116c7e581819d905cf7432896fbdf92441c26ba3f699880414950dea82b612e83eaff067391b9090b1cf7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:npm/esquery@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esquery/-/esquery-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esquery@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esquery/-/esquery-1.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "file-entry-cache",
      "version": "6.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ec6a6cfd75b299b2e4d902d82b8373a4c3ab623321748c57b88bf2d9006c2c4ea58eea1d2af7645acfdca72249dc25485691f43a2d47be0d68bdb3332dd14106"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/file-entry-cache@6.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/file-entry-cache/-/file-entry-cache-6.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/file-entry-cache@6.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/file-entry-cache/-/file-entry-cache-6.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "flat-cache",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "766f6ce4fc3b25cd06bcc61bb2137acdc84203d460425cf31195f7bf2951f48a857d2f177226e551738a7d6e928ae2747b5dde0d8668655e7076b7afecfdcdc2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/flat-cache@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/flat-cache/-/flat-cache-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/flat-cache@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/flat-cache/-/flat-cache-3.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "flatted",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cc0a00422b9dcbeaf94af9d2c37289cb9a2cfe8449607cebce36bfb410eaad9b4d854c3c6edeb2f0e0733167235abfbc96257c11beb23a1c3c599ed5159e59cc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/flatted@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/flatted/-/flatted-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/flatted@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/flatted/-/flatted-3.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rimraf",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "25990931990018514f3f662a5d95cf6cc94c060b31cc4f082ece253085ffda8d0bf54070f4efd8de8eb0170fe2f582daa5c5095b0a9b8b791dc483dd0bad9320"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/rimraf@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rimraf/-/rimraf-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rimraf@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rimraf/-/rimraf-3.0.2.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Rimraf versions prior to v4 are no longer supported"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "7.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f06b1c3267bd8b93bbd920db4d36bcb05f466e2f24adadd0ed69b79f64a018e59189855b607739e5b917acc4d98f8ad1344803be3b6eac5931de292236c0c04"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/glob@7.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-7.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@7.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-7.1.6.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs.realpath",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1504ad2523158caa40db4a2787cb01411994ea4f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/fs.realpath@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs.realpath@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inflight",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "49bd6331d7d02d0c09bc910a1075ba8165b56df9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/inflight@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inflight@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful."
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "once",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "583b1aa775961d4b113ac17d9c50baef9dd76bd1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/once@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/once@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/once/-/once-1.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrappy",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b5243d8f3ec1aa35f1364605bc0d1036e30ab69f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/wrappy@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrappy@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/inherits@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-is-absolute",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "174b9268735534ffbc7ace6bf53a5a9e1b5c5f5f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/path-is-absolute@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-is-absolute@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "functional-red-black-tree",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1b0ab3bd553b2a0d6399d29c0e3ea0b252078327"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/functional-red-black-tree@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/functional-red-black-tree/-/functional-red-black-tree-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/functional-red-black-tree@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/functional-red-black-tree/-/functional-red-black-tree-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-parent",
      "version": "5.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "16723e5463a99e5187599c6d84f191f90851efc7ee88ad2c34b90742ff9b2fd7d08b9ee534d76ab886e76bf5ab7d13aba25abc18ae4493a062330a8bfefa1161"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/glob-parent@5.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-parent/-/glob-parent-5.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-parent@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-parent/-/glob-parent-5.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-glob",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e46d2d2ad05314898ea839cb076846e81a76a9c28415dba8e2d66ef4c4ff1fa350bff821872df4a39e6e7da7f127f2dd1fbf4b2ecd8a7eb9fce532cac80ec152"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/is-glob@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-glob/-/is-glob-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-glob@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-glob/-/is-glob-4.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-extglob",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a88c02535791f02ed37c76a1b9ea9773c833f8c2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/is-extglob@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-extglob@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "imurmurhash",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9218b9b2b928a238b13dc4fb6b6d576f231453ea"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/imurmurhash@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/imurmurhash/-/imurmurhash-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/imurmurhash@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/imurmurhash/-/imurmurhash-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-stable-stringify-without-jsonify",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9db7b59496ad3f3cfef30a75142d2d930ad72651"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/json-stable-stringify-without-jsonify@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-stable-stringify-without-jsonify/-/json-stable-stringify-without-jsonify-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-stable-stringify-without-jsonify@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-stable-stringify-without-jsonify/-/json-stable-stringify-without-jsonify-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "levn",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f9b4f6b87e04e4b184ee1fe7ddebdc4bfb109495c2a48a7aca6f0e589e5e57afbaec3b2a97f2da693eea24102ddabcdfa1aff94011818710e2c7574cb7691029"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/levn@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/levn/-/levn-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/levn@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/levn/-/levn-0.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prelude-ls",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "be47033eb459a354192db9f944b18fa60fd698843ae6aa165a170629ffdbe5ea659246ab5f49bdcfca6909ab789a53aa52c5a9c8db9880edd5472ad81d2cd7e6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/prelude-ls@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/prelude-ls/-/prelude-ls-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prelude-ls@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/prelude-ls/-/prelude-ls-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-check",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e5794a1cf6ec065ea8d6c176944d9026ccc705679f39f10036befc7552be7121c8b15c83fef0b9c50e0469954df4bacead7aa765b2415fbbe69ee0aefd3a87b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/type-check@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-check/-/type-check-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-check@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-check/-/type-check-0.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "natural-compare",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4abebfeed7541f2c27acfb29bdbbd15c8d5ba4f7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/natural-compare@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/natural-compare/-/natural-compare-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/natural-compare@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/natural-compare/-/natural-compare-1.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "optionator",
      "version": "0.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ef84656391429e1ab88d1c5550f283691c2b54d5ccaac1ac896e80270e172bc866b66d74c02d32a5904bc39208a7ce4d64cafdd7ea9dd51bef10dc20ee38d117"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/optionator@0.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/optionator/-/optionator-0.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/optionator@0.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/optionator/-/optionator-0.9.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-is",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b369d6fb5dbc13eecf524f91b070feedc357cf34"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/deep-is@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deep-is/-/deep-is-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deep-is@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deep-is/-/deep-is-0.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-levenshtein",
      "version": "2.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3d8a5c66883a16a30ca8643e851f19baa7797917"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/fast-levenshtein@2.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-levenshtein/-/fast-levenshtein-2.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-levenshtein@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-levenshtein/-/fast-levenshtein-2.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "word-wrap",
      "version": "1.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1f3fe6acdc22b4d461fc7500b4cfd54ffe551feca00fa0d5ee660a640b473ab6ecf14ee5bcf4bac5fec424a305d2e5b52890a5d07ef4d60dd91aeb3e9ae139bd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/word-wrap@1.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/word-wrap/-/word-wrap-1.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/word-wrap@1.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/word-wrap/-/word-wrap-1.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "progress",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ecf887b4b965e4b767288330d74d08fbcc495d1e605b6430598913ea226f6b46d78ad64a6bf5ccad26dd9a0debd979da89dcfd42e99dd153da32b66517d57db0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/progress@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/progress/-/progress-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/progress@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/progress/-/progress-2.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regexpp",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "64e23377cc95b10400ee3f0609294f197c20e4f7e60359abab424fe271a1879e0b68a377c5d6a2fef1d40eeef8a4ac15f0ec6c78c4bae6ed8d226a2c41c483d1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/regexpp@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regexpp/-/regexpp-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regexpp@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regexpp/-/regexpp-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "7.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b427dbd962e3a8502d5e7e0a11dc4885a96746da0a14dee70308f407765709b425a15dadab97836dc4e64faf09243de7449ab6e3f5e0c6d40a148a5076dbe657"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/semver@7.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-7.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@7.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-7.3.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-cache",
      "version": "6.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "268e9d274e029928eece7c09492de951e5a677f1f47df4e59175e0c198be7aad540a6a90c0287e78bb183980b063df758b615a878875044302c78a938466ec88"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/lru-cache@6.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yallist",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "df074689d672ab93c1d3ce172c44b94e9392440df08d7025216321ba6da445cbffe354a7d9e990d1dc9c416e2e6572de8f02af83a12cbdb76554bf8560472dec"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/yallist@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yallist@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-ansi",
      "version": "6.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "02ebca4eb4df40d60d21cb5b4752bf6064d1d7be7a1b270fb20edbf5b755f43baababe20bfa68aa875da87aed9f08992ed6133e5055c3ad95f5b6ad912e82deb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/strip-ansi@6.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-regex",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6d8e9f8f9e8e510d215352a314d0d0b8915ecea29dac0c857487af0038aaad61f04a56e604d307a796a4d9fe343e6f094c5c8cda6ab1906ea78241ced757ff96"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ansi-regex@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "table",
      "version": "6.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "af165ebcb1935335a76bfa812ce6ce7b5ea40764539e76e1722c203db30c95acf3d7264654482764aefadb1c95755ce786ac6b7c278132632480e39a3f08c7ee"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:npm/table@6.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/table/-/table-6.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/table@6.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/table/-/table-6.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ajv",
      "version": "7.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "81afdaa83627532fe8eef6ec453161853b0d7978986f92560c871121e65fc1134279fc23353558086746494ac49a2bb7c832b7bc5bcd6e0271beb416e095eb61"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ajv@7.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ajv/-/ajv-7.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ajv@7.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ajv/-/ajv-7.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-schema-traverse",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "34cf3f3fd9f75e35e12199f594b86415a0024ce5114178d6855e0103f4673aff31be0aadaa9017f483b89914314b1d51968e2dab37aa6f4b0e96bb9a3b2dddba"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/json-schema-traverse@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-schema-traverse@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "require-from-string",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5dfd2759ee91b1ece214cbbe029f5b8a251b9a996ae92f7fa7eef0ed85cffc904786b5030d48706bebc0372b9bbaa7d9593bde53ffc36151ac0c6ed128bfef13"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/require-from-string@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/require-from-string@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "slice-ansi",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a8c08c7e1634e347151d3e372bd045ca0a986d43c564a1ce83b2bbde6b5358945bf29c8fddfcdfe08c5de52cdd10943a311520fd606738bc60859b4a2aeac435"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/slice-ansi@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/slice-ansi/-/slice-ansi-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/slice-ansi@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/slice-ansi/-/slice-ansi-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "4.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cdb07dac22404f5adb8e25436f686a2851cd60bc60b64f0d511c59dc86700f717a36dc5b5d94029e74a2d4b931f880e885d3e5169db6db05402c885e64941212"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ansi-styles@4.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "astral-regex",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "67bb4cc35cad4d7b798ea31c38ff8e42d794d55b8d2bd634daeb89b4a4354afebd8d740a2a0e5c89b2f0189a30f32cd93fe780735f0498b18f6a5d1ba77eabbd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/astral-regex@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/astral-regex/-/astral-regex-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/astral-regex@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/astral-regex/-/astral-regex-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-fullwidth-code-point",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf29a6e7ebbeb02b125b20fda8d69e8d5dc316f84229c94a762cd868952e1c0f3744b8dbee74ae1a775d0871afd2193e298ec130096c59e2b851e83a115e9742"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/is-fullwidth-code-point@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-fullwidth-code-point@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string-width",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cd4cf9243fad82ab6e0e3321c08839b85555dddb6a67dc902656557eae08d35fcae4f6a3e541e3ed5cab40e26fcdac125652a939b0296df0f411deb225cfb57a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/string-width@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string-width/-/string-width-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string-width@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string-width/-/string-width-4.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "emoji-regex",
      "version": "8.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3128d8cdc58d380d1ec001e9cf4331a5816fc20eb28f2d4d1b7c6d7a8ab3eb8e150a8fd13e09ebd7f186b7e89cde2253cd0f04bb74dd335e126b09d5526184e8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/emoji-regex@8.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/emoji-regex@8.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "text-table",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7f5ee823ae805207c00af2df4a84ec3fcfa570b4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/text-table@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/text-table/-/text-table-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/text-table@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/text-table/-/text-table-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "v8-compile-cache",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "813a51e5740d285c0e778725c5f9e16aabdfa8ca6a130af8b4eb42cb3e0cb58657d896217ebd49bc114a752fbb2bff6b7e9651dd52d7f985816caa310a04b8dd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/v8-compile-cache@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/v8-compile-cache/-/v8-compile-cache-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/v8-compile-cache@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/v8-compile-cache/-/v8-compile-cache-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-config-airbnb-base",
      "version": "14.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "18ead0c83b5511cd57cb6d14eefb01db20280789c195f1f91d925e6ad4571e578ef8e4b93adf8c5a28f80e996dc38fc3c8892a51fab3d5ea5f8554795d65903c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/eslint-config-airbnb-base@14.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-config-airbnb-base/-/eslint-config-airbnb-base-14.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-config-airbnb-base@14.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-config-airbnb-base/-/eslint-config-airbnb-base-14.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-plugin-import",
      "version": "2.22.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f0aec98c83473a91fae28ce4021a53dec77e16cc086537cc6538ddc74e76a675ab8110957e9f28a7db5b8e9024dc3754788fc16b80bc3a3742d2bf747ab1c43b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/eslint-plugin-import@2.22.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-plugin-import/-/eslint-plugin-import-2.22.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-import@2.22.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-plugin-import/-/eslint-plugin-import-2.22.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-includes",
      "version": "3.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "81c7a6d4a94153b73dac1f91abcff73cf2ac2b6923a9e1016b76c3e64910a389d894e1d0089a88245a815c311fc1a46e6134f813e17103dc5ecfb19ffdedd0ec"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/array-includes@3.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-includes/-/array-includes-3.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-includes@3.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-includes/-/array-includes-3.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "call-bind",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ecef856c28a1ac1e5619b1587ac72dc264ca69eeab3a22339b3d6272b79627ed1a03b2c97eeaa112ca364fd9dca5c16dccc42dcd77f64061ae7962464d8b2aac"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/call-bind@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/call-bind@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "function-bind",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c88a2f033317e3db05f18979f1f482589e6cbd22ee6a26cfc5740914b98139b4ee0abd0c7f52a23e8a4633d3621638980426df69ad8587a6eb790e803554c8d0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/function-bind@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/function-bind@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-intrinsic",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "91666b9d5338d900a2100d888356c6f338e820c3a0c56c1808478d77063a4effdc392786a5ca17e295c77ca53134a56802b9eb12bd9ef6cae7031c4622b692f5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/get-intrinsic@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-intrinsic@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f676f3b4554e8e7a3ed1916246ade8636f33008c5a79fd528fa79b53a56215e091c764ad7f0716c546d7ffb220364964ded3d71a0e656d618cd61086c14b8cf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/has@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has/-/has-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has/-/has-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-symbols",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3cb72ca2abbef9d98421907eeada2d3452aaffb0e8f99d2ee284f4cca389365de560aeaf1b0c2eda18c7b3eebc38465b4e389413d6e03800576cffc6beb4b42a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/has-symbols@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-symbols@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "define-properties",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dcca9f60a8f694bcdd3127fc648644fd5f99bb2f81803e9fd7ae1ef0adb0edd827a4a02b0437ab198a4ce3a21861c8e791d3cd3233e4f40e95141f3edd22a55d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/define-properties@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/define-properties/-/define-properties-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/define-properties@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/define-properties/-/define-properties-1.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-keys",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "36e00449439432b9485ce7c72b30fa6e93eeded62ddf1be335d44843e15e4f494d6f82bc591ef409a0f186e360b92d971be1a39323303b3b0de5992d2267e12c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/object-keys@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-keys/-/object-keys-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-keys@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-keys/-/object-keys-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-abstract",
      "version": "1.18.0-next.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "221e193051c4b59ba99d487ae3def310be32dbec3cfb59639c2c9a4daf9a75ca1a7c8d463af3301650e304b7d647bcbd54b7eb8d125ef6872e1d8d4f491f638f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/es-abstract@1.18.0-next.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es-abstract/-/es-abstract-1.18.0-next.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-abstract@1.18.0-next.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es-abstract/-/es-abstract-1.18.0-next.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-to-primitive",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4023a5960649b5a528f6689805c2c285351a1cd8c91773d8b35562743ec0c22123d6463129e41372d2c07b300e1f964a447d20d8880f9fa2b0078213f22469bc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/es-to-primitive@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es-to-primitive/-/es-to-primitive-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-to-primitive@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es-to-primitive/-/es-to-primitive-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-callable",
      "version": "1.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2750dc31ef14613052aca7b3b885135308d7b21a36f7af77ba75ccd98849513476b712bf786e3b6ef35aff08a93c5999160aff37a7f5180eba76fd261324c8c9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/is-callable@1.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-callable/-/is-callable-1.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-callable@1.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-callable/-/is-callable-1.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-date-object",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5129434f9db8c28434f1aa19173877fd9e9c87d63f1165c41d0fc06913744a42aae2dd89c36476df7f6d4979b0b95a18ecb2e50426ce225c769b23ff2f9ce4d2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/is-date-object@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-date-object/-/is-date-object-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-date-object@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-date-object/-/is-date-object-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-symbol",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3b08a385a45282abe19bfd19740717359b7d95874a1697110d3e542d4b985cfa13efde1434e754fa0a53e91ce8edbe15d87525fe8a7a1aa63cf78019c2ff5f69"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/is-symbol@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-symbol/-/is-symbol-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-symbol@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-symbol/-/is-symbol-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-negative-zero",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "db3e89cd0bd945af40d98ef10ba750426e054934933568ca218613b78db8e9e313266228d10f99c8eb14eba5fc9712b501b07dd9d15e8253cbae1c2979128eeb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/is-negative-zero@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-negative-zero/-/is-negative-zero-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-negative-zero@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-negative-zero/-/is-negative-zero-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-regex",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6b1bdd85be697611154e1a89cd85f032556e6700be145d83a5c3a14d2fb2ffc8d5ab8b6bc723e07dcc08c482a2c9eb8b9524182a499468f409f19138c8d2970e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/is-regex@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-regex/-/is-regex-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-regex@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-regex/-/is-regex-1.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-inspect",
      "version": "1.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8b7069f624eac2168b641c469117e8e596c4d3b050453ecc1aef3e9cd8305bd22d1a9d53cc24f0d832c4a16c230a5c418ce148fe15a58d3026606084c26b673b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/object-inspect@1.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-inspect@1.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.9.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object.assign",
      "version": "4.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8b14f62f94c75ec029ca250f60a996fb6107a575dee488b733e7f87be6891401daa396a61515ba27438ee9cfcb53c05ee3bbad0b1d862fcf61c4607a5d298ab9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/object.assign@4.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object.assign/-/object.assign-4.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.assign@4.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object.assign/-/object.assign-4.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string.prototype.trimend",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6b21f4a41fae7f4536f02b6394bbcbecd6a886f4756a652f55993ecb70d86f4132d8f515e733e490acbdf94d677551085cef21360d7c788bfd267b5b8a2f9d2b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/string.prototype.trimend@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string.prototype.trimend/-/string.prototype.trimend-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string.prototype.trimend@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string.prototype.trimend/-/string.prototype.trimend-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string.prototype.trimstart",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a01201532e6579ae6db74a2fb4e162110681928041932261657cc962b4a60e8e48514a9b38fbd57b3b91b3f6a0048759da9d84a35143e9b0fd512c812df977c6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/string.prototype.trimstart@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string.prototype.trimstart/-/string.prototype.trimstart-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string.prototype.trimstart@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string.prototype.trimstart/-/string.prototype.trimstart-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-string",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ee63a54d463850322175a960e8ba5a199506d18433c279bc314a3c4c8f181e9984f8e9831dd8d474fc7f9f06111f597e00ff0f53049fa897ea24a8928513abd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/is-string@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-string/-/is-string-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-string@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-string/-/is-string-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array.prototype.flat",
      "version": "1.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e38ef45e2dc600f02366a15c9635f6c73724bf5a9e28f8b3a0d9224b4f8ee08a0f47664da5c8c4d299217628650e8b8afb1e9039ab2ddba07843f3bd0c99f04a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/array.prototype.flat@1.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array.prototype.flat/-/array.prototype.flat-1.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array.prototype.flat@1.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array.prototype.flat/-/array.prototype.flat-1.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "contains-path",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fe8cf184ff6670b6baef01a9d4861a5cbec4120a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/contains-path@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/contains-path/-/contains-path-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/contains-path@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/contains-path/-/contains-path-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "2.6.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6c2ec496b7496899cf6c03fed44a2d62fa99b1bdde725e708ba05f8ba0494d470da30a7a72fb298348d7ce74532838e6fc4ec076014155e00f54c35c286b0730"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/debug@2.6.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@2.6.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5608aeadfc00be6c2901df5f9861788de0d597c8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ms@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "doctrine",
      "version": "1.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "379dce730f6166f76cefa4e6707a159b02c5a6fa"
        }
      ],
      "purl": "pkg:npm/doctrine@1.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/doctrine/-/doctrine-1.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/doctrine@1.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/doctrine/-/doctrine-1.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isarray",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bb935d48582cba168c06834957a54a3e07124f11"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/isarray@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isarray@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-import-resolver-node",
      "version": "0.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a20b5ffb9001fcefa733a0c878150daf67ee4fba2df5083fd616ab05f06d68fd777a411615010430ff7804207bcda356de0c98fbc487605d34ae7a98c1729638"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/eslint-import-resolver-node@0.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-import-resolver-node/-/eslint-import-resolver-node-0.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-import-resolver-node@0.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-import-resolver-node/-/eslint-import-resolver-node-0.3.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve",
      "version": "1.20.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c043413ede324b3838c9b1505b64d3d73310b9c3caf791d287f9ead82153655386baddbea50bd2b20b5d6b8776e98ad872bd3aef08db9b3386f1bc833c15fadc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/resolve@1.20.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve/-/resolve-1.20.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve@1.20.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve/-/resolve-1.20.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-core-module",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5d101f01dcb263917970e5e7ee16100ea8765e68a2f8311f21c406c4afee37030784890f58ed20f26b1771bccb7be3291a847de75325a8cff6888954e2f28375"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/is-core-module@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-core-module/-/is-core-module-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-core-module@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-core-module/-/is-core-module-2.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-parse",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "19298e4f611b1eb20d05ff5247b08310bc2527c004364dd09fb3a290ae2715802edceb5edbe258355be4a401109b7fd32cd109143ff16498f3cb183728158ecf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/path-parse@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-parse@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-module-utils",
      "version": "2.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ea3f71c5e81ba9ef3f91963c718a5ca74c616cad04809960de0f6689bdff9a22da131baec1cde7e5411f4a753a85631b4f4140615bc36cbf51ad182951e408bc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/eslint-module-utils@2.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-module-utils/-/eslint-module-utils-2.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-module-utils@2.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-module-utils/-/eslint-module-utils-2.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pkg-dir",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f6d5d1109e19d63edf428e0bd57e12777615334b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/pkg-dir@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pkg-dir/-/pkg-dir-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pkg-dir@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pkg-dir/-/pkg-dir-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-up",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "45d1b7e506c717ddd482775a2b77920a3c0c57a7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/find-up@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-up/-/find-up-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-up@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-up/-/find-up-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "locate-path",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2b568b265eec944c6d9c0de9c3dbbbca0354cd8e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/locate-path@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/locate-path/-/locate-path-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/locate-path@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/locate-path/-/locate-path-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-locate",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "20a0103b222a70c8fd39cc2e580680f3dde5ec43"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/p-locate@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-locate/-/p-locate-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-locate@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-locate/-/p-locate-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-limit",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bef717b0b009f43af9ad038f93bb68650649029065d8ae09e9d00d4ac12e87a408e3525872c4bfaa14c66bd12b2145202b758d428258bf2971be3aa68aa100f5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/p-limit@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-limit/-/p-limit-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-limit@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-limit/-/p-limit-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-try",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cbc79cdbaf8fd4228e13f621f2b1a237c1b207b3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/p-try@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-try/-/p-try-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-try@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-try/-/p-try-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-exists",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ce0ebeaa5f78cb18925ea7d810d7b59b010fd515"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/path-exists@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-exists/-/path-exists-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-exists@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-exists/-/path-exists-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object.values",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3180b48ef268a6bf042ba74f0623bc35bf66be3772a4e69c84ee5110693a317cee8db06b022b0aa371e674423a9190cbe9f0b7d4cc1e7bfe586ed31e6e2c5e6a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/object.values@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object.values/-/object.values-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.values@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object.values/-/object.values-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-pkg-up",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6b72a8048984e0c41e79510fd5e9fa99b3b549be"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/read-pkg-up@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/read-pkg-up/-/read-pkg-up-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/read-pkg-up@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/read-pkg-up/-/read-pkg-up-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-pkg",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8ef1c0623c6a6db0dc6713c4bfac46332b2368f8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/read-pkg@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/read-pkg/-/read-pkg-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/read-pkg@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/read-pkg/-/read-pkg-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "load-json-file",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7947e42149af80d696cbf797bcaabcfe1fe29ca8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/load-json-file@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/load-json-file/-/load-json-file-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/load-json-file@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/load-json-file/-/load-json-file-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "4.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6b7d151019b83c4771d5d441ecc14aec17a37a3bc2bc1ae89db2e386dfac1ee1988fc3c7b3b33fe59fabb79970e79d6f67bc9f4c28f856ecb2de6489cad0d645"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/graceful-fs@4.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@4.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-json",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f480f40434ef80741f8469099f8dea18f55a4dc9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/parse-json@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-json/-/parse-json-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-json@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-json/-/parse-json-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "error-ex",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "edd147366a9e15212dd9906c0ab8a8aca9e7dd9da98fe7ddf64988e90a16c38fff0cbfa270405f73453ba890a2b2aad3b0a4e3c387cd172da95bd3aa4ad0fce2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/error-ex@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/error-ex/-/error-ex-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/error-ex@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/error-ex/-/error-ex-1.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-arrayish",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "77c99840527aa8ecb1a8ba697b80645a7a926a9d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/is-arrayish@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-arrayish/-/is-arrayish-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-arrayish@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-arrayish/-/is-arrayish-0.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pify",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ed141a6ac043a849ea588498e7dca8b15330e90c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/pify@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pify/-/pify-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pify@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pify/-/pify-2.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-bom",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2334c18e9c759f7bdd56fdef7e9ae3d588e68ed3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/strip-bom@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-bom/-/strip-bom-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-bom@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-bom/-/strip-bom-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "normalize-package-data",
      "version": "2.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ff908c3774f44785d38f80dc19a7b1a3eae8652752156ff400e39344eae3c73086d70ad65c4b066d129ebe39482fe643138b19949af9103e185b4caa9a42be78"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:npm/normalize-package-data@2.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/normalize-package-data/-/normalize-package-data-2.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalize-package-data@2.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/normalize-package-data/-/normalize-package-data-2.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hosted-git-info",
      "version": "2.8.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7ffc330b641a581b3bb7d218a81e13dec475c6f8885625c94494d6065c7619fde0d178b9bc8ed8cb89285d0d5cf4e60318737db01cb50d0d8007c7ea6415a152"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/hosted-git-info@2.8.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-2.8.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hosted-git-info@2.8.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-2.8.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "5.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b1ab9a0dffcf65d560acb4cd60746da576b589188a71a79b88a435049769425587da50af7b141d5f9e6c9cf1722bb433a6e76a6c2234a9715f39ab0777234319"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/semver@5.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-5.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@5.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-5.7.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "validate-npm-package-license",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0e92a6d948bfc4deff1d0282b69671a11581859f59d24aadca01bc5c280d43c6650e7c6e4265a18f9eba8fc7cde02bb7fc999b86c0e8edf70026ae2cf61dbb13"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/validate-npm-package-license@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/validate-npm-package-license/-/validate-npm-package-license-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/validate-npm-package-license@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/validate-npm-package-license/-/validate-npm-package-license-3.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-correct",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "70e61c516c210ae1c25e2e3d4611510b22442b788f8f5662cfd0e9562577b5b64ec170f8f50cc837732938b24dc61daac2ada524965a28c570f6a362e234c2d3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/spdx-correct@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-correct/-/spdx-correct-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-correct@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-correct/-/spdx-correct-3.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-expression-parse",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "71ba87ba7b105a724d13a2a155232c31e1f91ff2fd129ca66f3a93437b8bc0d08b675438f35a166a87ea1fb9cee95d3bc655f063a3e141d43621e756c7f64ae1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/spdx-expression-parse@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-expression-parse@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-exceptions",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fed4eb60e0bb3cf2359d4020c77e21529a97bb2246f834c72539c850b1b8ac3ca08b8c6efed7e09aad5ed5c211c11cf0660a3834bc928beae270b919930e22e4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "CC-BY-3.0",
            "url": "https://opensource.org/licenses/CC-BY-3.0"
          }
        }
      ],
      "purl": "pkg:npm/spdx-exceptions@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-exceptions@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-license-ids",
      "version": "3.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "53e31310e3b40220f3c7016fa1ae09567315ea666524a936b012edf74b3b1b419dd0c9649dcee4c449f79ee0cf35946d6bb3b6bb2f282dc64b553fb8b2a3591d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0",
            "url": "https://opensource.org/licenses/CC0-1.0"
          }
        }
      ],
      "purl": "pkg:npm/spdx-license-ids@3.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-license-ids@3.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-type",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f012ccb8415b7096fc2daa1054c3d72389594c73"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/path-type@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-type/-/path-type-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-type@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-type/-/path-type-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tsconfig-paths",
      "version": "3.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "75172ece891685a8ed656910b0354a6d6c98fa381c2c2e6ca89860d8f4a07f86641f66873ef68e63c6161a19a36faf1be6aa937dab12b033bd93b45488499903"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/tsconfig-paths@3.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tsconfig-paths/-/tsconfig-paths-3.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tsconfig-paths@3.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tsconfig-paths/-/tsconfig-paths-3.9.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "json5",
      "version": "0.0.29",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ee28707ae94e11d2b827bcbe5270bcea7f3e71ee"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40types/json5@0.0.29",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/json5/-/json5-0.0.29.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/json5@0.0.29",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/json5/-/json5-0.0.29.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json5",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "68a4b85908cf7a7471890b02f7730d7e3c7e9db1783c0758ce677fd49223f07633a9f6eef3a6de4ee3605c3ccf9275a4d27d2e0119727b0668e2cfbe112dfa3b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/json5@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json5/-/json5-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json5@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json5/-/json5-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "confusing-browser-globals",
      "version": "1.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "80d95dff7972487c2e85a565b8950a2de3d88ab33740d08acd5c6a01d849208f7f5972955f93d447331526ca52d634ec952aa37ae1b828c5534a8ba2b7960f1c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/confusing-browser-globals@1.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/confusing-browser-globals/-/confusing-browser-globals-1.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/confusing-browser-globals@1.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/confusing-browser-globals/-/confusing-browser-globals-1.0.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object.entries",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ca6ee1ece65e6cd4bdea19f92097b252669685a48ce1256d00f3df34b4042363185823b67a0b084dbf6769bdbe8bf3f089bc7e4749ad9fe96d2895d149e4cc1a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/object.entries@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object.entries/-/object.entries-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.entries@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object.entries/-/object.entries-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-extra",
      "version": "9.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "85c8376667a94b7d3fec1485a91be8a370ce310bbb223ab13b99c20edfb333d5d68dbdf75a0ef388d4fe42fa9bb9cdfe816a733b4d89b9b5729361b866fa3539"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/fs-extra@9.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs-extra/-/fs-extra-9.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs-extra@9.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs-extra/-/fs-extra-9.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "at-least-node",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "faafedec492fd440d8da5e8675ae8b2e25f5e2b53d4d5db459ade87de426c0f1596ce328f435eb2db3a315a69c9645ca5a27486a8a7000e6d00eac16b46523aa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/at-least-node@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/at-least-node/-/at-least-node-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/at-least-node@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/at-least-node/-/at-least-node-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsonfile",
      "version": "6.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e5d8277563ab8984a6e5c9d86893616a52cd0ca3aa170c8307faebd44f59b067221af28fb3c476c5818269cb9fdf3e8ad58283cf5f367ddf9f637727de932a5d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/jsonfile@6.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsonfile/-/jsonfile-6.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsonfile@6.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsonfile/-/jsonfile-6.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "universalify",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "84066c2aaed8cb5d59bb50c4d0ecd68f0ee79cb6662596130d96721051d9754855f05907e4c09fa14d5731ac57a2fa725b99eae6c70faaad190cff59ca5d38a1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/universalify@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/universalify/-/universalify-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/universalify@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/universalify/-/universalify-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mocha",
      "version": "8.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4d0ab20bcf55d49fd5c71d0384921796af606db2fd5c535d78b435f89b2766c55a48e575cf7b567f0d2a6664091904487e4bd972ceec9d09d99ce08aa2576ad5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/mocha@8.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mocha/-/mocha-8.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mocha@8.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mocha/-/mocha-8.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "@ungap",
      "name": "promise-all-settled",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b0bfdc12f2560270a55f0d301e4f39ff62f41ba4a3f140740ad7354c431b292b26a51a2caa1c23f605a0151652ac1af67fdb625c84b036108f9a57ea52ac9bf5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/%40ungap/promise-all-settled@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@ungap/promise-all-settled/-/promise-all-settled-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@ungap/promise-all-settled@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@ungap/promise-all-settled/-/promise-all-settled-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browser-stdout",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aa1015235f80bf65fba9e94e7c0218c1738da2877a5e5644fdf5da052996fd3e52ccb0260a0ce2f9e89613b7d4bdb1da78d0501f5dd47ed8e95f1b1f2e432983"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/browser-stdout@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browser-stdout/-/browser-stdout-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browser-stdout@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browser-stdout/-/browser-stdout-1.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chokidar",
      "version": "3.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f7eb3e39df96d15249cdac0399afe0bc1350aa44e2a984d62ee668c80b22bec23801a5930b31c6d3afd3323b1fd5c61ef426fded4084863cfb1ef9cf936a7fb7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/chokidar@3.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chokidar/-/chokidar-3.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chokidar@3.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chokidar/-/chokidar-3.5.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "anymatch",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "98cf39db6a6c442ab357ee8b868997e70829db961589b8e1f168f6dc8e513e43e9a525528f2283d80da604999619af8a37b7f60fa2cd87d8e40427b22e4b738e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/anymatch@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/anymatch/-/anymatch-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/anymatch@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/anymatch/-/anymatch-3.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "normalize-path",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e9e66ce4bb375ad0a2b075a9f52d86532f1daa4a468b80554b3dc66aa884e9ecee6f4e75d844b3b57530501e82e8829b4246363e76ff983e166288c24707302c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/normalize-path@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/normalize-path/-/normalize-path-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalize-path@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/normalize-path/-/normalize-path-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "picomatch",
      "version": "2.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ab433ff5e647ce6af402e957c8fc0d7d98edc19fd105995b3772b7084ad5ae4e744f6012608ec1c9ed04bde90563720fd4db760c7bb4adef95d991c8a4c92e5a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/picomatch@2.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/picomatch/-/picomatch-2.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/picomatch@2.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/picomatch/-/picomatch-2.2.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "braces",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6fcba6f8bd51cccdd60d2cef866ea0233d727d36c1b7a61395c10a02fb26a82659170e3acfadba9558fd8f5c843d6df71f91fe94142964c3f593c97eefc1dad0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/braces@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/braces/-/braces-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/braces@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/braces/-/braces-3.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fill-range",
      "version": "7.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a8ea3d17e74c5260b62dc6f805b56f9ca2714cf8c29be451a5ee200ee1abce42fb984565fdd8d84aed8e750d8f6b7d36378a2a91283d8abea368b589d94495a5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/fill-range@7.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fill-range/-/fill-range-7.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fill-range@7.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fill-range/-/fill-range-7.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-regex-range",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eb93fb8b3e97e7212bd5cc1c82f4316db230ed493780ecb974876d678ac3bde2ea86b7493fe2e2fc7c7ab722b43446fed860b29de08c2621aaac00c248d93cb1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/to-regex-range@5.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-5.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-regex-range@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-5.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-number",
      "version": "7.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e350a27e483a7bc4f2952a5db53a5e2d532abd20445734edb47bc4443ef8d7ea6767c00dbf4d34e0c44be3740a3c394af5c1af369e8d6566540656c65d8c719e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/is-number@7.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-number@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-binary-path",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "64c11161eb3aa43c9dcae1a276c7bb3ac1f1b5b23b595794128ce047f83baddd31522998365bd9444fcad8c8194e35b2ef6e487de94b79570433dee69ad4465f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/is-binary-path@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-binary-path/-/is-binary-path-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-binary-path@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-binary-path/-/is-binary-path-2.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "binary-extensions",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8c372d27f21541b6682729287876e15e93a5341a8635cc1724a268838d84e470cf53041349d8c21dd8a18e3d0396785e43b6e56d3e9d1ce69f340892f28a1028"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/binary-extensions@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/binary-extensions/-/binary-extensions-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/binary-extensions@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/binary-extensions/-/binary-extensions-2.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readdirp",
      "version": "3.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "70c86eedcffcadd8641d75ac63ea2c0617d2cb4262930a472bfe7e8a6a3e2e979ab1317ca2e12b1eb9589304f4fbe9e38b2b83bdcece158e53dee92f67caa615"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/readdirp@3.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readdirp/-/readdirp-3.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readdirp@3.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readdirp/-/readdirp-3.5.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fsevents",
      "version": "2.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c62a8c411e3101e1d3b81f6e5a6f9f1517083a02813223813fe7978b24fb8ec8150aad5b915ca0b74d28012a3007b11db6938769a3e02adf35d8ff5a6fe0c328"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/fsevents@2.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fsevents@2.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.2.tgz"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diff",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fd54c2aef9b9674246b72fc158796387e0408b0dc82beda3f3b34632ef0dc1cfdfe3c5a80c00b7f79ba898ef590f5d7b64e05a1e6917d68c8bbe454cfda213df"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:npm/diff@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/diff/-/diff-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/diff/-/diff-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-string-regexp",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4eda5c349dd7033c771aaf2c591cc96956a346cd2e57103660091d6f58e6d9890fcf81ba7a05050320379f9bed10865e7cf93959ae145db2ae4b97ca90959d80"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-up",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "efcfcf5d3d7094b2c3813cc3b3bb23abd873cf4bd70fece7fbbc32a447b87d74310a6766a9f1ac10f4319a2092408dda8c557dd5b552b2f36dac94625ba9c69e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/find-up@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-up/-/find-up-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-up@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-up/-/find-up-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "locate-path",
      "version": "6.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "88f64ae9e6236f146edee078fd667712c10830914ca80a28a65dd1fb3baad148dc026fcc3ba282c1e0e03df3f77a54f3b6828fdcab67547c539f63470520d553"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/locate-path@6.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/locate-path/-/locate-path-6.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/locate-path@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/locate-path/-/locate-path-6.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-locate",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2da363b51594058fbecc1e6713f37071aa0cca548f93e4be647341d53cdd6cc24c9f2e9dca7a401aded7fed97f418ab74c8784ea7c47a696e8d8b1b29ab1b93f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/p-locate@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-locate/-/p-locate-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-locate@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-locate/-/p-locate-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-limit",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4d839a9ccdf01b0346b193767154d83c0af0e39e319d78f9aa6585d5b12801ce3e714fe897b19587ba1d7af8e9d4534776e1dcdca64c70576ec54e5773ab8945"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/p-limit@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-limit/-/p-limit-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-limit@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-limit/-/p-limit-3.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yocto-queue",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ad592cbec9cd09d27fa2119ceb180fc3237c7a1782c6c88b33c9b1b84fedfe6395a897b03ee3b59a22e94c74224604ca08b7b12f831e00555a82db3b1e6359d9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/yocto-queue@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yocto-queue/-/yocto-queue-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yocto-queue@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yocto-queue/-/yocto-queue-0.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-exists",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6a4f50cb943b8d86f65b071ecb9169be0d8aa0073f64884b48b392066466ca03ec1b091556dd1f65ad2aaed333fa6ead2530077d943c167981e0c1b82d6cbbff"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/path-exists@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-exists/-/path-exists-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-exists@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-exists/-/path-exists-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "growl",
      "version": "1.10.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a81af83ae10b9213de9d6ea0a0a5578afe3b512ddc95bdff21bb9617d28d2848a3032f68787c54f488338ef2611e453385a8fbace503efe6065aa5232e9e6848"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/growl@1.10.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/growl/-/growl-1.10.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/growl@1.10.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/growl/-/growl-1.10.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "he",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "17fd439d418fa29391662d278be0afac28074391721001d12d2029b9858c9ab6d2c28376327ffb93e1a5dfc8099d1ef2c83664e962d7c221a877524e58d0ca1b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/he@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/he/-/he-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/he@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/he/-/he-1.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-yaml",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a6aa27d2cfb849c614bd7df4c31422dcfa201850255321f46b07a95afc248f88c3e2ffa8bdadd1898c3c6e603ac76ac3ac46a3f22fe858aa11c6954d5be45ef1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/js-yaml@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-yaml@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "argparse",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f3ef56a9e6db173a57f4e47e59ae8edbd6ac22881e44ccdc1ad00835da4c1c7c80835d1fd3969215505b704a867ff3d7c35123019faadbf6c4060dc3beeacadd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Python-2.0",
            "url": "https://opensource.org/licenses/Python-2.0"
          }
        }
      ],
      "purl": "pkg:npm/argparse@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/argparse/-/argparse-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/argparse@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/argparse/-/argparse-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "log-symbols",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "14df090732f1e82cde32b074b60ea9aa5194d700ab5d6f995c61f8f3591fb01a9eaf4853a132221dd8c7e0cabcc4951bbc04ee8ca0af6911065a91948a89eb68"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/log-symbols@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/log-symbols/-/log-symbols-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/log-symbols@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/log-symbols/-/log-symbols-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e85973b9b4cb646dc9d9afcd542025784863ceae68c601f268253dc985ef70bb2fa1568726afece715c8ebf5d73fab73ed1f7100eb479d23bfb57b45dd645394"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ms@2.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nanoid",
      "version": "3.1.20",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6b571037273380a6cb5fd8f06d2ffe77b5bc7d7fd17e0611ee5556c1638620f3602b69b4316beb185ebf9b8924e94dd070532765fdd12212f4bf626087fd14c7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/nanoid@3.1.20",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nanoid/-/nanoid-3.1.20.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nanoid@3.1.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nanoid/-/nanoid-3.1.20.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serialize-javascript",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "49a68d6a5f629843bbdfb1f6734e4e834ffc2d45c6ec49ec67231af0cce49ae1e810b7d3eadc6e8f470ca918facdf3ca9e6435c9ab11e0f08973cc7e3382523c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:npm/serialize-javascript@5.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-5.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serialize-javascript@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-5.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "randombytes",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bd897788e5fee022945aec468bd5248627ba7eca97a92f4513665a89ce2d3450f637641069738c15bb8a2b84260c70b424ee81d59a78d49d0ba53d2847af1a99"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/randombytes@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/randombytes/-/randombytes-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/randombytes@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/randombytes/-/randombytes-2.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-buffer",
      "version": "5.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "8.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3295043763a876d533c6f29097bd9c505ed14391221ec1af4ac546d226bd73945b5862f6088e02ec4a4f4bc513048a659e5cd988db95e7ac3e16e371cb7b72d9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/supports-color@8.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-8.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@8.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-8.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wide-align",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "40690e41cf172fa06de4fc27b04c4a04fb8c281c671b15965b77d4e795ede1f787a3331485d50c6810a4dbdd2aa66ff01b9bbf4522b3c1d002e22e7562282284"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/wide-align@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wide-align/-/wide-align-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wide-align@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wide-align/-/wide-align-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string-width",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9cea87e7d75e0aaf52447971ab5030f39267b78c3a2af2caa9656293aa00f599255cb3483a5aa0e05db2ad3d4c55a4e302abd5c1d7de67bc3b682bc90fbba093"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/string-width@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string-width/-/string-width-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string-width@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string-width/-/string-width-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-fullwidth-code-point",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a3b30a5c4f199183167aaab93beefae3ddfb654f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/is-fullwidth-code-point@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-fullwidth-code-point@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-ansi",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a8479022eb1ac368a871389b635262c505ee368f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/strip-ansi@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-regex",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ed0317c322064f79466c02966bddb605ab37d998"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ansi-regex@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "workerpool",
      "version": "6.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b6857babdad635885af7adcf97fab2799eb01bede79eccafa2568d512f3e4795adc3aa893d3c4894e3f5652bdc1a1109c3e9771cc326b62368f4697ad46e0656"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/workerpool@6.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/workerpool/-/workerpool-6.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/workerpool@6.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/workerpool/-/workerpool-6.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs",
      "version": "16.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0f59afbed0c6d0be5fb7f8c65a42e91b5fa6d1e43139f681bd33442eb6968f6db049550c5b1654bd880961c2a1ea3186224245847e0864f4214784caa5cf2607"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/yargs@16.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs/-/yargs-16.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs@16.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs/-/yargs-16.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cliui",
      "version": "7.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "39c444ebc70eb15317a7562fa2797f7f39103b28cb4aeffc6e13c37d0b747b4fc46f6f374ca3f6d05b3632aa0fb2bf52c00e7de6b44203e40ccd873d9c13fe25"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/cliui@7.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cliui/-/cliui-7.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cliui@7.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cliui/-/cliui-7.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrap-ansi",
      "version": "7.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6151888f691a98b493c70e8db198e80717d2c2c9f4c9c75eb26738a7e436d5ce733ee675a65f8d7f155dc4fb5d1ef98d54e43a5d2606e0052dcadfc58bb0f5e9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/wrap-ansi@7.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrap-ansi@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escalade",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9347abda05242dff0ed332898808669139c9953bc8346bfbca00cd3db788b17fd3263189647ba1f41d94c5bb1a1249a5128f4c7e1ad2ce68489614652361979f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/escalade@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escalade/-/escalade-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escalade@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escalade/-/escalade-3.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-caller-file",
      "version": "2.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0f214fdc133fdd81d340e0942ffc343991d1d25a4a786af1a2d70759ca8d11d9e5b6a1705d57e110143de1e228df801f429a34ac6922e1cc8889fb58d3a87616"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/get-caller-file@2.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-2.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-caller-file@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-2.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "require-directory",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8c64ad5fd30dab1c976e2344ffe7f792a6a6df42"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/require-directory@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/require-directory@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "y18n",
      "version": "5.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "86c454af8145aef861447d76c0e75fb37f06cbb936145cc1f6a80df6fdda2f2911ab475171d729cf90bd171752d8dba13ab23feb6f1bfca493277af01f2b184a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/y18n@5.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/y18n/-/y18n-5.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/y18n@5.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/y18n/-/y18n-5.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs-parser",
      "version": "20.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "58e92980d84f4e513bde1e1514016c3a7a262556a8bcef15a8b0f3cb9b1a0a1441150141a0c622ae8c325be43d1c1e07145e19ed5653886de24b3249036f7244"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/yargs-parser@20.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-20.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs-parser@20.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-20.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "yargs-unparser",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ee9453200f5073571a6746d9e9161119b1c9b61256b9a91ff969872b4ad578b90daeb1a17e869b04d76e7ba91d20d23aaf889fee872af5a0ff9fbc7028e77338"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/yargs-unparser@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs-unparser/-/yargs-unparser-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs-unparser@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs-unparser/-/yargs-unparser-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "6.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "73bc15bdbc377f7ee7ba86d036d82c806f4f382f6a31b36e3109930aa66fdb76fa308cf47dc6290623a5bfd80437f85d2dd9d94c342183a7bd0eae4cd6f2af7e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/camelcase@6.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camelcase/-/camelcase-6.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@6.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camelcase/-/camelcase-6.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decamelize",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f621353e04a293d1de208c3624ef78222767137781a10ac5277c3bb05bb3497e03a66677bf9b19a54895e52c1c7fa990105f98d2bbbc35ea3ea7e9f287627e85"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/decamelize@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/decamelize/-/decamelize-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/decamelize@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/decamelize/-/decamelize-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "flat",
      "version": "5.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6fab2e103fb9ff7ad3a5405d1b582ea4897c30f14200c034417c269632e1bc250a714bdd138816932f73a6e1827171ceb33e09f703c6356aba38aa66233cf785"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:npm/flat@5.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/flat/-/flat-5.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/flat@5.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/flat/-/flat-5.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-plain-obj",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6169dfc91c312fff92b2b5987cea54b73e5bdd80fe9f27e41ef8db71a9f393cce0c8ee00483ebbb95311b7c9396cce252cc0e75dfae24613a97a6c3e35f4f578"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/is-plain-obj@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-plain-obj/-/is-plain-obj-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-plain-obj@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-plain-obj/-/is-plain-obj-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webpack",
      "version": "5.23.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "442e9dc03b91c6253be45f170b81f4f0db7352b31fb9fc392c39cef1d4ed68a536f9fb3311dc920a0661370481067e75ea235a25b408ed3ece3c72200b07099a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/webpack@5.23.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webpack/-/webpack-5.23.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webpack@5.23.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webpack/-/webpack-5.23.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "webpack"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "demo/servers/server.js#1"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "eslint-scope",
      "version": "3.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3bfaa5dbeaeb0947b65b6aecef0311f86a8f45c801e948aa379461ad1e71aee16563b97d60b327d19903ce3a072de885911f0c090655b9d52ebaf43604b0bd43"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40types/eslint-scope@3.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/eslint-scope/-/eslint-scope-3.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/eslint-scope@3.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/eslint-scope/-/eslint-scope-3.7.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "eslint",
      "version": "7.2.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "23ed6c607f8d3d0dffb55a82794481c1313fd217b2bed5eaa48a2951402b9419b42a9a1c6fc15b31adc067f012288169377ae7131f77d934d70dbb7d397b0d0f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40types/eslint@7.2.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/eslint/-/eslint-7.2.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/eslint@7.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/eslint/-/eslint-7.2.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "estree",
      "version": "0.0.46",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "95a223c1341a0fee43ba40596b2810efd2b56748dbd5b3c4311ae45d22e3b427199be69bca9e586ebaa948bcc3e36170596ea02bf692e0d62927cd389c6d9bae"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40types/estree@0.0.46",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/estree/-/estree-0.0.46.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/estree@0.0.46",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/estree/-/estree-0.0.46.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "json-schema",
      "version": "7.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "731585415b1e066e8ef466f0d4859bf2be8e4b83a14adde13d92e4140a4b8ccf1311744e06e4062c01f68b6819a5c5dd2c122ba57b930e11fb55b9b589798d18"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40types/json-schema@7.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/json-schema/-/json-schema-7.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/json-schema@7.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/json-schema/-/json-schema-7.0.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "ast",
      "version": "1.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "917d96e3d2d6b1bb61ae621131b419b900e11ad8f2a977c49a61f2122e175a7499b4f9b1634fb76a73c8cec9d16f8e551ff279e7394e7d6bd9b98e3b68965326"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/ast@1.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/ast/-/ast-1.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/ast@1.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/ast/-/ast-1.11.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "helper-numbers",
      "version": "1.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0e145029e9488f4d6ce4881db0e24c28ba6923ee33a6670c4375dba053cbc02a52347e87aa8d6b8ad807803d27a8779262aa1f03a68137f3665ee1a33358c47d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/helper-numbers@1.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/helper-numbers/-/helper-numbers-1.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/helper-numbers@1.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/helper-numbers/-/helper-numbers-1.11.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "floating-point-hex-parser",
      "version": "1.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "43f69562cfd59cf0d562fb0204bfe04a0c267e37826f82d6f3e4ccaceddc4b32489a0bfc971c443ccd890398ccae2bc4ecb4b3dd5f8f16ab4c6e5b379b57b10c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/floating-point-hex-parser@1.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/floating-point-hex-parser/-/floating-point-hex-parser-1.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/floating-point-hex-parser@1.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/floating-point-hex-parser/-/floating-point-hex-parser-1.11.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "@webassemblyjs",
      "name": "helper-api-error",
      "version": "1.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6da4ffbdaf797978976f641f952c7de50193e429735a919a6bc2fb26725b833a1879a036ec50afb815d4ef9f25f8a5d64677449945e33f44397e26e16af227f3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/helper-api-error@1.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/helper-api-error/-/helper-api-error-1.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/helper-api-error@1.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/helper-api-error/-/helper-api-error-1.11.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@xtuc",
      "name": "long",
      "version": "4.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "36e1ea058d4f07f0fcc54eacfed84180e02200fec73980d0df6f8115920b27c8af9149001d09d67e7e9684befd3b08f5aa6527a0dfd83e192d748a2e722a6401"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/%40xtuc/long@4.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@xtuc/long/-/long-4.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@xtuc/long@4.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@xtuc/long/-/long-4.2.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "helper-wasm-bytecode",
      "version": "1.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "31b9a1bf15c4c66e78dad5911204859ce568d3b7c3a6c049837b0897a7d2a7dc6ebbbe5e1b3e65cf7d6aef04cb7dfc0bdd96bb5cd442319cb6d74fad9ec51210"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/helper-wasm-bytecode@1.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/helper-wasm-bytecode/-/helper-wasm-bytecode-1.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/helper-wasm-bytecode@1.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/helper-wasm-bytecode/-/helper-wasm-bytecode-1.11.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "wasm-edit",
      "version": "1.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "24743475a997cb41ba27db9cc8a5573b68f4f09549da7b6474996ad544e252b2207c632603b224e55742fcbf2104ae3a915260ba390122832d4fcc95afec9539"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/wasm-edit@1.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/wasm-edit/-/wasm-edit-1.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/wasm-edit@1.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/wasm-edit/-/wasm-edit-1.11.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "helper-buffer",
      "version": "1.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bbd1cf0449780d2faf03ca8b41d110e8dfde250ee04fb68dbcc228f00016bc097fc4cadc392888d8cd0c027302cb78c81647bb6c479efc9c1d5f59d4a42b5dc8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/helper-buffer@1.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/helper-buffer/-/helper-buffer-1.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/helper-buffer@1.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/helper-buffer/-/helper-buffer-1.11.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "helper-wasm-section",
      "version": "1.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dc46fcf2171b7d8fc50ae92b83a8b7107f07d94b03ef1f15cb8ee2549acff7aec0f491aa80154bf5a1fbd521133f1d49ac6b0e5152e8d1ceef302376db2b497b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/helper-wasm-section@1.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/helper-wasm-section/-/helper-wasm-section-1.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/helper-wasm-section@1.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/helper-wasm-section/-/helper-wasm-section-1.11.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "wasm-gen",
      "version": "1.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "04452fd5a8f45a9b4267d9084b7d2d87920b01252700f12f137b55313ac8b676514fdb5708b5b62c45d3f1eccbc39f6ba8f3fd92587d2cf9a953e5a64509823d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/wasm-gen@1.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/wasm-gen/-/wasm-gen-1.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/wasm-gen@1.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/wasm-gen/-/wasm-gen-1.11.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "ieee754",
      "version": "1.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "297cceaa971843001f790e966c5e875e8fb4b9d04d9b0d225c39842b9b0596641d98d0feb6befbdd38bcff94ff33a4e5ff8d7702b48912b01377c227dc1f9604"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/ieee754@1.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/ieee754/-/ieee754-1.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/ieee754@1.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/ieee754/-/ieee754-1.11.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@xtuc",
      "name": "ieee754",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0d7f272a0a9c1b0b1cd1e252a98b799703f80c7e459479e6b96581472ed7d0d71a191d19b6ec9e11280cc1361512dc66b0d198faa8ade10613fcc2184ce4cf78"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:npm/%40xtuc/ieee754@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@xtuc/ieee754/-/ieee754-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@xtuc/ieee754@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@xtuc/ieee754/-/ieee754-1.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "leb128",
      "version": "1.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6aa6ec1dad6649001b79e35c977f2e9faa9563efa187c3a908ecf1862c526206d17cd59cc493494307b6adeccaf5711cb2c25b6d62246e568947018c4bdce9fa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/leb128@1.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/leb128/-/leb128-1.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/leb128@1.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/leb128/-/leb128-1.11.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "utf8",
      "version": "1.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "03f95c946c47e92a522d2c85a303333bff9a0c43d4e21bc48a8a0231740f71014f3c969870f40d2863822d4c9226c609e2dadba6bf85b34f27e237a59154c657"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/utf8@1.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/utf8/-/utf8-1.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/utf8@1.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/utf8/-/utf8-1.11.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "wasm-opt",
      "version": "1.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b475123f9178cb0ca1de1674f9f0d0b96c4ac7798988f785b9f83ef60c13a58a77db898f090827b952b0ccb4d956a8f476e443a2f9cf699a83c28ca120ef2462"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/wasm-opt@1.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/wasm-opt/-/wasm-opt-1.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/wasm-opt@1.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/wasm-opt/-/wasm-opt-1.11.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "wasm-parser",
      "version": "1.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e8bdbce5282ef60a61adca435c836f9b433d06c9339e7cc94c4ee06248c36f1113dbcb210eaa76ef0a6bbb2c770b64bf76f1308a2801c0b035733ee53548b493"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/wasm-parser@1.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/wasm-parser/-/wasm-parser-1.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/wasm-parser@1.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/wasm-parser/-/wasm-parser-1.11.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "@webassemblyjs",
      "name": "wast-printer",
      "version": "1.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "160e4e5f8ea945d4e007baca214a23921f6f5da54deac1980a712224dd466246f444fc128595e9e8a4c3aa6a0c7503ca85cae83978777c4ce691698261a29885"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/wast-printer@1.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/wast-printer/-/wast-printer-1.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/wast-printer@1.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/wast-printer/-/wast-printer-1.11.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn",
      "version": "8.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bfe0e278afc726424ea450444c3262a1eaaeb5cdcf7f1b1631ac48748c2e8ed17b14457f300c8340b966ebfccfbebecc8b1d3b98b87a71c57022c96871ea1d96"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/acorn@8.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn/-/acorn-8.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn@8.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn/-/acorn-8.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browserslist",
      "version": "4.16.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bc8ca15a622450b6aad381adf77b71761fa3d36c97fc9ce5ca12d86d5dd84029ffcef112dc99d8ed389f1c7befaf5c398530e5b8d28c915d3972ce2fcbc43bb3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/browserslist@4.16.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browserslist/-/browserslist-4.16.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserslist@4.16.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browserslist/-/browserslist-4.16.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caniuse-lite",
      "version": "1.0.30001191",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c4926acf277eec60895e47280624351aec4488e0422d0d1a556f4731e9227d9b00546763e5e27898507d7c48521e2a6af483a4fd05c5254888afd9594fe12c1b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "CC-BY-4.0",
            "url": "https://opensource.org/licenses/CC-BY-4.0"
          }
        }
      ],
      "purl": "pkg:npm/caniuse-lite@1.0.30001191",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001191.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/caniuse-lite@1.0.30001191",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001191.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "colorette",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a6e083cf40b3c9d89260eae75e9cff3ca77af7346bae26dece3b44f72778cefcada1173cf9163f2893efb4f14a652dc4df03fa9de1b231ed2f3939473b92f73f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/colorette@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/colorette/-/colorette-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/colorette@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/colorette/-/colorette-1.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "electron-to-chromium",
      "version": "1.3.671",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4530fded091dac929a2b046ff61ff01806a8476946c4d5c47015d2df5be38ad8133f04d601b2dd4bb704b012baf1e110cbba7a6324fc0f9071044607bb64aec1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/electron-to-chromium@1.3.671",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.3.671.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/electron-to-chromium@1.3.671",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.3.671.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-releases",
      "version": "1.1.70",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4a57f6b3af7edbfb800fbf69555428f2e4a20b7e3e83c19663c507d90b6abf7e197e162bc696297f3b3d26cf5de8ed266c39802eec5a4e5a659c14e74842dcaf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/node-releases@1.1.70",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-releases/-/node-releases-1.1.70.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-releases@1.1.70",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-releases/-/node-releases-1.1.70.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chrome-trace-event",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f5eff3c758f0ec1e023be73f457a02b1f83fc7501f5018a8cb8a30607d1b269ac4600c7985114b461581a87006e7b0f464ce07eefc5b3fb6cf7b45708504580d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/chrome-trace-event@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chrome-trace-event/-/chrome-trace-event-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chrome-trace-event@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chrome-trace-event/-/chrome-trace-event-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tslib",
      "version": "1.13.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8bfe834232fc5dfddb7b82bf13a5a0a5e927e506ac975baccb0fbe740037e547b9a2b127eb9548c4e03e62f34d97d1d5deabfbd13ec23708ce0c766b2f0bddd5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "0BSD",
            "url": "https://opensource.org/licenses/0BSD"
          }
        }
      ],
      "purl": "pkg:npm/tslib@1.13.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tslib/-/tslib-1.13.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tslib@1.13.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tslib/-/tslib-1.13.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "enhanced-resolve",
      "version": "5.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ea78f0b7f36c64550a84cea3f54f21cd5c83e04e2bd31ecd43385309b716389d084233520286a55a66f4004e755a7f9fc1a9f9a951125a2eedd93a01c6cf6faf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/enhanced-resolve@5.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/enhanced-resolve/-/enhanced-resolve-5.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/enhanced-resolve@5.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/enhanced-resolve/-/enhanced-resolve-5.7.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "4.2.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9d39c9e76f296eac586a78690d8b22e1177c30079a040ebbf91675d023359b76d30151440dc77902e0386ba5b9624199d623571f3673f13e9304a2de06e36b89"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/graceful-fs@4.2.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@4.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tapable",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "14193821eb0c575ac1c57dad7e22bc4409a882d5a7e77a6e2ce425bcef17bb0960c5c61b3f89953d2f4f87869e6a64b2c958ce976e1a61602e73c53990257033"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/tapable@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tapable/-/tapable-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tapable@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tapable/-/tapable-2.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-module-lexer",
      "version": "0.3.26",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "55ad10ff1aadaecb38e615b33fc099270cc64992630cce7f309444dc85d79d409c54b12547d051684f45eb6068a72b004b27389ccdeec21496ec5141f6795600"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/es-module-lexer@0.3.26",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-0.3.26.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-module-lexer@0.3.26",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-0.3.26.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "events",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ff8e875b06df097db14dac157e428b1b13227c96100563306359a3cb046d6f873dc7c97934fdcaa09b6720e88bd617dd46422e621113c50968eb6205f2d72796"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/events@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/events/-/events-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/events@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/events/-/events-3.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-to-regexp",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9645f51c95f0c8c729af0ff961465cdacec3ae90221c1db5fd5f84d6b1d4ad5368924bc1e9ba8ccd3d157d5ebff3a64d69bb75935e18388693ee70ef397dc88b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:npm/glob-to-regexp@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-to-regexp/-/glob-to-regexp-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-to-regexp@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-to-regexp/-/glob-to-regexp-0.4.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-parse-better-errors",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9abab264a7d7e4484bee1bea715e961b5c988e78deb980f30e185c00052babc3e8f3934140124ff990d44fbe6a650f7c22452806a76413192e90e53b4ecdb0af"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/json-parse-better-errors@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-parse-better-errors/-/json-parse-better-errors-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-parse-better-errors@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-parse-better-errors/-/json-parse-better-errors-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "loader-runner",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f76fa1bafc4cbd894ccccb748883ae91cc18045a64609769976c6c67b2eb95ac8eec4f123aff8925410ad7b07f74920700e2cc7e1d9d659fd8d7c5a0986b5837"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/loader-runner@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/loader-runner/-/loader-runner-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/loader-runner@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/loader-runner/-/loader-runner-4.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-types",
      "version": "2.1.29",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "63f8ccb7f4b9b11f4e6aab5e26db25b0564a58e208a8c002b094a21e0865080ca17fb8df5588ca0662e25fc3a0a56796f9f8c9d9bf80cfaf5a3c53e450e63ac5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/mime-types@2.1.29",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.29.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-types@2.1.29",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.29.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-db",
      "version": "1.46.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b2f5da3fc510459e4aee8afe6667cd860db15f7c8a0cc533a9a76c4aa8b83421ff2a899c1fbe4c00c60019596f5e7e3e6ffc4e3e14b7236b87291533be363b05"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/mime-db@1.46.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime-db/-/mime-db-1.46.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-db@1.46.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-db/-/mime-db-1.46.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "schema-utils",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e83f36ff14b33b4f786a36a7a0e49b7b862f5d631f9f603fffc635f8c52a14026e97906cfb29f7eb16caf4eb4d0dc45548127d8e37a85dfb4ce827f3b6c8ce00"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/schema-utils@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/schema-utils/-/schema-utils-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/schema-utils@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/schema-utils/-/schema-utils-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ajv-keywords",
      "version": "3.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e69e964cdd03753195424e958dc123bb5f4881a1ee75a95c7da6c3ef284319e03a6dc42798bf82a6f78b26aff786f7f07756a87fa2f7f3a3ae824c7a45fc8c21"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ajv-keywords@3.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ajv-keywords/-/ajv-keywords-3.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ajv-keywords@3.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ajv-keywords/-/ajv-keywords-3.5.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "terser-webpack-plugin",
      "version": "5.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e5734d5d9891f183ba5fa2a14865df63442b1ab091952c00123208ae54504785bc9cfebd4da254961ddb92e69ceb3ce0b298863df2841dc636f7930c544c65e5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/terser-webpack-plugin@5.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/terser-webpack-plugin/-/terser-webpack-plugin-5.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/terser-webpack-plugin@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/terser-webpack-plugin/-/terser-webpack-plugin-5.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest-worker",
      "version": "26.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2966155757388be8db3296810be53efb855ad1ca7c3a2b14d7ce68ef74f5be8f7d86a8bbc3cb5225f51762cc30aaaae3cf0c5ae8aa512b9e1684fbf07f9c3a3d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/jest-worker@26.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-worker/-/jest-worker-26.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-worker@26.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-worker/-/jest-worker-26.6.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "@types",
      "name": "node",
      "version": "14.14.31",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bc51f2fdeccfe6a234ac5809eda4278c35f000cac6d0aaaa207eed406e4f3efdc15816b238f2103418d573f3fa8617597ccc79d5111cead7c33571d48a8f3dde"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40types/node@14.14.31",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/node/-/node-14.14.31.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/node@14.14.31",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/node/-/node-14.14.31.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "merge-stream",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "69bbffa8e72e3df9375113df0f39995352ca9aec3c913fb49c81ef2ab2a016bc227e897f76859c740e19aac590f0436b14a91debb31fa68fcba2f6c852c6eddf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/merge-stream@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/merge-stream/-/merge-stream-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/merge-stream@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/merge-stream/-/merge-stream-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "7.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aa9080bd197db2db8e1ef78ab27ec79dc251befe74d6a21a70acd094effe2f0c5cf7ed2adb02f2bf80dfbedf34fc33e7da9a8e06c25d0e2a205c647df8ebf047"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/supports-color@7.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@7.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "terser",
      "version": "5.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bf2a8b328a9a742d6e474bf2c2a399ceb88363380490d2452b8abd19ec8e04721b8840878962ca7167db41601468f7f19230e16a94a5641f5fedf90caef9158c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:npm/terser@5.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/terser/-/terser-5.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/terser@5.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/terser/-/terser-5.6.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "2.20.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1a956498cf2f176bd05248f62ef6660f7e49c5e24e2c2c09f5c524ba0ca4da7ba16efdfe989be92d862dfb4f9448cc44fa88fe7b2fe52449e1670ef9c7f38c71"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/commander@2.20.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.20.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.7.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0a40a3ea088ddd2fa7f6aad88814d7e60cacb6510d9d15b98d978d2c7a5ee9ab9ef92ac7706e55630ba3856f6ce1d637d66106b31043ac747aa08ebd7d35ec69"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:npm/source-map@0.7.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.7.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.7.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map-support",
      "version": "0.5.19",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5a89e6ef3382209cc1190741fad86c3daaf4918b8223362fc59c2505af3bca2fcc763bfb4e2a7673255b2e3e68d1c14f37811592e4f06f71830f2531d831a71b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/source-map-support@0.5.19",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.5.19.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map-support@0.5.19",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.5.19.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-from",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3107171146c22ad128edb86a12ceb9eb41f27785daa2f6653bf93d57786355417fcf05bb28155d48ae2022dfdbcf04bd31b479aa86fe1798eeb19b1bd1840ad8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/buffer-from@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer-from@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "watchpack",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3a8ecb5c299cd5e135023cae4819ad0b7f96cb81dc57c3f15a1da43fa7ce97cc9394d4bbaf42bd9756a8da5aeb5336bb577f58dc3fc16c9818f1579295ce492b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/watchpack@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/watchpack/-/watchpack-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/watchpack@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/watchpack/-/watchpack-2.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webpack-sources",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6d0b00db824bc1c9d6180ace294c582a15f7333fe72b55dfea1c6e96528447292d8cd302e31f24a0e79a0cd4c0d9f109d3d05d58b6ccfe24d6d22b6144450fd3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/webpack-sources@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webpack-sources/-/webpack-sources-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webpack-sources@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webpack-sources/-/webpack-sources-2.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-list-map",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aa743b81533118dc6c88be2512e2707bf4e8f149caedf02799b184107f11a4ba2eb8a6de126d2585b415148acd4ae07e1bbb55ac0955b198044d3e679637fe23"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/source-list-map@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-list-map/-/source-list-map-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-list-map@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-list-map/-/source-list-map-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "core",
      "version": "7.12.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5770ae5f5681cb06c9bd5db2cc949c4717a28b0d2fd8a659618137822cb0c731492f5dd18b23e369a0f08439f19a01534d2ec582f3368a3af842628d22ed00b5"
        }
      ],
      "purl": "pkg:npm/%40babel/core@7.12.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/core/-/core-7.12.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/core@7.12.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/core/-/core-7.12.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "code-frame",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1d5d429b443766ba4247dded9163988ae60880bc595d91551b65602be3015a352a653ba776ea5b7f1d9a5daad7bb0e4aa3968c723b4981b4ace2f506052e6fea"
        }
      ],
      "purl": "pkg:npm/%40babel/code-frame@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/code-frame@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "generator",
      "version": "7.12.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0d203baee66b638588f15c6e4b58d64917b316782112860416b65cc3d062cd0466399894b221e5e7dfaa1004463ea3e293003f18f4f24428bb8acb822bfa32aa"
        }
      ],
      "purl": "pkg:npm/%40babel/generator@7.12.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/generator/-/generator-7.12.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/generator@7.12.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/generator/-/generator-7.12.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "types",
      "version": "7.12.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b4d3038dcbffe0321c1f112b4e0c01f6ad99718c8dd2c51f8062942bf9a6d4524aed6cfe2acb6811e931ae5fed06234380b2b51c68beb29a63d409ffd434787d"
        }
      ],
      "purl": "pkg:npm/%40babel/types@7.12.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/types/-/types-7.12.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/types@7.12.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/types/-/types-7.12.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-fast-properties",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dc5e698cbd079265bc73e0377681a4e4e83f616e"
        }
      ],
      "purl": "pkg:npm/to-fast-properties@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-fast-properties/-/to-fast-properties-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-fast-properties@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-fast-properties/-/to-fast-properties-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsesc",
      "version": "2.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "398bbb5c4ce39024370b93ecdd0219b107cda6aa09c99640f7dc1df5a59dd39342b42e6958e91284ada690be875d047afc2cb695b35d3e5641a6e4075c4eb780"
        }
      ],
      "purl": "pkg:npm/jsesc@2.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsesc/-/jsesc-2.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsesc@2.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsesc/-/jsesc-2.5.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.5.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8a039d2d1021d22d1ea14c80d8ea468ba2ef3fcc"
        }
      ],
      "purl": "pkg:npm/source-map@0.5.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.5.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.5.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.5.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-module-transforms",
      "version": "7.12.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b052fea7acce090326f6f8a5a34e8ce151ee4f1500c1ae88c602f9e93ab50d5b40d338801931f54e1989abbc703ea75096001b297ddf6f4a1935bb5123203929"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-module-transforms@7.12.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-module-transforms/-/helper-module-transforms-7.12.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-module-transforms@7.12.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-module-transforms/-/helper-module-transforms-7.12.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-module-imports",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "34699fbd1a7d46ac72d2e1d24953fe491216d6adf56bb262d7470b05ca920d49e019e9ed63815188738564513508b5397a22f4a04f2b787ed3835cbdf530ccfe"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-module-imports@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-module-imports/-/helper-module-imports-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-module-imports@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-module-imports/-/helper-module-imports-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-replace-supers",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a5cb4038800c552b48d9330b868ccf29b7f9c931177343896b478436179be30d3d4ab80e584b3e3f89d3399609402aacf09944ac62c33c3253886229df281b2e"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-replace-supers@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-replace-supers/-/helper-replace-supers-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-replace-supers@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-replace-supers/-/helper-replace-supers-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-member-expression-to-functions",
      "version": "7.12.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "073bf8a77383812feaa411340e227da9fe56c529ab43c8154def0294c7f0c2c636c7fae1ca4c71cb76d7cc6ec01939cf0768a3dfbcc627f43fe85aeec47c6cc6"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-member-expression-to-functions@7.12.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-member-expression-to-functions/-/helper-member-expression-to-functions-7.12.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-member-expression-to-functions@7.12.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-member-expression-to-functions/-/helper-member-expression-to-functions-7.12.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-optimise-call-expression",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "05d590868549929ea756307b9e4156727e37764a6b61abaab64fbe3f2d9e69ffc6443166e41c51a842190a21e5654180566b7029cb152f5742ebc5a6cde16688"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-optimise-call-expression@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-optimise-call-expression/-/helper-optimise-call-expression-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-optimise-call-expression@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-optimise-call-expression/-/helper-optimise-call-expression-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "traverse",
      "version": "7.12.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2c6913a83a9d8b00ba43b7d64b04286acfe8ca2118c3a1ea8ef7b928e4b291792614916acef18c6fd9e269411a837465bdee3dd8c9327b780bc3d153bfde1f75"
        }
      ],
      "purl": "pkg:npm/%40babel/traverse@7.12.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/traverse/-/traverse-7.12.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/traverse@7.12.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/traverse/-/traverse-7.12.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-function-name",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4d9be63e7d143aa9af8b91b8befc34a994e9569b46901d462fad51ea52afad2748c469b93e4cbb4377e92a222440202d442054c01d0f693865c7dbde6c20d2c0"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-function-name@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-function-name/-/helper-function-name-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-function-name@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-function-name/-/helper-function-name-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-get-function-arity",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0e3115cd0373e4b2029333744447690f9a6b1a889dbdb75893505581150e20d69624fdade9abc1dbb5f582e5cad645cdad7d1631fb2b9b503f641b6162e20c42"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-get-function-arity@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-get-function-arity/-/helper-get-function-arity-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-get-function-arity@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-get-function-arity/-/helper-get-function-arity-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "template",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ffbc71886039ef1328fcfd8656f744ba6afc38d8453a17e0ab68a12b78757ba4c7ab34c09076e45e0074c48f727937c85281f7fa801e1e1aa6fc8e373936db8c"
        }
      ],
      "purl": "pkg:npm/%40babel/template@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/template/-/template-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/template@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/template/-/template-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "parser",
      "version": "7.12.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "af5c8a92251360c43c2e2108d14710c79113c397694cb9fdc228e7f6193a2a44ed38af79167743375d0cfbcfecea4fd89a56e2bf0d00bfdab84a5805f343ed1e"
        }
      ],
      "purl": "pkg:npm/%40babel/parser@7.12.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/parser/-/parser-7.12.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/parser@7.12.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/parser/-/parser-7.12.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "@babel",
      "name": "helper-split-export-declaration",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b4224396d17cde1b54b57c7934b71a0ea466927bfae76656087ca84c44dfd425d825d3c2ee7a2166886352089e5e1bf485325d45fd858c3b9e15e85d36e729ce"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-split-export-declaration@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-split-export-declaration/-/helper-split-export-declaration-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-split-export-declaration@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-split-export-declaration/-/helper-split-export-declaration-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globals",
      "version": "11.12.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "58e069fc410652222c252a7bc1cbffcba30efa557d5289dc5aac6e15f9bc781c3358d8327c177a1b3f8878a43d8c29b28681fdf60d793374fe41a5471638b354"
        }
      ],
      "purl": "pkg:npm/globals@11.12.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/globals/-/globals-11.12.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globals@11.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/globals/-/globals-11.12.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-simple-access",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d2c922e5dc9820711fc29586c7918f5a11f7e63df8d8969f96609e426b0f59cace403b4237a0b5cca01544555b2b9de53d6d9cf53b2e2cb4940dfd2d20627984"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-simple-access@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-simple-access/-/helper-simple-access-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-simple-access@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-simple-access/-/helper-simple-access-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helpers",
      "version": "7.12.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b44a63a92046b7f48512c16290a76cd6c2cd0a128a186475edf9488102971f87c6ea6f604e0977827382d608873726810922ae4dfc5a4b31e2ed49efaa254ac6"
        }
      ],
      "purl": "pkg:npm/%40babel/helpers@7.12.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helpers/-/helpers-7.12.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helpers@7.12.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helpers/-/helpers-7.12.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "convert-source-map",
      "version": "1.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e052645f3297103075b270856652cfe20a42dc920b89c0a919bcc6f5ff46eed1aa182cc44d0da158fadc8a703da14e30b5fd9b8946841f9d3ae549cc791df7a0"
        }
      ],
      "purl": "pkg:npm/convert-source-map@1.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-1.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/convert-source-map@1.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-1.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-buffer",
      "version": "5.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "19dd94641243917958ec66c9c5fb04f3f9ef2a45045351b7f1cd6c88de903fa6bd3d3f4c98707c1a7a6c71298c252a05f0b388aedf2e77fc0fb688f2b381bafa"
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gensync",
      "version": "1.0.0-beta.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "de137b35ab2462f3032d0639e609d6dcd43e99eb0401ea53aa583e5446e3ef3cea10c055361cdc19861ea85a3f4e5633e9e42215ca751dcb0264efa71a04bcce"
        }
      ],
      "purl": "pkg:npm/gensync@1.0.0-beta.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gensync/-/gensync-1.0.0-beta.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gensync@1.0.0-beta.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gensync/-/gensync-1.0.0-beta.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json5",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7fef1c95dbbb5ffcbb44026eacc10999da0a5c607f5f9e74c3636bded4db7b32fa470104fe231c9beb599d77a866d2ae3aae9fb7cf82ab3124ac8831d5f3e840"
        }
      ],
      "purl": "pkg:npm/json5@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json5/-/json5-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json5@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json5/-/json5-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "preset-env",
      "version": "7.12.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f4f3228f1f3315b0b04c7addd8fe0f251e675861f7cd679bc7639ca538ea42b1e10a22f6b2c491d9273d928d81b08d9599505fa1a4263eb94c4c2ba2e0b99742"
        }
      ],
      "purl": "pkg:npm/%40babel/preset-env@7.12.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/preset-env/-/preset-env-7.12.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/preset-env@7.12.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/preset-env/-/preset-env-7.12.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "compat-data",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "53f86c846e51f922285bb1d5588766cb5701eecde48beaf7169c846620a0a62e2d1603e75ffbf29d8f3464648048e22b50ce8eed5c4e80266076dee1f7b6d41a"
        }
      ],
      "purl": "pkg:npm/%40babel/compat-data@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/compat-data/-/compat-data-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/compat-data@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/compat-data/-/compat-data-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-compilation-targets",
      "version": "7.12.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e449226ea2d560eb99f3d05283696ff861bc7decb02eebcc5cd6207f4226e0cb2c13498558fced4a925b8a574d9d4830d1b2c8d84b083783294870b689426440"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-compilation-targets@7.12.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-compilation-targets/-/helper-compilation-targets-7.12.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-compilation-targets@7.12.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-compilation-targets/-/helper-compilation-targets-7.12.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-validator-option",
      "version": "7.12.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4e8a6430398bceaf27802870465ca347aada283ea031269ee097580c1f1b0722ab790806d11053b8a7bd2d1c56df016d5278f138f44a043c041fa320e4a7837f"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-validator-option@7.12.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-validator-option/-/helper-validator-option-7.12.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-validator-option@7.12.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-validator-option/-/helper-validator-option-7.12.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-plugin-utils",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0bed7431709724b891e88786f7e5a27a3b7d8e6b45a7151cdcc42a0a63d8f217c28f250697d913f81da8933119aedca48b0adce1d6c23dd0e8cf403f1d06c368"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-plugin-utils@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-plugin-utils/-/helper-plugin-utils-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-plugin-utils@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-plugin-utils/-/helper-plugin-utils-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-proposal-async-generator-functions",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d4a1f8e87c785aa3fbedff7bf3ee587bf5546eec1095dda1a61ef4c9ac368574b6bfb111d9fde796934cbbdd3d1cedab6ef3f434a2e53150cf87d29792554c84"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-proposal-async-generator-functions@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-proposal-async-generator-functions/-/plugin-proposal-async-generator-functions-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-proposal-async-generator-functions@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-proposal-async-generator-functions/-/plugin-proposal-async-generator-functions-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-remap-async-to-generator",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "41ae8f53dbcd723d4d65a719648d4cbf0b7e8170c7e824df8009128de44c2c4f07c6d0caefaf980c877a35047ecfb4607796ab843d9c21b4bbe2bd12c43e8f0c"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-remap-async-to-generator@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-remap-async-to-generator/-/helper-remap-async-to-generator-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-remap-async-to-generator@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-remap-async-to-generator/-/helper-remap-async-to-generator-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-annotate-as-pure",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ed85df5f9c10e5a60cfc13a56d271c1c36ee5d714fc5ea1499f5adcfc95edb24e44d973e071b2212710d1688b64a5980f1ec03906d8b808308573ce7da1f247f"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-annotate-as-pure@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-annotate-as-pure/-/helper-annotate-as-pure-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-annotate-as-pure@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-annotate-as-pure/-/helper-annotate-as-pure-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-wrap-function",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b746991449812752e88ddb499e139a40455e8e7cd88728d61d2b0d48da3cbce6116c024d87aafa19017ba5ddfa4aa1bb38a19b9fe01ec1543fd087d87c8b8677"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-wrap-function@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-wrap-function/-/helper-wrap-function-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-wrap-function@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-wrap-function/-/helper-wrap-function-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-async-generators",
      "version": "7.8.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b727266719067d96b184c45b5e53d7b95169756957a62af65b800c85226044ace4fde0e52173a16f62c75a82e90c5ed3107ca5579ccd872917e8a0201c999337"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-async-generators@7.8.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-async-generators/-/plugin-syntax-async-generators-7.8.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-async-generators@7.8.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-syntax-async-generators/-/plugin-syntax-async-generators-7.8.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-proposal-class-properties",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f12089d0376ba70bf84fb1b06f7dc4996d55f4f6399608133be03c5a3c88c31ad21c3532070e0cb45f7a89f9f59fc1fcd3a625c5b542a0a5db6e6cc3e910fe70"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-proposal-class-properties@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-proposal-class-properties/-/plugin-proposal-class-properties-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-proposal-class-properties@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-proposal-class-properties/-/plugin-proposal-class-properties-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-create-class-features-plugin",
      "version": "7.12.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "23f9eeae64f12311d5d0cfab2297d0045d68377e36fb2be5da4c1952b42e38294c6a61c5d70e6d9277d9b9b80d38b46803bdd2cc11407457296f833d1f039e59"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-create-class-features-plugin@7.12.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-create-class-features-plugin/-/helper-create-class-features-plugin-7.12.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-create-class-features-plugin@7.12.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-create-class-features-plugin/-/helper-create-class-features-plugin-7.12.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-proposal-dynamic-import",
      "version": "7.12.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "64d1a8159aab9eecbd1f68b30768cb96734301f54f9469793611448857b80fce22c7d1901b2805f8258c1872ae13e6e9c92fc03ae0d00a792244da96d88cd2d5"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-proposal-dynamic-import@7.12.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-proposal-dynamic-import/-/plugin-proposal-dynamic-import-7.12.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-proposal-dynamic-import@7.12.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-proposal-dynamic-import/-/plugin-proposal-dynamic-import-7.12.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-dynamic-import",
      "version": "7.8.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e607466c5a27f8fb33633aacf374b71399a98bbff2ffc33d782f743114d97ddb903985bbea283a48e48f35ee35206e4ba0fdc51819f6374463543490892f7891"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-dynamic-import@7.8.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-dynamic-import/-/plugin-syntax-dynamic-import-7.8.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-dynamic-import@7.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-syntax-dynamic-import/-/plugin-syntax-dynamic-import-7.8.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-proposal-export-namespace-from",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "20d020b45a383a72cddd8fe3d15c00830dc70d7703b57f82fdeaccbd6cee57dbfbd6beeeadbea2c8c5eeede33d2202ebd4494b94e91a1e327449b0a674e43723"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-proposal-export-namespace-from@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-proposal-export-namespace-from/-/plugin-proposal-export-namespace-from-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-proposal-export-namespace-from@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-proposal-export-namespace-from/-/plugin-proposal-export-namespace-from-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-export-namespace-from",
      "version": "7.8.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3177f995a5e8e9cd486c46de8039b318fc06353b07666132e901b39eee528765025afb9ecb06f679ef82084e3342266cb7153d04ca103bd8bacd41526342a3d1"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-export-namespace-from@7.8.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-export-namespace-from/-/plugin-syntax-export-namespace-from-7.8.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-export-namespace-from@7.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-syntax-export-namespace-from/-/plugin-syntax-export-namespace-from-7.8.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-proposal-json-strings",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bfd7848b81a23910e0f31f839a2e6bf226ce7b4557a0a0de34f61c4d3c5d18de1e3968a4ac97c324226baf597980a1afb0dc8625badf31fb42d9d4cbea8cfba6"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-proposal-json-strings@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-proposal-json-strings/-/plugin-proposal-json-strings-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-proposal-json-strings@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-proposal-json-strings/-/plugin-proposal-json-strings-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-json-strings",
      "version": "7.8.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "958ea4746a561ef8e87b6be4e16ac06a912e051ebd10cc5997e46819186b14635854af2638f016f157db4ff660ac56d794336289ac509c0b6054267a8efdf410"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-json-strings@7.8.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-json-strings/-/plugin-syntax-json-strings-7.8.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-json-strings@7.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-syntax-json-strings/-/plugin-syntax-json-strings-7.8.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-proposal-logical-assignment-operators",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7ea9a20f72f3ee355d2ba91a6de4abd4f665592515a928ad98711edd9d3476d1932a27969d7f5b79a7ef6af737da48ce45ae416a2e103478050f05893fe5ad49"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-proposal-logical-assignment-operators@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-proposal-logical-assignment-operators/-/plugin-proposal-logical-assignment-operators-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-proposal-logical-assignment-operators@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-proposal-logical-assignment-operators/-/plugin-proposal-logical-assignment-operators-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-logical-assignment-operators",
      "version": "7.10.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "77cc1a4a19691438a743932dbc653dc4300ecca1f8efe145a277b2d9b68522832bf79da128e2e9d4747b56cce866f3ac57fe3e451b33358ec3d7b6dad2d7b48a"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-logical-assignment-operators@7.10.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-logical-assignment-operators/-/plugin-syntax-logical-assignment-operators-7.10.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-logical-assignment-operators@7.10.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-syntax-logical-assignment-operators/-/plugin-syntax-logical-assignment-operators-7.10.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-proposal-nullish-coalescing-operator",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "428c69cbe3b1843048e6446a962245025e2e597937067db859e16cb4f1f488bca615e85201447c307a6a53b9e3c97bffa9ba3ba0deb24f2e5b7c299774aa68d5"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-proposal-nullish-coalescing-operator@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-proposal-nullish-coalescing-operator/-/plugin-proposal-nullish-coalescing-operator-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-proposal-nullish-coalescing-operator@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-proposal-nullish-coalescing-operator/-/plugin-proposal-nullish-coalescing-operator-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-nullish-coalescing-operator",
      "version": "7.8.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6927dfe333c8235bb6403ef2f85f280eccf5f5ec3820610983d4955be6eac29c2d7c595e8900cc77303f47e525583cdf9c7142c7195e153d0f308ad1dfa5cb35"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-nullish-coalescing-operator@7.8.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-nullish-coalescing-operator/-/plugin-syntax-nullish-coalescing-operator-7.8.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-nullish-coalescing-operator@7.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-syntax-nullish-coalescing-operator/-/plugin-syntax-nullish-coalescing-operator-7.8.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-proposal-numeric-separator",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3b58c589af51f0150297764607b7a2b5a00fbbad935c94479fbae1fa88cd111085caa47024c4e6873fad27e9340b023a08b8d7fde7b8a96ef8152aa5abd237e7"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-proposal-numeric-separator@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-proposal-numeric-separator/-/plugin-proposal-numeric-separator-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-proposal-numeric-separator@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-proposal-numeric-separator/-/plugin-proposal-numeric-separator-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-numeric-separator",
      "version": "7.10.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f47e9875f91c2bfb8e9d8fcaeff680db1a73680824427dfbcb35943112bb39a3cea8ea464b5fa7d07e61c53f40530f44b128cf5bc495c8c270611b56b375f7ba"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-numeric-separator@7.10.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-numeric-separator/-/plugin-syntax-numeric-separator-7.10.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-numeric-separator@7.10.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-syntax-numeric-separator/-/plugin-syntax-numeric-separator-7.10.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-proposal-object-rest-spread",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5af035a2407fd0e4bf3772dd6f7b33892ad783ab11a61b0182a89c71f710abbc28127e7040b357f3639ce0f95a15c7707161ee41702d6fc7ed6d2f056ec83fb2"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-proposal-object-rest-spread@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-proposal-object-rest-spread/-/plugin-proposal-object-rest-spread-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-proposal-object-rest-spread@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-proposal-object-rest-spread/-/plugin-proposal-object-rest-spread-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-object-rest-spread",
      "version": "7.8.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e8a8c8a31996fdcb7cb65ec90df8fd70506895c16679266a03470c79fb71a612994dc95336b360e0f082c5426f2b58ce3ca2b1b2e58a48e4197c535cbbc9d94"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-object-rest-spread@7.8.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-object-rest-spread/-/plugin-syntax-object-rest-spread-7.8.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-object-rest-spread@7.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-syntax-object-rest-spread/-/plugin-syntax-object-rest-spread-7.8.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-parameters",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7bb42ac196a53620511c2a4983f3fcb3f549792458826b56c92b35270bdfc0faa105b8967ce7070ca75e022ea80322229a8296065c1cf284e06d91dd842a1564"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-parameters@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-parameters/-/plugin-transform-parameters-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-parameters@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-parameters/-/plugin-transform-parameters-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-proposal-optional-catch-binding",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f7e3089ba9ac97db075a0e7c36faa93692edb856e6a45624dfbc7c9209c6cc01ef5f7e44d45c80c1252de612244a8589152007fa2c14f1b2787dc0f5cca5cece"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-proposal-optional-catch-binding@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-proposal-optional-catch-binding/-/plugin-proposal-optional-catch-binding-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-proposal-optional-catch-binding@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-proposal-optional-catch-binding/-/plugin-proposal-optional-catch-binding-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-optional-catch-binding",
      "version": "7.8.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e953c3d0f7359694eac3468aa1e45332207e916840a13db83c0fa4b16481ac5b65e52211569665c0ddcd34f4237a103613ff75155dd18cb5a855382559c495dd"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-optional-catch-binding@7.8.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-optional-catch-binding/-/plugin-syntax-optional-catch-binding-7.8.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-optional-catch-binding@7.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-syntax-optional-catch-binding/-/plugin-syntax-optional-catch-binding-7.8.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-proposal-optional-chaining",
      "version": "7.12.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4efc7023cd2959fb6b18f28735f92f5ff1e7a1e49347b802e1ecd69c02f7f4fba4b5851eeabf2412938b4d89e4053b1aa1e6b35e6da31c9db6110f35b1d81f70"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-proposal-optional-chaining@7.12.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-proposal-optional-chaining/-/plugin-proposal-optional-chaining-7.12.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-proposal-optional-chaining@7.12.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-proposal-optional-chaining/-/plugin-proposal-optional-chaining-7.12.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-skip-transparent-expression-wrappers",
      "version": "7.12.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "31fe4052e846d7f3820a1389fc77000e6bdc1cce36589a1c92899b9fc013246dce9f2892c412bf326e71efc0505af9ad5d928781b8dd18bda48a7fc738b95918"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-skip-transparent-expression-wrappers@7.12.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-skip-transparent-expression-wrappers/-/helper-skip-transparent-expression-wrappers-7.12.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-skip-transparent-expression-wrappers@7.12.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-skip-transparent-expression-wrappers/-/helper-skip-transparent-expression-wrappers-7.12.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-optional-chaining",
      "version": "7.8.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2a82bd12b1f53019423f15745403645d6dbf770e2f95b183ac5833f1b994b0119890545c6d1c0c87a70826e6dd3eb931470b8676d0a4d2fff03d329b42006392"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-optional-chaining@7.8.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-optional-chaining/-/plugin-syntax-optional-chaining-7.8.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-optional-chaining@7.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-syntax-optional-chaining/-/plugin-syntax-optional-chaining-7.8.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-proposal-private-methods",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b15d15e7bb94c296ae8b1bd1eecda8ef92e6c0923a2440b09b9a0f518e5b7990759c19768b7ee173b0891aa0791bee7c7eeaf963aba0be5dcb44e364e71df8ae"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-proposal-private-methods@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-proposal-private-methods/-/plugin-proposal-private-methods-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-proposal-private-methods@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-proposal-private-methods/-/plugin-proposal-private-methods-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-proposal-unicode-property-regex",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5f226666274d7e87c492a155e550bf6cb69b1a63b94337a73cefd839f1ae11b814fb6b12c0c9a2a3760b6f85ad06072699dc191f2572bfca27efb2148d0e46be"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-proposal-unicode-property-regex@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-proposal-unicode-property-regex/-/plugin-proposal-unicode-property-regex-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-proposal-unicode-property-regex@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-proposal-unicode-property-regex/-/plugin-proposal-unicode-property-regex-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-create-regexp-features-plugin",
      "version": "7.12.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a76546981bbda1e7cb6769d0a609c49c6d199513ef2fc8001af3d4310c1475a13c938f6b38cb99a4ec1d428cb9a897fa2bc8cbddb70032155494702322024752"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-create-regexp-features-plugin@7.12.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-create-regexp-features-plugin/-/helper-create-regexp-features-plugin-7.12.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-create-regexp-features-plugin@7.12.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-create-regexp-features-plugin/-/helper-create-regexp-features-plugin-7.12.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regexpu-core",
      "version": "4.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cb01f6554ada038e03650b912b30119b0e92eba9abe3ca5056f6b82c179185c3a5b49ea1131bd6972e598c52d8a3aef16c8c5be96d6ae1b006b607c4976d337d"
        }
      ],
      "purl": "pkg:npm/regexpu-core@4.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regexpu-core/-/regexpu-core-4.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regexpu-core@4.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regexpu-core/-/regexpu-core-4.7.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regenerate",
      "version": "1.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ceb71e47f5e119853f77fa29af610a3bb6911d47a2048f2a8ed7c7a800d3c1977a4b37f2d7a95aea4a83d0c214b39cf9871e8068a6be3e2c693eb476f3df88d0"
        }
      ],
      "purl": "pkg:npm/regenerate@1.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regenerate/-/regenerate-1.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regenerate@1.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regenerate/-/regenerate-1.4.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regenerate-unicode-properties",
      "version": "8.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "17d0e3635bca2e8fed3de3c3c9cb87ddd9fd1f53933c89150fd2b3e0b383bbe1760bbe66823009ef1fe0c32e9971235100092136525238745ef24de9f8af5684"
        }
      ],
      "purl": "pkg:npm/regenerate-unicode-properties@8.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regenerate-unicode-properties/-/regenerate-unicode-properties-8.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regenerate-unicode-properties@8.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regenerate-unicode-properties/-/regenerate-unicode-properties-8.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regjsgen",
      "version": "0.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "385153dcc7eb1fdd31216f0e392c94ae4e901c3e44f49393786a1d8897814b727a230960cc930d13fd5b664956cf9a1383ef5d08cc847ad725bc255738fa0ddc"
        }
      ],
      "purl": "pkg:npm/regjsgen@0.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regjsgen/-/regjsgen-0.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regjsgen@0.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regjsgen/-/regjsgen-0.5.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regjsparser",
      "version": "0.6.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "89befb1b4bb1b00da8be08986c2546c783efdcf4adb40c76bc8c2276a4336cbd94e52e10fa3d341dd4809de481bb255c32f1274d7323886801f83957a33561a5"
        }
      ],
      "purl": "pkg:npm/regjsparser@0.6.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regjsparser/-/regjsparser-0.6.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regjsparser@0.6.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regjsparser/-/regjsparser-0.6.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "jsesc",
      "version": "0.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e7dee66e35d6fc16f710fe91d5cf69f70f08911d"
        }
      ],
      "purl": "pkg:npm/jsesc@0.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsesc/-/jsesc-0.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsesc@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsesc/-/jsesc-0.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unicode-match-property-ecmascript",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f8428875e6f4df9edb27e0fd73aa71ee946d0b75782348ed37e5f12976da7a6315e1313e7543abe0339958746ff95f73234be93f63d5f0e1214263d224474ae"
        }
      ],
      "purl": "pkg:npm/unicode-match-property-ecmascript@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unicode-match-property-ecmascript/-/unicode-match-property-ecmascript-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unicode-match-property-ecmascript@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unicode-match-property-ecmascript/-/unicode-match-property-ecmascript-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unicode-canonical-property-names-ecmascript",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8c3acd9d7587778a07893667c7f646ee0b544d5a7e8027134caafc2f41e3970a6144e116dfe1e29be229bc2fb17091057a06a988c67265ed360b2b8e9d199b9d"
        }
      ],
      "purl": "pkg:npm/unicode-canonical-property-names-ecmascript@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unicode-canonical-property-names-ecmascript/-/unicode-canonical-property-names-ecmascript-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unicode-canonical-property-names-ecmascript@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unicode-canonical-property-names-ecmascript/-/unicode-canonical-property-names-ecmascript-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unicode-property-aliases-ecmascript",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3ea4a83e1fe959eb50da98688f944b89aa88938902370a15dc223e2df1a658b288deb137925d61e7d5e95f6063803ae66f10fd011b50a1b3c65354a0b8262e42"
        }
      ],
      "purl": "pkg:npm/unicode-property-aliases-ecmascript@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unicode-property-aliases-ecmascript/-/unicode-property-aliases-ecmascript-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unicode-property-aliases-ecmascript@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unicode-property-aliases-ecmascript/-/unicode-property-aliases-ecmascript-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unicode-match-property-value-ecmascript",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c23b901c6415a1f99226fd6e54848a2c4e733b6acd1b333f282619721fd042f7b3ec2d61521048b99ef4d5f617131bae7c914c3e1bf64b22fc0b2a087cc2db21"
        }
      ],
      "purl": "pkg:npm/unicode-match-property-value-ecmascript@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unicode-match-property-value-ecmascript/-/unicode-match-property-value-ecmascript-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unicode-match-property-value-ecmascript@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unicode-match-property-value-ecmascript/-/unicode-match-property-value-ecmascript-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-class-properties",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e6e227632a56b461a85436014d2c2074ab249db283e264fde2404deb932d26054b4c676df20c9f5225d83a7574d20e7ba5395aa21771e0afd9db5ef5d341960"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-class-properties@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-class-properties/-/plugin-syntax-class-properties-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-class-properties@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-syntax-class-properties/-/plugin-syntax-class-properties-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-top-level-await",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "03cd45f690f0c92ef233ffcac1b0920eacb7523e0d308babb69971a615b1a18b4d3e8bfb709b0390014d372565219de3c06c9c56cbab67e2ed380f20677efa89"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-top-level-await@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-top-level-await/-/plugin-syntax-top-level-await-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-top-level-await@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-syntax-top-level-await/-/plugin-syntax-top-level-await-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-arrow-functions",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b41b6e37aaad09377e887cd565538c369f8bd38888241a6a91d638dad59b9a3213e70bd1da4c7b831301b32850b45cc7c016f21a2f61f09f2bf478273a9407c6"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-arrow-functions@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-arrow-functions/-/plugin-transform-arrow-functions-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-arrow-functions@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-arrow-functions/-/plugin-transform-arrow-functions-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-async-to-generator",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a6c33d407707683afe1d9a51b89704d4f5c44ae19648271b886145861c1fcdd6d3c5a183573b95b5d358962030711a3718583405cf0c988f80bc81982091b4e0"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-async-to-generator@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-async-to-generator/-/plugin-transform-async-to-generator-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-async-to-generator@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-async-to-generator/-/plugin-transform-async-to-generator-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-block-scoped-functions",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ccdc85a9b737908fdf569ab07ea920e91bc1805a42e09d7c68a28c9afeca750ff51a04446a948903290b3153707d118edc1b478f7610665f24c425cf7153157a"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-block-scoped-functions@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-block-scoped-functions/-/plugin-transform-block-scoped-functions-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-block-scoped-functions@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-block-scoped-functions/-/plugin-transform-block-scoped-functions-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-block-scoping",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3f1c1ed22a96257e1f38e33690465e52e0311cc59bf672bef68879775d5bb0ba01d31320fa6903a6dd1e62e0d907b113ad8f5b6dc5652941933865b2ec11ec31"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-block-scoping@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-block-scoping/-/plugin-transform-block-scoping-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-block-scoping@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-block-scoping/-/plugin-transform-block-scoping-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-classes",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "72a6653258420b5ad59f113964632d21bf3dea28cbf74c69a4c8ae59773070e02e15ccf29e97772987a66fdd571453e2df02527bf39cad7f655e8a306ad924c4"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-classes@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-classes/-/plugin-transform-classes-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-classes@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-classes/-/plugin-transform-classes-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-computed-properties",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7437ee44e50f18ad664ed2cac833d46af9a3d9bea416ef364a6829ced04510ef7be0a323253f98b63dffa16b1350c06680f729f49e4f7354a5700611a49da144"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-computed-properties@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-computed-properties/-/plugin-transform-computed-properties-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-computed-properties@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-computed-properties/-/plugin-transform-computed-properties-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-destructuring",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0e7f372b29081738e10371433c0d73e0dfb27c5ddbb431a18e7270c488f44f8ded3f47e50ae8e753c7ca80491fd02d5b888a52bfd3597a03c143527a8d8930bd"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-destructuring@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-destructuring/-/plugin-transform-destructuring-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-destructuring@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-destructuring/-/plugin-transform-destructuring-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-dotall-regex",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e80eba3313ae5915d502d8e7e078e0ab10f4f1741df28eac695e1f021fe8a977d087778b3f8aaf3591c529c87f000863443dd16a6edcdf8336d3fd91a56c379"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-dotall-regex@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-dotall-regex/-/plugin-transform-dotall-regex-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-dotall-regex@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-dotall-regex/-/plugin-transform-dotall-regex-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-duplicate-keys",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "35f0032628877612c15b7a6e949949236341d2de1c722e164d9f05b5d22e35cdbef29b255dd3ed4510045aa518fa6f6434e93679161b4c03a2a40c65ace730c1"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-duplicate-keys@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-duplicate-keys/-/plugin-transform-duplicate-keys-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-duplicate-keys@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-duplicate-keys/-/plugin-transform-duplicate-keys-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-exponentiation-operator",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7db51e9643356a9bea7b3ff2631d7fa080959c6a3628ce6ceb79a11b296b9975312bf2005d221ff3b408c557d995d59fe10b0e69f63abd5ddb5fc68c1d2bcdac"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-exponentiation-operator@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-exponentiation-operator/-/plugin-transform-exponentiation-operator-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-exponentiation-operator@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-exponentiation-operator/-/plugin-transform-exponentiation-operator-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-builder-binary-assignment-operator-visitor",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0993aff6d1a98610d19558d5900826f0d864966f51cd2996a57da6cbeb7b51afca4fad7aa44cd7b100a38a7cef911bc7589f62b4ee1fdbde9e7eba17db75c230"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-builder-binary-assignment-operator-visitor@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-builder-binary-assignment-operator-visitor/-/helper-builder-binary-assignment-operator-visitor-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-builder-binary-assignment-operator-visitor@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-builder-binary-assignment-operator-visitor/-/helper-builder-binary-assignment-operator-visitor-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-explode-assignable-expression",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e65a1e44dbcca3d9b1d5d03f77ac8d8be6222b3889645ca56670a8d67985178a8f538c89d7869b856112b923104a543159dc5d385cf15e393f3e97ee753b58cb"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-explode-assignable-expression@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-explode-assignable-expression/-/helper-explode-assignable-expression-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-explode-assignable-expression@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-explode-assignable-expression/-/helper-explode-assignable-expression-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-for-of",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c426dd812cd76261c6c955f7f81b108dc77886fe2f03f143cbb29cf1e3a9cca98104f10e4eeaedd30e5f09141a1a5f864813912a025db2d435ac79788db36c79"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-for-of@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-for-of/-/plugin-transform-for-of-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-for-of@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-for-of/-/plugin-transform-for-of-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-function-name",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e8aee0672706d1c988c3017bb8c2bf66a7828a40865417723f627948a3425cee4438772a8becfb2707fc026c8335c060c444fc0eb12d0adfe63ca3f20335f2a9"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-function-name@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-function-name/-/plugin-transform-function-name-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-function-name@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-function-name/-/plugin-transform-function-name-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-literals",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "156f963e3491ee1894c4c70aab23633f4e6d4369260427691296476350119bdead19008206f5ca9e98c82ed0e99549c9fde1d9d2500b2ccf9dda53054a9609ad"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-literals@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-literals/-/plugin-transform-literals-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-literals@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-literals/-/plugin-transform-literals-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-member-expression-literals",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9312e43ac83cca2af861e10f1cbb8edad5cff51fe04e3a6e4ce8ec86a4a910b50ddd9020da37c39ca52fcf327139bba7dfcb30df09b852eebdb17ff303b891be"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-member-expression-literals@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-member-expression-literals/-/plugin-transform-member-expression-literals-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-member-expression-literals@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-member-expression-literals/-/plugin-transform-member-expression-literals-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-modules-amd",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2472ce534a3cd66e54a86d14973fdf3c2ebcfeff944ee19359a641530a449357d84350fd2df295e8c3e7e2db492aa468e4b9b8eb47e4ce32d32f8107bc2a6bbc"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-modules-amd@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-modules-amd/-/plugin-transform-modules-amd-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-modules-amd@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-modules-amd/-/plugin-transform-modules-amd-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-dynamic-import-node",
      "version": "2.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d9548facf5983722a03f91d8b48ba5030b26d423769204b9e096161b4928ca955ef217517fe4b5aff0c6a4426bd8a676c90d2e9f7012f62b31d2c4d08cb5649"
        }
      ],
      "purl": "pkg:npm/babel-plugin-dynamic-import-node@2.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-dynamic-import-node/-/babel-plugin-dynamic-import-node-2.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-dynamic-import-node@2.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-dynamic-import-node/-/babel-plugin-dynamic-import-node-2.3.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-modules-commonjs",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3864287955d58b5db9f478eea039ec40c94c913f549194fd4e95c0b2a5a9952fccd0dd60dd32409ff072382790bbb99f8dce56a52b1153e8d5d4777cf6db3491"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-modules-commonjs@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-modules-commonjs/-/plugin-transform-modules-commonjs-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-modules-commonjs@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-modules-commonjs/-/plugin-transform-modules-commonjs-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-modules-systemjs",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6877d58e167c41e91a345ff968d752b421b3c136d4ed2239854c9b04a94ccea20c0bbc3b1e8f21c796b847f0e44c77d17cbc07186c52a45b7d05fc4a0a85caa0"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-modules-systemjs@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-modules-systemjs/-/plugin-transform-modules-systemjs-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-modules-systemjs@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-modules-systemjs/-/plugin-transform-modules-systemjs-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-hoist-variables",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2920b95d28f91eb79185842d6777274a74300f38276dd503105b3190dd26e90dd6ac246def6c6b9d9f3e87ea57ed8c4cee1afcef320eddafefe69fc7dd3ae757"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-hoist-variables@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-hoist-variables/-/helper-hoist-variables-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-hoist-variables@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-hoist-variables/-/helper-hoist-variables-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-modules-umd",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "06066777200144c2f8cfa89ba62ed9f7c9b81152c523db55b190c00c2d7800494568d1c705c248a2f7e527ac2d0aa171c32d98275b4984646caf4c8b3caa0dfb"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-modules-umd@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-modules-umd/-/plugin-transform-modules-umd-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-modules-umd@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-modules-umd/-/plugin-transform-modules-umd-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-named-capturing-groups-regex",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5ec9bc3f686be61031c986e5adf0025e940a7506f1e26d9d7fdfd965243c30086c69dc34ebe8d6eecf73b12c3a85efa62595d1955332127564b49a38ce393558"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-named-capturing-groups-regex@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-named-capturing-groups-regex/-/plugin-transform-named-capturing-groups-regex-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-named-capturing-groups-regex@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-named-capturing-groups-regex/-/plugin-transform-named-capturing-groups-regex-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-new-target",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fca63685b2f1ac6e464d0f73cd949cdf15a23b2dfbf692044c485bb73c19730f6bbee69557816acbb0581983966676a85c84186db274ce25cb6bfb0a70609811"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-new-target@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-new-target/-/plugin-transform-new-target-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-new-target@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-new-target/-/plugin-transform-new-target-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-object-super",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "273608723dd7b58b2964357c8fdba59e830f6599c5fc28f42d4c4f3a347cf41741571fb360923d31d3089546636d70d7fba615792e88ddef28a7ea90dc1601a1"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-object-super@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-object-super/-/plugin-transform-object-super-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-object-super@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-object-super/-/plugin-transform-object-super-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-property-literals",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9ea56283055a9fe951fa0f058fc1319745105f69329ad8dc59f30e60cd6f4d810aba37b2bf64a43206b37f6a8d70aee5e120e22b24c0fe71c23ea2f87b6ce8d4"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-property-literals@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-property-literals/-/plugin-transform-property-literals-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-property-literals@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-property-literals/-/plugin-transform-property-literals-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-regenerator",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9716f6640bd22f22763c47b8ee1a0658f996db6bfb0ad4a5f635bc9a29e05781f6b045ff24e72b023da73ee1968b9e844549b66d4a632b338d02e4fa1c29f610"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-regenerator@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-regenerator/-/plugin-transform-regenerator-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-regenerator@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-regenerator/-/plugin-transform-regenerator-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regenerator-transform",
      "version": "0.14.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "78e7fabe46b920ed79d497ecc3634ef56a465f9f16eb05a679f2b7235cc41abd25383d2ef2bc0f68da902f5691c546b12de28edc0acd87755883529b683f8517"
        }
      ],
      "purl": "pkg:npm/regenerator-transform@0.14.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regenerator-transform/-/regenerator-transform-0.14.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regenerator-transform@0.14.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regenerator-transform/-/regenerator-transform-0.14.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "runtime",
      "version": "7.12.18",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "06880f43b72213a4980143ed966f6d59b808f7ed8082a49a9ba422bcc8178004fe7ca6e0a696a3e195f5e4c1de2c2d4f545e6c364ef486e06edb45f158eb3c0a"
        }
      ],
      "purl": "pkg:npm/%40babel/runtime@7.12.18",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.12.18.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/runtime@7.12.18",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.12.18.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regenerator-runtime",
      "version": "0.13.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6b9e05c6824322bdbba607fb2207901b19aa50d62b715df7f257ffea01f8e7a1d9fcf857fb905cc075c6f5a8c44a6c1ee9644ed2d033454ad198d38d5a092b7b"
        }
      ],
      "purl": "pkg:npm/regenerator-runtime@0.13.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regenerator-runtime/-/regenerator-runtime-0.13.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regenerator-runtime@0.13.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regenerator-runtime/-/regenerator-runtime-0.13.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-reserved-words",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c6150fcc35f164dd507e23b2fc8e6dcb27be4d1cfa940ef3eb1693e022ce8cf44c560d657517f42c7c344c306960be2f1bbf39e7a5ae1ddc8ef688b9526cd906"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-reserved-words@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-reserved-words/-/plugin-transform-reserved-words-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-reserved-words@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-reserved-words/-/plugin-transform-reserved-words-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-shorthand-properties",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c692f8f69a8f9cbb5fd2d565baeaafcd62202c486e3e9673becdb269b50748a44d94ded271853b68c9666af39ec972592a064a41106587cac76ca8890eb6934b"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-shorthand-properties@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-shorthand-properties/-/plugin-transform-shorthand-properties-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-shorthand-properties@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-shorthand-properties/-/plugin-transform-shorthand-properties-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-spread",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7540aba8f228c23aa4e695ecc75ccf7ed4aae2c4f4682799540c61760b3700c8326839a8513d06fb98770f38dadbbb7be9a5042095a51603c9a89fdde1d6d3b6"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-spread@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-spread/-/plugin-transform-spread-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-spread@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-spread/-/plugin-transform-spread-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-sticky-regex",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "25cdc949a6964fcf9fafb191bd03f4d9f283b189382bf958c16ab7f2bfd419f6b1a3cf5a8ee777db5347dbc29143bc72d586dcd15504e4fcfca6c8cd34352096"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-sticky-regex@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-sticky-regex/-/plugin-transform-sticky-regex-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-sticky-regex@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-sticky-regex/-/plugin-transform-sticky-regex-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-template-literals",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ab20a95661482636c176f04c9f9a240724b24594024d624b903b5d232f8ea082306979bdab7b53fd2bd606c4d241e3906a4db6ac955cac5c3626fe0dec37f42"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-template-literals@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-template-literals/-/plugin-transform-template-literals-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-template-literals@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-template-literals/-/plugin-transform-template-literals-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-typeof-symbol",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "78abff2e6509a4c9eee27a607efb372e21e126e6b97e8fc2cac10dc5ae396024176702a718240a020f3b6efa2a496d5f153f87037da5d37431b26f28b9363765"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-typeof-symbol@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-typeof-symbol/-/plugin-transform-typeof-symbol-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-typeof-symbol@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-typeof-symbol/-/plugin-transform-typeof-symbol-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-unicode-escapes",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d1b1c491dc09fec37f8a40477d298e5cfca937f6de886aa3a3ea38ff92bebf110534f44f7489a1be23da90c286e31f7a97ce5e9a86b467a7037e5b1d06eb196f"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-unicode-escapes@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-unicode-escapes/-/plugin-transform-unicode-escapes-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-unicode-escapes@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-unicode-escapes/-/plugin-transform-unicode-escapes-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-unicode-regex",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "98347348d63bff3a29c22b0f67990cf572827e1721a8863000a44446d127858b1c641efd5517a4b914a861b374f8a55edf2f3eab587a038b2f5ed3fb37e52808"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-unicode-regex@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-unicode-regex/-/plugin-transform-unicode-regex-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-unicode-regex@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-unicode-regex/-/plugin-transform-unicode-regex-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "preset-modules",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "277e8d8709df773a661f8d4cd43ae7924800aa165aaabfcd05d3df43aefb98bce5697a3ea038afd5d7b2083b60021cfca77dbca2d7686f40eeefec601c665b2a"
        }
      ],
      "purl": "pkg:npm/%40babel/preset-modules@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/preset-modules/-/preset-modules-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/preset-modules@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/preset-modules/-/preset-modules-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "core-js-compat",
      "version": "3.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "60ae9fc058c238a5b01a78c5511ddce78e18b2703fec3a0b2f4cac9dcb8e278a706eb880b4ea6f3366f281d95c5dbbd009067b6c153d08be2deed1a5ec44d1a5"
        }
      ],
      "purl": "pkg:npm/core-js-compat@3.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/core-js-compat/-/core-js-compat-3.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-js-compat@3.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/core-js-compat/-/core-js-compat-3.9.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "7.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f8607acd503d2d687ace8bd840b00b1f0bf9adbd8f1c69498b795f8aa207c51d2ebb00a079f70e25ce7dbfd7efd70f066d2b70c6ebaaa808c8f4d30038e82ad4"
        }
      ],
      "purl": "pkg:npm/semver@7.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-7.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-7.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "preset-react",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4d833457dcfa01b6fa763d4aee2e4dac4840d77a12e6e8d46106037ea2015d81ce73673656416073eabd932b2c23251fcb8fe1130aab812949fd082ff3324bb0"
        }
      ],
      "purl": "pkg:npm/%40babel/preset-react@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/preset-react/-/preset-react-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/preset-react@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/preset-react/-/preset-react-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-react-display-name",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "329ac4489cc8f4ee559c966b2fb820d4ca5daa6885714bf8d4973b49a87162c34fda40e416a0a5c714d9abed50bf800509a9a6f865cc44340834d9feaabc6688"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-react-display-name@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-react-display-name/-/plugin-transform-react-display-name-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-react-display-name@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-react-display-name/-/plugin-transform-react-display-name-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-react-jsx",
      "version": "7.12.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9b069535c5d5fa5eaa24eb91869753123f2c4ff674a3001559ff50ba34d9d1ddb27bd5ff2be3133934a2cdc80a3a3d7c3c69d373fee0d48e3e708523b0a84173"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-react-jsx@7.12.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-react-jsx/-/plugin-transform-react-jsx-7.12.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-react-jsx@7.12.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-react-jsx/-/plugin-transform-react-jsx-7.12.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-jsx",
      "version": "7.12.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7781ccdb74352bba2afd22cd986ea646df3997672c990d1c1d16b14578ca5b46057445ea959e64cc540a1f951cdeb0c910282efb209180f906d38326f7c47fd6"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-jsx@7.12.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-jsx/-/plugin-syntax-jsx-7.12.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-jsx@7.12.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-syntax-jsx/-/plugin-syntax-jsx-7.12.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-react-jsx-development",
      "version": "7.12.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "04f8d857ce9256e39ab9d161b09475ce3831c4e8490ede891cda03e3c0f158423150200c8d5d72b3a0d8c384836198746f542c4b6bdf200f6dfd9b101ac0ce51"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-react-jsx-development@7.12.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-react-jsx-development/-/plugin-transform-react-jsx-development-7.12.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-react-jsx-development@7.12.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-react-jsx-development/-/plugin-transform-react-jsx-development-7.12.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-react-pure-annotations",
      "version": "7.12.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "46a79a1e2c19b6985221467923ce4f107d7d2ce4b3c5fb846b3a18effa56012080201b804d0ce94950fe793e8c79b79e653d85e1e48bd2ee2fc3a9f8366d0c8e"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-react-pure-annotations@7.12.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-react-pure-annotations/-/plugin-transform-react-pure-annotations-7.12.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-react-pure-annotations@7.12.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-react-pure-annotations/-/plugin-transform-react-pure-annotations-7.12.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-loader",
      "version": "8.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "26f4ddd3f0fcf3d3d006d5172763d768a53fa6364332d1c0f55d9e726f9e3519a6042311d3d6be7e6a464cdc2726d166165e448bb572e3b2e305bf8bd3043df6"
        }
      ],
      "purl": "pkg:npm/babel-loader@8.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-loader/-/babel-loader-8.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-loader@8.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-loader/-/babel-loader-8.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-cache-dir",
      "version": "3.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b7618332dde8182feff81330ce6965583b8917fc5c0ed1398ff7c219ba830fb38bb89923d1c7e1d58480e5528fbf031e2c52cd0c193038a6765fce6318b55fb5"
        }
      ],
      "purl": "pkg:npm/find-cache-dir@3.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-cache-dir/-/find-cache-dir-3.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-cache-dir@3.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-cache-dir/-/find-cache-dir-3.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commondir",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ddd800da0c66127393cca5950ea968a3aaf1253b"
        }
      ],
      "purl": "pkg:npm/commondir@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commondir/-/commondir-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commondir@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commondir/-/commondir-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "make-dir",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83715e3f6d0b3708402dbffa0b3e837781769e0cded23cfbb5bceb0f6c0057ea3d15e3477b8acbfb22b699dd09fdf8927f5b1ad400e15ea8b9fa857038cfde1b"
        }
      ],
      "purl": "pkg:npm/make-dir@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/make-dir@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pkg-dir",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1d10f36da2a30be00e5955f1014ff1e7808e19e22ff5e6fee82903490a0d4ede17c96a0826fb8fb178b3c6efc5af6dc489e91bb59c2687521c206fe5fdad7419"
        }
      ],
      "purl": "pkg:npm/pkg-dir@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pkg-dir/-/pkg-dir-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pkg-dir@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pkg-dir/-/pkg-dir-4.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-up",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3e93b001d43f6255d0daf8fc6b787c222a43b98462df071e550406616c4d20d71cab8d009f0ec196c11708c6edd59b7e38b03a16af6cb88a48583d0eb2721297"
        }
      ],
      "purl": "pkg:npm/find-up@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-up/-/find-up-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-up@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-up/-/find-up-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "locate-path",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b7b870f6923e5afbb03495f0939cd51e9ca122ace0daa4e592524e7f4995c4649b7b7169d9589e65c76e3588da2c3a32ea9f6e1a94041961bced6a4c2a536af2"
        }
      ],
      "purl": "pkg:npm/locate-path@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/locate-path/-/locate-path-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/locate-path@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/locate-path/-/locate-path-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-locate",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "47bf5967fd30031286bb7a18325cfc8f2fe46e1b0dad2ed2299ecfc441c1809e7e1769ad156d9f2b670eb4187570762442c6f3155ec8f84a1129ee98b74a0aec"
        }
      ],
      "purl": "pkg:npm/p-locate@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-locate/-/p-locate-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-locate@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-locate/-/p-locate-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-limit",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ffff3c985592271f25c42cf07400014c92f6332581d76f9e218ecc0cbd92a8b98091e294f6ac51bd6b92c938e6dc5526a4110cb857dc90022a11a546503c5beb"
        }
      ],
      "purl": "pkg:npm/p-limit@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-limit/-/p-limit-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-limit@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-limit/-/p-limit-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-try",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4789cf0154c053407d0f7e7f1a4dee25fffb5d86d0732a2148a76f03121148d821165e1eef5855a069c1350cfd716697c4ed88d742930bede331dbefa0ac3a75"
        }
      ],
      "purl": "pkg:npm/p-try@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-try/-/p-try-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-try@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-try/-/p-try-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "loader-utils",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a87d1648c06d9ffa07bb08f2fcdb9c1206f1e5d6f1c67c6ea7db383d55c95031d905063eb3435603dac97f9dd1067419c5f721edeb94ba2ee1a6800fbc02d974"
        }
      ],
      "purl": "pkg:npm/loader-utils@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/loader-utils/-/loader-utils-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/loader-utils@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/loader-utils/-/loader-utils-1.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "big.js",
      "version": "5.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bf22f63b2989c666ab3bc83132bd2684286c3bd406c21ca77eebb8f8c1d3016e9ccdfabd86e98207bacaa548c377d6148833d4e26ce9caea454af382940c1b99"
        }
      ],
      "purl": "pkg:npm/big.js@5.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/big.js/-/big.js-5.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/big.js@5.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/big.js/-/big.js-5.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "emojis-list",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fe4c8cd7c11f8a7c1765b9e8f45c9419e161f3b282f074500501a295d1d96c4b91c9614e9afd54d74a3d041a7c5d564354d36e40ac88188bb96580005c9d15d9"
        }
      ],
      "purl": "pkg:npm/emojis-list@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/emojis-list/-/emojis-list-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/emojis-list@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/emojis-list/-/emojis-list-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "schema-utils",
      "version": "2.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "48788db4c394196050270cc84a25582aef361a257841819e3e9de8765635b6e28eee03eda61013e51fe9cb47c0eb1b5b80b2ff46fb4966753d6fcb34175ab45e"
        }
      ],
      "purl": "pkg:npm/schema-utils@2.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/schema-utils/-/schema-utils-2.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/schema-utils@2.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/schema-utils/-/schema-utils-2.7.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-deep-equal",
      "version": "3.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f7a90f68432f63d808417bf1fd542f75c0b98a042094fe00ce9ca340606e61b303bb04b2a3d3d1dce4760dcfd70623efb19690c22200da8ad56cd3701347ce1"
        }
      ],
      "purl": "pkg:npm/fast-deep-equal@3.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-deep-equal@3.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uri-js",
      "version": "4.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eeb294cb2df7435c9cf7ca50d430262edc17d74f45ed321f5a55b561da3c5a5d628b549e1e279e8741c77cf78bd9f3172bacf4b3c79c2acf5fac2b8b26f9dd06"
        }
      ],
      "purl": "pkg:npm/uri-js@4.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uri-js@4.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "html-webpack-plugin",
      "version": "5.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d309159492aaede74237bf7781d2e07409b99b5f7aa88daf6f94865f2e00b4638507f9582b24b5d3edd59217ba068d1a71d7405b7415c3ed32b205a8928fc811"
        }
      ],
      "purl": "pkg:npm/html-webpack-plugin@5.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/html-webpack-plugin/-/html-webpack-plugin-5.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/html-webpack-plugin@5.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/html-webpack-plugin/-/html-webpack-plugin-5.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "html-minifier-terser",
      "version": "5.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "822025670b2d29b9af324d4e3bb5974a3e0e67491e5c0725d9342ae0b5878a23c7d81c9a1fb59e5339e0f907a3f143f1c6ffbc9514eea2ea3489a34306ecc804"
        }
      ],
      "purl": "pkg:npm/%40types/html-minifier-terser@5.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/html-minifier-terser/-/html-minifier-terser-5.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/html-minifier-terser@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/html-minifier-terser/-/html-minifier-terser-5.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "html-minifier-terser",
      "version": "5.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "64faf930d39baa757f4fd6a4b213ca6d58323aa2e6cbe071a3b8ee2827d37e78cd9e24c031dcb8873db5610aa8a1f301243da475111aa8f3dd4e1a11efc4e0c6"
        }
      ],
      "purl": "pkg:npm/html-minifier-terser@5.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/html-minifier-terser/-/html-minifier-terser-5.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/html-minifier-terser@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/html-minifier-terser/-/html-minifier-terser-5.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camel-case",
      "version": "4.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83119606b4d3d49b8cc7a47ea393d35cc9949e19d5ccb43d48dbad0f862a2ad23a6a9f3deedded28409895aea0096124a655e794dc9b124660f46106c4a14283"
        }
      ],
      "purl": "pkg:npm/camel-case@4.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camel-case/-/camel-case-4.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camel-case@4.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camel-case/-/camel-case-4.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pascal-case",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b969464f76129caf71dc140968e75c670ae757a84fa5df23147d7fb9ca622d13e1ff6cc2549292d7d1381af607bda09c0029f77e85d9d1c2c1f56af1d4a19ee6"
        }
      ],
      "purl": "pkg:npm/pascal-case@3.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pascal-case/-/pascal-case-3.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pascal-case@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pascal-case/-/pascal-case-3.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "no-case",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e000dde318087e468c541991d348e2c922a51cdb09a8070191e2d6e93402a69a8bc5a16ab439d4646f456495d45e3b66b68814ff384ba51bd5d251cd74af7ce"
        }
      ],
      "purl": "pkg:npm/no-case@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/no-case/-/no-case-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/no-case@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/no-case/-/no-case-3.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lower-case",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "edf9b797734017d59f37a5b724e99fe5daf0a55a97efc26da0627703a5b46ba66795d338d70d9f5790f8f74a6c2854e931db3c4c9b1efde1cb145b0d1c78c782"
        }
      ],
      "purl": "pkg:npm/lower-case@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lower-case/-/lower-case-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lower-case@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lower-case/-/lower-case-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tslib",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "85c542df0604ce210b186984117b9eec3ef9cdbc0821550c58055b1c8b463f1d338b25f1ace310c78ad0115115e3952dff5228b6e12fc2a3e8a7320e90331fd0"
        }
      ],
      "purl": "pkg:npm/tslib@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tslib/-/tslib-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tslib@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tslib/-/tslib-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clean-css",
      "version": "4.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "55c3160cde7864dfc34be839f0760be7f9f866ba9ef2f1c9a4603c29d8145c55387ee3ff687370f1e95df52c8423269b20c257ff445a63f7e994ea398582d214"
        }
      ],
      "purl": "pkg:npm/clean-css@4.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clean-css/-/clean-css-4.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clean-css@4.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clean-css/-/clean-css-4.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "34e2a6f31864cc08f3171f01dafe4e0074febb9a5141cd9409ad95abd8d82ffdf5a36c22f66c4103b2c816cdec5795520b8f73ea91217db3142ef4a12a3dba58"
        }
      ],
      "purl": "pkg:npm/commander@4.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-4.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-4.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "param-case",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "457963ef3098a2445ea96a4e3c7f68622bd4ccb619e6f00f21f1260933558a8b02efc17c1741fdcbb4fb806d8cdfdca682eb7117981c144b326504a987d069dc"
        }
      ],
      "purl": "pkg:npm/param-case@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/param-case/-/param-case-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/param-case@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/param-case/-/param-case-3.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dot-case",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2afe672a587ac91addac6bf1789d9ee72d9e454a64528b085b8036012dfccf04b3dbbceeeee7c3c103e2e4986cdd702518d7ad9776e69c6850b0cb642899e3df"
        }
      ],
      "purl": "pkg:npm/dot-case@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dot-case/-/dot-case-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dot-case@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dot-case/-/dot-case-3.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "relateurl",
      "version": "0.2.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "54dbf377e51440aca90a4cd274600d3ff2d888a9"
        }
      ],
      "purl": "pkg:npm/relateurl@0.2.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/relateurl/-/relateurl-0.2.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/relateurl@0.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/relateurl/-/relateurl-0.2.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "terser",
      "version": "4.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1003e2a5335e5ac6ffdf02cf7aea75b553da5df21a53af3132755d3da7c82f54d5d393a101202b63221f16f9ef24236b4763483af0d534d4c545af917b6316cb"
        }
      ],
      "purl": "pkg:npm/terser@4.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/terser/-/terser-4.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/terser@4.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/terser/-/terser-4.8.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "loader-utils",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "acfe05d21d916964af3c4903ec12c31509ef49ffa72bec2bdc44948cd4f2006a1baab8a3996f76cdcf923ba778a78075c21efe07f260d669107b93585041ed1d"
        }
      ],
      "purl": "pkg:npm/loader-utils@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/loader-utils/-/loader-utils-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/loader-utils@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/loader-utils/-/loader-utils-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pretty-error",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "118e680f39ac5f9c2fbb29c0072ae66343f485ca7e4299c029b26783603630f8d52970b1ac3494933821549e1918f22ff890b8817f1f3d45ac702d11b63b161b"
        }
      ],
      "purl": "pkg:npm/pretty-error@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pretty-error/-/pretty-error-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pretty-error@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pretty-error/-/pretty-error-2.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "renderkid",
      "version": "2.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "71caa82e0f872ce1ead6f75f60d9b84c179a083222d452eddf01a88d30d2bdd7b052feb9a13988ddc9d3d84e2146397583329920f2be299ad7ce55182a747ebd"
        }
      ],
      "purl": "pkg:npm/renderkid@2.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/renderkid/-/renderkid-2.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/renderkid@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/renderkid/-/renderkid-2.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-select",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0ea93b2d02a9c0ba07dd5a2fcd99e4cde82a352b80ce243235951cadd0cce34d6263e4793641815c69ad3b4e7fc9a5d0ce200bb8fa20786d1bed40208e74c94d"
        }
      ],
      "purl": "pkg:npm/css-select@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/css-select/-/css-select-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-select@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/css-select/-/css-select-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "boolbase",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "68dff5fbe60c51eb37725ea9e3ed310dcc1e776e"
        }
      ],
      "purl": "pkg:npm/boolbase@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/boolbase/-/boolbase-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/boolbase@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/boolbase/-/boolbase-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-what",
      "version": "3.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "002526dcbd3f8e2653a9fcd13371e2f50f1e66a77a20adfb98c58f2f3f4f27190b5a59587917fe1075121d812d168a7612acad6aad458b315587b5df0675c20d"
        }
      ],
      "purl": "pkg:npm/css-what@3.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/css-what/-/css-what-3.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-what@3.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/css-what/-/css-what-3.4.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domutils",
      "version": "1.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2e07765dc27f363130fbbb45bdf2b13b3098299b1d72de6573343665a418f038f3ee97c00f719ba7cc92256b6b78823fbc394c566c706baa4799dc48620b6d0e"
        }
      ],
      "purl": "pkg:npm/domutils@1.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domutils/-/domutils-1.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domutils@1.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domutils/-/domutils-1.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dom-serializer",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dbfc4f6f7391b10e369c76224ae9d79038cf2c16848ffc53c143b807b5c26504d193b101b5338f6b2821d74600021d8e23542ba7a3567e9021cecc23d3276df6"
        }
      ],
      "purl": "pkg:npm/dom-serializer@0.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-0.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dom-serializer@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-0.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domelementtype",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2ec4e0c7f2f95690fe43c966b174875b65a903e781959f473dfddeac3d48a0f174d3fdc92876770649d4540d9018336eebd64d9b21660960523b8e578d8282e7"
        }
      ],
      "purl": "pkg:npm/domelementtype@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domelementtype/-/domelementtype-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domelementtype@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domelementtype/-/domelementtype-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "entities",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a7dda27f9373eb5f48d30f9a909acb647d0c5f43dbe435f7f573b0413b5749d41039a607d374b5b88429e2684e66d017af1ab85623baed84e22c1a36eb7f28f4"
        }
      ],
      "purl": "pkg:npm/entities@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/entities/-/entities-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/entities@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/entities/-/entities-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domelementtype",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "052281f934a9329148fc73b108daf53bc68c39367c853de9337190d30fe65919a48440d2149924cb3cf85d0b01578e010a1c0692b0df3328d50f4780d9a155df"
        }
      ],
      "purl": "pkg:npm/domelementtype@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domelementtype@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nth-check",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "59e04e763bbc4a7ccf379bd3509631614c4b797a426953f98b97b42c5f1f83b58e445d9677bc055ffa64d2d61993bb3c4fe27b54bcb40dae89d7ec024f402d1e"
        }
      ],
      "purl": "pkg:npm/nth-check@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nth-check/-/nth-check-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nth-check@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nth-check/-/nth-check-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dom-converter",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "81ddf2a483df38cafd8798c82aaf04dec1ce4c28de8ab9e5d162b965d4b5016d0e76dd1bd4f696687749e10938925bfe601f5a2414bb9844978c5a0340fbba0c"
        }
      ],
      "purl": "pkg:npm/dom-converter@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dom-converter/-/dom-converter-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dom-converter@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dom-converter/-/dom-converter-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "utila",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8a16a05d445657a3aea5eecc5b12a4fa5379772c"
        }
      ],
      "purl": "pkg:npm/utila@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/utila/-/utila-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/utila@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/utila/-/utila-0.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "htmlparser2",
      "version": "3.10.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "22089e3628d431b903a2fca828e6d4d435219b58b035813f7ee89f1281077ddd6864a64368e3414a46a5ed8d35b21c6c338f51e1768c7467b3dd69c5f547e209"
        }
      ],
      "purl": "pkg:npm/htmlparser2@3.10.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.10.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/htmlparser2@3.10.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.10.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "domhandler",
      "version": "2.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2622b4e21d07b79bbff347dd2cc084995e3390d87605ca0c141999ffdd56b5867ca955d22a38b0edf5cc8053e71dc49980ea375dd8a71ef9a70d478c7f9478c0"
        }
      ],
      "purl": "pkg:npm/domhandler@2.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domhandler/-/domhandler-2.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domhandler@2.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domhandler/-/domhandler-2.4.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "entities",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f62d9318975173bbb61204a83e46844e7a5a4e68dadc1a613d019b9b7837eb08489ae3cde85b8308e15c8577954d1c8810ffbaa6d48d305072b57899e7db2db"
        }
      ],
      "purl": "pkg:npm/entities@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/entities/-/entities-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/entities@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/entities/-/entities-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "3.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "055887cbb2ca793cf8a0d9e470b27e95548beafa6215e5fafddde8487f33096ed4c4fda89dc864faf4c6075e37c6e1631d2ddd7938242a85d7ca65eaca688874"
        }
      ],
      "purl": "pkg:npm/readable-stream@3.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@3.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "864457f14d568c915df0bb03276c90ff0596c5aa2912c0015355df90cf00fa3d3ef392401a9a6dd7a72bd56860e8a21b6f8a2453a32a97a04e8febaea7fc0a78"
        }
      ],
      "purl": "pkg:npm/string_decoder@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "util-deprecate",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "450d4dc9fa70de732762fbd2d4a28981419a0ccf"
        }
      ],
      "purl": "pkg:npm/util-deprecate@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/util-deprecate@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-ansi",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6a385fb8853d952d5ff05d0e8aaf94278dc63dcf"
        }
      ],
      "purl": "pkg:npm/strip-ansi@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-regex",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c3b33ab5ee360d86e0e628f0468ae7ef27d654df"
        }
      ],
      "purl": "pkg:npm/ansi-regex@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jasmine",
      "version": "3.6.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "84878ea2eeb2d0180238a6205d8bde42f958f8f4c78033da8c57febcb0986cc4d0f958c03fdf8442fd27b82f7e8320800162124456ae0755d46fd905b8e2ad71"
        }
      ],
      "purl": "pkg:npm/jasmine@3.6.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jasmine/-/jasmine-3.6.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jasmine@3.6.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jasmine/-/jasmine-3.6.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jasmine-core",
      "version": "3.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f2e4186bbcc937c86af73fa0f33d5ba827dd0bc7a80c07959cce6c7eab3b287bfdfe27e8279d349b4d7c7e915ced10da3ba49608b097c28ff03d235c7584e073"
        }
      ],
      "purl": "pkg:npm/jasmine-core@3.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jasmine-core/-/jasmine-core-3.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jasmine-core@3.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jasmine-core/-/jasmine-core-3.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "karma",
      "version": "6.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bd50c5c45180b1c9609858d903fa86c39c6a59d6485b1543ef12f20ae918518779c6cfee1b361b5c6393e733abb9505095e28499722be07da1cc60939fe33d0a"
        }
      ],
      "purl": "pkg:npm/karma@6.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/karma/-/karma-6.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/karma@6.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/karma/-/karma-6.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "body-parser",
      "version": "1.19.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "76110fb3bd943db0e701027d64a30d4cfea9b496a2a2784fe5c05be78d675cf956eb425ea68f5157f6b87d7e17596f42b8534adb692b86b8f5fab83389f342b3"
        }
      ],
      "purl": "pkg:npm/body-parser@1.19.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/body-parser/-/body-parser-1.19.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/body-parser@1.19.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/body-parser/-/body-parser-1.19.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "bytes",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cdab8b8eb7c21bec6fa326aa2e857c6cb5575cd182e09aa5c450aeb520d603a7c9ad3a3666ebcb613a99eda1c12d948c3a8a5bcf0bfc7fec19715cdf5532360e"
        }
      ],
      "purl": "pkg:npm/bytes@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bytes/-/bytes-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bytes@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bytes/-/bytes-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "content-type",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8483f71043ecf2d07d013d4bf8d52ab70380a6ce269366686fcf4c5973078c75a0f668a517f8f8a2c9e740b5c108114193fb6f206fed51cf663942623c184f5c"
        }
      ],
      "purl": "pkg:npm/content-type@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/content-type/-/content-type-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/content-type@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/content-type/-/content-type-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "depd",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9bcd52e14c097763e749b274c4346ed2e560b5a9"
        }
      ],
      "purl": "pkg:npm/depd@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/depd/-/depd-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/depd@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/depd/-/depd-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-errors",
      "version": "1.7.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b94401b771ff7122157dc87a8b512e3cdcbf62c4523940574d57d9fb247b6637b3dea8c1cfa8bdfa2e338cd6a8a9ca05548e25409e69960eb74ef19f4520c246"
        }
      ],
      "purl": "pkg:npm/http-errors@1.7.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-errors/-/http-errors-1.7.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-errors@1.7.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-errors/-/http-errors-1.7.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "633c2c83e3da42a502f52466022480f4208261de"
        }
      ],
      "purl": "pkg:npm/inherits@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "setprototypeof",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "26f74059f6d778819a67d7082e9dfc1e7b594854a8de65a0eb119c249b1df9de1a44c3aa6ae6a0d42eb77497c3c3b39a318c046c730ec4467596a55160fd8e03"
        }
      ],
      "purl": "pkg:npm/setprototypeof@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/setprototypeof@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "statuses",
      "version": "1.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "161c7dac177659fd9811f43771fa99381478628c"
        }
      ],
      "purl": "pkg:npm/statuses@1.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/statuses/-/statuses-1.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/statuses@1.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/statuses/-/statuses-1.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "toidentifier",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c9a387fcf93f5448415964e5848faa5f10c55e57a30c67108a9325cb175af67b61ba56b12d950d714a85c68929d2f7189efb5e2659f914d40346bc63dd871b57"
        }
      ],
      "purl": "pkg:npm/toidentifier@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/toidentifier@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "iconv-lite",
      "version": "0.4.24",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bf73179d901cbe7cb091350466898801cb657bb4575de79d391df5c3097b565ca85cee108bd6abbd27a73505a77b54dc4708422f51f02c8db56c4a9da63f3fac"
        }
      ],
      "purl": "pkg:npm/iconv-lite@0.4.24",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/iconv-lite@0.4.24",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safer-buffer",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "619a372bcd920fb462ca2d04d4440fa232f3ee4a5ea6749023d2323db1c78355d75debdbe5d248eeda72376003c467106c71bbbdcc911e4d1c6f0a9c42b894b6"
        }
      ],
      "purl": "pkg:npm/safer-buffer@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safer-buffer@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "on-finished",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "20f1336481b083cd75337992a16971aa2d906947"
        }
      ],
      "purl": "pkg:npm/on-finished@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/on-finished/-/on-finished-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/on-finished@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/on-finished/-/on-finished-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ee-first",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "590c61156b0ae2f4f0255732a158b266bc56b21d"
        }
      ],
      "purl": "pkg:npm/ee-first@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ee-first@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "6.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "54274144d1535f57f213b35be85628511a3f48f7bad9009a032cc9bd48f045a22c73e35e3c112788796fc459a65f9ebe1d9a61206b55d177828ab06da43ad3c9"
        }
      ],
      "purl": "pkg:npm/qs@6.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-6.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@6.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-6.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "raw-body",
      "version": "2.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e0ecfc0d423076fa1ae6a3097a5c62a738bf889222e343b9706575c0d629e61bd93fc64dd13fa388d90bd107a95ecf84b10f5727c8a9103a221fbd3249424fdd"
        }
      ],
      "purl": "pkg:npm/raw-body@2.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/raw-body/-/raw-body-2.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/raw-body@2.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/raw-body/-/raw-body-2.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unpipe",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b2bf4ee8514aae6165b4817829d21b2ef49904ec"
        }
      ],
      "purl": "pkg:npm/unpipe@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unpipe@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-is",
      "version": "1.6.18",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4e444aafdb144f1107f0c75fb8248fed58b3272cd134c8e3d89d9da3626bdcaca6e7df0955d124b2eccf4029e514f5b8932f50fa203e99af411a6d3a5d0072f2"
        }
      ],
      "purl": "pkg:npm/type-is@1.6.18",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-is/-/type-is-1.6.18.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-is@1.6.18",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-is/-/type-is-1.6.18.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "media-typer",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8710d7af0aa626f8fffa1ce00168545263255748"
        }
      ],
      "purl": "pkg:npm/media-typer@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/media-typer@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "colors",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6be52a4e1e2481983f4a51af7dbcc31e9811bbb00040e9a6a911c99f185164808a1544fdd5bad584d36de7c08c594f4fb016efdcf0c26541db571b83887da6b4"
        }
      ],
      "purl": "pkg:npm/colors@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/colors/-/colors-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/colors@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/colors/-/colors-1.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "connect",
      "version": "3.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "66a45773eb59ba44e848d9a1e42da258c4a85775f561470f6ea10ce039041b9b4d417ad051908d5461afdc8ba272790cb4f7c67f75eda7c5825ecdbde62435a5"
        }
      ],
      "purl": "pkg:npm/connect@3.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/connect/-/connect-3.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/connect@3.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/connect/-/connect-3.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "finalhandler",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "68059c5b9eeec5536b419a855e3213a56dec2144261c61b7a926fd9946a1f4c80c0b835e5a134e94d8d7118ab71e3440bcbe9aad4be2646189b0183acf4cec58"
        }
      ],
      "purl": "pkg:npm/finalhandler@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/finalhandler@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "encodeurl",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ad3ff4c86ec2d029322f5a02c3a9a606c95b3f59"
        }
      ],
      "purl": "pkg:npm/encodeurl@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/encodeurl@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-html",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0258eae4d3d0c0974de1c169188ef0051d1d1988"
        }
      ],
      "purl": "pkg:npm/escape-html@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-html@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parseurl",
      "version": "1.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0a2c9e3b1153fc96723799b4cfd3df5f0e1208127a4b2833d43a65d30aa39610c418604fd469ec51510bd29eb78681b57dc8f77c7ca75e2f4d60ee2758e2fea9"
        }
      ],
      "purl": "pkg:npm/parseurl@1.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parseurl@1.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "utils-merge",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9f95710f50a267947b2ccc124741c1028427e713"
        }
      ],
      "purl": "pkg:npm/utils-merge@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/utils-merge@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "di",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "806649326ceaa7caa3306d75d985ea2748ba913c"
        }
      ],
      "purl": "pkg:npm/di@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/di/-/di-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/di@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/di/-/di-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dom-serialize",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "562ae8999f44be5ea3076f5419dcd59eb43ac95b"
        }
      ],
      "purl": "pkg:npm/dom-serialize@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dom-serialize/-/dom-serialize-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dom-serialize@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dom-serialize/-/dom-serialize-2.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "custom-event",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5d02a46850adf1b4a317946a3928fccb5bfd0425"
        }
      ],
      "purl": "pkg:npm/custom-event@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/custom-event/-/custom-event-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/custom-event@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/custom-event/-/custom-event-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ent",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e964219325a21d05f44466a2f686ed6ce5f5dd1d"
        }
      ],
      "purl": "pkg:npm/ent@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ent/-/ent-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ent@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ent/-/ent-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extend",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e3aae0b9f5c0fb0b25babab3572b4141b9f9197288861bcd304ee3ee8d7e7dd1c0794ed967db4136501e12fd601156a8577df665d8b3604be81074f2088a6fe"
        }
      ],
      "purl": "pkg:npm/extend@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extend/-/extend-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extend@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extend/-/extend-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "void-elements",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c066afb582bb1cb4128d60ea92392e94d5e9dbec"
        }
      ],
      "purl": "pkg:npm/void-elements@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/void-elements/-/void-elements-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/void-elements@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/void-elements/-/void-elements-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-proxy",
      "version": "1.18.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ee6cffef6d406e72702156e7692bf50b3dc09b464b4ff501c240bdd95971857bff93f04141f3367d712540d0b6ec1546af4bb0529a6560f40cf4b9da04c47935"
        }
      ],
      "purl": "pkg:npm/http-proxy@1.18.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-proxy/-/http-proxy-1.18.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-proxy@1.18.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-proxy/-/http-proxy-1.18.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eventemitter3",
      "version": "4.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f20b870590b02a716161d1ebdb2b2e45612b4f08683765fc5c42d196b470a667de6368e3b94378b5a40cb142ca515a352b80ef665fb4a607f2a32b07c6f9af13"
        }
      ],
      "purl": "pkg:npm/eventemitter3@4.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eventemitter3/-/eventemitter3-4.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eventemitter3@4.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eventemitter3/-/eventemitter3-4.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "follow-redirects",
      "version": "1.13.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ea63d380bc589b7afa064920d2f34cd074e37c6ace12db1f6e16a042f6f10c4b04929361c39f36ba905aa116729737a7ea4ac49b15c982df49bba1e22383bb04"
        }
      ],
      "purl": "pkg:npm/follow-redirects@1.13.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.13.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/follow-redirects@1.13.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.13.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "requires-port",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "925d2601d39ac485e091cf0da5c6e694dc3dcaff"
        }
      ],
      "purl": "pkg:npm/requires-port@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/requires-port/-/requires-port-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/requires-port@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/requires-port/-/requires-port-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isbinaryfile",
      "version": "4.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "391ac4cbe48d56a521ac269a978840e1f07386081043e05a2e7b723ce768122c252995bd0598895e383744c8abb84e2d3c4237a7254fa72487405fdd296a5eae"
        }
      ],
      "purl": "pkg:npm/isbinaryfile@4.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isbinaryfile/-/isbinaryfile-4.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isbinaryfile@4.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isbinaryfile/-/isbinaryfile-4.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "log4js",
      "version": "6.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "31cf2336e48522641421ab5e045c1d3907260ba43999a534555bdd0b647a5cc6faebf5674feed64b80ffd0478d319bb560e0e625ee4d227d977ed0b312871483"
        }
      ],
      "purl": "pkg:npm/log4js@6.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/log4js/-/log4js-6.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/log4js@6.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/log4js/-/log4js-6.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "date-format",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7b24dca4a39c6a67615895e3e7a0e940ca35ca5490a5c1ad18a5dc5344dbf7bf8ae7afc21796a602aaaa363d3e2af0348b0db29f1b47585b0f0d20a50b17b8f3"
        }
      ],
      "purl": "pkg:npm/date-format@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/date-format/-/date-format-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/date-format@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/date-format/-/date-format-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "flatted",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "af9c06c7b61e3b0356365080d3043ceb32b20cb310afefd107cc72ef8338853a617e68e58a34d24971ae1fcae7bca6677d3f62fbbe7399df2370a74c4783ba8c"
        }
      ],
      "purl": "pkg:npm/flatted@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/flatted/-/flatted-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/flatted@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/flatted/-/flatted-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rfdc",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8a32f2b334cc994ad7be34a8a2e7154308a619493ce1e45c982b8b57c5e085edd43bce668d4b51007472a0c33a5edcaa6c409a5ee056c75f0b6b7e76dec5c834"
        }
      ],
      "purl": "pkg:npm/rfdc@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rfdc/-/rfdc-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rfdc@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rfdc/-/rfdc-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "streamroller",
      "version": "2.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "386efdaa6dc0ba300cf489a8aa0584635c46e075fe2f0fb263aa998fd4752b69a11796c4990f38f70beb6fee2fb788cb30bcf05edb499506ce74f390551bfb0d"
        }
      ],
      "purl": "pkg:npm/streamroller@2.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/streamroller/-/streamroller-2.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/streamroller@2.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/streamroller/-/streamroller-2.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "date-format",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6d842e18b785c6193134e177adc32d899c6f08102ab86cd99baa16035a19d20d931d4ce2bda461bfcb8e85daf5f4b9a8a1b48e2e8200c5e50ad9175b33c2054c"
        }
      ],
      "purl": "pkg:npm/date-format@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/date-format/-/date-format-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/date-format@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/date-format/-/date-format-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-extra",
      "version": "8.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ca1950800ea69ce25428eb11505b2025d402be42a1733f2d9591b91c141f45e619cb8e8ec0b718f9989ad26b5d1ec3a8f72fe13fe0b130dd1353d431a0eb46e2"
        }
      ],
      "purl": "pkg:npm/fs-extra@8.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs-extra/-/fs-extra-8.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs-extra@8.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs-extra/-/fs-extra-8.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsonfile",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8771aae0799b64076b76640fca058f9c10e33ecb"
        }
      ],
      "purl": "pkg:npm/jsonfile@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsonfile/-/jsonfile-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsonfile@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsonfile/-/jsonfile-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "universalify",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ac125e2390970259b2d6957eeb5ed607d27add4e9771acc71c5d9fd9d6c98b1e17ce9505d114b765b8f414620e080bdae4ffddfc604e61a002435c3ed1acd492"
        }
      ],
      "purl": "pkg:npm/universalify@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/universalify/-/universalify-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/universalify@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/universalify/-/universalify-0.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime",
      "version": "2.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b6a921e3b17329e08f0f63d488f07aa646cccec09ab23c407c2eb6fd66a9e6aad459c6feb056ac5d40b923781833988133cbff4299f850ad31fa3d221f214f0e"
        }
      ],
      "purl": "pkg:npm/mime@2.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime/-/mime-2.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime@2.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime/-/mime-2.5.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qjobs",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f18389107b71a72480ddf143c8247103e51457e7c0fab4d69ee5afca538afcd0a3858f9be28702b66bbc4edb166fe998794f860877ff4bae8a645fc0b2d78a1e"
        }
      ],
      "purl": "pkg:npm/qjobs@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qjobs/-/qjobs-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qjobs@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qjobs/-/qjobs-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "range-parser",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1eb82cc7ea2baa8ca09e68456ca68713a736f7a27e1d30105e8c4417a80dba944e9a6189468cb37c6ddc700bdea8206bc2bff6cb143905577f1939796a03b04a"
        }
      ],
      "purl": "pkg:npm/range-parser@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/range-parser@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "socket.io",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "edc05676c0c2edb6f2105e966c1a9f7e38b373f1f8605d702dd6683b3b987e8dae30d4858c92ae437eadd07e34a3d076d033baa7e992cad11df76a0fe12d796c"
        }
      ],
      "purl": "pkg:npm/socket.io@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/socket.io/-/socket.io-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/socket.io@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/socket.io/-/socket.io-3.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "cookie",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cbb9889a573facd92f0919a0f200b7fe58fced2ee94d4209e901a3c0747d59025c16cf9931339aa0fae474503f61d6eea9512611b6f945d855c4c9007203a7a6"
        }
      ],
      "purl": "pkg:npm/%40types/cookie@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/cookie/-/cookie-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/cookie@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/cookie/-/cookie-0.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "cors",
      "version": "2.8.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0bbb2b8c78951b7132d6747a779d7576d0e40848f1b8df56d475801231aaf24a5cc2634ce89264a42d31bda6ccec15d31b6c03abc12edf7887f5a40a6bb22f2d"
        }
      ],
      "purl": "pkg:npm/%40types/cors@2.8.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/cors/-/cors-2.8.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/cors@2.8.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/cors/-/cors-2.8.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "accepts",
      "version": "1.3.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "225f3442cd968d89492013733642ba298aa554c4db64b5e01f1da84f4a54fdf8d11f2129f8f11f10f634477582c001953ad6aec61d613b136021fe5bbfb750a4"
        }
      ],
      "purl": "pkg:npm/accepts@1.3.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/accepts/-/accepts-1.3.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/accepts@1.3.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/accepts/-/accepts-1.3.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "negotiator",
      "version": "0.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8595dcecad9ef8f81e23578305eff5d00adde1e91b7ebaea1bc129fbc2667f82480f66cd83b36f08f39937e91f179ef8a45408ee6ba6d8052a0e27682aa7133b"
        }
      ],
      "purl": "pkg:npm/negotiator@0.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/negotiator@0.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "base64id",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9467b7e28e841e3f72dcab6cf51e1962cfc6afee8decc09a3252050371754763b9fe6ecad3a0317d278ee79df43c411113afd6c8483796cbb2c3818794f647a2"
        }
      ],
      "purl": "pkg:npm/base64id@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/base64id/-/base64id-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/base64id@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/base64id/-/base64id-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "engine.io",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b7613dc0b96cb108c6c349e5b85e9a6327d7f0bc1853c263d3172dfa90217d67effd8ac19fa4d236d118b20c4721f68ca9facbc74edccdc320f5b30de9d8bedf"
        }
      ],
      "purl": "pkg:npm/engine.io@4.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/engine.io/-/engine.io-4.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/engine.io@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/engine.io/-/engine.io-4.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cookie",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "670ac5906271511dc42285ed3bec9513af446fb2a58b16da78059f05007dbd5b0d9ffa3e630ebd8015924832bcdb985035d37ec05f3310b7f7745365fe4c6450"
        }
      ],
      "purl": "pkg:npm/cookie@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cookie/-/cookie-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cookie/-/cookie-0.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cors",
      "version": "2.8.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2881db2c9aaeef7446aff8676eb3bdb817a2c4d1aebd2423ba5fe3745bd2fca152207d615957759e0ef3387c7e62b11f2272c6eeae27e861d0f5c0edc6ffcfea"
        }
      ],
      "purl": "pkg:npm/cors@2.8.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cors/-/cors-2.8.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cors@2.8.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cors/-/cors-2.8.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-assign",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2109adc7965887cfc05cbbd442cac8bfbb360863"
        }
      ],
      "purl": "pkg:npm/object-assign@4.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-assign@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vary",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2299f02c6ded30d4a5961b0b9f74524a18f634fc"
        }
      ],
      "purl": "pkg:npm/vary@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vary@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "engine.io-parser",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b077c442fea79ad26baba4cab88cf993210a1ffa9274ae7a1ff03eec39c0b943d6a2c9c86404b634735c3cb9b28ed6377064bf32a25d65b5235bdec953bda262"
        }
      ],
      "purl": "pkg:npm/engine.io-parser@4.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/engine.io-parser/-/engine.io-parser-4.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/engine.io-parser@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/engine.io-parser/-/engine.io-parser-4.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "base64-arraybuffer",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9818c79e059b1355f97e0428a017c838e90ba812"
        }
      ],
      "purl": "pkg:npm/base64-arraybuffer@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/base64-arraybuffer/-/base64-arraybuffer-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/base64-arraybuffer@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/base64-arraybuffer/-/base64-arraybuffer-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ws",
      "version": "7.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "86beaf091efa1aca2cb0846cafc38b47d69c5559b58f27c45af85b363b603ceadfbc094acefc9e83f3faafc46e0e3472adc4283d04fb2b40c610f73b01eea3cc"
        }
      ],
      "purl": "pkg:npm/ws@7.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ws/-/ws-7.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ws@7.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ws/-/ws-7.4.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "socket.io-adapter",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "faf0e8bff693b0b8d58984f04bd7cfcb9a44b5392b6c42acc3633ea154a8146c3a383d48a6f955d553e153335ba1f090f28c8c6dd609a83b467661d02ba4dd3e"
        }
      ],
      "purl": "pkg:npm/socket.io-adapter@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/socket.io-adapter/-/socket.io-adapter-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/socket.io-adapter@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/socket.io-adapter/-/socket.io-adapter-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "socket.io-parser",
      "version": "4.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b7e6f4492f88c46ed1c7375ad8456fc8165bbc53c10a3268c87b84d0ffffece02c376dc622dcc345d59ae802f1648ffc479ca02bb8c047ab74dbcff3fbbdbde6"
        }
      ],
      "purl": "pkg:npm/socket.io-parser@4.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/socket.io-parser/-/socket.io-parser-4.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/socket.io-parser@4.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/socket.io-parser/-/socket.io-parser-4.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "@types",
      "name": "component-emitter",
      "version": "1.2.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ec8e57ae44a5a61aa6a331eae4ce8c75f5a19bb1c417e6b9a6bef5e5df0948a7980c1b51e0922c0fc6c379a74ef47c10ca4cd48f8288d56ee635f8758c6c586"
        }
      ],
      "purl": "pkg:npm/%40types/component-emitter@1.2.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/component-emitter/-/component-emitter-1.2.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/component-emitter@1.2.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/component-emitter/-/component-emitter-1.2.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "component-emitter",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "45ddec7ba401fac3b54f0a998ec710aeeae910f21f3b4ff26274a29fa43fac3de63aeb47bd4ac202126e6f7afdd2e35bf9211206e134418a01f7461d7dab6c46"
        }
      ],
      "purl": "pkg:npm/component-emitter@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/component-emitter/-/component-emitter-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/component-emitter@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/component-emitter/-/component-emitter-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tmp",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "efa49486d7ea4762239fec6595c2393f5a326a79c73470720fcd16d6ae38ee05379a9f46f4f4a919d5a68d43874433e21d869c224eba5bbb9b0d3b8f177044b5"
        }
      ],
      "purl": "pkg:npm/tmp@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tmp/-/tmp-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tmp@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tmp/-/tmp-0.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ua-parser-js",
      "version": "0.7.24",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ca8fa6886cd0c7981a93354add015f374fcbf6e561a2c5c104eeea9a793b7368b0d4884bdb5db07c0df36e7239e01d286c6c02ff9356b9bfe24fdb1178cc7e17"
        }
      ],
      "purl": "pkg:npm/ua-parser-js@0.7.24",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ua-parser-js/-/ua-parser-js-0.7.24.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ua-parser-js@0.7.24",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ua-parser-js/-/ua-parser-js-0.7.24.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "yargs-parser",
      "version": "20.2.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "00fd7e7d021648cfec322113f1fc9aca3c7f27e2664cfb7632bd0592b82a078b6876d7dae77b0eb2b480708ac9443e574b6d1b294c1a0c8b8c91628212240b28"
        }
      ],
      "purl": "pkg:npm/yargs-parser@20.2.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-20.2.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs-parser@20.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-20.2.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "karma-chrome-launcher",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ddd3ecfe7eef833d6bc71b729e9cd94ef6fdcbf188696f318c0c1c206b6d2dbc9caa816d23bca8d4d1a7422ea815385ead113e188842007642e2f12a58684dbe"
        }
      ],
      "purl": "pkg:npm/karma-chrome-launcher@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/karma-chrome-launcher/-/karma-chrome-launcher-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/karma-chrome-launcher@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/karma-chrome-launcher/-/karma-chrome-launcher-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1f125d616ab53132106c9de7c3472ab2c1e84cd536ebb2a5ac3b866755989710d2b54b4a52139a266875d76fd36661f1c547ee26a3d748e9bbb43c9ab3439221"
        }
      ],
      "purl": "pkg:npm/which@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which/-/which-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which/-/which-1.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "karma-cli",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d4a6f6f1420b83566c7ea4267842db3f3b846f90ba19925f548934a8eafc2cd610b985a601aa8fd7a5a96e92848e17a30eb0d8c983b0c095d264eeaeeeae4fbf"
        }
      ],
      "purl": "pkg:npm/karma-cli@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/karma-cli/-/karma-cli-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/karma-cli@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/karma-cli/-/karma-cli-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "karma-coverage",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ad0ef2d0aaf3dc2f18440f47265d876c3cc090ba1e80b1af453195b56e136a95512126807dab2676058d60bbb0ffaebe462c66f943360ee2c890b24c5a58ffe"
        }
      ],
      "purl": "pkg:npm/karma-coverage@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/karma-coverage/-/karma-coverage-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/karma-coverage@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/karma-coverage/-/karma-coverage-2.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "istanbul-lib-coverage",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "522508ab1320443113e9e47ea391db7d160fd65d21aa458eb3bbcdc42fe6820bad08c508856326f200076fcb479727c3dff97aae580d03970a743cc401fea112"
        }
      ],
      "purl": "pkg:npm/istanbul-lib-coverage@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-lib-coverage/-/istanbul-lib-coverage-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-coverage@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-lib-coverage/-/istanbul-lib-coverage-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "istanbul-lib-instrument",
      "version": "4.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "05781097d91fe164c23c20a99851a8264cfffae86f9bb87b3c529463187ba9aad0777111df7bc71bffea684f1e376e65d3b62a64fa475d4f48d3d97f443e5a19"
        }
      ],
      "purl": "pkg:npm/istanbul-lib-instrument@4.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-lib-instrument/-/istanbul-lib-instrument-4.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-instrument@4.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-lib-instrument/-/istanbul-lib-instrument-4.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "@istanbuljs",
      "name": "schema",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "657458e2336f56049543c0cbdcb4dc6a4680b57c13554c44f3586c96cc83d80b685d6ff05686f5d0790e2755ffa4095c23b0fed98a192a0e5da3c1bfc3a45880"
        }
      ],
      "purl": "pkg:npm/%40istanbuljs/schema@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@istanbuljs/schema/-/schema-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@istanbuljs/schema@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@istanbuljs/schema/-/schema-0.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "istanbul-lib-report",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c1c762fae00acdf8864f669b3e9299d21494d6b1908d44272efb58e4ca50ed00936a10f754e0e172ee3071f63562d9066830f9caec9d38b20d5ec7dbbacf513b"
        }
      ],
      "purl": "pkg:npm/istanbul-lib-report@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-lib-report/-/istanbul-lib-report-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-report@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-lib-report/-/istanbul-lib-report-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "istanbul-lib-source-maps",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "735e8ba4546447cbd05f21d9e672e9637e4966dce3d4f418d626667ac51b7f51591db22ea5c59f8e0397058f581e42c443aa6ecf5bb80e08faaa653f0e2b2b66"
        }
      ],
      "purl": "pkg:npm/istanbul-lib-source-maps@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-lib-source-maps/-/istanbul-lib-source-maps-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-source-maps@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-lib-source-maps/-/istanbul-lib-source-maps-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "istanbul-reports",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f6d66fcfb0224773c40cd1a257dbc8a2e43f10072a31716691c035083153c0e07df0e6550cbd0f1fd8251e8b5fe54829e8608e4f2a5fcc6588fceaa358d09153"
        }
      ],
      "purl": "pkg:npm/istanbul-reports@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-reports/-/istanbul-reports-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-reports@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-reports/-/istanbul-reports-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "html-escaper",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1f688cb5dd08e0cb7979889aa517480e3a7e5f37a55d0d2d144e094bb605c057af5d73263a9f66c8dad4bc28340fac2cf22aa444f05f28781bc228354a694b7e"
        }
      ],
      "purl": "pkg:npm/html-escaper@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/html-escaper/-/html-escaper-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/html-escaper@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/html-escaper/-/html-escaper-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "karma-jasmine",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "87c5c30214e266324acdf9283b595a307fb37cd96b6be7444075008e99f9255d7308fb4e2155864232c1aea867cd06bf86b5365eb6704b205ae978c40737d7cf"
        }
      ],
      "purl": "pkg:npm/karma-jasmine@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/karma-jasmine/-/karma-jasmine-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/karma-jasmine@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/karma-jasmine/-/karma-jasmine-4.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "karma-phantomjs-launcher",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d23ca34801bda9863ad318e3bb4bd4062b13acd2"
        }
      ],
      "purl": "pkg:npm/karma-phantomjs-launcher@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/karma-phantomjs-launcher/-/karma-phantomjs-launcher-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/karma-phantomjs-launcher@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/karma-phantomjs-launcher/-/karma-phantomjs-launcher-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "phantomjs-prebuilt",
      "version": "2.1.16",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "efd212a4a3966d3647684ea8ba788549be2aefef"
        }
      ],
      "purl": "pkg:npm/phantomjs-prebuilt@2.1.16",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/phantomjs-prebuilt/-/phantomjs-prebuilt-2.1.16.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/phantomjs-prebuilt@2.1.16",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/phantomjs-prebuilt/-/phantomjs-prebuilt-2.1.16.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-promise",
      "version": "4.2.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1c90c6c7975ac5e22fc5d071bc6d9c6fd838b44bf0224de2f3e9e15f4c86ad89995336e4760f106c37af85e0c1f20774fffb8f8f8735110b9af10f8c5624f4ff"
        }
      ],
      "purl": "pkg:npm/es6-promise@4.2.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-promise/-/es6-promise-4.2.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-promise@4.2.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-promise/-/es6-promise-4.2.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extract-zip",
      "version": "1.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c688791b55bf3c1d3fdbb95780c4322213f90d263f2e1a02b0ec9981bfba88c991b42c15068e79b8a68ca0462b0c2290856bea122a7964f28073a7853727ff30"
        }
      ],
      "purl": "pkg:npm/extract-zip@1.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extract-zip/-/extract-zip-1.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extract-zip@1.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extract-zip/-/extract-zip-1.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concat-stream",
      "version": "1.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dbb1c18212718e266d224dd872f9ffe246c993fd6e66e2457ee3c49ece8b684be9bc6d5fd214de6bc96296ba2eca8f6655cd8659d70467c38ba0699200396b0b"
        }
      ],
      "purl": "pkg:npm/concat-stream@1.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/concat-stream/-/concat-stream-1.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-stream@1.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/concat-stream/-/concat-stream-1.6.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "2.3.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "11b868f0ae2321b1c0c67bb18bba38d8ead9805fd94cd72c663ea744ac949a484b16af021c8b69fdfcba85066e6663ff9f7c99f550546e9e33cff997f219983f"
        }
      ],
      "purl": "pkg:npm/readable-stream@2.3.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@2.3.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "core-util-is",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b5fd54220aa2bc5ab57aab7140c940754503c1a7"
        }
      ],
      "purl": "pkg:npm/core-util-is@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-util-is@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "process-nextick-args",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "de8b943a9421b60adb39ad7b27bfaec4e4e92136166863fbfc0868477f80fbfd5ef6c92bcde9468bf757cc4632bdbc6e6c417a5a7db2a6c7132a22891459f56a"
        }
      ],
      "purl": "pkg:npm/process-nextick-args@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/process-nextick-args@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9ff4a19ef0e2e851db6d57ef8aba3e5a88e2173bfeb3c30f30705ccd578f7d4a4324bc282d3d21b759786300426e2f29240bde104767907c8fc933ff9b345fc2"
        }
      ],
      "purl": "pkg:npm/string_decoder@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typedarray",
      "version": "0.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "867ac74e3864187b1d3d47d996a78ec5c8830777"
        }
      ],
      "purl": "pkg:npm/typedarray@0.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typedarray/-/typedarray-0.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typedarray@0.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typedarray/-/typedarray-0.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mkdirp",
      "version": "0.5.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "34a98094449fea3306ca6d7ef91d116bbc2f855fb0156eb715a48e14fc116a1bde6b480c51c19485578083fd010b4c22bfd8a1e4d60f0755a7d54108d7f2fec5"
        }
      ],
      "purl": "pkg:npm/mkdirp@0.5.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@0.5.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yauzl",
      "version": "2.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c7eb17c93e112cb1086fa6d8e51fb0667b79a5f9"
        }
      ],
      "purl": "pkg:npm/yauzl@2.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yauzl/-/yauzl-2.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yauzl@2.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yauzl/-/yauzl-2.10.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-crc32",
      "version": "0.2.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0d333e3f00eac50aa1454abd30ef8c2a5d9a7242"
        }
      ],
      "purl": "pkg:npm/buffer-crc32@0.2.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer-crc32/-/buffer-crc32-0.2.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer-crc32@0.2.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer-crc32/-/buffer-crc32-0.2.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fd-slicer",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "25c7c89cb1f9077f8891bbe61d8f390eae256f1e"
        }
      ],
      "purl": "pkg:npm/fd-slicer@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fd-slicer/-/fd-slicer-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fd-slicer@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fd-slicer/-/fd-slicer-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pend",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7a57eb550a6783f9115331fcf4663d5c8e007a50"
        }
      ],
      "purl": "pkg:npm/pend@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pend/-/pend-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pend@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pend/-/pend-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-extra",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cd3ce5f7e7cb6145883fcae3191e9877f8587950"
        }
      ],
      "purl": "pkg:npm/fs-extra@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs-extra/-/fs-extra-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs-extra@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs-extra/-/fs-extra-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsonfile",
      "version": "2.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3736a2b428b87bbda0cc83b53fa3d633a35c2ae8"
        }
      ],
      "purl": "pkg:npm/jsonfile@2.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsonfile/-/jsonfile-2.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsonfile@2.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsonfile/-/jsonfile-2.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "klaw",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4088433b46b3b1ba259d78785d8e96f73ba02439"
        }
      ],
      "purl": "pkg:npm/klaw@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/klaw/-/klaw-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/klaw@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/klaw/-/klaw-1.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hasha",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "78d7cbfc1e6d66303fe79837365984517b2f6ee1"
        }
      ],
      "purl": "pkg:npm/hasha@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hasha/-/hasha-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hasha@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hasha/-/hasha-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-stream",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "12d4a3dd4e68e0b79ceb8dbc84173ae80d91ca44"
        }
      ],
      "purl": "pkg:npm/is-stream@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-stream/-/is-stream-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-stream@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-stream/-/is-stream-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pinkie-promise",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2135d6dfa7a358c069ac9b178776288228450ffa"
        }
      ],
      "purl": "pkg:npm/pinkie-promise@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pinkie-promise/-/pinkie-promise-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pinkie-promise@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pinkie-promise/-/pinkie-promise-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pinkie",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "72556b80cfa0d48a974e80e77248e80ed4f7f870"
        }
      ],
      "purl": "pkg:npm/pinkie@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pinkie/-/pinkie-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pinkie@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pinkie/-/pinkie-2.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "kew",
      "version": "0.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "79d93d2d33363d6fdd2970b335d9141ad591d79b"
        }
      ],
      "purl": "pkg:npm/kew@0.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/kew/-/kew-0.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kew@0.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/kew/-/kew-0.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "progress",
      "version": "1.1.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e260c78f6161cdd9b0e56cc3e0a85de17c7a57be"
        }
      ],
      "purl": "pkg:npm/progress@1.1.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/progress/-/progress-1.1.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/progress@1.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/progress/-/progress-1.1.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "request",
      "version": "2.88.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32cbed3ab7c6f5972b3b0016f908be17a1db0f40965c487da2eefbb8e6fb14cd963e1c13eec98cf37dcfcda9e124bb205e337cf48afa5763dccd7367329c0a87"
        }
      ],
      "purl": "pkg:npm/request@2.88.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/request/-/request-2.88.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/request@2.88.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/request/-/request-2.88.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aws-sign2",
      "version": "0.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b46e890934a9591f2d2f6f86d7e6a9f1b3fe76a8"
        }
      ],
      "purl": "pkg:npm/aws-sign2@0.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/aws-sign2@0.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aws4",
      "version": "1.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c61d51977e21e858b50c2d9658a7f151356a46c367afa2ec2b3dbe85fc03c502569abc7cf9cef295aa8131c1df975535af676c89f3af297dcb42e2cd67e5d2bc"
        }
      ],
      "purl": "pkg:npm/aws4@1.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/aws4/-/aws4-1.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/aws4@1.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/aws4/-/aws4-1.11.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caseless",
      "version": "0.12.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1b681c21ff84033c826543090689420d187151dc"
        }
      ],
      "purl": "pkg:npm/caseless@0.12.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/caseless/-/caseless-0.12.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/caseless@0.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/caseless/-/caseless-0.12.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "combined-stream",
      "version": "1.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1503783117ee25e1dfedc05b04c2455e12920eafb690002b06599106f72f144e410751d9297b5214048385d973f73398c3187c943767be630e7bffb971da0476"
        }
      ],
      "purl": "pkg:npm/combined-stream@1.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/combined-stream@1.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "delayed-stream",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "df3ae199acadfb7d440aaae0b29e2272b24ec619"
        }
      ],
      "purl": "pkg:npm/delayed-stream@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/delayed-stream@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "forever-agent",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fbc71f0c41adeb37f96c577ad1ed42d8fdacca91"
        }
      ],
      "purl": "pkg:npm/forever-agent@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/forever-agent/-/forever-agent-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/forever-agent@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/forever-agent/-/forever-agent-0.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "form-data",
      "version": "2.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d652ca07632edda18fd50ff67823b1d1f35b44c7bb5ddc24b703abba17eaa9dd2b2095b03780e1f84de1acf4a50c25e7491ed4b59d4ddfcad55e6fbaf8c12125"
        }
      ],
      "purl": "pkg:npm/form-data@2.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/form-data/-/form-data-2.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/form-data@2.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/form-data/-/form-data-2.3.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asynckit",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c79ed97f7f34cb8f2ba1bc9790bcc366474b4b79"
        }
      ],
      "purl": "pkg:npm/asynckit@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asynckit@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "har-validator",
      "version": "5.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9e64f64f49658dbc5d4197eca6c9e8f6182b1b7522afa2ace5a7e2b26eb6a68c6a04ceac0e7304b8f9b34eaf17374384c2a28b2dd8758d0237ab213ae8dcdbdf"
        }
      ],
      "purl": "pkg:npm/har-validator@5.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/har-validator/-/har-validator-5.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/har-validator@5.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/har-validator/-/har-validator-5.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "har-schema",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a94c2224ebcac04782a0d9035521f24735b7ec92"
        }
      ],
      "purl": "pkg:npm/har-schema@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/har-schema/-/har-schema-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/har-schema@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/har-schema/-/har-schema-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-signature",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9aecd925114772f3d95b65a60abb8f7c18fbace1"
        }
      ],
      "purl": "pkg:npm/http-signature@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-signature/-/http-signature-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-signature@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-signature/-/http-signature-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "assert-plus",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f12e0f3c5d77b0b1cdd9146942e4e96c1e4dd525"
        }
      ],
      "purl": "pkg:npm/assert-plus@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/assert-plus/-/assert-plus-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/assert-plus@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/assert-plus/-/assert-plus-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsprim",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "313e66bc1e5cc06e438bc1b7499c2e5c56acb6a2"
        }
      ],
      "purl": "pkg:npm/jsprim@1.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsprim/-/jsprim-1.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsprim@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsprim/-/jsprim-1.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extsprintf",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "96918440e3041a7a414f8c52e3c574eb3c3e1e05"
        }
      ],
      "purl": "pkg:npm/extsprintf@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extsprintf/-/extsprintf-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extsprintf@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extsprintf/-/extsprintf-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-schema",
      "version": "0.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b480c892e59a2f05954ce727bd3f2a4e882f9e13"
        }
      ],
      "purl": "pkg:npm/json-schema@0.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-schema/-/json-schema-0.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-schema@0.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-schema/-/json-schema-0.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "verror",
      "version": "1.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3a105ca17053af55d6e270c1f8288682e18da400"
        }
      ],
      "purl": "pkg:npm/verror@1.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/verror/-/verror-1.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/verror@1.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/verror/-/verror-1.10.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sshpk",
      "version": "1.16.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1d75ea554abbfa970a78baaa663ea61c550cbd7b4e26dd6ea14c74f69156eb4d758a74ccc6a23c040f0f33de66cab232c8ac1d9f38dd1632e213a2813d5b4922"
        }
      ],
      "purl": "pkg:npm/sshpk@1.16.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sshpk/-/sshpk-1.16.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sshpk@1.16.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sshpk/-/sshpk-1.16.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asn1",
      "version": "0.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8f1c334292d08d29965e0c1a09913d373fa09401b4d721754275a06e11b01c8e40e85448118e8856ab478487a91ea23bfe4c84c9011a8010b998110594862f76"
        }
      ],
      "purl": "pkg:npm/asn1@0.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/asn1/-/asn1-0.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asn1@0.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/asn1/-/asn1-0.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bcrypt-pbkdf",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a4301d389b6a43f9b67ff3ca11a3f6637e360e9e"
        }
      ],
      "purl": "pkg:npm/bcrypt-pbkdf@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bcrypt-pbkdf@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tweetnacl",
      "version": "0.14.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5ae68177f192d4456269d108afa93ff8743f4f64"
        }
      ],
      "purl": "pkg:npm/tweetnacl@0.14.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tweetnacl/-/tweetnacl-0.14.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tweetnacl@0.14.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tweetnacl/-/tweetnacl-0.14.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dashdash",
      "version": "1.14.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "853cfa0f7cbe2fed5de20326b8dd581035f6e2f0"
        }
      ],
      "purl": "pkg:npm/dashdash@1.14.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dashdash/-/dashdash-1.14.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dashdash@1.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dashdash/-/dashdash-1.14.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ecc-jsbn",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3a83a904e54353287874c564b7549386849a98c9"
        }
      ],
      "purl": "pkg:npm/ecc-jsbn@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ecc-jsbn/-/ecc-jsbn-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ecc-jsbn@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ecc-jsbn/-/ecc-jsbn-0.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsbn",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a5e654c2e5a2deb5f201d96cefbca80c0ef2f513"
        }
      ],
      "purl": "pkg:npm/jsbn@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsbn/-/jsbn-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsbn@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsbn/-/jsbn-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "getpass",
      "version": "0.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5eff8e3e684d569ae4cb2b1282604e8ba62149fa"
        }
      ],
      "purl": "pkg:npm/getpass@0.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/getpass/-/getpass-0.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/getpass@0.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/getpass/-/getpass-0.1.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-typedarray",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e479c80858df0c1b11ddda6940f96011fcda4a9a"
        }
      ],
      "purl": "pkg:npm/is-typedarray@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-typedarray/-/is-typedarray-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-typedarray@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-typedarray/-/is-typedarray-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isstream",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "47e63f7af55afa6f92e1500e690eb8b8529c099a"
        }
      ],
      "purl": "pkg:npm/isstream@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isstream/-/isstream-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isstream@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isstream/-/isstream-0.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-stringify-safe",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1296a2d58fd45f19a0f6ce01d65701e2c735b6eb"
        }
      ],
      "purl": "pkg:npm/json-stringify-safe@5.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-stringify-safe@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "oauth-sign",
      "version": "0.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7dec6150514f4c657cc9b02d48819b57a80e912bfc52d45b0c19c0c8b430e103ca920365b07d81c8f1ad314a9d5a4a2ce98091980a958b0819ac973f9910f365"
        }
      ],
      "purl": "pkg:npm/oauth-sign@0.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/oauth-sign@0.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.9.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "performance-now",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6309f4e0e5fa913ec1c69307ae364b4b377c9e7b"
        }
      ],
      "purl": "pkg:npm/performance-now@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/performance-now/-/performance-now-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/performance-now@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/performance-now/-/performance-now-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "6.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3796405f8fcbc49985fbbc0def8a540faa8087dff09ef750723abd4d98debef5f3494a3b6df9b0f75b1aa8c8f3192db1abdd7fa1d376756fd63a5eea40734318"
        }
      ],
      "purl": "pkg:npm/qs@6.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-6.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@6.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-6.5.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tough-cookie",
      "version": "2.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9e52ec533826d647cb5d25df45931cd4a2c0ba077886a2470d3bdcda10c8c12de66407cc12e31b734dd2ba3305f8611ca5a5ffa9ba1ec9cc3a88ef09c15bf6fa"
        }
      ],
      "purl": "pkg:npm/tough-cookie@2.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-2.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tough-cookie@2.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-2.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "psl",
      "version": "1.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "44874ecf2a1abcafa1035f0e186583a944ec08b86d03b21c67fe8d0ace1f14968704369bfa90c3983201c96151409ab609deebd4ea10c4118a39acedabe86321"
        }
      ],
      "purl": "pkg:npm/psl@1.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/psl/-/psl-1.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/psl@1.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/psl/-/psl-1.8.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tunnel-agent",
      "version": "0.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "27a5dea06b36b04a0a9966774b290868f0fc40fd"
        }
      ],
      "purl": "pkg:npm/tunnel-agent@0.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tunnel-agent@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uuid",
      "version": "3.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1e3483470ea0644e4932081cb4705c8d56a4d3cf8a1158522220f31674fd4bd69e826a7ce52fdb45e0554dbe104c5691369b49f64b9868d8676cd10e91b29bfc"
        }
      ],
      "purl": "pkg:npm/uuid@3.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uuid/-/uuid-3.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uuid@3.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uuid/-/uuid-3.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "request-progress",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5d36bb57961c673aa5b788dbc8141fdf23b44e08"
        }
      ],
      "purl": "pkg:npm/request-progress@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/request-progress/-/request-progress-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/request-progress@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/request-progress/-/request-progress-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "throttleit",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9e785836daf46743145a5984b6268d828528ac6c"
        }
      ],
      "purl": "pkg:npm/throttleit@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/throttleit/-/throttleit-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/throttleit@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/throttleit/-/throttleit-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "karma-webpack",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fb9e22fdc777fe9899b8fdddaf9e3e35c15e28e3e7cace5078cd4863ed123c04b0aed1ec9625d48822f9d225be2bd59603b46f6a60b899a72fbd0f3a9772ad68"
        }
      ],
      "purl": "pkg:npm/karma-webpack@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/karma-webpack/-/karma-webpack-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/karma-webpack@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/karma-webpack/-/karma-webpack-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webpack-merge",
      "version": "4.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4d4135506a135f609de368f792b198a8e6d96ce0fec45eeedbc581eed7d4a2b772b528db5932232bff15d1a9a405f4d8378fe907f1880e525967ae7b0461b5f6"
        }
      ],
      "purl": "pkg:npm/webpack-merge@4.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webpack-merge/-/webpack-merge-4.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webpack-merge@4.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webpack-merge/-/webpack-merge-4.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "phantomjs-polyfill",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8c6a7163e9bc8fd9ffdbe7d605cb5352f9fb891e"
        }
      ],
      "purl": "pkg:npm/phantomjs-polyfill@0.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/phantomjs-polyfill/-/phantomjs-polyfill-0.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/phantomjs-polyfill@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/phantomjs-polyfill/-/phantomjs-polyfill-0.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react",
      "version": "15.7.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e7f30c4589a998cd2c3131c62e8b2c9c90ab9974088898a50facb760ddd3cc0c06163eb376732d16feb19a2eb93c729157ea5e8481e94fba32ebb4abeacf401c"
        }
      ],
      "purl": "pkg:npm/react@15.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react/-/react-15.7.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react@15.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react/-/react-15.7.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "react,Component,react/Component"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "demo/src/AppRoot.component.js#1"
          },
          {
            "location": "demo/src/init.js#2"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "create-react-class",
      "version": "15.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "419bf8b05586f52e5152f9136166df9717995fe246ec2cf44e7df7ad0049f961504ea4df5138cc8e2bfdb677d76b38ec3b9af42a13ecf80a828f2ad05fa8769e"
        }
      ],
      "purl": "pkg:npm/create-react-class@15.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/create-react-class/-/create-react-class-15.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/create-react-class@15.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/create-react-class/-/create-react-class-15.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "loose-envify",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "972bb13c6aff59f86b95e9b608bfd472751cd7372a280226043cee918ed8e45ff242235d928ebe7d12debe5c351e03324b0edfeb5d54218e34f04b71452a0add"
        }
      ],
      "purl": "pkg:npm/loose-envify@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/loose-envify@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fbjs",
      "version": "0.8.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c4d598ead6949112653d6588b01a5cdcd9f90fdd"
        }
      ],
      "purl": "pkg:npm/fbjs@0.8.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fbjs/-/fbjs-0.8.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fbjs@0.8.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fbjs/-/fbjs-0.8.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "core-js",
      "version": "1.2.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "652294c14651db28fa93bd2d5ff2983a4f08c636"
        }
      ],
      "purl": "pkg:npm/core-js@1.2.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/core-js/-/core-js-1.2.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-js@1.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/core-js/-/core-js-1.2.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isomorphic-fetch",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "611ae1acf14f5e81f729507472819fe9733558a9"
        }
      ],
      "purl": "pkg:npm/isomorphic-fetch@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isomorphic-fetch/-/isomorphic-fetch-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isomorphic-fetch@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isomorphic-fetch/-/isomorphic-fetch-2.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-fetch",
      "version": "1.7.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3616780ac2b1edc626daf4ab040af63ef14e7bab160dfd1460b46a03ab2f51883bfbf4d27d502ee3d8d80b806f4384a6b3d49981da86060ae8a9f0e125d4f229"
        }
      ],
      "purl": "pkg:npm/node-fetch@1.7.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-fetch/-/node-fetch-1.7.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-fetch@1.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-fetch/-/node-fetch-1.7.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "encoding",
      "version": "0.1.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "11305aba8c354f7e58fd664c922a3d8e2334679c631c7989e179a364eab597f757cf796bdac467f3b9c9cb6d11ba9a928751769b71c73d2a7c4a120f409ac9dc"
        }
      ],
      "purl": "pkg:npm/encoding@0.1.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/encoding/-/encoding-0.1.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/encoding@0.1.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/encoding/-/encoding-0.1.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "iconv-lite",
      "version": "0.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "db2f758793a9425a2579f30f994962bde962b6d496cb4acffa8615a67e80ec6c151cd13c016ce860e04d9a5c24b372e86da2718070986409f2368d8682935135"
        }
      ],
      "purl": "pkg:npm/iconv-lite@0.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/iconv-lite@0.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.6.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "whatwg-fetch",
      "version": "3.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "20498dfd97e6330e86d61819a557742ee6573900e2b2b30e66bcd8779c774402b86cc3e526884a519599f6dfd0b13bc7d1d57d4db3c371cd8e4ae2037228671c"
        }
      ],
      "purl": "pkg:npm/whatwg-fetch@3.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/whatwg-fetch/-/whatwg-fetch-3.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/whatwg-fetch@3.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/whatwg-fetch/-/whatwg-fetch-3.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "promise",
      "version": "7.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9e89505d9ff82fe6cffd41a591f688ba35fd04ac46c2643d393e263ade72bf2f222b5877c2a4c42428a3cc600d4c20a5f675a3638d63bb2027d8add0d612cb4e"
        }
      ],
      "purl": "pkg:npm/promise@7.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/promise/-/promise-7.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/promise@7.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/promise/-/promise-7.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asap",
      "version": "2.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e50347611d7e690943208bbdafebcbc2fb866d46"
        }
      ],
      "purl": "pkg:npm/asap@2.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/asap/-/asap-2.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asap@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/asap/-/asap-2.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "setimmediate",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "290cbb232e306942d7d7ea9b83732ab7856f8285"
        }
      ],
      "purl": "pkg:npm/setimmediate@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/setimmediate/-/setimmediate-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/setimmediate@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/setimmediate/-/setimmediate-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prop-types",
      "version": "15.7.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f1042291d1fbfff476beeac8252bad675b261d84dc2e945610e9479f37161e6058ace194cac2b04acac2f3d0428858f709badf27f9d715d25ea4e56b6351821d"
        }
      ],
      "purl": "pkg:npm/prop-types@15.7.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/prop-types/-/prop-types-15.7.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prop-types@15.7.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/prop-types/-/prop-types-15.7.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-is",
      "version": "16.13.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "db87baca71361fe38ab7892ab0ebcd77c901a55eb9ce8c5b038055b04381dc0455590922fc31f3694a02e4ab8e37f06271c0da0824d906e39c7d9b3bd2447c6d"
        }
      ],
      "purl": "pkg:npm/react-is@16.13.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react-is/-/react-is-16.13.1.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-is@16.13.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-is/-/react-is-16.13.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "react-dom",
      "version": "15.7.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9a98d7a82dadd45b98b082ce2c28f4920ea96e0e3ad1bc9991503ff3456d0e6294fe9626a137473ad68c7134480e2c972f3e2c22eaf4710d389ce0ba8869dd26"
        }
      ],
      "purl": "pkg:npm/react-dom@15.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react-dom/-/react-dom-15.7.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-dom@15.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-dom/-/react-dom-15.7.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "react-dom"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "demo/src/init.js#3"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "tslib",
      "version": "1.14.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e78b7e4d2b38e032bc1ebf2b074c202bb4b0e93efc9ef3357fd04e04c989f8dcfeffeeabd0c0f87d0469077b06ccba5567b5b8a099c4fbadd5f704da3dc1126"
        }
      ],
      "purl": "pkg:npm/tslib@1.14.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tslib/-/tslib-1.14.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tslib@1.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tslib/-/tslib-1.14.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webpack-dev-server",
      "version": "3.11.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "03cd0192e1d141f0a236d1814b510c7f60a14d4b34c7e077c060c598e793e2b9893878474c21f69da37120786692bd3f5229653f8537c9e232bf5a4da7e4032d"
        }
      ],
      "purl": "pkg:npm/webpack-dev-server@3.11.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webpack-dev-server/-/webpack-dev-server-3.11.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webpack-dev-server@3.11.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webpack-dev-server/-/webpack-dev-server-3.11.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "webpack-dev-server"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "demo/servers/server.js#2"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-html",
      "version": "0.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "813584021962a9e9e6fd039f940d12f56ca7859e"
        }
      ],
      "purl": "pkg:npm/ansi-html@0.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-html/-/ansi-html-0.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-html@0.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-html/-/ansi-html-0.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bonjour",
      "version": "3.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8e890a183d8ee9a2393b3844c691a42bcf7bc9f5"
        }
      ],
      "purl": "pkg:npm/bonjour@3.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bonjour/-/bonjour-3.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bonjour@3.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bonjour/-/bonjour-3.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-flatten",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "84d7f370e57c5b835db9a96da8114fc953bee780d226e64663da93e2946ba01e92f5ede28a2768d884880b987d476b0f27c1f71470888849ecbf594f5cedcab5"
        }
      ],
      "purl": "pkg:npm/array-flatten@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-flatten/-/array-flatten-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-flatten@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-flatten/-/array-flatten-2.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-equal",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c9df5ce40762a95711f898dcc1441bf4392125cf2780daf431a844046bc3889c3ca6e59a6f6c99961fa791ab0e9d93fe1064c03faad1a76273261259cef345f2"
        }
      ],
      "purl": "pkg:npm/deep-equal@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deep-equal/-/deep-equal-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deep-equal@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deep-equal/-/deep-equal-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-arguments",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d488f894e30f97fc41e640439fb23e6f6b6d3cc29af2cce1108ad70ee5d00ffa1edc724b4cb86a8601aca7083219de8c3b2c0152a56f622705ef69648039c81e"
        }
      ],
      "purl": "pkg:npm/is-arguments@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-arguments/-/is-arguments-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-arguments@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-arguments/-/is-arguments-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-is",
      "version": "1.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ddcc83b321e0b668bb23b0df4922362c3a7a48ada5c2fb5b834a744757b446f4ea17971e1b1f8ad9d7d28e6d5b283315085103010bf2fa8f1ce9aed5ba339d77"
        }
      ],
      "purl": "pkg:npm/object-is@1.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-is/-/object-is-1.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-is@1.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-is/-/object-is-1.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regexp.prototype.flags",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "26205d441abdd56958eee449d1db3b47e754d368ba2ca8bcaf706e4213579fe92678b37e11f1e17e3a8c462b35cc9c6796ef3c86aff8771d0fd8e3f700f45338"
        }
      ],
      "purl": "pkg:npm/regexp.prototype.flags@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regexp.prototype.flags/-/regexp.prototype.flags-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regexp.prototype.flags@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regexp.prototype.flags/-/regexp.prototype.flags-1.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dns-equal",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b39e7f1da6eb0a75ba9c17324b34753c47e0654d"
        }
      ],
      "purl": "pkg:npm/dns-equal@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dns-equal/-/dns-equal-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dns-equal@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dns-equal/-/dns-equal-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dns-txt",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b91d806f5d27188e4ab3e7d107d881a1cc4642b6"
        }
      ],
      "purl": "pkg:npm/dns-txt@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dns-txt/-/dns-txt-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dns-txt@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dns-txt/-/dns-txt-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-indexof",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e3face120f3a8e2bed3d378e5144fad6324ed586b54eb47f3a4a824990f2abce16261dcbbae8a984160937e7e6e71b9f224e17005704c2d7bff16cc2f087ffd6"
        }
      ],
      "purl": "pkg:npm/buffer-indexof@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer-indexof/-/buffer-indexof-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer-indexof@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer-indexof/-/buffer-indexof-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "multicast-dns",
      "version": "6.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8e2e89e5e9db3321911c802400ebb759d57c9e082abe228210ab5770ea9fa61659b50ae61cac9c7f29c9d95ede54f500e0d849e95ed67f84e619b4f0284f41ea"
        }
      ],
      "purl": "pkg:npm/multicast-dns@6.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/multicast-dns/-/multicast-dns-6.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/multicast-dns@6.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/multicast-dns/-/multicast-dns-6.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dns-packet",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d14c5f42432160051a648fb1acd64ecff6ace4a80353433f7d0f5be92a64c8b6e4dc612cc038ba3c00c955a609ada76d455b11225175ccbc8ea1d6dc4c20f352"
        }
      ],
      "purl": "pkg:npm/dns-packet@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dns-packet/-/dns-packet-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dns-packet@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dns-packet/-/dns-packet-1.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ip",
      "version": "1.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bdded70114290828c0a039e72ef25f5aaec4354a"
        }
      ],
      "purl": "pkg:npm/ip@1.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ip/-/ip-1.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ip@1.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ip/-/ip-1.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "thunky",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "78763b9c17ed813841a8ec8719537e97c805d01b9c3f4f5f328d283bf2dbd30d4e17cd1d26ffa50d5a571bad16310be47310243726cab2b10813766d28698fac"
        }
      ],
      "purl": "pkg:npm/thunky@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/thunky/-/thunky-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/thunky@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/thunky/-/thunky-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "multicast-dns-service-types",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "899f11d9686e5e05cb91b35d5f0e63b773cfc901"
        }
      ],
      "purl": "pkg:npm/multicast-dns-service-types@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/multicast-dns-service-types/-/multicast-dns-service-types-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/multicast-dns-service-types@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/multicast-dns-service-types/-/multicast-dns-service-types-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chokidar",
      "version": "2.1.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6666546b37cecdfd0dbdeeddba208a0f6dcf1520ace093e863271c8d4145dda42441a76a0617f3863930047da634e1bd71307085a98cdfb108b08919c379d182"
        }
      ],
      "purl": "pkg:npm/chokidar@2.1.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chokidar/-/chokidar-2.1.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chokidar@2.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chokidar/-/chokidar-2.1.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "anymatch",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e6d78eb105800571c70453fdcb7b244b93f777f59f597a6fdc5529cbe2e8accacd61a4fda48e282cc417ee3cd0d8a9253691a9587cdd0974c34f66375c695907"
        }
      ],
      "purl": "pkg:npm/anymatch@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/anymatch/-/anymatch-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/anymatch@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/anymatch/-/anymatch-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "micromatch",
      "version": "3.1.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3168a4825f67f4cdf0f9ba6c6371def0bfb0f5e17ddf7f31465f0800ee6f8838b3c12cf3885132533a36c6bae5a01eb80036d37fcb80f2f46aaadb434ce99c72"
        }
      ],
      "purl": "pkg:npm/micromatch@3.1.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/micromatch/-/micromatch-3.1.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/micromatch@3.1.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/micromatch/-/micromatch-3.1.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arr-diff",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d6461074febfec71e7e15235761a329a5dc7c520"
        }
      ],
      "purl": "pkg:npm/arr-diff@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arr-diff/-/arr-diff-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arr-diff@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arr-diff/-/arr-diff-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-unique",
      "version": "0.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a894b75d4bc4f6cd679ef3244a9fd8f46ae2d428"
        }
      ],
      "purl": "pkg:npm/array-unique@0.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-unique/-/array-unique-0.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-unique@0.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-unique/-/array-unique-0.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "braces",
      "version": "2.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "68d75b9e3f4ff0f8dd5d4e326da58b2b6205de373f1280d86c2ec06b35bab68dd346c7d7c6c702f545ce07988388442b93221b5a9d922d075ae3e4006bb9dcdf"
        }
      ],
      "purl": "pkg:npm/braces@2.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/braces/-/braces-2.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/braces@2.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/braces/-/braces-2.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arr-flatten",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f784a57947fa79a3cd51eced362069f0a439a4a7a13df365e1b5bbb049edcee2a3ad30c32da1d89c0120350a7cb653e6825dc3699a5fa6e1d3ecbec2778dab6"
        }
      ],
      "purl": "pkg:npm/arr-flatten@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arr-flatten/-/arr-flatten-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arr-flatten@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arr-flatten/-/arr-flatten-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extend-shallow",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "51af7d614ad9a9f610ea1bafbb989d6b1c56890f"
        }
      ],
      "purl": "pkg:npm/extend-shallow@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extend-shallow/-/extend-shallow-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extend-shallow@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extend-shallow/-/extend-shallow-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-extendable",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "62b110e289a471418e3ec36a617d472e301dfc89"
        }
      ],
      "purl": "pkg:npm/is-extendable@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-extendable/-/is-extendable-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-extendable@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-extendable/-/is-extendable-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fill-range",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d544811d428f98eb06a63dc402d2403c328c38f7"
        }
      ],
      "purl": "pkg:npm/fill-range@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fill-range/-/fill-range-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fill-range@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fill-range/-/fill-range-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-number",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "24fd6201a4782cf50561c810276afc7d12d71195"
        }
      ],
      "purl": "pkg:npm/is-number@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-number/-/is-number-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-number@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-number/-/is-number-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "kind-of",
      "version": "3.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "31ea21a734bab9bbb0f32466d893aea51e4a3c64"
        }
      ],
      "purl": "pkg:npm/kind-of@3.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kind-of@3.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-buffer",
      "version": "1.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "35c7402f0a579139b966fbdb93ba303944af56f04a0e028fe7f7b07d71339e64057ece194666a739e2814e34558e46b7405a0de9727ef45dd44aa7c7a93694e7"
        }
      ],
      "purl": "pkg:npm/is-buffer@1.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-buffer@1.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "repeat-string",
      "version": "1.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8dcae470e1c88abc2d600fff4a776286da75e637"
        }
      ],
      "purl": "pkg:npm/repeat-string@1.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/repeat-string/-/repeat-string-1.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/repeat-string@1.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/repeat-string/-/repeat-string-1.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-regex-range",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7c80c17b9dfebe599e27367e0d4dd5590141db38"
        }
      ],
      "purl": "pkg:npm/to-regex-range@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-regex-range@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isobject",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4e431e92b11a9731636aa1f9c8d1ccbcfdab78df"
        }
      ],
      "purl": "pkg:npm/isobject@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isobject/-/isobject-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isobject@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isobject/-/isobject-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "repeat-element",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6a11aad199d5e66e57b592cc6febcfefa91c00ce6790baa4d25a6a02ea2348a1a042d9f87918b86591a6da8968db32851feb0cb166aa3825b576a0273abbbbda"
        }
      ],
      "purl": "pkg:npm/repeat-element@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/repeat-element/-/repeat-element-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/repeat-element@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/repeat-element/-/repeat-element-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "snapdragon",
      "version": "0.8.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "16dc8e9d637fc021d355738cc2f4afdba77e928e6f5a52030face8509ecb5bcbe1f99042f107658ef7913fe72b36bb41c22a04516cbfe1d32d6c18c0e22a0d96"
        }
      ],
      "purl": "pkg:npm/snapdragon@0.8.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/snapdragon/-/snapdragon-0.8.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/snapdragon@0.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/snapdragon/-/snapdragon-0.8.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "base",
      "version": "0.11.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e53e8fe313e0a69d180c5bd25b0119e0da04dda3384014170f39956eb6829058fccc733e99b6bc4b2a81e436d95b247b9981e8e98ec1750a373280389b44de42"
        }
      ],
      "purl": "pkg:npm/base@0.11.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/base/-/base-0.11.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/base@0.11.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/base/-/base-0.11.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cache-base",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "00a71d4e71525804dde7f1823d1c6bd82870209f3909ecab1328d11e52b1439e9de1724c1b29b4b8088a9f4c5b2ce18e977fb24693938b8f38755084739014cd"
        }
      ],
      "purl": "pkg:npm/cache-base@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cache-base/-/cache-base-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cache-base@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cache-base/-/cache-base-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "collection-visit",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4bc0373c164bc3291b4d368c829cf1a80a59dca0"
        }
      ],
      "purl": "pkg:npm/collection-visit@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/collection-visit/-/collection-visit-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/collection-visit@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/collection-visit/-/collection-visit-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "map-visit",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ecdca8f13144e660f1b5bd41f12f3479d98dfb8f"
        }
      ],
      "purl": "pkg:npm/map-visit@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/map-visit/-/map-visit-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/map-visit@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/map-visit/-/map-visit-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-visit",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f79c4493af0c5377b59fe39d395e41042dd045bb"
        }
      ],
      "purl": "pkg:npm/object-visit@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-visit/-/object-visit-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-visit@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-visit/-/object-visit-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-value",
      "version": "2.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dc15ca1c672387ca76bd37ac0a395ba2042a2c28"
        }
      ],
      "purl": "pkg:npm/get-value@2.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-value/-/get-value-2.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-value@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-value/-/get-value-2.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-value",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "18b281da585b1c5c51def24c930ed29a0be6b177"
        }
      ],
      "purl": "pkg:npm/has-value@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-value/-/has-value-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-value@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-value/-/has-value-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-values",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "95b0b63fec2146619a6fe57fe75628d5a39efe4f"
        }
      ],
      "purl": "pkg:npm/has-values@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-values/-/has-values-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-values@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-values/-/has-values-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "kind-of",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "20813df3d712928b207378691a45066fae72dd57"
        }
      ],
      "purl": "pkg:npm/kind-of@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/kind-of/-/kind-of-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kind-of@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/kind-of/-/kind-of-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "set-value",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2711dcd7078237af30458d1f842a17a722b9e66fd73c769f3a62b85160fb9b6088d7818c705ca9b78c3fd3e355e5ffd931bcb617a4b6c3003b7e0ca787d8164b"
        }
      ],
      "purl": "pkg:npm/set-value@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/set-value/-/set-value-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/set-value@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/set-value/-/set-value-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-plain-object",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8793e98179168ad737f0104c61ac1360c5891c564956706ab85139ef11698c1f29245885ea067e6d4f96c88ff2a9788547999d2ec81835a3def2e6a8e94bfd3a"
        }
      ],
      "purl": "pkg:npm/is-plain-object@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-plain-object/-/is-plain-object-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-plain-object@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-plain-object/-/is-plain-object-2.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "split-string",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3733558490d8a7071e5558a2f3f1eee8329f0f61be36b407952fd5fea82fefadc462e755c0470c40dc5dda587ed15ad40725cdfe826497982b3a1616bd05188b"
        }
      ],
      "purl": "pkg:npm/split-string@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/split-string/-/split-string-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/split-string@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/split-string/-/split-string-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extend-shallow",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "26a71aaf073b39fb2127172746131c2704028db8"
        }
      ],
      "purl": "pkg:npm/extend-shallow@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extend-shallow/-/extend-shallow-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extend-shallow@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extend-shallow/-/extend-shallow-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "assign-symbols",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "59667f41fadd4f20ccbc2bb96b8d4f7f78ec0367"
        }
      ],
      "purl": "pkg:npm/assign-symbols@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/assign-symbols/-/assign-symbols-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/assign-symbols@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/assign-symbols/-/assign-symbols-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-extendable",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ab9d73314f5861a0aa3d9352d976694dc897430dfcb6bf47d78c5966a24e3e8bcba5ffa5a56d581ef5b84cef83a934f40f306513a03b73f8a5dad4f9de27138"
        }
      ],
      "purl": "pkg:npm/is-extendable@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-extendable/-/is-extendable-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-extendable@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-extendable/-/is-extendable-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-object-path",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "297588b7b0e7e0ac08e04e672f85c1f4999e17af"
        }
      ],
      "purl": "pkg:npm/to-object-path@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-object-path/-/to-object-path-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-object-path@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-object-path/-/to-object-path-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "union-value",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b497d79b131e5989dccc256ced7004bc857b89ea6900b7727a958c90793072246966b686ff1c13facd8937cfa9af5fbc8c245ff34145cefafe32941e7a81785e"
        }
      ],
      "purl": "pkg:npm/union-value@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/union-value/-/union-value-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/union-value@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/union-value/-/union-value-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arr-union",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e39b09aea9def866a8f206e288af63919bae39c4"
        }
      ],
      "purl": "pkg:npm/arr-union@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arr-union/-/arr-union-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arr-union@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arr-union/-/arr-union-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unset-value",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8376873f7d2335179ffb1e6fc3a8ed0dfc8ab559"
        }
      ],
      "purl": "pkg:npm/unset-value@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unset-value/-/unset-value-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unset-value@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unset-value/-/unset-value-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-value",
      "version": "0.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7b1f58bada62ca827ec0a2078025654845995e1f"
        }
      ],
      "purl": "pkg:npm/has-value@0.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-value/-/has-value-0.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-value@0.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-value/-/has-value-0.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-values",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6d61de95d91dfca9b9a02089ad384bff8f62b771"
        }
      ],
      "purl": "pkg:npm/has-values@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-values/-/has-values-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-values@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-values/-/has-values-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isobject",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f065561096a3f1da2ef46272f815c840d87e0c89"
        }
      ],
      "purl": "pkg:npm/isobject@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isobject/-/isobject-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isobject@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isobject/-/isobject-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "class-utils",
      "version": "0.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a8e84f6bf163eece9363c1fc7ac1aee5036930c431cfbf61faeaf3acd60dea69fef419f194319fe5067e5de083b314a33eab12479e973993899a97aeae72cc7a"
        }
      ],
      "purl": "pkg:npm/class-utils@0.3.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/class-utils/-/class-utils-0.3.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/class-utils@0.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/class-utils/-/class-utils-0.3.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "define-property",
      "version": "0.2.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c35b1ef918ec3c990f9a5bc57be04aacec5c8116"
        }
      ],
      "purl": "pkg:npm/define-property@0.2.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/define-property/-/define-property-0.2.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/define-property@0.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/define-property/-/define-property-0.2.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-descriptor",
      "version": "0.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6af0d8af4481dc3c0ef73b0ca2fd20282112158a829c4e21abfe33dd375496e904cb9b7d0b4611abb1cbaec379d8d01ca9729a7a97820f49fe0746ab9d51b71e"
        }
      ],
      "purl": "pkg:npm/is-descriptor@0.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-descriptor/-/is-descriptor-0.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-descriptor@0.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-descriptor/-/is-descriptor-0.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-accessor-descriptor",
      "version": "0.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a9e12cb3ae8d876727eeef3843f8a0897b5c98d6"
        }
      ],
      "purl": "pkg:npm/is-accessor-descriptor@0.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-accessor-descriptor/-/is-accessor-descriptor-0.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-accessor-descriptor@0.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-accessor-descriptor/-/is-accessor-descriptor-0.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-data-descriptor",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0b5ee648388e2c860282e793f1856fec3f301b56"
        }
      ],
      "purl": "pkg:npm/is-data-descriptor@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-data-descriptor/-/is-data-descriptor-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-data-descriptor@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-data-descriptor/-/is-data-descriptor-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "kind-of",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "346104ae71fa176bd4b970e1f8e95b70a5bbff039c7dd447699ed55ada82ced7c7ae2ffef982a63f9d4e7567863eea8239b6ba924d8e4dee5dd365664c1f343f"
        }
      ],
      "purl": "pkg:npm/kind-of@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/kind-of/-/kind-of-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kind-of@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/kind-of/-/kind-of-5.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "static-extend",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "60809c39cbff55337226fd5e0b520f341f1fb5c6"
        }
      ],
      "purl": "pkg:npm/static-extend@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/static-extend/-/static-extend-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/static-extend@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/static-extend/-/static-extend-0.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-copy",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7e7d858b781bd7c991a41ba975ed3812754e998c"
        }
      ],
      "purl": "pkg:npm/object-copy@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-copy/-/object-copy-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-copy@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-copy/-/object-copy-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "copy-descriptor",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "676f6eb3c39997c2ee1ac3a924fd6124748f578d"
        }
      ],
      "purl": "pkg:npm/copy-descriptor@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/copy-descriptor/-/copy-descriptor-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/copy-descriptor@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/copy-descriptor/-/copy-descriptor-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "define-property",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "769ebaaf3f4a63aad3af9e8d304c9bbe79bfb0e6"
        }
      ],
      "purl": "pkg:npm/define-property@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/define-property/-/define-property-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/define-property@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/define-property/-/define-property-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-descriptor",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d9e8ace56a90195ee97a8a03c8b98d10f52ba6cf7e4975f973da4bdf1101fb87bd1e71ae0daee607b907c47c3809ba92f64d53da1387de688bf27f16b62615b6"
        }
      ],
      "purl": "pkg:npm/is-descriptor@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-descriptor/-/is-descriptor-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-descriptor@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-descriptor/-/is-descriptor-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-accessor-descriptor",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9b98671d391c56c3dfab1dc02a5cadb483dbec9f97ca41ef24fd81f5b6438e584b22812ae17a0aeb8560edba199555982ba2d463de1d60f104ecb87466464a71"
        }
      ],
      "purl": "pkg:npm/is-accessor-descriptor@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-accessor-descriptor/-/is-accessor-descriptor-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-accessor-descriptor@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-accessor-descriptor/-/is-accessor-descriptor-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "kind-of",
      "version": "6.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "75c4b5ba5fbdb66783f794fec76f3f7a12e077d98435adcbb2f0d3b739b7bf20443bb44fa6dbc00feb78e165576948d305172ba45785942f160abb94478e7a87"
        }
      ],
      "purl": "pkg:npm/kind-of@6.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/kind-of/-/kind-of-6.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kind-of@6.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/kind-of/-/kind-of-6.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-data-descriptor",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8db457cb5166b40a028d0915988558c2ebaa0c551b68e7838e679dd6d3863ebb0c86d240e2b0fdb64800d05d6a2778111515dc1d856475e68fe74439ac4fe32d"
        }
      ],
      "purl": "pkg:npm/is-data-descriptor@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-data-descriptor/-/is-data-descriptor-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-data-descriptor@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-data-descriptor/-/is-data-descriptor-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mixin-deep",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "591a039fffe65c1889d47e34aea6b7bc7d2da1e3f04ac19be398889d6953c926be52ee24ded6144b16b6bf52aa0222edbe5ad2cda131a92d60b64f7a03dcef10"
        }
      ],
      "purl": "pkg:npm/mixin-deep@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mixin-deep/-/mixin-deep-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mixin-deep@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mixin-deep/-/mixin-deep-1.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "for-in",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "81068d295a8142ec0ac726c6e2200c30fb6d5e80"
        }
      ],
      "purl": "pkg:npm/for-in@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/for-in/-/for-in-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/for-in@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/for-in/-/for-in-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pascalcase",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b363e55e8006ca6fe21784d2db22bd15d7917f14"
        }
      ],
      "purl": "pkg:npm/pascalcase@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pascalcase/-/pascalcase-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pascalcase@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pascalcase/-/pascalcase-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "map-cache",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c32abd0bd6525d9b051645bb4f26ac5dc98a0dbf"
        }
      ],
      "purl": "pkg:npm/map-cache@0.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/map-cache/-/map-cache-0.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/map-cache@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/map-cache/-/map-cache-0.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map-resolve",
      "version": "0.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1edcfe467b175a4e7e3f6b25c79261dd0ebabe1423d429659b4cef9da63df3e345c7e0efd8217f7f93bfb7cc7e29a35dadd200b2bb8dce887f2a989a95ba809f"
        }
      ],
      "purl": "pkg:npm/source-map-resolve@0.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map-resolve/-/source-map-resolve-0.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map-resolve@0.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map-resolve/-/source-map-resolve-0.5.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "atob",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5a6eae92868e1898bfef7a7f725d86bcb8d323924cd64fced788ac0fbdd830bf12b6b1ffeff9511609a0f272026600f76d966f8f0086c6d30e0f7c16340bbc72"
        }
      ],
      "purl": "pkg:npm/atob@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/atob/-/atob-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/atob@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/atob/-/atob-2.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decode-uri-component",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "eb3913333458775cb84cd1a1fae062106bb87545"
        }
      ],
      "purl": "pkg:npm/decode-uri-component@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/decode-uri-component/-/decode-uri-component-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/decode-uri-component@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/decode-uri-component/-/decode-uri-component-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve-url",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2c637fe77c893afd2a663fe21aa9080068e2052a"
        }
      ],
      "purl": "pkg:npm/resolve-url@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve-url/-/resolve-url-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve-url@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve-url/-/resolve-url-0.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map-url",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "70f8853932d42af245220e1229549ccb88a53cf5baac580c81fb9924f3680ee32cde70b51db314c9c068270efbc45229eb3d5425024e7f1e82f46307f340e24f"
        }
      ],
      "purl": "pkg:npm/source-map-url@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map-url/-/source-map-url-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map-url@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map-url/-/source-map-url-0.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "urix",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "da937f7a62e21fec1fd18d49b35c2935067a6c72"
        }
      ],
      "purl": "pkg:npm/urix@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/urix/-/urix-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/urix@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/urix/-/urix-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "use",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "73011255794edeeae5f585a5156fd303d72c842121b6eec8289fe9e6ca09fe01a98fbbdbbc5ac063f7888a843a0f0db72a3661620888a3c1ceb359d0dafaffa1"
        }
      ],
      "purl": "pkg:npm/use@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/use/-/use-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/use@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/use/-/use-3.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "snapdragon-node",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3b6ee5e3168c62dfd1490e53477be9582001e4a6ff73321ca9414e33f0b87d870b9db6547353e48d300c8e87f6a4159a493c0e51deaa5077051951a3eda2309f"
        }
      ],
      "purl": "pkg:npm/snapdragon-node@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/snapdragon-node/-/snapdragon-node-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/snapdragon-node@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/snapdragon-node/-/snapdragon-node-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "snapdragon-util",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "99b2a431d40ab235f80402f86d16138f6d5e74e7fc70ded71dd6142447be667f7d85511870cbca3dcb7522a35eefe0193e2ae7f01083390047419927aa62a565"
        }
      ],
      "purl": "pkg:npm/snapdragon-util@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/snapdragon-util/-/snapdragon-util-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/snapdragon-util@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/snapdragon-util/-/snapdragon-util-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-regex",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "156b6578d02d67f2a2daab6a7a3d825d339ac8e1fd6c70d017e438f15a56c835e36d8c40e18cfc883077d735ce05494e1c72a27436ea195ad352f40c3e604607"
        }
      ],
      "purl": "pkg:npm/to-regex@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-regex/-/to-regex-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-regex@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-regex/-/to-regex-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "define-property",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8f02b6515e1c9cfa5b706efe55101129364f516a30c1703c6f31f934feae774a1e031c983ee1995000bb84cba0a42773e01792665d8397d93ae821c9ff8e9961"
        }
      ],
      "purl": "pkg:npm/define-property@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/define-property/-/define-property-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/define-property@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/define-property/-/define-property-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regex-not",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "27a4838d4803c508f936eb273ad745c43c0dffe1d6ca447c1842f072d27b99daa1732cb5c44738491147517bf14e9ebad586952808df44b67d702a92ead9f7d8"
        }
      ],
      "purl": "pkg:npm/regex-not@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regex-not/-/regex-not-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regex-not@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regex-not/-/regex-not-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-regex",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "40a3669f3b077d1e943d44629e157dd48023bf2e"
        }
      ],
      "purl": "pkg:npm/safe-regex@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safe-regex/-/safe-regex-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-regex@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safe-regex/-/safe-regex-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ret",
      "version": "0.1.15",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4d3958a5af8e2febcc30d1b6e314a5406109dc1fd1cc47d494b72dedbe46ff2b5abfec0fae9942a55305bb0cd76e479c26b6fa218a358856f44bdbf7efbe789a"
        }
      ],
      "purl": "pkg:npm/ret@0.1.15",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ret/-/ret-0.1.15.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ret@0.1.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ret/-/ret-0.1.15.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extglob",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3666fa4179042ecb81af6e02252922968e941c781b7a42b95226607c4e941c3dc46f6ed80baa03f9b85c4feb49e9c97c766b20750c675a572bcbc92c04804ba7"
        }
      ],
      "purl": "pkg:npm/extglob@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extglob/-/extglob-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extglob@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extglob/-/extglob-2.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "expand-brackets",
      "version": "2.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b77735e315ce30f6b6eff0f83b04151a22449622"
        }
      ],
      "purl": "pkg:npm/expand-brackets@2.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/expand-brackets/-/expand-brackets-2.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/expand-brackets@2.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/expand-brackets/-/expand-brackets-2.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "posix-character-classes",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "01eac0fe3b5af71a2a6c02feabb8c1fef7e00eab"
        }
      ],
      "purl": "pkg:npm/posix-character-classes@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/posix-character-classes/-/posix-character-classes-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/posix-character-classes@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/posix-character-classes/-/posix-character-classes-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fragment-cache",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4290fad27f13e89be7f33799c6bc5a0abfff0d19"
        }
      ],
      "purl": "pkg:npm/fragment-cache@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fragment-cache/-/fragment-cache-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fragment-cache@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fragment-cache/-/fragment-cache-0.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nanomatch",
      "version": "1.2.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e9a1ed93d116c7c014c150e7ed01f04f683122d3ab9f6946a2d2613a627d6469c7374a74c4adf6ff87e5fde155f323ae2b2851d82265d2bddc061829b03aa08"
        }
      ],
      "purl": "pkg:npm/nanomatch@1.2.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nanomatch/-/nanomatch-1.2.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nanomatch@1.2.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nanomatch/-/nanomatch-1.2.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-windows",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7972b55089ead9b3e68f25fa7b754723330ba1b73827de22e005a7f87a6adce5392a4ad10bde8e01c4773d127fa46bba9bc4d19c11cff5d917415b13fc239520"
        }
      ],
      "purl": "pkg:npm/is-windows@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-windows/-/is-windows-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-windows@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-windows/-/is-windows-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object.pick",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "87a10ac4c1694bd2e1cbf53591a66141fb5dd747"
        }
      ],
      "purl": "pkg:npm/object.pick@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object.pick/-/object.pick-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.pick@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object.pick/-/object.pick-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "normalize-path",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1ab28b556e198363a8c1a6f7e6fa20137fe6aed9"
        }
      ],
      "purl": "pkg:npm/normalize-path@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/normalize-path/-/normalize-path-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalize-path@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/normalize-path/-/normalize-path-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "remove-trailing-separator",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c24bce2a283adad5bc3f58e0d48249b92379d8ef"
        }
      ],
      "purl": "pkg:npm/remove-trailing-separator@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/remove-trailing-separator/-/remove-trailing-separator-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/remove-trailing-separator@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/remove-trailing-separator/-/remove-trailing-separator-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async-each",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cff5a143914fc922ddbd1101c88daf6624d6c029c5d26a0c27584af584300d31ca87a23bfee49c90c7ada1119be540593c2d73d23970fa7fd70a08de1fbcb501"
        }
      ],
      "purl": "pkg:npm/async-each@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async-each/-/async-each-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async-each@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async-each/-/async-each-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-parent",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9e6af6299d8d3bd2bd40430832bd113df906c5ae"
        }
      ],
      "purl": "pkg:npm/glob-parent@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-parent/-/glob-parent-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-parent@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-parent/-/glob-parent-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-glob",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7ba5ae24217804ac70707b96922567486cc3e84a"
        }
      ],
      "purl": "pkg:npm/is-glob@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-glob/-/is-glob-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-glob@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-glob/-/is-glob-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-dirname",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cc33d24d525e099a5388c0336c6e32b9160609e0"
        }
      ],
      "purl": "pkg:npm/path-dirname@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-dirname/-/path-dirname-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-dirname@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-dirname/-/path-dirname-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-binary-path",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "75f16642b480f187a711c814161fd3a4a7655898"
        }
      ],
      "purl": "pkg:npm/is-binary-path@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-binary-path/-/is-binary-path-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-binary-path@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-binary-path/-/is-binary-path-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "binary-extensions",
      "version": "1.13.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "527ecc2040dd502e603697060d5f7ba29d58c24ef8f0ca477054c7a18b3aaa78f56778fb239dd51b79f06612b3a016666dd44d9dbe9645d165c25eed483b991b"
        }
      ],
      "purl": "pkg:npm/binary-extensions@1.13.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/binary-extensions/-/binary-extensions-1.13.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/binary-extensions@1.13.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/binary-extensions/-/binary-extensions-1.13.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readdirp",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d4953ff2af95805672c70ac9f925483ac87e2b2c161a976cdcd4ea8a488aa43319592726018c8a220aa43be011bcd5897d7797475cf1cfb687178bb80b21fabd"
        }
      ],
      "purl": "pkg:npm/readdirp@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readdirp/-/readdirp-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readdirp@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readdirp/-/readdirp-2.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "upath",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "699c06a5a9853bad60dce95f4fb390087aa11a75b8de2787f5665e3fb43137f1bf8d2e237ea524671a2bcaf26054f11cae5e4d2ff8201ec4a62cc1ee1fae0b86"
        }
      ],
      "purl": "pkg:npm/upath@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/upath/-/upath-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/upath@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/upath/-/upath-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fsevents",
      "version": "1.2.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a166f567a9a41c8b242f3109fd7597d2cae4a644d0eef6a8a4c424c9a108a2ad1f9ad155c4eb616fc702c5e4fea77ca74dd924fd16706e01b86eb47905e5840b"
        }
      ],
      "purl": "pkg:npm/fsevents@1.2.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fsevents/-/fsevents-1.2.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fsevents@1.2.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fsevents/-/fsevents-1.2.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bindings",
      "version": "1.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a76abfb7f9a1bee3a3fd478b955eb9eba183fe0ba8c25af4847c42948d16f66ecc59890bd45d212e8fb401ec6cf4748f0ad4754974344c3dcc30aad765a8db89"
        }
      ],
      "purl": "pkg:npm/bindings@1.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bindings/-/bindings-1.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bindings@1.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bindings/-/bindings-1.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "file-uri-to-path",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d19b7eb372fb55fd5b8b0599dbd6804625582f1ee23069c4525f71df77db07f8f78d1f35bbf3b62dba8af819b508348d0ca56d27f623c18ed351de5291e2d02f"
        }
      ],
      "purl": "pkg:npm/file-uri-to-path@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/file-uri-to-path/-/file-uri-to-path-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/file-uri-to-path@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/file-uri-to-path/-/file-uri-to-path-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nan",
      "version": "2.14.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "336b9fcc888834a0ae0df052014af5bd643ebee55c03d92ac7c24952c6d08bac9fd6e191c9bec77e975f52be6a2d77f707fb7c74fbdc8e128c9a57e73f8ec4cd"
        }
      ],
      "purl": "pkg:npm/nan@2.14.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nan/-/nan-2.14.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nan@2.14.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nan/-/nan-2.14.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "compression",
      "version": "1.7.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8da4880f33fda59552e197d0f93cefb625a17691611364431f3f10264a57f522292eaf3c56e785e63270eadfba09441c02803ab7ec7cf4c2eb580aa97c313c89"
        }
      ],
      "purl": "pkg:npm/compression@1.7.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/compression/-/compression-1.7.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/compression@1.7.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/compression/-/compression-1.7.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bytes",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d32815404d689699f85a4ea4fa8755dd13a96048"
        }
      ],
      "purl": "pkg:npm/bytes@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bytes/-/bytes-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bytes@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bytes/-/bytes-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "compressible",
      "version": "2.0.18",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "005debecfe5d5b12fc331c884d132539140d68e036224005693af893b054ba68cfb51a460d36699743dbd5708ee89783081769d76e8282cf6c331a928e063246"
        }
      ],
      "purl": "pkg:npm/compressible@2.0.18",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/compressible/-/compressible-2.0.18.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/compressible@2.0.18",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/compressible/-/compressible-2.0.18.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "on-headers",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a59004f8524ba32213cad76a2b4539b3e148a6337424fdcecc58bfbbc471f84579fd6f894d61971bcc45cdebc4ec08c17c3a87bfff2f2fca90b088479ea464ac"
        }
      ],
      "purl": "pkg:npm/on-headers@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/on-headers/-/on-headers-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/on-headers@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/on-headers/-/on-headers-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "connect-history-api-fallback",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7b9e01f7dabf394a07eb8cd86117f71c13f9cf6e06dfc8790f7a97bb6dc9191a228295f94ace2bf599c393783467cb900b6c7694f689f9495605cd5958159d2e"
        }
      ],
      "purl": "pkg:npm/connect-history-api-fallback@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/connect-history-api-fallback/-/connect-history-api-fallback-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/connect-history-api-fallback@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/connect-history-api-fallback/-/connect-history-api-fallback-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "del",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4301ae114a2e3f6915c107a702c3a87f916ff0af6ddc3f026bc3717172ab2291078d35cae49da75cb74ff802c8d5c82ff308fb2aec01853c0190e65224a3395d"
        }
      ],
      "purl": "pkg:npm/del@4.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/del/-/del-4.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/del@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/del/-/del-4.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "glob",
      "version": "7.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "48461e1802102105fc34de8b0caa6b2e36eb77974044ce445ec77c188fc0e65d1aa582357c631680f1d27b864a2f87a8ce503223e768504f576d84b8c42910d7"
        }
      ],
      "purl": "pkg:npm/%40types/glob@7.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/glob/-/glob-7.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/glob@7.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/glob/-/glob-7.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "minimatch",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b47abaa9d6d3f54d4845219fd7808bd2952550b92cbd8f4e67ee5e12097537bb7e380ded1af369c490b3b8a425b0d8025706c0b3aef42f5bdc5508bc8fd1e39c"
        }
      ],
      "purl": "pkg:npm/%40types/minimatch@3.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/minimatch/-/minimatch-3.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/minimatch@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/minimatch/-/minimatch-3.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globby",
      "version": "6.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f5a6d70e8395e21c858fb0489d64df02424d506c"
        }
      ],
      "purl": "pkg:npm/globby@6.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/globby/-/globby-6.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globby@6.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/globby/-/globby-6.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-union",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9a34410e4f4e3da23dea375be5be70f24778ec39"
        }
      ],
      "purl": "pkg:npm/array-union@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-union/-/array-union-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-union@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-union/-/array-union-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-uniq",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "af6ac877a25cc7f74e058894753858dfdb24fdb6"
        }
      ],
      "purl": "pkg:npm/array-uniq@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-uniq/-/array-uniq-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-uniq@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-uniq/-/array-uniq-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-path-cwd",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c3de366d372287c7dd24f266407173912efa3443fc2b3cef9b0f76717b1acdbf229edc0ba8f89b3cf7577f800d74a577ad832eb90606216b6fcfd262941dcd15"
        }
      ],
      "purl": "pkg:npm/is-path-cwd@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-path-cwd/-/is-path-cwd-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-path-cwd@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-path-cwd/-/is-path-cwd-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-path-in-cwd",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "acda1c5c7822a4efabbe73fa764df3236d11a4eb6b00cfe4cdb076e7c530e415abdd3a578bceb5cb38e8d7a0e7e21528c74ee2c3903278c2c75acba3923cef45"
        }
      ],
      "purl": "pkg:npm/is-path-in-cwd@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-path-in-cwd/-/is-path-in-cwd-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-path-in-cwd@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-path-in-cwd/-/is-path-in-cwd-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-path-inside",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c22ca14f37c35acbf0016e77381585e73baf68e1a567a3f063101b3d50e1a66fa0334f712901a306affcb98375d9a0ef3319c09eadddc53ca84a844d9a0e5816"
        }
      ],
      "purl": "pkg:npm/is-path-inside@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-path-inside/-/is-path-inside-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-path-inside@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-path-inside/-/is-path-inside-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-is-inside",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "365417dede44430d1c11af61027facf074bdfc53"
        }
      ],
      "purl": "pkg:npm/path-is-inside@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-is-inside/-/path-is-inside-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-is-inside@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-is-inside/-/path-is-inside-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-map",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cb76fc2a977c380378e388717c16c57e3d4563f463b5377cb73630854a8d617c747d7c76897e2668fe10afaaa120a6d05c8d36c132c075ae1f6146c36a04d417"
        }
      ],
      "purl": "pkg:npm/p-map@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-map/-/p-map-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-map@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-map/-/p-map-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pify",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b81f3490115bfed7ddebc6d595e1bd4f9186b063e326b2c05294793d922b8419c86914d0463a9d252b082a438fe8e00815b8fb18eadcb9d739a4d8d9fa0795da"
        }
      ],
      "purl": "pkg:npm/pify@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pify/-/pify-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pify@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pify/-/pify-4.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rimraf",
      "version": "2.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b968db68a20add3d4e495a6dcd7ecd97a3ef437a801ad284b5546346e6b38df2f7071e5e238d3d5594aa80d0fee143679b32d574f8fd16a14934fa81645bdee3"
        }
      ],
      "purl": "pkg:npm/rimraf@2.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rimraf/-/rimraf-2.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rimraf@2.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rimraf/-/rimraf-2.7.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "express",
      "version": "4.17.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "98727d3bbf51aa5ba9851adcc365ff19387793db55bfc61ca326382a487858331460a45952ad21d68d30dabaebc41a8ced5a1e515aa06f6ef19443174e762de2"
        }
      ],
      "purl": "pkg:npm/express@4.17.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/express/-/express-4.17.1.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/express@4.17.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/express/-/express-4.17.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "array-flatten",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9a5f699051b1e7073328f2a008968b64ea2955d2"
        }
      ],
      "purl": "pkg:npm/array-flatten@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-flatten@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "content-disposition",
      "version": "0.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1313b4efbe2290439b200115f640e8e74a3eefd54251d101ea7ea5cca806c2ea5c55e46586b8f7a8601fc2af06eae0498e4a8bae14f4a846057169e0f33d73d2"
        }
      ],
      "purl": "pkg:npm/content-disposition@0.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/content-disposition@0.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cookie",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f87a7c7cba79ef09d44add2d634b47117878be86510e7a08ad93ea968dc33e2238cbd97083f8eac7ed4e9bde3f5ba65a3c33946e78ceb7ff7dc3aeb393e9755e"
        }
      ],
      "purl": "pkg:npm/cookie@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cookie/-/cookie-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cookie/-/cookie-0.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cookie-signature",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e303a882b342cc3ee8ca513a79999734dab3ae2c"
        }
      ],
      "purl": "pkg:npm/cookie-signature@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie-signature@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "etag",
      "version": "1.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "41ae2eeb65efa62268aebfea83ac7d79299b0887"
        }
      ],
      "purl": "pkg:npm/etag@1.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/etag@1.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fresh",
      "version": "0.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3d8cadd90d976569fa835ab1f8e4b23a105605a7"
        }
      ],
      "purl": "pkg:npm/fresh@0.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fresh@0.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "merge-descriptors",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b00aaa556dd8b44568150ec9d1b953f3f90cbb61"
        }
      ],
      "purl": "pkg:npm/merge-descriptors@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/merge-descriptors@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "methods",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5529a4d67654134edcc5266656835b0f851afcee"
        }
      ],
      "purl": "pkg:npm/methods@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/methods@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-to-regexp",
      "version": "0.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "df604178005f522f15eb4490e7247a1bfaa67f8c"
        }
      ],
      "purl": "pkg:npm/path-to-regexp@0.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-to-regexp@0.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "proxy-addr",
      "version": "2.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "761fdfaef0815664ac0d8cf0ea7f76ea3bfdef881d7619053df88df213ce8b7d166b1db9419c99106bde96e0a0962067aa6b8cf94266044adb014148a036e33b"
        }
      ],
      "purl": "pkg:npm/proxy-addr@2.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/proxy-addr@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "forwarded",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "98c23dab1175657b8c0573e8ceccd91b0ff18c84"
        }
      ],
      "purl": "pkg:npm/forwarded@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/forwarded/-/forwarded-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/forwarded@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/forwarded/-/forwarded-0.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ipaddr.js",
      "version": "1.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d0a23feb4ef1a31493a07ec68cdd457d26cba14d3e6ed4e2723b1049642587f859ca437c2a998c7fbb98c0f5b747e6a467a47fc35f199574870585e26143cede"
        }
      ],
      "purl": "pkg:npm/ipaddr.js@1.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ipaddr.js@1.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "send",
      "version": "0.17.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "06c54ab2219c40c1704fc531ca9a1b50acafee2ac23511e4d53d06ebcd2f93cf327fa2c107219c649393242ad33f6c5537ac88f978cf25c36e1375787d3f6c02"
        }
      ],
      "purl": "pkg:npm/send@0.17.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/send/-/send-0.17.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/send@0.17.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/send/-/send-0.17.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "destroy",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "978857442c44749e4206613e37946205826abd80"
        }
      ],
      "purl": "pkg:npm/destroy@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/destroy/-/destroy-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/destroy@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/destroy/-/destroy-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c74567f2ca48fb0b89d4ee92ee09db69083c3f187834d1dbeca4883661162a23c4e1128ea65be28e7f8d92662699180febc99cef48f611b793151b2bb306907a"
        }
      ],
      "purl": "pkg:npm/mime@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b60a7e765e5c1a4dbcbad624b41b2b16a03b1ca82b8603ec83a67f11f856238825d47c2af01fc6998ff4a1767a9c5f210d57ac4bf1699d8683fe439685842fca"
        }
      ],
      "purl": "pkg:npm/ms@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serve-static",
      "version": "1.14.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "24caef530139e1e98261695323e846ac6bf923c744c26728ff4d04be4cc822c47b32aac7a276c3f693b630e7c59e9167b65ede72966cfb7996f976d066ef500a"
        }
      ],
      "purl": "pkg:npm/serve-static@1.14.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serve-static/-/serve-static-1.14.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serve-static@1.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serve-static/-/serve-static-1.14.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "html-entities",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f27c6370171df30a2f6de2b1ee1df04e38b87bafab85a56e3cda4cab05a09c787e37d4e8aac0ace97ced59104f43e52dceca0c01d299b5410da15cd4fc432d64"
        }
      ],
      "purl": "pkg:npm/html-entities@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/html-entities/-/html-entities-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/html-entities@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/html-entities/-/html-entities-1.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-proxy-middleware",
      "version": "0.19.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c876138163103bc56fc0d4b6d9e2cb968024bee9e0b0a74a4cb3bc00995fb5820a35f26bdc62b7ccad1909fcc30c6501b6d74673cc45cb59828adbcd290b42dd"
        }
      ],
      "purl": "pkg:npm/http-proxy-middleware@0.19.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-proxy-middleware/-/http-proxy-middleware-0.19.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-proxy-middleware@0.19.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-proxy-middleware/-/http-proxy-middleware-0.19.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      },
      "tags": [
        "middleware"
      ]
    },
    {
      "group": "",
      "name": "import-local",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6fab34e26dcefacdc21926ea0c8c8fe11e9a03001e62556af7e59459ea7a8876bc11345ff727a2d54e3c0b93267c9995f4088b61804a3ccabf5befd646942609"
        }
      ],
      "purl": "pkg:npm/import-local@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/import-local/-/import-local-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/import-local@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/import-local/-/import-local-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pkg-dir",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fc4e7b018928790db9aa4c4c8f93c1395805f0a8aefe1edc612df4679f91ed66a208205f2eae7c648fdd49e68429bf565495799ffd37430acddc8796205965bf"
        }
      ],
      "purl": "pkg:npm/pkg-dir@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pkg-dir/-/pkg-dir-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pkg-dir@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pkg-dir/-/pkg-dir-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-up",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d720fa4662c8d5705fc6e82f391c25724e9fef9b582fe891d23ab0b0eacec4c672198a94b83849d25e005dd3b5897fc54ecf5c040304935816484c759126f296"
        }
      ],
      "purl": "pkg:npm/find-up@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-up/-/find-up-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-up@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-up/-/find-up-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "locate-path",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ec03bbe3cc169c884da80b9ab72d995879101d148d7cf548b0f21fc043963b6d8099aa15ad66af94e70c4799f34cb358be9dfa5f6db4fe669a46cade7351bae4"
        }
      ],
      "purl": "pkg:npm/locate-path@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/locate-path/-/locate-path-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/locate-path@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/locate-path/-/locate-path-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-locate",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c7ed76c3f4e8fb81857e0261044a620dc2e8cd12467a063e122effcf4b522e4326c4664dc9b54c49f5a3f5a267f19e4573b74150d24e39580fbf61fb230ba549"
        }
      ],
      "purl": "pkg:npm/p-locate@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-locate/-/p-locate-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-locate@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-locate/-/p-locate-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve-cwd",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "00a9f7387556e27038eae232caa372a6a59b665a"
        }
      ],
      "purl": "pkg:npm/resolve-cwd@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve-cwd/-/resolve-cwd-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve-cwd@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve-cwd/-/resolve-cwd-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve-from",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b22c7af7d9d6881bc8b6e653335eebcb0a188748"
        }
      ],
      "purl": "pkg:npm/resolve-from@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve-from/-/resolve-from-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve-from@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve-from/-/resolve-from-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "internal-ip",
      "version": "4.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4b5cc1a350facdcb32b82e8f326639fb9e583082d0f5abfc968b4cc78e3b06ae92020a3fb032bacbab942a6b98856ede69c9c88457ec3e608d61d0f3b279c30a"
        }
      ],
      "purl": "pkg:npm/internal-ip@4.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/internal-ip/-/internal-ip-4.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/internal-ip@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/internal-ip/-/internal-ip-4.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "default-gateway",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "87ab0cad507554c595ad6d7799273a89afc3c18630e4c37af9ec4dbb539a25e15a73969202fc0cee56743557d3001b929107a5af8879a1e6e0dca0755cf76380"
        }
      ],
      "purl": "pkg:npm/default-gateway@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/default-gateway/-/default-gateway-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/default-gateway@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/default-gateway/-/default-gateway-4.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "execa",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "69d6f1732595e3aaa21f2bd2a79d132add39b41e2d2b71dc985eff9f17c07619e8c7cdec7930dbc276aa28ee2c5d1cbbae81c0205a893ff470fc0b846d7eb52c"
        }
      ],
      "purl": "pkg:npm/execa@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/execa/-/execa-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/execa@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/execa/-/execa-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cross-spawn",
      "version": "6.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "79354bac14adedf8db0f2833f34e69327b2d22cd954c1364466d2ac5977e33b0395c377155158ee4cc460576618d8e1ca8b60b76dac6a917fc9813e6cf04a959"
        }
      ],
      "purl": "pkg:npm/cross-spawn@6.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-6.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cross-spawn@6.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-6.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nice-try",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d67878e5d79e6f9a25358ede5fcd8190f3bb492c51e524982623d3ad3745515630025f0228c03937d3e34d89078918e2b15731710d475dd2e1c76ab1c49ccb35"
        }
      ],
      "purl": "pkg:npm/nice-try@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nice-try/-/nice-try-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nice-try@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nice-try/-/nice-try-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-key",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "411cadb574c5a140d3a4b1910d40d80cc9f40b40"
        }
      ],
      "purl": "pkg:npm/path-key@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-key/-/path-key-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-key@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-key/-/path-key-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shebang-command",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "44aac65b695b03398968c39f363fee5deafdf1ea"
        }
      ],
      "purl": "pkg:npm/shebang-command@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shebang-command/-/shebang-command-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shebang-command@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shebang-command/-/shebang-command-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shebang-regex",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "da42f49740c0b42db2ca9728571cb190c98efea3"
        }
      ],
      "purl": "pkg:npm/shebang-regex@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shebang-regex@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-stream",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "18c6ade04279d7ad64232d877af2e5af896e363060be68f8d7729a400ee3b7857c078443b1fa4793b590f4656a7d8cb2c7c392fcbeba2a8c7eac944d9252caef"
        }
      ],
      "purl": "pkg:npm/get-stream@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-stream/-/get-stream-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-stream@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-stream/-/get-stream-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pump",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f0672fa9dd216cd4fcad77f8d872de30a6fe3d1e2602a9df5195ce5955d93457ef18cefea34790659374d198f2f57edebd4f13f420c64627e58f154d81161c3"
        }
      ],
      "purl": "pkg:npm/pump@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pump/-/pump-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pump@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pump/-/pump-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "end-of-stream",
      "version": "1.4.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "faec358a720754f428695b87cd1c97776d6270cf9c9ede02cc3e6b5be342d708ce5124ceb3e4deec53afec084deef4bdc7fa08ca12cfe4f4751fea614001eee5"
        }
      ],
      "purl": "pkg:npm/end-of-stream@1.4.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/end-of-stream@1.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "npm-run-path",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "35a9232dfa35d7067b4cb2ddf2357b1871536c5f"
        }
      ],
      "purl": "pkg:npm/npm-run-path@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/npm-run-path/-/npm-run-path-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/npm-run-path@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/npm-run-path/-/npm-run-path-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-finally",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3fbcfb15b899a44123b34b6dcc18b724336a2cae"
        }
      ],
      "purl": "pkg:npm/p-finally@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-finally/-/p-finally-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-finally@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-finally/-/p-finally-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "signal-exit",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "554278f450bc5353b1c192f121b4d3ac3bcb9dfffa4c383165c2bcc3147ccecd77c69c7bc5b1bad2774196136b162d8432e151a1e0e824eef0b6148bab8d848c"
        }
      ],
      "purl": "pkg:npm/signal-exit@3.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/signal-exit@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-eof",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bb43ff5598a6eb05d89b59fcd129c983313606bf"
        }
      ],
      "purl": "pkg:npm/strip-eof@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-eof/-/strip-eof-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-eof@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-eof/-/strip-eof-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ip-regex",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fa78bf5d2e6913c911ce9f819ee5146bb6d844e9"
        }
      ],
      "purl": "pkg:npm/ip-regex@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ip-regex/-/ip-regex-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ip-regex@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ip-regex/-/ip-regex-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-absolute-url",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a2998d217eee1674bde8db4f9a1590810c7afcd60582c51760c96571fcf058a50cc1fa3c924bb54ef13a86435c1fe435b6ce5c315aec63b8f46f15d00dc8aef5"
        }
      ],
      "purl": "pkg:npm/is-absolute-url@3.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-absolute-url/-/is-absolute-url-3.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-absolute-url@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-absolute-url/-/is-absolute-url-3.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "killable",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f3aad2ca954c22ac453297f9e2722ad598d88fbd8b3b9799fcc0e3cfedfc8956950f92f0a75bfbee8971a9ca51949673c39c1ef7d75ac047302ddcc86cc298e"
        }
      ],
      "purl": "pkg:npm/killable@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/killable/-/killable-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/killable@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/killable/-/killable-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "loglevel",
      "version": "1.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1deb278b8b395245a4c0218931018087bd4f68b52628533ad1d1efab4ce2fef0e186bcee93ee0680d6d35c9d766184099fa64a0433488d872e4062ae76faab23"
        }
      ],
      "purl": "pkg:npm/loglevel@1.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/loglevel/-/loglevel-1.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/loglevel@1.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/loglevel/-/loglevel-1.7.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "opn",
      "version": "5.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3ea1e98200bd6cb57455e59c74a864a7163edc94f37ad2d2a930962ffcffb4521b23a1bc2428e89dd5e4953d498a77332f3d9789beb6b12a744ff80a4f82a4b0"
        }
      ],
      "purl": "pkg:npm/opn@5.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/opn/-/opn-5.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/opn@5.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/opn/-/opn-5.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-wsl",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1f16e4aa22b04d1336b66188a66af3c600c3a66d"
        }
      ],
      "purl": "pkg:npm/is-wsl@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-wsl/-/is-wsl-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-wsl@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-wsl/-/is-wsl-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-retry",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5c4e86e3e6134e44f66b45166f692365ef313707fc6c86e7aa973f212fe274e055872bdeb3498ae4e2607a8723c7bab9a6f5ffea6db7c6ecd53d84f5b8633bdf"
        }
      ],
      "purl": "pkg:npm/p-retry@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-retry/-/p-retry-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-retry@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-retry/-/p-retry-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "retry",
      "version": "0.12.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1b42a6266a21f07421d1b0b54b7dc167b01c013b"
        }
      ],
      "purl": "pkg:npm/retry@0.12.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/retry/-/retry-0.12.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/retry@0.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/retry/-/retry-0.12.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "portfinder",
      "version": "1.0.28",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "49efb68ac6a721c12a7f65cc1e3c942ac91ccf16cf1fb7509e53235d7ebe7726dacb21ef01ffd30a0c8c465cdffc1e900e100414e19eb34a73468ddbcb801b30"
        }
      ],
      "purl": "pkg:npm/portfinder@1.0.28",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/portfinder/-/portfinder-1.0.28.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/portfinder@1.0.28",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/portfinder/-/portfinder-1.0.28.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "2.6.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cdf96f96cd750c2cbe7505b34d6d9dcee8a5bfc6795ffa637e664e59b6ba4cd2150e6fb650368999748e5e56ac1ca7cd06cf28a37334693e747c31167ca6635e"
        }
      ],
      "purl": "pkg:npm/async@2.6.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async/-/async-2.6.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@2.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async/-/async-2.6.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "3.2.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0858f3618022e1385f890be2ceb1507af4d35c7b670aa59f7bbc75021804b1c4f3e996cb6dfa0b44b3ee81343206d87a7fc644455512c961c50ffed6bb8b755d"
        }
      ],
      "purl": "pkg:npm/debug@3.2.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-3.2.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@3.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-3.2.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "schema-utils",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8b6ecc89ce0aa2f33f9671accbcc214421e173b5627096a30234eb620d752bdcdf6579d822de24e45fa4664c239eb84accb89cfc72d4e23d759a3b33d86ffbe6"
        }
      ],
      "purl": "pkg:npm/schema-utils@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/schema-utils/-/schema-utils-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/schema-utils@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/schema-utils/-/schema-utils-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ajv-errors",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0c245f3bfe2743ef3da7f44ae378bc133778d44a9d18853895dee7185f0e435e2873fc1ee6b127b4b0946bbfa3ae7de79fcdc1a2c7f0640d306f8a689f6a3c89"
        }
      ],
      "purl": "pkg:npm/ajv-errors@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ajv-errors/-/ajv-errors-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ajv-errors@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ajv-errors/-/ajv-errors-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "selfsigned",
      "version": "1.10.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d8fe0fb62789784c1581353d4047302110d0fe65c92d7f3ff88deeafe3e0d7a9d2f2835bac6c44b28f4dc985b2f0d0265e2365e1d940a79330a0d7825b338de3"
        }
      ],
      "purl": "pkg:npm/selfsigned@1.10.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/selfsigned/-/selfsigned-1.10.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/selfsigned@1.10.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/selfsigned/-/selfsigned-1.10.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-forge",
      "version": "0.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3cf9aef1e11e1bdb1a114bc8f7b7e6e0e6315d507a6c5bf2353ca250e062721069146f00d4b8f0ddb63adbee683a30c430746777463b1d0fb1eeecf13b30ba24"
        }
      ],
      "purl": "pkg:npm/node-forge@0.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-forge/-/node-forge-0.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-forge@0.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-forge/-/node-forge-0.10.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serve-index",
      "version": "1.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d3768d69b1e7d82e5ce050fff5b453bea12a9239"
        }
      ],
      "purl": "pkg:npm/serve-index@1.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serve-index/-/serve-index-1.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serve-index@1.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serve-index/-/serve-index-1.9.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "batch",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dc34314f4e679318093fc760272525f94bf25c16"
        }
      ],
      "purl": "pkg:npm/batch@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/batch/-/batch-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/batch@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/batch/-/batch-0.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-errors",
      "version": "1.6.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8b55680bb4be283a0b5bf4ea2e38580be1d9320d"
        }
      ],
      "purl": "pkg:npm/http-errors@1.6.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-errors/-/http-errors-1.6.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-errors@1.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-errors/-/http-errors-1.6.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "setprototypeof",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "06f13f4f0a595f8157131c4ec59c9119042feb9d4c4b09962991aabe63dc4488c3a96b9bebb9132ae20cc78ddc659ad2fdc041cf005c3435a8171b765c4148a5"
        }
      ],
      "purl": "pkg:npm/setprototypeof@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/setprototypeof@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sockjs",
      "version": "0.3.21",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0e16cf146a718dce99dc8fae5f4ec877964ed97c18b163ab6236927a27844bbf1cabe25a26f55ee6afe6d6ebe32108578a78487821511fa2605defa6bd53325f"
        }
      ],
      "purl": "pkg:npm/sockjs@0.3.21",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sockjs/-/sockjs-0.3.21.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sockjs@0.3.21",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sockjs/-/sockjs-0.3.21.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "faye-websocket",
      "version": "0.11.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0f6cb86e8bd8a73ce21a06c762d182323949337eaf025ff2fb15329f50be155c7cb3377513ef3a2b0570e97bd84b338ff223299b55f4238c490fe42d51bdfa38"
        }
      ],
      "purl": "pkg:npm/faye-websocket@0.11.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/faye-websocket/-/faye-websocket-0.11.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/faye-websocket@0.11.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/faye-websocket/-/faye-websocket-0.11.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "websocket-driver",
      "version": "0.7.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6f5eca783210563bdbd2cb2e4831767185d28368b3b65889e01f5676cb81e89f79daa08f2a69d5ab80f25b99a8b489971c30b57014ffd547b3ac956c2b0e738e"
        }
      ],
      "purl": "pkg:npm/websocket-driver@0.7.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/websocket-driver/-/websocket-driver-0.7.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/websocket-driver@0.7.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/websocket-driver/-/websocket-driver-0.7.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      },
      "tags": [
        "driver"
      ]
    },
    {
      "group": "",
      "name": "http-parser-js",
      "version": "0.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b7b863bde7ffe4710aed1593754cd552197cce412ef8b95a134218cdd32ebdb4838a9c414693a7e14870f19c840846bcd3c8954fc5c28f3a3ac6662de0288b66"
        }
      ],
      "purl": "pkg:npm/http-parser-js@0.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-parser-js/-/http-parser-js-0.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-parser-js@0.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-parser-js/-/http-parser-js-0.5.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "websocket-extensions",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3aa79d3c818e7ec0e5a37d5437061b08531268ef66f46ff47da2078f9fdd6450cc16a3d3731e94c2ac8ecb708e11a10e83ff55b0622976a9fad96e4a868292a6"
        }
      ],
      "purl": "pkg:npm/websocket-extensions@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/websocket-extensions/-/websocket-extensions-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/websocket-extensions@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/websocket-extensions/-/websocket-extensions-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sockjs-client",
      "version": "1.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f03b770438b815836b0851932ff1edc15ce4011ac435dc0e51fd59a16ffda7733c9597454f7e6355dac7cdafaa831b86f47dffb2147872e5ff5fdba652b8cff1"
        }
      ],
      "purl": "pkg:npm/sockjs-client@1.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sockjs-client/-/sockjs-client-1.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sockjs-client@1.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sockjs-client/-/sockjs-client-1.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eventsource",
      "version": "1.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e0b9f5efebd54f493c696abeb7f6c5e5aadc4b71294fd818b56eba10f69c763fe60057afce7b27ca81cb3f2d8103c81b2107881e83ecbf099f05fb5f706fff05"
        }
      ],
      "purl": "pkg:npm/eventsource@1.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eventsource/-/eventsource-1.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eventsource@1.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eventsource/-/eventsource-1.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "original",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "87205597a8aaa94389f05a917be97f812f07fa42988eb12775de4f9b531f06db04280d37f0792475b025ffbd840171b2a270ff3c5b2f9951be12f708a6588c06"
        }
      ],
      "purl": "pkg:npm/original@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/original/-/original-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/original@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/original/-/original-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "url-parse",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1ce7c239426dee2498cc4c7f52a82dc0a44c0ba114f7534586c08732ff68334dd525c568d90ae9f13f2423d0fb6a615fd5cbbeff70848606f7ac5f732fb93ce5"
        }
      ],
      "purl": "pkg:npm/url-parse@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/url-parse/-/url-parse-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/url-parse@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/url-parse/-/url-parse-1.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "querystringify",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "148aa08f6114bd36bb479d2ed2b1acc937edce3626bff6b784edf8e5b64daea69b36a8ed8220cc826a389a452377e9f3539a05ddd0a52aa1483d42b26d4caaa1"
        }
      ],
      "purl": "pkg:npm/querystringify@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/querystringify/-/querystringify-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/querystringify@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/querystringify/-/querystringify-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json3",
      "version": "3.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "73bffc99b52c2a28006cb903e41d35d012b80fd2d99bb035a4d22d904c2251946920deba7b1bbf7bb6105b2b06ba7f9344a689a7c3217a633e5647d6bf8d9a08"
        }
      ],
      "purl": "pkg:npm/json3@3.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json3/-/json3-3.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json3@3.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json3/-/json3-3.3.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdy",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "af8ea065065057e2a5f6822dbe5d49659a89286afea04901d3c03a07392247be7ddffec86edba77171ddd98a18793b06e35e7b66cb0cbbd298bd41cb723703a0"
        }
      ],
      "purl": "pkg:npm/spdy@4.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdy/-/spdy-4.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdy@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdy/-/spdy-4.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "handle-thing",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f509f8c81c5e971a21d8ec3ada73fe29afe4327397462f015e745a5307b32cd86a7a59cde3dc4acf817f74f3fc3982f12f1aba243b596f68bd5f39d441b34f4e"
        }
      ],
      "purl": "pkg:npm/handle-thing@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/handle-thing/-/handle-thing-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/handle-thing@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/handle-thing/-/handle-thing-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-deceiver",
      "version": "1.2.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fa7168944ab9a519d337cb0bec7284dc3e723d87"
        }
      ],
      "purl": "pkg:npm/http-deceiver@1.2.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-deceiver/-/http-deceiver-1.2.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-deceiver@1.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-deceiver/-/http-deceiver-1.2.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "select-hose",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "625d8658f865af43ec962bfc376a37359a4994ca"
        }
      ],
      "purl": "pkg:npm/select-hose@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/select-hose/-/select-hose-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/select-hose@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/select-hose/-/select-hose-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdy-transport",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "86c2d5144e528c0e930a2b167895c52a788618ea4180c2e67ab7ced9a0b2094e6cee727fae901ea6a98589fbff1826d26ee7847802499e6490dab282fe0f0573"
        }
      ],
      "purl": "pkg:npm/spdy-transport@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdy-transport/-/spdy-transport-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdy-transport@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdy-transport/-/spdy-transport-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "detect-node",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "648cd1a4b26b3a3ee38cfda6880b60a887e6cdbc5ae193abe6325ceb4d73925b1f131f684f39a68f69d5a483d1a4d9514c887c95cd64c9588863b0564863662b"
        }
      ],
      "purl": "pkg:npm/detect-node@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/detect-node/-/detect-node-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/detect-node@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/detect-node/-/detect-node-2.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hpack.js",
      "version": "2.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "87774c0949e513f42e84575b3c45681fade2a0b2"
        }
      ],
      "purl": "pkg:npm/hpack.js@2.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hpack.js/-/hpack.js-2.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hpack.js@2.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hpack.js/-/hpack.js-2.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "obuf",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3d7d70bb402601d3ea38bd665a1aa694e77c90e219430199c3aae1eee6f2f5f4dce6585a39614b5f723a47586b17d937cd4638d1eea282c2c69035caf762c936"
        }
      ],
      "purl": "pkg:npm/obuf@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/obuf/-/obuf-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/obuf@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/obuf/-/obuf-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wbuf",
      "version": "1.7.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3bce103a7af489cb1b1462d2d0eddb23916cc31cd1afcfe01f05a40e5405b248523ebc905efad33318f118fe3e8966286ae2e806f7c3a64ace6ae67ed226690c"
        }
      ],
      "purl": "pkg:npm/wbuf@1.7.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wbuf/-/wbuf-1.7.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wbuf@1.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wbuf/-/wbuf-1.7.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimalistic-assert",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "52d25c003e3211a1ad8cf7b35ae3bdc02e27c149d51fff3f226df210740fe1bebb717943fd0afd85d213094d710db4845e0d9728d68ff23b11795eef41dd34fc"
        }
      ],
      "purl": "pkg:npm/minimalistic-assert@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimalistic-assert/-/minimalistic-assert-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimalistic-assert@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimalistic-assert/-/minimalistic-assert-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "6.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a9ed637e6d4c83b36afcd4a1e97136e203d744e115b161f10b52c8c7ffd73650fd8b0ed86501a364d8d837bc466841ba88a740f04b4d156e91d208e7557a7ec1"
        }
      ],
      "purl": "pkg:npm/supports-color@6.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-6.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@6.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-6.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "url",
      "version": "0.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3838e97cfc60521eb73c525a8e55bfdd9e2e28f1"
        }
      ],
      "purl": "pkg:npm/url@0.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/url/-/url-0.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/url@0.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/url/-/url-0.11.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "punycode",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9653a036fb7c1ee42342f2325cceefea3926c48d"
        }
      ],
      "purl": "pkg:npm/punycode@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/punycode/-/punycode-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/punycode@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/punycode/-/punycode-1.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "querystring",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b209849203bb25df820da756e747005878521620"
        }
      ],
      "purl": "pkg:npm/querystring@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/querystring/-/querystring-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/querystring@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/querystring/-/querystring-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webpack-dev-middleware",
      "version": "3.7.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7637a573fcc68b3f67663fd4ecf4c18b6562a2b1895c45a8ff796d90f6c3cb1097861117916d1c7bdf5f6a56a89384cf8fe02cc4b897251d0404e6f4ce1f5f29"
        }
      ],
      "purl": "pkg:npm/webpack-dev-middleware@3.7.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webpack-dev-middleware/-/webpack-dev-middleware-3.7.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webpack-dev-middleware@3.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webpack-dev-middleware/-/webpack-dev-middleware-3.7.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      },
      "tags": [
        "middleware"
      ]
    },
    {
      "group": "",
      "name": "memory-fs",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3a9a20b8462523e447cfbc7e8bb80ed667bfc552"
        }
      ],
      "purl": "pkg:npm/memory-fs@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/memory-fs/-/memory-fs-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/memory-fs@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/memory-fs/-/memory-fs-0.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "errno",
      "version": "0.1.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "749ea806be5243555277daa493b0724606ffd521f82598c21d25bf9abeb7fd07173bdccb571bc9e8ecb5de78a8d37af1a529d50c38c5a2bef94a355e6563d6fc"
        }
      ],
      "purl": "pkg:npm/errno@0.1.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/errno/-/errno-0.1.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/errno@0.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/errno/-/errno-0.1.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prr",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d3fc114ba06995a45ec6893f484ceb1d78f5f476"
        }
      ],
      "purl": "pkg:npm/prr@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/prr/-/prr-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prr@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/prr/-/prr-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webpack-log",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "717f06daf47ff395181b9f45824a0c6a6c075089124a55776c1311b1bc555d5524da3e8d95e08a8d0fd613d79883d598e30db93bdc3cc0a3f8af335916651c52"
        }
      ],
      "purl": "pkg:npm/webpack-log@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webpack-log/-/webpack-log-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webpack-log@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webpack-log/-/webpack-log-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-colors",
      "version": "3.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "84751719a81e7e3376891ac80fadf172422fa2d3973a88e140a5883d467898d519f672d95beec530da04d653a412135662cc7fef2b0622e2580a230003d167ac"
        }
      ],
      "purl": "pkg:npm/ansi-colors@3.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-colors/-/ansi-colors-3.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-colors@3.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-colors/-/ansi-colors-3.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ws",
      "version": "6.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "188c805c2d9c07b2e3be980cb7d10a4b695daabd0c4eb3916a57a23a7a3a4f0799eabdd32ada054166b2ff63dc789dd1b816ac387cd7367e4baf0d57d1b123a8"
        }
      ],
      "purl": "pkg:npm/ws@6.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ws/-/ws-6.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ws@6.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ws/-/ws-6.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async-limiter",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "72c3a558601c44525a23a9be17658a76730aaf81e1761155064d07fd06c914c0abfae3b6930a21c1740fc70ffd382c69d39af9821541152ca2a22c71de07e435"
        }
      ],
      "purl": "pkg:npm/async-limiter@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async-limiter/-/async-limiter-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async-limiter@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async-limiter/-/async-limiter-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs",
      "version": "13.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "017dd9c3988faee37989eeb119120382a913f9986746564c2cc1c0b3cb60ee746bbb2d8d6fe8b9a3d6f082102882d334f2ad5da6bd8b5684bc2924cc62959753"
        }
      ],
      "purl": "pkg:npm/yargs@13.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs/-/yargs-13.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs@13.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs/-/yargs-13.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cliui",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3d87864849a61cceb3be879fdb0f133f396b9cda572234e2a582bbf3462cc2620ff6f8f199de98d9adc20762acebf014f0d1e366e817be8f30de858cdaa9f05c"
        }
      ],
      "purl": "pkg:npm/cliui@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cliui/-/cliui-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cliui@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cliui/-/cliui-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string-width",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bda7dcbfa2a3559292833d3aa0cfc7e860c1ac0b73f2f76141a9068c522f36b1c0eb2dc7085d422272f2f902eaf1d4c93d0d5bf8a0d4a8315cb647515b8e1ed7"
        }
      ],
      "purl": "pkg:npm/string-width@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string-width/-/string-width-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string-width@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string-width/-/string-width-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "emoji-regex",
      "version": "7.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0b004b444210ecbbd8141d16c91bf086ae4de6a3e173a3cc8c3e9b620805948e58c83825fb4bf1ab95476cc385a8b83b85f5b39aef13e59d50a1f8664c8848b4"
        }
      ],
      "purl": "pkg:npm/emoji-regex@7.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-7.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/emoji-regex@7.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-7.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-ansi",
      "version": "5.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0ee46cd6029b06ab0c288665adf7f096e83c30791c9e98ece553e62f53c087e980df45340d3a2d7c3674776514b17a4f98f98c309e96efbdcc680dc9fa56e258"
        }
      ],
      "purl": "pkg:npm/strip-ansi@5.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-5.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@5.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-5.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-regex",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d5aa5e3df5ccd54392ab0d28f48885028bd5cfd3394b50e0fb84eb0f07cc7b043aa7fae632e79beed5998d0d6bc782e8cb502b060828a86a5faaa748e2ba2776"
        }
      ],
      "purl": "pkg:npm/ansi-regex@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrap-ansi",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "402d7f88dff6fd13d52798d82bc046b6d8f9cfcdcb9922a6bdbbeb5cf3422d94846f7d8a2950c90e5fcc3add8dd35a94d87fc593311af4f2ada3506a0e3b5ded"
        }
      ],
      "purl": "pkg:npm/wrap-ansi@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrap-ansi@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-5.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "require-main-filename",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "34a37990c0f294aba577160b4947eb6e8e53bb387885dfb613c34f3d7d36999b67d55b911104e861efd9765272f89dee0a97da886174e5eec1f16d225db4079a"
        }
      ],
      "purl": "pkg:npm/require-main-filename@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/require-main-filename/-/require-main-filename-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/require-main-filename@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/require-main-filename/-/require-main-filename-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "set-blocking",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "045f9782d011ae9a6803ddd382b24392b3d890f7"
        }
      ],
      "purl": "pkg:npm/set-blocking@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/set-blocking@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which-module",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d9ef07dce77b9902b8a3a8fa4b31c3e3f7e6e87a"
        }
      ],
      "purl": "pkg:npm/which-module@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which-module/-/which-module-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which-module@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which-module/-/which-module-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "y18n",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c0d732e0dbe33182fc82881659800eed915615f1dc6dd6c4e7bb593bc7b871ba63f2d7d4730af0a9297769df07c6961609d5dc25409e28a652eb602fd5a7dfc1"
        }
      ],
      "purl": "pkg:npm/y18n@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/y18n/-/y18n-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/y18n@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/y18n/-/y18n-4.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs-parser",
      "version": "13.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "de56ec3517ff8fe03842e4997c3440ec74527d6af33b4623a9325de648c0ab7ed97a9d421206989ab1fd4371b03e207d707c9dd58d54c208068491a8c62a5bce"
        }
      ],
      "purl": "pkg:npm/yargs-parser@13.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-13.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs-parser@13.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-13.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "5.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f6f124c1d7bd27c164badd48ed944384ddd95d400a5a257664388d6e3057f37f7ad1b8f7a01da1deb3279ef98c50f96e92bd10d057a52b74e751891d79df026"
        }
      ],
      "purl": "pkg:npm/camelcase@5.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camelcase/-/camelcase-5.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@5.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camelcase/-/camelcase-5.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decamelize",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f6534d15148269b20352e7bee26f501f9a191290"
        }
      ],
      "purl": "pkg:npm/decamelize@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/decamelize@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "demo/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "demo/package-lock.json"
              }
            ],
            "concludedValue": "demo/package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/commander@5.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimist@1.2.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/neo-async@2.6.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map@0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wordwrap@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uglify-js@3.12.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/handlebars@4.7.7",
      "dependsOn": [
        "pkg:npm/minimist@1.2.5",
        "pkg:npm/neo-async@2.6.2",
        "pkg:npm/source-map@0.6.1",
        "pkg:npm/uglify-js@3.12.8",
        "pkg:npm/wordwrap@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/lodash.uniqby@4.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/node-fetch@2.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parse-github-url@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/semver@6.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/auto-changelog@2.2.1",
      "dependsOn": [
        "pkg:npm/commander@5.1.0",
        "pkg:npm/handlebars@4.7.7",
        "pkg:npm/lodash.uniqby@4.7.0",
        "pkg:npm/node-fetch@2.6.1",
        "pkg:npm/parse-github-url@1.0.2",
        "pkg:npm/semver@6.3.0"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-validator-identifier@7.12.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-name@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-convert@1.9.3",
      "dependsOn": [
        "pkg:npm/color-name@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/ansi-styles@3.2.1",
      "dependsOn": [
        "pkg:npm/color-convert@1.9.3"
      ]
    },
    {
      "ref": "pkg:npm/escape-string-regexp@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-flag@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/supports-color@5.5.0",
      "dependsOn": [
        "pkg:npm/has-flag@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/chalk@2.4.2",
      "dependsOn": [
        "pkg:npm/ansi-styles@3.2.1",
        "pkg:npm/escape-string-regexp@1.0.5",
        "pkg:npm/supports-color@5.5.0"
      ]
    },
    {
      "ref": "pkg:npm/js-tokens@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/highlight@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-validator-identifier@7.12.11",
        "pkg:npm/chalk@2.4.2",
        "pkg:npm/js-tokens@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@babel/code-frame@7.12.11",
      "dependsOn": [
        "pkg:npm/@babel/highlight@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/fast-deep-equal@3.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-json-stable-stringify@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-schema-traverse@0.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/punycode@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uri-js@4.2.2",
      "dependsOn": [
        "pkg:npm/punycode@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/ajv@6.12.6",
      "dependsOn": [
        "pkg:npm/fast-deep-equal@3.1.1",
        "pkg:npm/fast-deep-equal@3.1.3",
        "pkg:npm/fast-json-stable-stringify@2.1.0",
        "pkg:npm/json-schema-traverse@0.4.1",
        "pkg:npm/uri-js@4.2.2",
        "pkg:npm/uri-js@4.4.1"
      ]
    },
    {
      "ref": "pkg:npm/ms@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@4.3.1",
      "dependsOn": [
        "pkg:npm/ms@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/acorn@7.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/acorn-jsx@5.3.1",
      "dependsOn": [
        "pkg:npm/acorn@7.4.1"
      ]
    },
    {
      "ref": "pkg:npm/eslint-visitor-keys@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/espree@7.3.1",
      "dependsOn": [
        "pkg:npm/acorn-jsx@5.3.1",
        "pkg:npm/acorn@7.4.1",
        "pkg:npm/eslint-visitor-keys@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/type-fest@0.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/globals@12.4.0",
      "dependsOn": [
        "pkg:npm/type-fest@0.8.1"
      ]
    },
    {
      "ref": "pkg:npm/ignore@4.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/callsites@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parent-module@1.0.1",
      "dependsOn": [
        "pkg:npm/callsites@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/resolve-from@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/import-fresh@3.3.0",
      "dependsOn": [
        "pkg:npm/parent-module@1.0.1",
        "pkg:npm/resolve-from@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/sprintf-js@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/argparse@1.0.10",
      "dependsOn": [
        "pkg:npm/sprintf-js@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/esprima@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/js-yaml@3.14.1",
      "dependsOn": [
        "pkg:npm/argparse@1.0.10",
        "pkg:npm/esprima@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash@4.17.21",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/balanced-match@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/concat-map@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/brace-expansion@1.1.11",
      "dependsOn": [
        "pkg:npm/balanced-match@1.0.0",
        "pkg:npm/concat-map@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/minimatch@3.0.4",
      "dependsOn": [
        "pkg:npm/brace-expansion@1.1.11"
      ]
    },
    {
      "ref": "pkg:npm/strip-json-comments@3.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@eslint/eslintrc@0.3.0",
      "dependsOn": [
        "pkg:npm/ajv@6.12.6",
        "pkg:npm/debug@4.3.1",
        "pkg:npm/espree@7.3.1",
        "pkg:npm/globals@12.4.0",
        "pkg:npm/ignore@4.0.6",
        "pkg:npm/import-fresh@3.3.0",
        "pkg:npm/js-yaml@3.14.1",
        "pkg:npm/lodash@4.17.21",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/strip-json-comments@3.1.1"
      ]
    },
    {
      "ref": "pkg:npm/@types/color-name@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-name@1.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-convert@2.0.1",
      "dependsOn": [
        "pkg:npm/color-name@1.1.4"
      ]
    },
    {
      "ref": "pkg:npm/ansi-styles@4.2.1",
      "dependsOn": [
        "pkg:npm/@types/color-name@1.1.1",
        "pkg:npm/color-convert@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/has-flag@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/supports-color@7.1.0",
      "dependsOn": [
        "pkg:npm/has-flag@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/chalk@4.0.0",
      "dependsOn": [
        "pkg:npm/ansi-styles@4.2.1",
        "pkg:npm/supports-color@7.1.0"
      ]
    },
    {
      "ref": "pkg:npm/path-key@3.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shebang-regex@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shebang-command@2.0.0",
      "dependsOn": [
        "pkg:npm/shebang-regex@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/isexe@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/which@2.0.2",
      "dependsOn": [
        "pkg:npm/isexe@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/cross-spawn@7.0.3",
      "dependsOn": [
        "pkg:npm/path-key@3.1.1",
        "pkg:npm/shebang-command@2.0.0",
        "pkg:npm/which@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/esutils@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/doctrine@3.0.0",
      "dependsOn": [
        "pkg:npm/esutils@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/ansi-colors@4.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/enquirer@2.3.6",
      "dependsOn": [
        "pkg:npm/ansi-colors@4.1.1"
      ]
    },
    {
      "ref": "pkg:npm/estraverse@5.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esrecurse@4.3.0",
      "dependsOn": [
        "pkg:npm/estraverse@5.2.0"
      ]
    },
    {
      "ref": "pkg:npm/estraverse@4.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eslint-scope@5.1.1",
      "dependsOn": [
        "pkg:npm/esrecurse@4.3.0",
        "pkg:npm/estraverse@4.3.0"
      ]
    },
    {
      "ref": "pkg:npm/eslint-utils@2.1.0",
      "dependsOn": [
        "pkg:npm/eslint-visitor-keys@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/eslint-visitor-keys@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esquery@1.4.0",
      "dependsOn": [
        "pkg:npm/estraverse@5.2.0"
      ]
    },
    {
      "ref": "pkg:npm/flatted@3.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fs.realpath@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wrappy@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/once@1.4.0",
      "dependsOn": [
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/inflight@1.0.6",
      "dependsOn": [
        "pkg:npm/once@1.4.0",
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/inherits@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-is-absolute@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob@7.1.6",
      "dependsOn": [
        "pkg:npm/fs.realpath@1.0.0",
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/once@1.4.0",
        "pkg:npm/path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/rimraf@3.0.2",
      "dependsOn": [
        "pkg:npm/glob@7.1.6"
      ]
    },
    {
      "ref": "pkg:npm/flat-cache@3.0.4",
      "dependsOn": [
        "pkg:npm/flatted@3.1.1",
        "pkg:npm/rimraf@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/file-entry-cache@6.0.1",
      "dependsOn": [
        "pkg:npm/flat-cache@3.0.4"
      ]
    },
    {
      "ref": "pkg:npm/functional-red-black-tree@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-extglob@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-glob@4.0.1",
      "dependsOn": [
        "pkg:npm/is-extglob@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/glob-parent@5.1.1",
      "dependsOn": [
        "pkg:npm/is-glob@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/imurmurhash@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-stable-stringify-without-jsonify@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/prelude-ls@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/type-check@0.4.0",
      "dependsOn": [
        "pkg:npm/prelude-ls@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/levn@0.4.1",
      "dependsOn": [
        "pkg:npm/prelude-ls@1.2.1",
        "pkg:npm/type-check@0.4.0"
      ]
    },
    {
      "ref": "pkg:npm/natural-compare@1.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/deep-is@0.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-levenshtein@2.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/word-wrap@1.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/optionator@0.9.1",
      "dependsOn": [
        "pkg:npm/deep-is@0.1.3",
        "pkg:npm/fast-levenshtein@2.0.6",
        "pkg:npm/levn@0.4.1",
        "pkg:npm/prelude-ls@1.2.1",
        "pkg:npm/type-check@0.4.0",
        "pkg:npm/word-wrap@1.2.3"
      ]
    },
    {
      "ref": "pkg:npm/progress@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/regexpp@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yallist@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lru-cache@6.0.0",
      "dependsOn": [
        "pkg:npm/yallist@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/semver@7.3.4",
      "dependsOn": [
        "pkg:npm/lru-cache@6.0.0"
      ]
    },
    {
      "ref": "pkg:npm/ansi-regex@5.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-ansi@6.0.0",
      "dependsOn": [
        "pkg:npm/ansi-regex@5.0.0"
      ]
    },
    {
      "ref": "pkg:npm/json-schema-traverse@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/require-from-string@2.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ajv@7.1.1",
      "dependsOn": [
        "pkg:npm/fast-deep-equal@3.1.1",
        "pkg:npm/json-schema-traverse@1.0.0",
        "pkg:npm/require-from-string@2.0.2",
        "pkg:npm/uri-js@4.2.2"
      ]
    },
    {
      "ref": "pkg:npm/ansi-styles@4.3.0",
      "dependsOn": [
        "pkg:npm/color-convert@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/astral-regex@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-fullwidth-code-point@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/slice-ansi@4.0.0",
      "dependsOn": [
        "pkg:npm/ansi-styles@4.3.0",
        "pkg:npm/astral-regex@2.0.0",
        "pkg:npm/is-fullwidth-code-point@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/emoji-regex@8.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string-width@4.2.0",
      "dependsOn": [
        "pkg:npm/emoji-regex@8.0.0",
        "pkg:npm/is-fullwidth-code-point@3.0.0",
        "pkg:npm/strip-ansi@6.0.0"
      ]
    },
    {
      "ref": "pkg:npm/table@6.0.7",
      "dependsOn": [
        "pkg:npm/ajv@7.1.1",
        "pkg:npm/lodash@4.17.21",
        "pkg:npm/slice-ansi@4.0.0",
        "pkg:npm/string-width@4.2.0"
      ]
    },
    {
      "ref": "pkg:npm/text-table@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/v8-compile-cache@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eslint@7.20.0",
      "dependsOn": [
        "pkg:npm/@babel/code-frame@7.12.11",
        "pkg:npm/@eslint/eslintrc@0.3.0",
        "pkg:npm/ajv@6.12.6",
        "pkg:npm/chalk@4.0.0",
        "pkg:npm/cross-spawn@7.0.3",
        "pkg:npm/debug@4.3.1",
        "pkg:npm/doctrine@3.0.0",
        "pkg:npm/enquirer@2.3.6",
        "pkg:npm/eslint-scope@5.1.1",
        "pkg:npm/eslint-utils@2.1.0",
        "pkg:npm/eslint-visitor-keys@2.0.0",
        "pkg:npm/espree@7.3.1",
        "pkg:npm/esquery@1.4.0",
        "pkg:npm/esutils@2.0.3",
        "pkg:npm/file-entry-cache@6.0.1",
        "pkg:npm/functional-red-black-tree@1.0.1",
        "pkg:npm/glob-parent@5.1.1",
        "pkg:npm/globals@12.4.0",
        "pkg:npm/ignore@4.0.6",
        "pkg:npm/import-fresh@3.3.0",
        "pkg:npm/imurmurhash@0.1.4",
        "pkg:npm/is-glob@4.0.1",
        "pkg:npm/js-yaml@3.14.1",
        "pkg:npm/json-stable-stringify-without-jsonify@1.0.1",
        "pkg:npm/levn@0.4.1",
        "pkg:npm/lodash@4.17.21",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/natural-compare@1.4.0",
        "pkg:npm/optionator@0.9.1",
        "pkg:npm/progress@2.0.3",
        "pkg:npm/regexpp@3.1.0",
        "pkg:npm/semver@7.3.4",
        "pkg:npm/strip-ansi@6.0.0",
        "pkg:npm/strip-json-comments@3.1.1",
        "pkg:npm/table@6.0.7",
        "pkg:npm/text-table@0.2.0",
        "pkg:npm/v8-compile-cache@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/function-bind@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has@1.0.3",
      "dependsOn": [
        "pkg:npm/function-bind@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/has-symbols@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-intrinsic@1.1.1",
      "dependsOn": [
        "pkg:npm/function-bind@1.1.1",
        "pkg:npm/has-symbols@1.0.1",
        "pkg:npm/has@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/call-bind@1.0.2",
      "dependsOn": [
        "pkg:npm/function-bind@1.1.1",
        "pkg:npm/get-intrinsic@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/object-keys@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/define-properties@1.1.3",
      "dependsOn": [
        "pkg:npm/object-keys@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/is-callable@1.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-date-object@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-symbol@1.0.3",
      "dependsOn": [
        "pkg:npm/has-symbols@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/es-to-primitive@1.2.1",
      "dependsOn": [
        "pkg:npm/is-callable@1.2.3",
        "pkg:npm/is-date-object@1.0.2",
        "pkg:npm/is-symbol@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/is-negative-zero@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-regex@1.1.2",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.2",
        "pkg:npm/has-symbols@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/object-inspect@1.9.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object.assign@4.1.2",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.2",
        "pkg:npm/define-properties@1.1.3",
        "pkg:npm/has-symbols@1.0.1",
        "pkg:npm/object-keys@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/string.prototype.trimend@1.0.3",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.2",
        "pkg:npm/define-properties@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/string.prototype.trimstart@1.0.3",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.2",
        "pkg:npm/define-properties@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/es-abstract@1.18.0-next.2",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.2",
        "pkg:npm/es-to-primitive@1.2.1",
        "pkg:npm/function-bind@1.1.1",
        "pkg:npm/get-intrinsic@1.1.1",
        "pkg:npm/has-symbols@1.0.1",
        "pkg:npm/has@1.0.3",
        "pkg:npm/is-callable@1.2.3",
        "pkg:npm/is-negative-zero@2.0.1",
        "pkg:npm/is-regex@1.1.2",
        "pkg:npm/object-inspect@1.9.0",
        "pkg:npm/object-keys@1.1.1",
        "pkg:npm/object.assign@4.1.2",
        "pkg:npm/string.prototype.trimend@1.0.3",
        "pkg:npm/string.prototype.trimstart@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/is-string@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-includes@3.1.3",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.2",
        "pkg:npm/define-properties@1.1.3",
        "pkg:npm/es-abstract@1.18.0-next.2",
        "pkg:npm/get-intrinsic@1.1.1",
        "pkg:npm/is-string@1.0.5"
      ]
    },
    {
      "ref": "pkg:npm/array.prototype.flat@1.2.4",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.2",
        "pkg:npm/define-properties@1.1.3",
        "pkg:npm/es-abstract@1.18.0-next.2"
      ]
    },
    {
      "ref": "pkg:npm/contains-path@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ms@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@2.6.9",
      "dependsOn": [
        "pkg:npm/ms@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/isarray@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/doctrine@1.5.0",
      "dependsOn": [
        "pkg:npm/esutils@2.0.3",
        "pkg:npm/isarray@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-core-module@2.2.0",
      "dependsOn": [
        "pkg:npm/has@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/path-parse@1.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/resolve@1.20.0",
      "dependsOn": [
        "pkg:npm/is-core-module@2.2.0",
        "pkg:npm/path-parse@1.0.6"
      ]
    },
    {
      "ref": "pkg:npm/eslint-import-resolver-node@0.3.4",
      "dependsOn": [
        "pkg:npm/debug@2.6.9",
        "pkg:npm/resolve@1.20.0"
      ]
    },
    {
      "ref": "pkg:npm/p-try@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/p-limit@1.3.0",
      "dependsOn": [
        "pkg:npm/p-try@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/p-locate@2.0.0",
      "dependsOn": [
        "pkg:npm/p-limit@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/path-exists@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/locate-path@2.0.0",
      "dependsOn": [
        "pkg:npm/p-locate@2.0.0",
        "pkg:npm/path-exists@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/find-up@2.1.0",
      "dependsOn": [
        "pkg:npm/locate-path@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/pkg-dir@2.0.0",
      "dependsOn": [
        "pkg:npm/find-up@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/eslint-module-utils@2.6.0",
      "dependsOn": [
        "pkg:npm/debug@2.6.9",
        "pkg:npm/pkg-dir@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/object.values@1.1.2",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.2",
        "pkg:npm/define-properties@1.1.3",
        "pkg:npm/es-abstract@1.18.0-next.2",
        "pkg:npm/has@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/graceful-fs@4.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-arrayish@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/error-ex@1.3.2",
      "dependsOn": [
        "pkg:npm/is-arrayish@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/parse-json@2.2.0",
      "dependsOn": [
        "pkg:npm/error-ex@1.3.2"
      ]
    },
    {
      "ref": "pkg:npm/pify@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-bom@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/load-json-file@2.0.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.3",
        "pkg:npm/parse-json@2.2.0",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/strip-bom@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/hosted-git-info@2.8.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/semver@5.7.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/spdx-exceptions@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/spdx-license-ids@3.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/spdx-expression-parse@3.0.1",
      "dependsOn": [
        "pkg:npm/spdx-exceptions@2.3.0",
        "pkg:npm/spdx-license-ids@3.0.7"
      ]
    },
    {
      "ref": "pkg:npm/spdx-correct@3.1.1",
      "dependsOn": [
        "pkg:npm/spdx-expression-parse@3.0.1",
        "pkg:npm/spdx-license-ids@3.0.7"
      ]
    },
    {
      "ref": "pkg:npm/validate-npm-package-license@3.0.4",
      "dependsOn": [
        "pkg:npm/spdx-correct@3.1.1",
        "pkg:npm/spdx-expression-parse@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/normalize-package-data@2.5.0",
      "dependsOn": [
        "pkg:npm/hosted-git-info@2.8.8",
        "pkg:npm/resolve@1.20.0",
        "pkg:npm/semver@5.7.1",
        "pkg:npm/validate-npm-package-license@3.0.4"
      ]
    },
    {
      "ref": "pkg:npm/path-type@2.0.0",
      "dependsOn": [
        "pkg:npm/pify@2.3.0"
      ]
    },
    {
      "ref": "pkg:npm/read-pkg@2.0.0",
      "dependsOn": [
        "pkg:npm/load-json-file@2.0.0",
        "pkg:npm/normalize-package-data@2.5.0",
        "pkg:npm/path-type@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/read-pkg-up@2.0.0",
      "dependsOn": [
        "pkg:npm/find-up@2.1.0",
        "pkg:npm/read-pkg@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@types/json5@0.0.29",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json5@1.0.1",
      "dependsOn": [
        "pkg:npm/minimist@1.2.5"
      ]
    },
    {
      "ref": "pkg:npm/tsconfig-paths@3.9.0",
      "dependsOn": [
        "pkg:npm/@types/json5@0.0.29",
        "pkg:npm/json5@1.0.1",
        "pkg:npm/minimist@1.2.5",
        "pkg:npm/strip-bom@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/eslint-plugin-import@2.22.1",
      "dependsOn": [
        "pkg:npm/array-includes@3.1.3",
        "pkg:npm/array.prototype.flat@1.2.4",
        "pkg:npm/contains-path@0.1.0",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/doctrine@1.5.0",
        "pkg:npm/eslint-import-resolver-node@0.3.4",
        "pkg:npm/eslint-module-utils@2.6.0",
        "pkg:npm/eslint@7.20.0",
        "pkg:npm/has@1.0.3",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/object.values@1.1.2",
        "pkg:npm/read-pkg-up@2.0.0",
        "pkg:npm/resolve@1.20.0",
        "pkg:npm/tsconfig-paths@3.9.0"
      ]
    },
    {
      "ref": "pkg:npm/confusing-browser-globals@1.0.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object.entries@1.1.3",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.2",
        "pkg:npm/define-properties@1.1.3",
        "pkg:npm/es-abstract@1.18.0-next.2",
        "pkg:npm/has@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/eslint-config-airbnb-base@14.2.1",
      "dependsOn": [
        "pkg:npm/confusing-browser-globals@1.0.10",
        "pkg:npm/eslint-plugin-import@2.22.1",
        "pkg:npm/eslint@7.20.0",
        "pkg:npm/object.assign@4.1.2",
        "pkg:npm/object.entries@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/at-least-node@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/universalify@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsonfile@6.1.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.3",
        "pkg:npm/universalify@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/fs-extra@9.1.0",
      "dependsOn": [
        "pkg:npm/at-least-node@1.0.0",
        "pkg:npm/graceful-fs@4.2.3",
        "pkg:npm/jsonfile@6.1.0",
        "pkg:npm/universalify@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@ungap/promise-all-settled@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/browser-stdout@1.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/normalize-path@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/picomatch@2.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/anymatch@3.1.1",
      "dependsOn": [
        "pkg:npm/normalize-path@3.0.0",
        "pkg:npm/picomatch@2.2.2"
      ]
    },
    {
      "ref": "pkg:npm/is-number@7.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/to-regex-range@5.0.1",
      "dependsOn": [
        "pkg:npm/is-number@7.0.0"
      ]
    },
    {
      "ref": "pkg:npm/fill-range@7.0.1",
      "dependsOn": [
        "pkg:npm/to-regex-range@5.0.1"
      ]
    },
    {
      "ref": "pkg:npm/braces@3.0.2",
      "dependsOn": [
        "pkg:npm/fill-range@7.0.1"
      ]
    },
    {
      "ref": "pkg:npm/binary-extensions@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-binary-path@2.1.0",
      "dependsOn": [
        "pkg:npm/binary-extensions@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/readdirp@3.5.0",
      "dependsOn": [
        "pkg:npm/picomatch@2.2.2"
      ]
    },
    {
      "ref": "pkg:npm/fsevents@2.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/chokidar@3.5.1",
      "dependsOn": [
        "pkg:npm/anymatch@3.1.1",
        "pkg:npm/braces@3.0.2",
        "pkg:npm/fsevents@2.3.2",
        "pkg:npm/glob-parent@5.1.1",
        "pkg:npm/is-binary-path@2.1.0",
        "pkg:npm/is-glob@4.0.1",
        "pkg:npm/normalize-path@3.0.0",
        "pkg:npm/readdirp@3.5.0"
      ]
    },
    {
      "ref": "pkg:npm/diff@5.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/escape-string-regexp@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yocto-queue@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/p-limit@3.1.0",
      "dependsOn": [
        "pkg:npm/yocto-queue@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/p-locate@5.0.0",
      "dependsOn": [
        "pkg:npm/p-limit@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/locate-path@6.0.0",
      "dependsOn": [
        "pkg:npm/p-locate@5.0.0"
      ]
    },
    {
      "ref": "pkg:npm/path-exists@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/find-up@5.0.0",
      "dependsOn": [
        "pkg:npm/locate-path@6.0.0",
        "pkg:npm/path-exists@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/growl@1.10.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/he@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/argparse@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/js-yaml@4.0.0",
      "dependsOn": [
        "pkg:npm/argparse@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/log-symbols@4.0.0",
      "dependsOn": [
        "pkg:npm/chalk@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/ms@2.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/nanoid@3.1.20",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/safe-buffer@5.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/randombytes@2.1.0",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.1.2",
        "pkg:npm/safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "pkg:npm/serialize-javascript@5.0.1",
      "dependsOn": [
        "pkg:npm/randombytes@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/supports-color@8.1.1",
      "dependsOn": [
        "pkg:npm/has-flag@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-fullwidth-code-point@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-regex@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-ansi@4.0.0",
      "dependsOn": [
        "pkg:npm/ansi-regex@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/string-width@2.1.1",
      "dependsOn": [
        "pkg:npm/is-fullwidth-code-point@2.0.0",
        "pkg:npm/strip-ansi@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/wide-align@1.1.3",
      "dependsOn": [
        "pkg:npm/string-width@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/workerpool@6.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wrap-ansi@7.0.0",
      "dependsOn": [
        "pkg:npm/ansi-styles@4.3.0",
        "pkg:npm/string-width@4.2.0",
        "pkg:npm/strip-ansi@6.0.0"
      ]
    },
    {
      "ref": "pkg:npm/cliui@7.0.4",
      "dependsOn": [
        "pkg:npm/string-width@4.2.0",
        "pkg:npm/strip-ansi@6.0.0",
        "pkg:npm/wrap-ansi@7.0.0"
      ]
    },
    {
      "ref": "pkg:npm/escalade@3.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-caller-file@2.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/require-directory@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/y18n@5.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs-parser@20.2.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs@16.2.0",
      "dependsOn": [
        "pkg:npm/cliui@7.0.4",
        "pkg:npm/escalade@3.1.1",
        "pkg:npm/get-caller-file@2.0.5",
        "pkg:npm/require-directory@2.1.1",
        "pkg:npm/string-width@4.2.0",
        "pkg:npm/y18n@5.0.5",
        "pkg:npm/yargs-parser@20.2.4",
        "pkg:npm/yargs-parser@20.2.6"
      ]
    },
    {
      "ref": "pkg:npm/camelcase@6.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/decamelize@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/flat@5.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-plain-obj@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs-unparser@2.0.0",
      "dependsOn": [
        "pkg:npm/camelcase@6.2.0",
        "pkg:npm/decamelize@4.0.0",
        "pkg:npm/flat@5.0.2",
        "pkg:npm/is-plain-obj@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/mocha@8.3.0",
      "dependsOn": [
        "pkg:npm/@ungap/promise-all-settled@1.1.2",
        "pkg:npm/ansi-colors@4.1.1",
        "pkg:npm/browser-stdout@1.3.1",
        "pkg:npm/chokidar@3.5.1",
        "pkg:npm/debug@4.3.1",
        "pkg:npm/diff@5.0.0",
        "pkg:npm/escape-string-regexp@4.0.0",
        "pkg:npm/find-up@5.0.0",
        "pkg:npm/glob@7.1.6",
        "pkg:npm/growl@1.10.5",
        "pkg:npm/he@1.2.0",
        "pkg:npm/js-yaml@4.0.0",
        "pkg:npm/log-symbols@4.0.0",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/ms@2.1.3",
        "pkg:npm/nanoid@3.1.20",
        "pkg:npm/serialize-javascript@5.0.1",
        "pkg:npm/strip-json-comments@3.1.1",
        "pkg:npm/supports-color@8.1.1",
        "pkg:npm/which@2.0.2",
        "pkg:npm/wide-align@1.1.3",
        "pkg:npm/workerpool@6.1.0",
        "pkg:npm/yargs-parser@20.2.4",
        "pkg:npm/yargs-unparser@2.0.0",
        "pkg:npm/yargs@16.2.0"
      ]
    },
    {
      "ref": "pkg:npm/@types/estree@0.0.46",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/json-schema@7.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/eslint@7.2.6",
      "dependsOn": [
        "pkg:npm/@types/estree@0.0.46",
        "pkg:npm/@types/json-schema@7.0.7"
      ]
    },
    {
      "ref": "pkg:npm/@types/eslint-scope@3.7.0",
      "dependsOn": [
        "pkg:npm/@types/eslint@7.2.6",
        "pkg:npm/@types/estree@0.0.46"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/floating-point-hex-parser@1.11.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@webassemblyjs/helper-api-error@1.11.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@xtuc/long@4.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@webassemblyjs/helper-numbers@1.11.0",
      "dependsOn": [
        "pkg:npm/@webassemblyjs/floating-point-hex-parser@1.11.0",
        "pkg:npm/@webassemblyjs/helper-api-error@1.11.0",
        "pkg:npm/@xtuc/long@4.2.2"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/helper-wasm-bytecode@1.11.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@webassemblyjs/ast@1.11.0",
      "dependsOn": [
        "pkg:npm/@webassemblyjs/helper-numbers@1.11.0",
        "pkg:npm/@webassemblyjs/helper-wasm-bytecode@1.11.0"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/helper-buffer@1.11.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@xtuc/ieee754@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@webassemblyjs/ieee754@1.11.0",
      "dependsOn": [
        "pkg:npm/@xtuc/ieee754@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/leb128@1.11.0",
      "dependsOn": [
        "pkg:npm/@xtuc/long@4.2.2"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/utf8@1.11.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@webassemblyjs/wasm-gen@1.11.0",
      "dependsOn": [
        "pkg:npm/@webassemblyjs/ast@1.11.0",
        "pkg:npm/@webassemblyjs/helper-wasm-bytecode@1.11.0",
        "pkg:npm/@webassemblyjs/ieee754@1.11.0",
        "pkg:npm/@webassemblyjs/leb128@1.11.0",
        "pkg:npm/@webassemblyjs/utf8@1.11.0"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/helper-wasm-section@1.11.0",
      "dependsOn": [
        "pkg:npm/@webassemblyjs/ast@1.11.0",
        "pkg:npm/@webassemblyjs/helper-buffer@1.11.0",
        "pkg:npm/@webassemblyjs/helper-wasm-bytecode@1.11.0",
        "pkg:npm/@webassemblyjs/wasm-gen@1.11.0"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/wasm-parser@1.11.0",
      "dependsOn": [
        "pkg:npm/@webassemblyjs/ast@1.11.0",
        "pkg:npm/@webassemblyjs/helper-api-error@1.11.0",
        "pkg:npm/@webassemblyjs/helper-wasm-bytecode@1.11.0",
        "pkg:npm/@webassemblyjs/ieee754@1.11.0",
        "pkg:npm/@webassemblyjs/leb128@1.11.0",
        "pkg:npm/@webassemblyjs/utf8@1.11.0"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/wasm-opt@1.11.0",
      "dependsOn": [
        "pkg:npm/@webassemblyjs/ast@1.11.0",
        "pkg:npm/@webassemblyjs/helper-buffer@1.11.0",
        "pkg:npm/@webassemblyjs/wasm-gen@1.11.0",
        "pkg:npm/@webassemblyjs/wasm-parser@1.11.0"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/wast-printer@1.11.0",
      "dependsOn": [
        "pkg:npm/@webassemblyjs/ast@1.11.0",
        "pkg:npm/@xtuc/long@4.2.2"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/wasm-edit@1.11.0",
      "dependsOn": [
        "pkg:npm/@webassemblyjs/ast@1.11.0",
        "pkg:npm/@webassemblyjs/helper-buffer@1.11.0",
        "pkg:npm/@webassemblyjs/helper-wasm-bytecode@1.11.0",
        "pkg:npm/@webassemblyjs/helper-wasm-section@1.11.0",
        "pkg:npm/@webassemblyjs/wasm-gen@1.11.0",
        "pkg:npm/@webassemblyjs/wasm-opt@1.11.0",
        "pkg:npm/@webassemblyjs/wasm-parser@1.11.0",
        "pkg:npm/@webassemblyjs/wast-printer@1.11.0"
      ]
    },
    {
      "ref": "pkg:npm/acorn@8.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/caniuse-lite@1.0.30001191",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/colorette@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/electron-to-chromium@1.3.671",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/node-releases@1.1.70",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/browserslist@4.16.3",
      "dependsOn": [
        "pkg:npm/caniuse-lite@1.0.30001191",
        "pkg:npm/colorette@1.2.1",
        "pkg:npm/electron-to-chromium@1.3.671",
        "pkg:npm/escalade@3.1.1",
        "pkg:npm/node-releases@1.1.70"
      ]
    },
    {
      "ref": "pkg:npm/tslib@1.13.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/chrome-trace-event@1.0.2",
      "dependsOn": [
        "pkg:npm/tslib@1.13.0",
        "pkg:npm/tslib@1.14.1"
      ]
    },
    {
      "ref": "pkg:npm/graceful-fs@4.2.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tapable@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/enhanced-resolve@5.7.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.6",
        "pkg:npm/tapable@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/es-module-lexer@0.3.26",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/events@3.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob-to-regexp@0.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-parse-better-errors@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/loader-runner@4.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-db@1.46.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-types@2.1.29",
      "dependsOn": [
        "pkg:npm/mime-db@1.46.0"
      ]
    },
    {
      "ref": "pkg:npm/ajv-keywords@3.5.2",
      "dependsOn": [
        "pkg:npm/ajv@6.12.6"
      ]
    },
    {
      "ref": "pkg:npm/schema-utils@3.0.0",
      "dependsOn": [
        "pkg:npm/@types/json-schema@7.0.7",
        "pkg:npm/ajv-keywords@3.5.2",
        "pkg:npm/ajv@6.12.6"
      ]
    },
    {
      "ref": "pkg:npm/@types/node@14.14.31",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/merge-stream@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/supports-color@7.2.0",
      "dependsOn": [
        "pkg:npm/has-flag@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/jest-worker@26.6.2",
      "dependsOn": [
        "pkg:npm/@types/node@14.14.31",
        "pkg:npm/merge-stream@2.0.0",
        "pkg:npm/supports-color@7.2.0"
      ]
    },
    {
      "ref": "pkg:npm/commander@2.20.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map@0.7.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffer-from@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map-support@0.5.19",
      "dependsOn": [
        "pkg:npm/buffer-from@1.1.1",
        "pkg:npm/source-map@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/terser@5.6.0",
      "dependsOn": [
        "pkg:npm/commander@2.20.3",
        "pkg:npm/source-map-support@0.5.19",
        "pkg:npm/source-map@0.7.3"
      ]
    },
    {
      "ref": "pkg:npm/terser-webpack-plugin@5.1.1",
      "dependsOn": [
        "pkg:npm/jest-worker@26.6.2",
        "pkg:npm/p-limit@3.1.0",
        "pkg:npm/schema-utils@3.0.0",
        "pkg:npm/serialize-javascript@5.0.1",
        "pkg:npm/source-map@0.6.1",
        "pkg:npm/terser@5.6.0",
        "pkg:npm/webpack@5.23.0"
      ]
    },
    {
      "ref": "pkg:npm/watchpack@2.1.1",
      "dependsOn": [
        "pkg:npm/glob-to-regexp@0.4.1",
        "pkg:npm/graceful-fs@4.2.3",
        "pkg:npm/graceful-fs@4.2.6"
      ]
    },
    {
      "ref": "pkg:npm/source-list-map@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/webpack-sources@2.2.0",
      "dependsOn": [
        "pkg:npm/source-list-map@2.0.1",
        "pkg:npm/source-map@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/webpack@5.23.0",
      "dependsOn": [
        "pkg:npm/@types/eslint-scope@3.7.0",
        "pkg:npm/@types/estree@0.0.46",
        "pkg:npm/@webassemblyjs/ast@1.11.0",
        "pkg:npm/@webassemblyjs/wasm-edit@1.11.0",
        "pkg:npm/@webassemblyjs/wasm-parser@1.11.0",
        "pkg:npm/acorn@8.0.5",
        "pkg:npm/browserslist@4.16.3",
        "pkg:npm/chrome-trace-event@1.0.2",
        "pkg:npm/enhanced-resolve@5.7.0",
        "pkg:npm/es-module-lexer@0.3.26",
        "pkg:npm/eslint-scope@5.1.1",
        "pkg:npm/events@3.2.0",
        "pkg:npm/glob-to-regexp@0.4.1",
        "pkg:npm/graceful-fs@4.2.6",
        "pkg:npm/json-parse-better-errors@1.0.2",
        "pkg:npm/loader-runner@4.2.0",
        "pkg:npm/mime-types@2.1.29",
        "pkg:npm/neo-async@2.6.2",
        "pkg:npm/schema-utils@3.0.0",
        "pkg:npm/tapable@2.2.0",
        "pkg:npm/terser-webpack-plugin@5.1.1",
        "pkg:npm/watchpack@2.1.1",
        "pkg:npm/webpack-sources@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/case-sensitive-paths-webpack-plugin@2.4.0",
      "dependsOn": [
        "pkg:npm/auto-changelog@2.2.1",
        "pkg:npm/eslint-config-airbnb-base@14.2.1",
        "pkg:npm/eslint-plugin-import@2.22.1",
        "pkg:npm/eslint@7.20.0",
        "pkg:npm/fs-extra@9.1.0",
        "pkg:npm/mocha@8.3.0",
        "pkg:npm/webpack@5.23.0"
      ]
    },
    {
      "ref": "pkg:npm/@babel/code-frame@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/highlight@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/to-fast-properties@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/types@7.12.17",
      "dependsOn": [
        "pkg:npm/@babel/helper-validator-identifier@7.12.11",
        "pkg:npm/lodash@4.17.21",
        "pkg:npm/to-fast-properties@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/jsesc@2.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map@0.5.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/generator@7.12.17",
      "dependsOn": [
        "pkg:npm/@babel/types@7.12.17",
        "pkg:npm/jsesc@2.5.2",
        "pkg:npm/source-map@0.5.7"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-module-imports@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/types@7.12.17"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-member-expression-to-functions@7.12.17",
      "dependsOn": [
        "pkg:npm/@babel/types@7.12.17"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-optimise-call-expression@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/types@7.12.17"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-get-function-arity@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/types@7.12.17"
      ]
    },
    {
      "ref": "pkg:npm/@babel/parser@7.12.17",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/template@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/code-frame@7.12.13",
        "pkg:npm/@babel/parser@7.12.17",
        "pkg:npm/@babel/types@7.12.17"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-function-name@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-get-function-arity@7.12.13",
        "pkg:npm/@babel/template@7.12.13",
        "pkg:npm/@babel/types@7.12.17"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-split-export-declaration@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/types@7.12.17"
      ]
    },
    {
      "ref": "pkg:npm/globals@11.12.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/traverse@7.12.17",
      "dependsOn": [
        "pkg:npm/@babel/code-frame@7.12.13",
        "pkg:npm/@babel/generator@7.12.17",
        "pkg:npm/@babel/helper-function-name@7.12.13",
        "pkg:npm/@babel/helper-split-export-declaration@7.12.13",
        "pkg:npm/@babel/parser@7.12.17",
        "pkg:npm/@babel/types@7.12.17",
        "pkg:npm/debug@4.3.1",
        "pkg:npm/globals@11.12.0",
        "pkg:npm/lodash@4.17.21"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-replace-supers@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-member-expression-to-functions@7.12.17",
        "pkg:npm/@babel/helper-optimise-call-expression@7.12.13",
        "pkg:npm/@babel/traverse@7.12.17",
        "pkg:npm/@babel/types@7.12.17"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-simple-access@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/types@7.12.17"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-module-transforms@7.12.17",
      "dependsOn": [
        "pkg:npm/@babel/helper-module-imports@7.12.13",
        "pkg:npm/@babel/helper-replace-supers@7.12.13",
        "pkg:npm/@babel/helper-simple-access@7.12.13",
        "pkg:npm/@babel/helper-split-export-declaration@7.12.13",
        "pkg:npm/@babel/helper-validator-identifier@7.12.11",
        "pkg:npm/@babel/template@7.12.13",
        "pkg:npm/@babel/traverse@7.12.17",
        "pkg:npm/@babel/types@7.12.17",
        "pkg:npm/lodash@4.17.21"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helpers@7.12.17",
      "dependsOn": [
        "pkg:npm/@babel/template@7.12.13",
        "pkg:npm/@babel/traverse@7.12.17",
        "pkg:npm/@babel/types@7.12.17"
      ]
    },
    {
      "ref": "pkg:npm/safe-buffer@5.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/convert-source-map@1.7.0",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "pkg:npm/gensync@1.0.0-beta.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json5@2.2.0",
      "dependsOn": [
        "pkg:npm/minimist@1.2.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/core@7.12.17",
      "dependsOn": [
        "pkg:npm/@babel/code-frame@7.12.13",
        "pkg:npm/@babel/generator@7.12.17",
        "pkg:npm/@babel/helper-module-transforms@7.12.17",
        "pkg:npm/@babel/helpers@7.12.17",
        "pkg:npm/@babel/parser@7.12.17",
        "pkg:npm/@babel/template@7.12.13",
        "pkg:npm/@babel/traverse@7.12.17",
        "pkg:npm/@babel/types@7.12.17",
        "pkg:npm/convert-source-map@1.7.0",
        "pkg:npm/debug@4.3.1",
        "pkg:npm/gensync@1.0.0-beta.2",
        "pkg:npm/json5@2.2.0",
        "pkg:npm/lodash@4.17.21",
        "pkg:npm/semver@5.7.1",
        "pkg:npm/source-map@0.5.7"
      ]
    },
    {
      "ref": "pkg:npm/@babel/compat-data@7.12.13",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/helper-validator-option@7.12.17",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/helper-compilation-targets@7.12.17",
      "dependsOn": [
        "pkg:npm/@babel/compat-data@7.12.13",
        "pkg:npm/@babel/helper-validator-option@7.12.17",
        "pkg:npm/browserslist@4.16.3",
        "pkg:npm/semver@5.7.1"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-plugin-utils@7.12.13",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/helper-annotate-as-pure@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/types@7.12.17"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-wrap-function@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-function-name@7.12.13",
        "pkg:npm/@babel/template@7.12.13",
        "pkg:npm/@babel/traverse@7.12.17",
        "pkg:npm/@babel/types@7.12.17"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-remap-async-to-generator@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-annotate-as-pure@7.12.13",
        "pkg:npm/@babel/helper-wrap-function@7.12.13",
        "pkg:npm/@babel/types@7.12.17"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-syntax-async-generators@7.8.4",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-proposal-async-generator-functions@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13",
        "pkg:npm/@babel/helper-remap-async-to-generator@7.12.13",
        "pkg:npm/@babel/plugin-syntax-async-generators@7.8.4"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-create-class-features-plugin@7.12.17",
      "dependsOn": [
        "pkg:npm/@babel/helper-function-name@7.12.13",
        "pkg:npm/@babel/helper-member-expression-to-functions@7.12.17",
        "pkg:npm/@babel/helper-optimise-call-expression@7.12.13",
        "pkg:npm/@babel/helper-replace-supers@7.12.13",
        "pkg:npm/@babel/helper-split-export-declaration@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-proposal-class-properties@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-create-class-features-plugin@7.12.17",
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-syntax-dynamic-import@7.8.3",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-proposal-dynamic-import@7.12.17",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13",
        "pkg:npm/@babel/plugin-syntax-dynamic-import@7.8.3"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-syntax-export-namespace-from@7.8.3",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-proposal-export-namespace-from@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13",
        "pkg:npm/@babel/plugin-syntax-export-namespace-from@7.8.3"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-syntax-json-strings@7.8.3",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-proposal-json-strings@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13",
        "pkg:npm/@babel/plugin-syntax-json-strings@7.8.3"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-syntax-logical-assignment-operators@7.10.4",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-proposal-logical-assignment-operators@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13",
        "pkg:npm/@babel/plugin-syntax-logical-assignment-operators@7.10.4"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-syntax-nullish-coalescing-operator@7.8.3",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-proposal-nullish-coalescing-operator@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13",
        "pkg:npm/@babel/plugin-syntax-nullish-coalescing-operator@7.8.3"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-syntax-numeric-separator@7.10.4",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-proposal-numeric-separator@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13",
        "pkg:npm/@babel/plugin-syntax-numeric-separator@7.10.4"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-syntax-object-rest-spread@7.8.3",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-parameters@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-proposal-object-rest-spread@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13",
        "pkg:npm/@babel/plugin-syntax-object-rest-spread@7.8.3",
        "pkg:npm/@babel/plugin-transform-parameters@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-syntax-optional-catch-binding@7.8.3",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-proposal-optional-catch-binding@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13",
        "pkg:npm/@babel/plugin-syntax-optional-catch-binding@7.8.3"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-skip-transparent-expression-wrappers@7.12.1",
      "dependsOn": [
        "pkg:npm/@babel/types@7.12.17"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-syntax-optional-chaining@7.8.3",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-proposal-optional-chaining@7.12.17",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13",
        "pkg:npm/@babel/helper-skip-transparent-expression-wrappers@7.12.1",
        "pkg:npm/@babel/plugin-syntax-optional-chaining@7.8.3"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-proposal-private-methods@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-create-class-features-plugin@7.12.17",
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/regenerate@1.4.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/regenerate-unicode-properties@8.2.0",
      "dependsOn": [
        "pkg:npm/regenerate@1.4.2"
      ]
    },
    {
      "ref": "pkg:npm/regjsgen@0.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsesc@0.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/regjsparser@0.6.7",
      "dependsOn": [
        "pkg:npm/jsesc@0.5.0"
      ]
    },
    {
      "ref": "pkg:npm/unicode-canonical-property-names-ecmascript@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/unicode-property-aliases-ecmascript@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/unicode-match-property-ecmascript@1.0.4",
      "dependsOn": [
        "pkg:npm/unicode-canonical-property-names-ecmascript@1.0.4",
        "pkg:npm/unicode-property-aliases-ecmascript@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/unicode-match-property-value-ecmascript@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/regexpu-core@4.7.1",
      "dependsOn": [
        "pkg:npm/regenerate-unicode-properties@8.2.0",
        "pkg:npm/regenerate@1.4.2",
        "pkg:npm/regjsgen@0.5.2",
        "pkg:npm/regjsparser@0.6.7",
        "pkg:npm/unicode-match-property-ecmascript@1.0.4",
        "pkg:npm/unicode-match-property-value-ecmascript@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-create-regexp-features-plugin@7.12.17",
      "dependsOn": [
        "pkg:npm/@babel/helper-annotate-as-pure@7.12.13",
        "pkg:npm/regexpu-core@4.7.1"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-proposal-unicode-property-regex@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-create-regexp-features-plugin@7.12.17",
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-syntax-class-properties@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-syntax-top-level-await@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-arrow-functions@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-async-to-generator@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-module-imports@7.12.13",
        "pkg:npm/@babel/helper-plugin-utils@7.12.13",
        "pkg:npm/@babel/helper-remap-async-to-generator@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-block-scoped-functions@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-block-scoping@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-classes@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-annotate-as-pure@7.12.13",
        "pkg:npm/@babel/helper-function-name@7.12.13",
        "pkg:npm/@babel/helper-optimise-call-expression@7.12.13",
        "pkg:npm/@babel/helper-plugin-utils@7.12.13",
        "pkg:npm/@babel/helper-replace-supers@7.12.13",
        "pkg:npm/@babel/helper-split-export-declaration@7.12.13",
        "pkg:npm/globals@11.12.0"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-computed-properties@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-destructuring@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-dotall-regex@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-create-regexp-features-plugin@7.12.17",
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-duplicate-keys@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-explode-assignable-expression@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/types@7.12.17"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-builder-binary-assignment-operator-visitor@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-explode-assignable-expression@7.12.13",
        "pkg:npm/@babel/types@7.12.17"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-exponentiation-operator@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-builder-binary-assignment-operator-visitor@7.12.13",
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-for-of@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-function-name@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-function-name@7.12.13",
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-literals@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-member-expression-literals@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-dynamic-import-node@2.3.3",
      "dependsOn": [
        "pkg:npm/object.assign@4.1.2"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-modules-amd@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-module-transforms@7.12.17",
        "pkg:npm/@babel/helper-plugin-utils@7.12.13",
        "pkg:npm/babel-plugin-dynamic-import-node@2.3.3"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-modules-commonjs@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-module-transforms@7.12.17",
        "pkg:npm/@babel/helper-plugin-utils@7.12.13",
        "pkg:npm/@babel/helper-simple-access@7.12.13",
        "pkg:npm/babel-plugin-dynamic-import-node@2.3.3"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-hoist-variables@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/types@7.12.17"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-modules-systemjs@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-hoist-variables@7.12.13",
        "pkg:npm/@babel/helper-module-transforms@7.12.17",
        "pkg:npm/@babel/helper-plugin-utils@7.12.13",
        "pkg:npm/@babel/helper-validator-identifier@7.12.11",
        "pkg:npm/babel-plugin-dynamic-import-node@2.3.3"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-modules-umd@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-module-transforms@7.12.17",
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-named-capturing-groups-regex@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-create-regexp-features-plugin@7.12.17"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-new-target@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-object-super@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13",
        "pkg:npm/@babel/helper-replace-supers@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-property-literals@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/regenerator-runtime@0.13.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/runtime@7.12.18",
      "dependsOn": [
        "pkg:npm/regenerator-runtime@0.13.7"
      ]
    },
    {
      "ref": "pkg:npm/regenerator-transform@0.14.5",
      "dependsOn": [
        "pkg:npm/@babel/runtime@7.12.18"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-regenerator@7.12.13",
      "dependsOn": [
        "pkg:npm/regenerator-transform@0.14.5"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-reserved-words@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-shorthand-properties@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-spread@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13",
        "pkg:npm/@babel/helper-skip-transparent-expression-wrappers@7.12.1"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-sticky-regex@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-template-literals@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-typeof-symbol@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-unicode-escapes@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-unicode-regex@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-create-regexp-features-plugin@7.12.17",
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/preset-modules@0.1.4",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13",
        "pkg:npm/@babel/plugin-proposal-unicode-property-regex@7.12.13",
        "pkg:npm/@babel/plugin-transform-dotall-regex@7.12.13",
        "pkg:npm/@babel/types@7.12.17",
        "pkg:npm/esutils@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/semver@7.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/core-js-compat@3.9.0",
      "dependsOn": [
        "pkg:npm/browserslist@4.16.3",
        "pkg:npm/semver@7.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@babel/preset-env@7.12.17",
      "dependsOn": [
        "pkg:npm/@babel/compat-data@7.12.13",
        "pkg:npm/@babel/helper-compilation-targets@7.12.17",
        "pkg:npm/@babel/helper-module-imports@7.12.13",
        "pkg:npm/@babel/helper-plugin-utils@7.12.13",
        "pkg:npm/@babel/helper-validator-option@7.12.17",
        "pkg:npm/@babel/plugin-proposal-async-generator-functions@7.12.13",
        "pkg:npm/@babel/plugin-proposal-class-properties@7.12.13",
        "pkg:npm/@babel/plugin-proposal-dynamic-import@7.12.17",
        "pkg:npm/@babel/plugin-proposal-export-namespace-from@7.12.13",
        "pkg:npm/@babel/plugin-proposal-json-strings@7.12.13",
        "pkg:npm/@babel/plugin-proposal-logical-assignment-operators@7.12.13",
        "pkg:npm/@babel/plugin-proposal-nullish-coalescing-operator@7.12.13",
        "pkg:npm/@babel/plugin-proposal-numeric-separator@7.12.13",
        "pkg:npm/@babel/plugin-proposal-object-rest-spread@7.12.13",
        "pkg:npm/@babel/plugin-proposal-optional-catch-binding@7.12.13",
        "pkg:npm/@babel/plugin-proposal-optional-chaining@7.12.17",
        "pkg:npm/@babel/plugin-proposal-private-methods@7.12.13",
        "pkg:npm/@babel/plugin-proposal-unicode-property-regex@7.12.13",
        "pkg:npm/@babel/plugin-syntax-async-generators@7.8.4",
        "pkg:npm/@babel/plugin-syntax-class-properties@7.12.13",
        "pkg:npm/@babel/plugin-syntax-dynamic-import@7.8.3",
        "pkg:npm/@babel/plugin-syntax-export-namespace-from@7.8.3",
        "pkg:npm/@babel/plugin-syntax-json-strings@7.8.3",
        "pkg:npm/@babel/plugin-syntax-logical-assignment-operators@7.10.4",
        "pkg:npm/@babel/plugin-syntax-nullish-coalescing-operator@7.8.3",
        "pkg:npm/@babel/plugin-syntax-numeric-separator@7.10.4",
        "pkg:npm/@babel/plugin-syntax-object-rest-spread@7.8.3",
        "pkg:npm/@babel/plugin-syntax-optional-catch-binding@7.8.3",
        "pkg:npm/@babel/plugin-syntax-optional-chaining@7.8.3",
        "pkg:npm/@babel/plugin-syntax-top-level-await@7.12.13",
        "pkg:npm/@babel/plugin-transform-arrow-functions@7.12.13",
        "pkg:npm/@babel/plugin-transform-async-to-generator@7.12.13",
        "pkg:npm/@babel/plugin-transform-block-scoped-functions@7.12.13",
        "pkg:npm/@babel/plugin-transform-block-scoping@7.12.13",
        "pkg:npm/@babel/plugin-transform-classes@7.12.13",
        "pkg:npm/@babel/plugin-transform-computed-properties@7.12.13",
        "pkg:npm/@babel/plugin-transform-destructuring@7.12.13",
        "pkg:npm/@babel/plugin-transform-dotall-regex@7.12.13",
        "pkg:npm/@babel/plugin-transform-duplicate-keys@7.12.13",
        "pkg:npm/@babel/plugin-transform-exponentiation-operator@7.12.13",
        "pkg:npm/@babel/plugin-transform-for-of@7.12.13",
        "pkg:npm/@babel/plugin-transform-function-name@7.12.13",
        "pkg:npm/@babel/plugin-transform-literals@7.12.13",
        "pkg:npm/@babel/plugin-transform-member-expression-literals@7.12.13",
        "pkg:npm/@babel/plugin-transform-modules-amd@7.12.13",
        "pkg:npm/@babel/plugin-transform-modules-commonjs@7.12.13",
        "pkg:npm/@babel/plugin-transform-modules-systemjs@7.12.13",
        "pkg:npm/@babel/plugin-transform-modules-umd@7.12.13",
        "pkg:npm/@babel/plugin-transform-named-capturing-groups-regex@7.12.13",
        "pkg:npm/@babel/plugin-transform-new-target@7.12.13",
        "pkg:npm/@babel/plugin-transform-object-super@7.12.13",
        "pkg:npm/@babel/plugin-transform-parameters@7.12.13",
        "pkg:npm/@babel/plugin-transform-property-literals@7.12.13",
        "pkg:npm/@babel/plugin-transform-regenerator@7.12.13",
        "pkg:npm/@babel/plugin-transform-reserved-words@7.12.13",
        "pkg:npm/@babel/plugin-transform-shorthand-properties@7.12.13",
        "pkg:npm/@babel/plugin-transform-spread@7.12.13",
        "pkg:npm/@babel/plugin-transform-sticky-regex@7.12.13",
        "pkg:npm/@babel/plugin-transform-template-literals@7.12.13",
        "pkg:npm/@babel/plugin-transform-typeof-symbol@7.12.13",
        "pkg:npm/@babel/plugin-transform-unicode-escapes@7.12.13",
        "pkg:npm/@babel/plugin-transform-unicode-regex@7.12.13",
        "pkg:npm/@babel/preset-modules@0.1.4",
        "pkg:npm/@babel/types@7.12.17",
        "pkg:npm/core-js-compat@3.9.0",
        "pkg:npm/semver@5.7.1"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-react-display-name@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-syntax-jsx@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-react-jsx@7.12.17",
      "dependsOn": [
        "pkg:npm/@babel/helper-annotate-as-pure@7.12.13",
        "pkg:npm/@babel/helper-module-imports@7.12.13",
        "pkg:npm/@babel/helper-plugin-utils@7.12.13",
        "pkg:npm/@babel/plugin-syntax-jsx@7.12.13",
        "pkg:npm/@babel/types@7.12.17"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-react-jsx-development@7.12.17",
      "dependsOn": [
        "pkg:npm/@babel/plugin-transform-react-jsx@7.12.17"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-react-pure-annotations@7.12.1",
      "dependsOn": [
        "pkg:npm/@babel/helper-annotate-as-pure@7.12.13",
        "pkg:npm/@babel/helper-plugin-utils@7.12.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/preset-react@7.12.13",
      "dependsOn": [
        "pkg:npm/@babel/helper-plugin-utils@7.12.13",
        "pkg:npm/@babel/plugin-transform-react-display-name@7.12.13",
        "pkg:npm/@babel/plugin-transform-react-jsx-development@7.12.17",
        "pkg:npm/@babel/plugin-transform-react-jsx@7.12.17",
        "pkg:npm/@babel/plugin-transform-react-pure-annotations@7.12.1"
      ]
    },
    {
      "ref": "pkg:npm/commondir@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/make-dir@3.1.0",
      "dependsOn": [
        "pkg:npm/semver@6.3.0"
      ]
    },
    {
      "ref": "pkg:npm/p-try@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/p-limit@2.3.0",
      "dependsOn": [
        "pkg:npm/p-try@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/p-locate@4.1.0",
      "dependsOn": [
        "pkg:npm/p-limit@2.3.0"
      ]
    },
    {
      "ref": "pkg:npm/locate-path@5.0.0",
      "dependsOn": [
        "pkg:npm/p-locate@4.1.0"
      ]
    },
    {
      "ref": "pkg:npm/find-up@4.1.0",
      "dependsOn": [
        "pkg:npm/locate-path@5.0.0",
        "pkg:npm/path-exists@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/pkg-dir@4.2.0",
      "dependsOn": [
        "pkg:npm/find-up@4.1.0"
      ]
    },
    {
      "ref": "pkg:npm/find-cache-dir@3.3.1",
      "dependsOn": [
        "pkg:npm/commondir@1.0.1",
        "pkg:npm/make-dir@3.1.0",
        "pkg:npm/pkg-dir@4.2.0"
      ]
    },
    {
      "ref": "pkg:npm/big.js@5.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/emojis-list@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/loader-utils@1.4.0",
      "dependsOn": [
        "pkg:npm/big.js@5.2.2",
        "pkg:npm/emojis-list@3.0.0",
        "pkg:npm/json5@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/fast-deep-equal@3.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uri-js@4.4.1",
      "dependsOn": [
        "pkg:npm/punycode@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/schema-utils@2.7.1",
      "dependsOn": [
        "pkg:npm/@types/json-schema@7.0.7",
        "pkg:npm/ajv-keywords@3.5.2",
        "pkg:npm/ajv@6.12.6"
      ]
    },
    {
      "ref": "pkg:npm/babel-loader@8.2.2",
      "dependsOn": [
        "pkg:npm/find-cache-dir@3.3.1",
        "pkg:npm/loader-utils@1.4.0",
        "pkg:npm/make-dir@3.1.0",
        "pkg:npm/schema-utils@2.7.1"
      ]
    },
    {
      "ref": "pkg:npm/@types/html-minifier-terser@5.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tslib@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lower-case@2.0.2",
      "dependsOn": [
        "pkg:npm/tslib@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/no-case@3.0.4",
      "dependsOn": [
        "pkg:npm/lower-case@2.0.2",
        "pkg:npm/tslib@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/pascal-case@3.1.2",
      "dependsOn": [
        "pkg:npm/no-case@3.0.4",
        "pkg:npm/tslib@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/camel-case@4.1.2",
      "dependsOn": [
        "pkg:npm/pascal-case@3.1.2",
        "pkg:npm/tslib@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/clean-css@4.2.3",
      "dependsOn": [
        "pkg:npm/source-map@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/commander@4.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dot-case@3.0.4",
      "dependsOn": [
        "pkg:npm/no-case@3.0.4",
        "pkg:npm/tslib@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/param-case@3.0.4",
      "dependsOn": [
        "pkg:npm/dot-case@3.0.4",
        "pkg:npm/tslib@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/relateurl@0.2.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/terser@4.8.0",
      "dependsOn": [
        "pkg:npm/commander@2.20.3",
        "pkg:npm/source-map-support@0.5.19",
        "pkg:npm/source-map@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/html-minifier-terser@5.1.1",
      "dependsOn": [
        "pkg:npm/camel-case@4.1.2",
        "pkg:npm/clean-css@4.2.3",
        "pkg:npm/commander@4.1.1",
        "pkg:npm/he@1.2.0",
        "pkg:npm/param-case@3.0.4",
        "pkg:npm/relateurl@0.2.7",
        "pkg:npm/terser@4.8.0"
      ]
    },
    {
      "ref": "pkg:npm/loader-utils@2.0.0",
      "dependsOn": [
        "pkg:npm/big.js@5.2.2",
        "pkg:npm/emojis-list@3.0.0",
        "pkg:npm/json5@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/boolbase@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/css-what@3.4.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/domelementtype@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/entities@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dom-serializer@0.2.2",
      "dependsOn": [
        "pkg:npm/domelementtype@2.1.0",
        "pkg:npm/entities@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/domelementtype@1.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/domutils@1.7.0",
      "dependsOn": [
        "pkg:npm/dom-serializer@0.2.2",
        "pkg:npm/domelementtype@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/nth-check@1.0.2",
      "dependsOn": [
        "pkg:npm/boolbase@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/css-select@2.1.0",
      "dependsOn": [
        "pkg:npm/boolbase@1.0.0",
        "pkg:npm/css-what@3.4.2",
        "pkg:npm/domutils@1.7.0",
        "pkg:npm/nth-check@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/utila@0.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dom-converter@0.2.0",
      "dependsOn": [
        "pkg:npm/utila@0.4.0"
      ]
    },
    {
      "ref": "pkg:npm/domhandler@2.4.2",
      "dependsOn": [
        "pkg:npm/domelementtype@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/entities@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string_decoder@1.3.0",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "pkg:npm/util-deprecate@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readable-stream@3.6.0",
      "dependsOn": [
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/string_decoder@1.3.0",
        "pkg:npm/util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/htmlparser2@3.10.1",
      "dependsOn": [
        "pkg:npm/domelementtype@1.3.1",
        "pkg:npm/domhandler@2.4.2",
        "pkg:npm/domutils@1.7.0",
        "pkg:npm/entities@1.1.2",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/readable-stream@3.6.0"
      ]
    },
    {
      "ref": "pkg:npm/ansi-regex@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-ansi@3.0.1",
      "dependsOn": [
        "pkg:npm/ansi-regex@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/renderkid@2.0.5",
      "dependsOn": [
        "pkg:npm/css-select@2.1.0",
        "pkg:npm/dom-converter@0.2.0",
        "pkg:npm/htmlparser2@3.10.1",
        "pkg:npm/lodash@4.17.21",
        "pkg:npm/strip-ansi@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/pretty-error@2.1.2",
      "dependsOn": [
        "pkg:npm/lodash@4.17.21",
        "pkg:npm/renderkid@2.0.5"
      ]
    },
    {
      "ref": "pkg:npm/html-webpack-plugin@5.2.0",
      "dependsOn": [
        "pkg:npm/@types/html-minifier-terser@5.1.1",
        "pkg:npm/html-minifier-terser@5.1.1",
        "pkg:npm/loader-utils@2.0.0",
        "pkg:npm/lodash@4.17.21",
        "pkg:npm/pretty-error@2.1.2",
        "pkg:npm/tapable@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/jasmine-core@3.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jasmine@3.6.4",
      "dependsOn": [
        "pkg:npm/glob@7.1.6",
        "pkg:npm/jasmine-core@3.6.0"
      ]
    },
    {
      "ref": "pkg:npm/bytes@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/content-type@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/depd@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/inherits@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/setprototypeof@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/statuses@1.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/toidentifier@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-errors@1.7.2",
      "dependsOn": [
        "pkg:npm/depd@1.1.2",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/setprototypeof@1.1.1",
        "pkg:npm/statuses@1.5.0",
        "pkg:npm/toidentifier@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/safer-buffer@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/iconv-lite@0.4.24",
      "dependsOn": [
        "pkg:npm/safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/ee-first@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/on-finished@2.3.0",
      "dependsOn": [
        "pkg:npm/ee-first@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/qs@6.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/unpipe@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/raw-body@2.4.0",
      "dependsOn": [
        "pkg:npm/bytes@3.1.0",
        "pkg:npm/http-errors@1.7.2",
        "pkg:npm/iconv-lite@0.4.24",
        "pkg:npm/unpipe@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/media-typer@0.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/type-is@1.6.18",
      "dependsOn": [
        "pkg:npm/media-typer@0.3.0",
        "pkg:npm/mime-types@2.1.29"
      ]
    },
    {
      "ref": "pkg:npm/body-parser@1.19.0",
      "dependsOn": [
        "pkg:npm/bytes@3.1.0",
        "pkg:npm/content-type@1.0.4",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/depd@1.1.2",
        "pkg:npm/http-errors@1.7.2",
        "pkg:npm/iconv-lite@0.4.24",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/qs@6.7.0",
        "pkg:npm/raw-body@2.4.0",
        "pkg:npm/type-is@1.6.18"
      ]
    },
    {
      "ref": "pkg:npm/colors@1.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/encodeurl@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/escape-html@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parseurl@1.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/finalhandler@1.1.2",
      "dependsOn": [
        "pkg:npm/debug@2.6.9",
        "pkg:npm/encodeurl@1.0.2",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/parseurl@1.3.3",
        "pkg:npm/statuses@1.5.0",
        "pkg:npm/unpipe@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/utils-merge@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/connect@3.7.0",
      "dependsOn": [
        "pkg:npm/debug@2.6.9",
        "pkg:npm/finalhandler@1.1.2",
        "pkg:npm/parseurl@1.3.3",
        "pkg:npm/utils-merge@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/di@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/custom-event@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ent@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/extend@3.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/void-elements@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dom-serialize@2.2.1",
      "dependsOn": [
        "pkg:npm/custom-event@1.0.1",
        "pkg:npm/ent@2.2.0",
        "pkg:npm/extend@3.0.2",
        "pkg:npm/void-elements@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/eventemitter3@4.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/follow-redirects@1.13.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/requires-port@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-proxy@1.18.1",
      "dependsOn": [
        "pkg:npm/eventemitter3@4.0.7",
        "pkg:npm/follow-redirects@1.13.2",
        "pkg:npm/requires-port@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/isbinaryfile@4.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/date-format@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/flatted@2.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rfdc@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/date-format@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsonfile@4.0.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.6"
      ]
    },
    {
      "ref": "pkg:npm/universalify@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fs-extra@8.1.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.6",
        "pkg:npm/jsonfile@4.0.0",
        "pkg:npm/universalify@0.1.2"
      ]
    },
    {
      "ref": "pkg:npm/streamroller@2.2.4",
      "dependsOn": [
        "pkg:npm/date-format@2.1.0",
        "pkg:npm/debug@4.3.1",
        "pkg:npm/fs-extra@8.1.0"
      ]
    },
    {
      "ref": "pkg:npm/log4js@6.3.0",
      "dependsOn": [
        "pkg:npm/date-format@3.0.0",
        "pkg:npm/debug@4.3.1",
        "pkg:npm/flatted@2.0.2",
        "pkg:npm/rfdc@1.2.0",
        "pkg:npm/streamroller@2.2.4"
      ]
    },
    {
      "ref": "pkg:npm/mime@2.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qjobs@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/range-parser@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/cookie@0.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/cors@2.8.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/negotiator@0.6.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/accepts@1.3.7",
      "dependsOn": [
        "pkg:npm/mime-types@2.1.29",
        "pkg:npm/negotiator@0.6.2"
      ]
    },
    {
      "ref": "pkg:npm/base64id@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cookie@0.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object-assign@4.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vary@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cors@2.8.5",
      "dependsOn": [
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/vary@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/base64-arraybuffer@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/engine.io-parser@4.0.2",
      "dependsOn": [
        "pkg:npm/base64-arraybuffer@0.1.4"
      ]
    },
    {
      "ref": "pkg:npm/ws@7.4.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/engine.io@4.1.1",
      "dependsOn": [
        "pkg:npm/accepts@1.3.7",
        "pkg:npm/base64id@2.0.0",
        "pkg:npm/cookie@0.4.1",
        "pkg:npm/cors@2.8.5",
        "pkg:npm/debug@4.3.1",
        "pkg:npm/engine.io-parser@4.0.2",
        "pkg:npm/ws@7.4.3"
      ]
    },
    {
      "ref": "pkg:npm/socket.io-adapter@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/component-emitter@1.2.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/component-emitter@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/socket.io-parser@4.0.4",
      "dependsOn": [
        "pkg:npm/@types/component-emitter@1.2.10",
        "pkg:npm/component-emitter@1.3.0",
        "pkg:npm/debug@4.3.1"
      ]
    },
    {
      "ref": "pkg:npm/socket.io@3.1.1",
      "dependsOn": [
        "pkg:npm/@types/cookie@0.4.0",
        "pkg:npm/@types/cors@2.8.10",
        "pkg:npm/@types/node@14.14.31",
        "pkg:npm/accepts@1.3.7",
        "pkg:npm/base64id@2.0.0",
        "pkg:npm/debug@4.3.1",
        "pkg:npm/engine.io@4.1.1",
        "pkg:npm/socket.io-adapter@2.1.0",
        "pkg:npm/socket.io-parser@4.0.4"
      ]
    },
    {
      "ref": "pkg:npm/tmp@0.2.1",
      "dependsOn": [
        "pkg:npm/rimraf@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/ua-parser-js@0.7.24",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs-parser@20.2.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/karma@6.1.1",
      "dependsOn": [
        "pkg:npm/body-parser@1.19.0",
        "pkg:npm/braces@3.0.2",
        "pkg:npm/chokidar@3.5.1",
        "pkg:npm/colors@1.4.0",
        "pkg:npm/connect@3.7.0",
        "pkg:npm/di@0.0.1",
        "pkg:npm/dom-serialize@2.2.1",
        "pkg:npm/glob@7.1.6",
        "pkg:npm/graceful-fs@4.2.6",
        "pkg:npm/http-proxy@1.18.1",
        "pkg:npm/isbinaryfile@4.0.6",
        "pkg:npm/lodash@4.17.21",
        "pkg:npm/log4js@6.3.0",
        "pkg:npm/mime@2.5.2",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/qjobs@1.2.0",
        "pkg:npm/range-parser@1.2.1",
        "pkg:npm/rimraf@3.0.2",
        "pkg:npm/socket.io@3.1.1",
        "pkg:npm/source-map@0.6.1",
        "pkg:npm/tmp@0.2.1",
        "pkg:npm/ua-parser-js@0.7.24",
        "pkg:npm/yargs@16.2.0"
      ]
    },
    {
      "ref": "pkg:npm/which@1.3.1",
      "dependsOn": [
        "pkg:npm/isexe@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/karma-chrome-launcher@3.1.0",
      "dependsOn": [
        "pkg:npm/which@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/karma-cli@2.0.0",
      "dependsOn": [
        "pkg:npm/resolve@1.20.0"
      ]
    },
    {
      "ref": "pkg:npm/istanbul-lib-coverage@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@istanbuljs/schema@0.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/istanbul-lib-instrument@4.0.3",
      "dependsOn": [
        "pkg:npm/@babel/core@7.12.17",
        "pkg:npm/@istanbuljs/schema@0.1.3",
        "pkg:npm/istanbul-lib-coverage@3.0.0",
        "pkg:npm/semver@6.3.0"
      ]
    },
    {
      "ref": "pkg:npm/istanbul-lib-report@3.0.0",
      "dependsOn": [
        "pkg:npm/istanbul-lib-coverage@3.0.0",
        "pkg:npm/make-dir@3.1.0",
        "pkg:npm/supports-color@7.2.0"
      ]
    },
    {
      "ref": "pkg:npm/istanbul-lib-source-maps@4.0.0",
      "dependsOn": [
        "pkg:npm/debug@4.3.1",
        "pkg:npm/istanbul-lib-coverage@3.0.0",
        "pkg:npm/source-map@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/html-escaper@2.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/istanbul-reports@3.0.2",
      "dependsOn": [
        "pkg:npm/html-escaper@2.0.2",
        "pkg:npm/istanbul-lib-report@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/karma-coverage@2.0.3",
      "dependsOn": [
        "pkg:npm/istanbul-lib-coverage@3.0.0",
        "pkg:npm/istanbul-lib-instrument@4.0.3",
        "pkg:npm/istanbul-lib-report@3.0.0",
        "pkg:npm/istanbul-lib-source-maps@4.0.0",
        "pkg:npm/istanbul-reports@3.0.2",
        "pkg:npm/minimatch@3.0.4"
      ]
    },
    {
      "ref": "pkg:npm/karma-jasmine@4.0.1",
      "dependsOn": [
        "pkg:npm/jasmine-core@3.6.0"
      ]
    },
    {
      "ref": "pkg:npm/es6-promise@4.2.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/core-util-is@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/process-nextick-args@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string_decoder@1.1.1",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "pkg:npm/readable-stream@2.3.7",
      "dependsOn": [
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/isarray@1.0.0",
        "pkg:npm/process-nextick-args@2.0.1",
        "pkg:npm/safe-buffer@5.1.2",
        "pkg:npm/string_decoder@1.1.1",
        "pkg:npm/util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/typedarray@0.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/concat-stream@1.6.2",
      "dependsOn": [
        "pkg:npm/buffer-from@1.1.1",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/readable-stream@2.3.7",
        "pkg:npm/typedarray@0.0.6"
      ]
    },
    {
      "ref": "pkg:npm/mkdirp@0.5.5",
      "dependsOn": [
        "pkg:npm/minimist@1.2.5"
      ]
    },
    {
      "ref": "pkg:npm/buffer-crc32@0.2.13",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pend@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fd-slicer@1.1.0",
      "dependsOn": [
        "pkg:npm/pend@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/yauzl@2.10.0",
      "dependsOn": [
        "pkg:npm/buffer-crc32@0.2.13",
        "pkg:npm/fd-slicer@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/extract-zip@1.7.0",
      "dependsOn": [
        "pkg:npm/concat-stream@1.6.2",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/mkdirp@0.5.5",
        "pkg:npm/yauzl@2.10.0"
      ]
    },
    {
      "ref": "pkg:npm/jsonfile@2.4.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.6"
      ]
    },
    {
      "ref": "pkg:npm/klaw@1.3.1",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.6"
      ]
    },
    {
      "ref": "pkg:npm/fs-extra@1.0.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.6",
        "pkg:npm/jsonfile@2.4.0",
        "pkg:npm/klaw@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/is-stream@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pinkie@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pinkie-promise@2.0.1",
      "dependsOn": [
        "pkg:npm/pinkie@2.0.4"
      ]
    },
    {
      "ref": "pkg:npm/hasha@2.2.0",
      "dependsOn": [
        "pkg:npm/is-stream@1.1.0",
        "pkg:npm/pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/kew@0.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/progress@1.1.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aws-sign2@0.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aws4@1.11.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/caseless@0.12.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/delayed-stream@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/combined-stream@1.0.8",
      "dependsOn": [
        "pkg:npm/delayed-stream@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/forever-agent@0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/asynckit@0.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/form-data@2.3.3",
      "dependsOn": [
        "pkg:npm/asynckit@0.4.0",
        "pkg:npm/combined-stream@1.0.8",
        "pkg:npm/mime-types@2.1.29"
      ]
    },
    {
      "ref": "pkg:npm/har-schema@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/har-validator@5.1.5",
      "dependsOn": [
        "pkg:npm/ajv@6.12.6",
        "pkg:npm/har-schema@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/assert-plus@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/extsprintf@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-schema@0.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/verror@1.10.0",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/extsprintf@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/jsprim@1.4.1",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/extsprintf@1.3.0",
        "pkg:npm/json-schema@0.2.3",
        "pkg:npm/verror@1.10.0"
      ]
    },
    {
      "ref": "pkg:npm/asn1@0.2.4",
      "dependsOn": [
        "pkg:npm/safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/tweetnacl@0.14.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bcrypt-pbkdf@1.0.2",
      "dependsOn": [
        "pkg:npm/tweetnacl@0.14.5"
      ]
    },
    {
      "ref": "pkg:npm/dashdash@1.14.1",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/jsbn@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ecc-jsbn@0.1.2",
      "dependsOn": [
        "pkg:npm/jsbn@0.1.1",
        "pkg:npm/safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/getpass@0.1.7",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/sshpk@1.16.1",
      "dependsOn": [
        "pkg:npm/asn1@0.2.4",
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/bcrypt-pbkdf@1.0.2",
        "pkg:npm/dashdash@1.14.1",
        "pkg:npm/ecc-jsbn@0.1.2",
        "pkg:npm/getpass@0.1.7",
        "pkg:npm/jsbn@0.1.1",
        "pkg:npm/safer-buffer@2.1.2",
        "pkg:npm/tweetnacl@0.14.5"
      ]
    },
    {
      "ref": "pkg:npm/http-signature@1.2.0",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/jsprim@1.4.1",
        "pkg:npm/sshpk@1.16.1"
      ]
    },
    {
      "ref": "pkg:npm/is-typedarray@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isstream@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-stringify-safe@5.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/oauth-sign@0.9.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/performance-now@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qs@6.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/psl@1.8.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tough-cookie@2.5.0",
      "dependsOn": [
        "pkg:npm/psl@1.8.0",
        "pkg:npm/punycode@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/tunnel-agent@0.6.0",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "pkg:npm/uuid@3.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/request@2.88.2",
      "dependsOn": [
        "pkg:npm/aws-sign2@0.7.0",
        "pkg:npm/aws4@1.11.0",
        "pkg:npm/caseless@0.12.0",
        "pkg:npm/combined-stream@1.0.8",
        "pkg:npm/extend@3.0.2",
        "pkg:npm/forever-agent@0.6.1",
        "pkg:npm/form-data@2.3.3",
        "pkg:npm/har-validator@5.1.5",
        "pkg:npm/http-signature@1.2.0",
        "pkg:npm/is-typedarray@1.0.0",
        "pkg:npm/isstream@0.1.2",
        "pkg:npm/json-stringify-safe@5.0.1",
        "pkg:npm/mime-types@2.1.29",
        "pkg:npm/oauth-sign@0.9.0",
        "pkg:npm/performance-now@2.1.0",
        "pkg:npm/qs@6.5.2",
        "pkg:npm/safe-buffer@5.1.2",
        "pkg:npm/tough-cookie@2.5.0",
        "pkg:npm/tunnel-agent@0.6.0",
        "pkg:npm/uuid@3.4.0"
      ]
    },
    {
      "ref": "pkg:npm/throttleit@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/request-progress@2.0.1",
      "dependsOn": [
        "pkg:npm/throttleit@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/phantomjs-prebuilt@2.1.16",
      "dependsOn": [
        "pkg:npm/es6-promise@4.2.8",
        "pkg:npm/extract-zip@1.7.0",
        "pkg:npm/fs-extra@1.0.0",
        "pkg:npm/hasha@2.2.0",
        "pkg:npm/kew@0.7.0",
        "pkg:npm/progress@1.1.8",
        "pkg:npm/request-progress@2.0.1",
        "pkg:npm/request@2.88.2",
        "pkg:npm/which@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/karma-phantomjs-launcher@1.0.4",
      "dependsOn": [
        "pkg:npm/lodash@4.17.21",
        "pkg:npm/phantomjs-prebuilt@2.1.16"
      ]
    },
    {
      "ref": "pkg:npm/webpack-merge@4.2.2",
      "dependsOn": [
        "pkg:npm/lodash@4.17.21"
      ]
    },
    {
      "ref": "pkg:npm/karma-webpack@5.0.0",
      "dependsOn": [
        "pkg:npm/glob@7.1.6",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/webpack-merge@4.2.2"
      ]
    },
    {
      "ref": "pkg:npm/phantomjs-polyfill@0.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/loose-envify@1.4.0",
      "dependsOn": [
        "pkg:npm/js-tokens@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/create-react-class@15.7.0",
      "dependsOn": [
        "pkg:npm/loose-envify@1.4.0",
        "pkg:npm/object-assign@4.1.1"
      ]
    },
    {
      "ref": "pkg:npm/core-js@1.2.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/iconv-lite@0.6.2",
      "dependsOn": [
        "pkg:npm/safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/encoding@0.1.13",
      "dependsOn": [
        "pkg:npm/iconv-lite@0.6.2"
      ]
    },
    {
      "ref": "pkg:npm/node-fetch@1.7.3",
      "dependsOn": [
        "pkg:npm/encoding@0.1.13",
        "pkg:npm/is-stream@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/whatwg-fetch@3.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isomorphic-fetch@2.2.1",
      "dependsOn": [
        "pkg:npm/node-fetch@1.7.3",
        "pkg:npm/whatwg-fetch@3.6.1"
      ]
    },
    {
      "ref": "pkg:npm/asap@2.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/promise@7.3.1",
      "dependsOn": [
        "pkg:npm/asap@2.0.6"
      ]
    },
    {
      "ref": "pkg:npm/setimmediate@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fbjs@0.8.17",
      "dependsOn": [
        "pkg:npm/core-js@1.2.7",
        "pkg:npm/isomorphic-fetch@2.2.1",
        "pkg:npm/loose-envify@1.4.0",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/promise@7.3.1",
        "pkg:npm/setimmediate@1.0.5",
        "pkg:npm/ua-parser-js@0.7.24"
      ]
    },
    {
      "ref": "pkg:npm/react-is@16.13.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/prop-types@15.7.2",
      "dependsOn": [
        "pkg:npm/loose-envify@1.4.0",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/react-is@16.13.1"
      ]
    },
    {
      "ref": "pkg:npm/react@15.7.0",
      "dependsOn": [
        "pkg:npm/create-react-class@15.7.0",
        "pkg:npm/fbjs@0.8.17",
        "pkg:npm/loose-envify@1.4.0",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/prop-types@15.7.2"
      ]
    },
    {
      "ref": "pkg:npm/react-dom@15.7.0",
      "dependsOn": [
        "pkg:npm/fbjs@0.8.17",
        "pkg:npm/loose-envify@1.4.0",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/prop-types@15.7.2"
      ]
    },
    {
      "ref": "pkg:npm/tslib@1.14.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-html@0.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-flatten@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-arguments@1.1.0",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/object-is@1.1.5",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.2",
        "pkg:npm/define-properties@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/regexp.prototype.flags@1.3.1",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.2",
        "pkg:npm/define-properties@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/deep-equal@1.1.1",
      "dependsOn": [
        "pkg:npm/is-arguments@1.1.0",
        "pkg:npm/is-date-object@1.0.2",
        "pkg:npm/is-regex@1.1.2",
        "pkg:npm/object-is@1.1.5",
        "pkg:npm/object-keys@1.1.1",
        "pkg:npm/regexp.prototype.flags@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/dns-equal@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffer-indexof@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dns-txt@2.0.2",
      "dependsOn": [
        "pkg:npm/buffer-indexof@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/ip@1.1.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dns-packet@1.3.1",
      "dependsOn": [
        "pkg:npm/ip@1.1.5",
        "pkg:npm/safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "pkg:npm/thunky@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/multicast-dns@6.2.3",
      "dependsOn": [
        "pkg:npm/dns-packet@1.3.1",
        "pkg:npm/thunky@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/multicast-dns-service-types@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bonjour@3.5.0",
      "dependsOn": [
        "pkg:npm/array-flatten@2.1.2",
        "pkg:npm/deep-equal@1.1.1",
        "pkg:npm/dns-equal@1.0.0",
        "pkg:npm/dns-txt@2.0.2",
        "pkg:npm/multicast-dns-service-types@1.1.0",
        "pkg:npm/multicast-dns@6.2.3"
      ]
    },
    {
      "ref": "pkg:npm/arr-diff@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-unique@0.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/arr-flatten@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-extendable@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/extend-shallow@2.0.1",
      "dependsOn": [
        "pkg:npm/is-extendable@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/is-buffer@1.1.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/kind-of@3.2.2",
      "dependsOn": [
        "pkg:npm/is-buffer@1.1.6"
      ]
    },
    {
      "ref": "pkg:npm/is-number@3.0.0",
      "dependsOn": [
        "pkg:npm/kind-of@3.2.2"
      ]
    },
    {
      "ref": "pkg:npm/repeat-string@1.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/to-regex-range@2.1.1",
      "dependsOn": [
        "pkg:npm/is-number@3.0.0",
        "pkg:npm/repeat-string@1.6.1"
      ]
    },
    {
      "ref": "pkg:npm/fill-range@4.0.0",
      "dependsOn": [
        "pkg:npm/extend-shallow@2.0.1",
        "pkg:npm/is-number@3.0.0",
        "pkg:npm/repeat-string@1.6.1",
        "pkg:npm/to-regex-range@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/isobject@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/repeat-element@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object-visit@1.0.1",
      "dependsOn": [
        "pkg:npm/isobject@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/map-visit@1.0.0",
      "dependsOn": [
        "pkg:npm/object-visit@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/collection-visit@1.0.0",
      "dependsOn": [
        "pkg:npm/map-visit@1.0.0",
        "pkg:npm/object-visit@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/get-value@2.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/kind-of@4.0.0",
      "dependsOn": [
        "pkg:npm/is-buffer@1.1.6"
      ]
    },
    {
      "ref": "pkg:npm/has-values@1.0.0",
      "dependsOn": [
        "pkg:npm/is-number@3.0.0",
        "pkg:npm/kind-of@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/has-value@1.0.0",
      "dependsOn": [
        "pkg:npm/get-value@2.0.6",
        "pkg:npm/has-values@1.0.0",
        "pkg:npm/isobject@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-plain-object@2.0.4",
      "dependsOn": [
        "pkg:npm/isobject@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/assign-symbols@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-extendable@1.0.1",
      "dependsOn": [
        "pkg:npm/is-plain-object@2.0.4"
      ]
    },
    {
      "ref": "pkg:npm/extend-shallow@3.0.2",
      "dependsOn": [
        "pkg:npm/assign-symbols@1.0.0",
        "pkg:npm/is-extendable@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/split-string@3.1.0",
      "dependsOn": [
        "pkg:npm/extend-shallow@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/set-value@2.0.1",
      "dependsOn": [
        "pkg:npm/extend-shallow@2.0.1",
        "pkg:npm/is-extendable@0.1.1",
        "pkg:npm/is-plain-object@2.0.4",
        "pkg:npm/split-string@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/to-object-path@0.3.0",
      "dependsOn": [
        "pkg:npm/kind-of@3.2.2"
      ]
    },
    {
      "ref": "pkg:npm/arr-union@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/union-value@1.0.1",
      "dependsOn": [
        "pkg:npm/arr-union@3.1.0",
        "pkg:npm/get-value@2.0.6",
        "pkg:npm/is-extendable@0.1.1",
        "pkg:npm/set-value@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/has-values@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isobject@2.1.0",
      "dependsOn": [
        "pkg:npm/isarray@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/has-value@0.3.1",
      "dependsOn": [
        "pkg:npm/get-value@2.0.6",
        "pkg:npm/has-values@0.1.4",
        "pkg:npm/isobject@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/unset-value@1.0.0",
      "dependsOn": [
        "pkg:npm/has-value@0.3.1",
        "pkg:npm/isobject@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/cache-base@1.0.1",
      "dependsOn": [
        "pkg:npm/collection-visit@1.0.0",
        "pkg:npm/component-emitter@1.3.0",
        "pkg:npm/get-value@2.0.6",
        "pkg:npm/has-value@1.0.0",
        "pkg:npm/isobject@3.0.1",
        "pkg:npm/set-value@2.0.1",
        "pkg:npm/to-object-path@0.3.0",
        "pkg:npm/union-value@1.0.1",
        "pkg:npm/unset-value@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-accessor-descriptor@0.1.6",
      "dependsOn": [
        "pkg:npm/kind-of@3.2.2"
      ]
    },
    {
      "ref": "pkg:npm/is-data-descriptor@0.1.4",
      "dependsOn": [
        "pkg:npm/kind-of@3.2.2"
      ]
    },
    {
      "ref": "pkg:npm/kind-of@5.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-descriptor@0.1.6",
      "dependsOn": [
        "pkg:npm/is-accessor-descriptor@0.1.6",
        "pkg:npm/is-data-descriptor@0.1.4",
        "pkg:npm/kind-of@5.1.0"
      ]
    },
    {
      "ref": "pkg:npm/define-property@0.2.5",
      "dependsOn": [
        "pkg:npm/is-descriptor@0.1.6"
      ]
    },
    {
      "ref": "pkg:npm/copy-descriptor@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object-copy@0.1.0",
      "dependsOn": [
        "pkg:npm/copy-descriptor@0.1.1",
        "pkg:npm/define-property@0.2.5",
        "pkg:npm/kind-of@3.2.2"
      ]
    },
    {
      "ref": "pkg:npm/static-extend@0.1.2",
      "dependsOn": [
        "pkg:npm/define-property@0.2.5",
        "pkg:npm/object-copy@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/class-utils@0.3.6",
      "dependsOn": [
        "pkg:npm/arr-union@3.1.0",
        "pkg:npm/define-property@0.2.5",
        "pkg:npm/isobject@3.0.1",
        "pkg:npm/static-extend@0.1.2"
      ]
    },
    {
      "ref": "pkg:npm/kind-of@6.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-accessor-descriptor@1.0.0",
      "dependsOn": [
        "pkg:npm/kind-of@6.0.3"
      ]
    },
    {
      "ref": "pkg:npm/is-data-descriptor@1.0.0",
      "dependsOn": [
        "pkg:npm/kind-of@6.0.3"
      ]
    },
    {
      "ref": "pkg:npm/is-descriptor@1.0.2",
      "dependsOn": [
        "pkg:npm/is-accessor-descriptor@1.0.0",
        "pkg:npm/is-data-descriptor@1.0.0",
        "pkg:npm/kind-of@6.0.3"
      ]
    },
    {
      "ref": "pkg:npm/define-property@1.0.0",
      "dependsOn": [
        "pkg:npm/is-descriptor@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/for-in@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mixin-deep@1.3.2",
      "dependsOn": [
        "pkg:npm/for-in@1.0.2",
        "pkg:npm/is-extendable@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/pascalcase@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/base@0.11.2",
      "dependsOn": [
        "pkg:npm/cache-base@1.0.1",
        "pkg:npm/class-utils@0.3.6",
        "pkg:npm/component-emitter@1.3.0",
        "pkg:npm/define-property@1.0.0",
        "pkg:npm/isobject@3.0.1",
        "pkg:npm/mixin-deep@1.3.2",
        "pkg:npm/pascalcase@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/map-cache@0.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/atob@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/decode-uri-component@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/resolve-url@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map-url@0.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/urix@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map-resolve@0.5.3",
      "dependsOn": [
        "pkg:npm/atob@2.1.2",
        "pkg:npm/decode-uri-component@0.2.0",
        "pkg:npm/resolve-url@0.2.1",
        "pkg:npm/source-map-url@0.4.1",
        "pkg:npm/urix@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/use@3.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/snapdragon@0.8.2",
      "dependsOn": [
        "pkg:npm/base@0.11.2",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/define-property@0.2.5",
        "pkg:npm/extend-shallow@2.0.1",
        "pkg:npm/map-cache@0.2.2",
        "pkg:npm/source-map-resolve@0.5.3",
        "pkg:npm/source-map@0.5.7",
        "pkg:npm/use@3.1.1"
      ]
    },
    {
      "ref": "pkg:npm/snapdragon-util@3.0.1",
      "dependsOn": [
        "pkg:npm/kind-of@3.2.2"
      ]
    },
    {
      "ref": "pkg:npm/snapdragon-node@2.1.1",
      "dependsOn": [
        "pkg:npm/define-property@1.0.0",
        "pkg:npm/isobject@3.0.1",
        "pkg:npm/snapdragon-util@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/define-property@2.0.2",
      "dependsOn": [
        "pkg:npm/is-descriptor@1.0.2",
        "pkg:npm/isobject@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/ret@0.1.15",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/safe-regex@1.1.0",
      "dependsOn": [
        "pkg:npm/ret@0.1.15"
      ]
    },
    {
      "ref": "pkg:npm/regex-not@1.0.2",
      "dependsOn": [
        "pkg:npm/extend-shallow@3.0.2",
        "pkg:npm/safe-regex@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/to-regex@3.0.2",
      "dependsOn": [
        "pkg:npm/define-property@2.0.2",
        "pkg:npm/extend-shallow@3.0.2",
        "pkg:npm/regex-not@1.0.2",
        "pkg:npm/safe-regex@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/braces@2.3.2",
      "dependsOn": [
        "pkg:npm/arr-flatten@1.1.0",
        "pkg:npm/array-unique@0.3.2",
        "pkg:npm/extend-shallow@2.0.1",
        "pkg:npm/fill-range@4.0.0",
        "pkg:npm/isobject@3.0.1",
        "pkg:npm/repeat-element@1.1.3",
        "pkg:npm/snapdragon-node@2.1.1",
        "pkg:npm/snapdragon@0.8.2",
        "pkg:npm/split-string@3.1.0",
        "pkg:npm/to-regex@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/posix-character-classes@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/expand-brackets@2.1.4",
      "dependsOn": [
        "pkg:npm/debug@2.6.9",
        "pkg:npm/define-property@0.2.5",
        "pkg:npm/extend-shallow@2.0.1",
        "pkg:npm/posix-character-classes@0.1.1",
        "pkg:npm/regex-not@1.0.2",
        "pkg:npm/snapdragon@0.8.2",
        "pkg:npm/to-regex@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/fragment-cache@0.2.1",
      "dependsOn": [
        "pkg:npm/map-cache@0.2.2"
      ]
    },
    {
      "ref": "pkg:npm/extglob@2.0.4",
      "dependsOn": [
        "pkg:npm/array-unique@0.3.2",
        "pkg:npm/define-property@1.0.0",
        "pkg:npm/expand-brackets@2.1.4",
        "pkg:npm/extend-shallow@2.0.1",
        "pkg:npm/fragment-cache@0.2.1",
        "pkg:npm/regex-not@1.0.2",
        "pkg:npm/snapdragon@0.8.2",
        "pkg:npm/to-regex@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/is-windows@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object.pick@1.3.0",
      "dependsOn": [
        "pkg:npm/isobject@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/nanomatch@1.2.13",
      "dependsOn": [
        "pkg:npm/arr-diff@4.0.0",
        "pkg:npm/array-unique@0.3.2",
        "pkg:npm/define-property@2.0.2",
        "pkg:npm/extend-shallow@3.0.2",
        "pkg:npm/fragment-cache@0.2.1",
        "pkg:npm/is-windows@1.0.2",
        "pkg:npm/kind-of@6.0.3",
        "pkg:npm/object.pick@1.3.0",
        "pkg:npm/regex-not@1.0.2",
        "pkg:npm/snapdragon@0.8.2",
        "pkg:npm/to-regex@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/micromatch@3.1.10",
      "dependsOn": [
        "pkg:npm/arr-diff@4.0.0",
        "pkg:npm/array-unique@0.3.2",
        "pkg:npm/braces@2.3.2",
        "pkg:npm/define-property@2.0.2",
        "pkg:npm/extend-shallow@3.0.2",
        "pkg:npm/extglob@2.0.4",
        "pkg:npm/fragment-cache@0.2.1",
        "pkg:npm/kind-of@6.0.3",
        "pkg:npm/nanomatch@1.2.13",
        "pkg:npm/object.pick@1.3.0",
        "pkg:npm/regex-not@1.0.2",
        "pkg:npm/snapdragon@0.8.2",
        "pkg:npm/to-regex@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/remove-trailing-separator@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/normalize-path@2.1.1",
      "dependsOn": [
        "pkg:npm/remove-trailing-separator@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/anymatch@2.0.0",
      "dependsOn": [
        "pkg:npm/micromatch@3.1.10",
        "pkg:npm/normalize-path@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/async-each@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-glob@3.1.0",
      "dependsOn": [
        "pkg:npm/is-extglob@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/path-dirname@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob-parent@3.1.0",
      "dependsOn": [
        "pkg:npm/is-glob@3.1.0",
        "pkg:npm/path-dirname@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/binary-extensions@1.13.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-binary-path@1.0.1",
      "dependsOn": [
        "pkg:npm/binary-extensions@1.13.1"
      ]
    },
    {
      "ref": "pkg:npm/readdirp@2.2.1",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.6",
        "pkg:npm/micromatch@3.1.10",
        "pkg:npm/readable-stream@2.3.7"
      ]
    },
    {
      "ref": "pkg:npm/upath@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/file-uri-to-path@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bindings@1.5.0",
      "dependsOn": [
        "pkg:npm/file-uri-to-path@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/nan@2.14.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fsevents@1.2.13",
      "dependsOn": [
        "pkg:npm/bindings@1.5.0",
        "pkg:npm/nan@2.14.2"
      ]
    },
    {
      "ref": "pkg:npm/chokidar@2.1.8",
      "dependsOn": [
        "pkg:npm/anymatch@2.0.0",
        "pkg:npm/async-each@1.0.3",
        "pkg:npm/braces@2.3.2",
        "pkg:npm/fsevents@1.2.13",
        "pkg:npm/glob-parent@3.1.0",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/is-binary-path@1.0.1",
        "pkg:npm/is-glob@4.0.1",
        "pkg:npm/normalize-path@3.0.0",
        "pkg:npm/path-is-absolute@1.0.1",
        "pkg:npm/readdirp@2.2.1",
        "pkg:npm/upath@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/bytes@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/compressible@2.0.18",
      "dependsOn": [
        "pkg:npm/mime-db@1.46.0"
      ]
    },
    {
      "ref": "pkg:npm/on-headers@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/compression@1.7.4",
      "dependsOn": [
        "pkg:npm/accepts@1.3.7",
        "pkg:npm/bytes@3.0.0",
        "pkg:npm/compressible@2.0.18",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/on-headers@1.0.2",
        "pkg:npm/safe-buffer@5.1.2",
        "pkg:npm/vary@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/connect-history-api-fallback@1.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/minimatch@3.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/glob@7.1.3",
      "dependsOn": [
        "pkg:npm/@types/minimatch@3.0.3",
        "pkg:npm/@types/node@14.14.31"
      ]
    },
    {
      "ref": "pkg:npm/array-uniq@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-union@1.0.2",
      "dependsOn": [
        "pkg:npm/array-uniq@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/globby@6.1.0",
      "dependsOn": [
        "pkg:npm/array-union@1.0.2",
        "pkg:npm/glob@7.1.6",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-path-cwd@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-is-inside@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-path-inside@2.1.0",
      "dependsOn": [
        "pkg:npm/path-is-inside@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/is-path-in-cwd@2.1.0",
      "dependsOn": [
        "pkg:npm/is-path-inside@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/p-map@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pify@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rimraf@2.7.1",
      "dependsOn": [
        "pkg:npm/glob@7.1.6"
      ]
    },
    {
      "ref": "pkg:npm/del@4.1.1",
      "dependsOn": [
        "pkg:npm/@types/glob@7.1.3",
        "pkg:npm/globby@6.1.0",
        "pkg:npm/is-path-cwd@2.2.0",
        "pkg:npm/is-path-in-cwd@2.1.0",
        "pkg:npm/p-map@2.1.0",
        "pkg:npm/pify@4.0.1",
        "pkg:npm/rimraf@2.7.1"
      ]
    },
    {
      "ref": "pkg:npm/array-flatten@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/content-disposition@0.5.3",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "pkg:npm/cookie@0.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cookie-signature@1.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/etag@1.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fresh@0.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/merge-descriptors@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/methods@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-to-regexp@0.1.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/forwarded@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ipaddr.js@1.9.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/proxy-addr@2.0.6",
      "dependsOn": [
        "pkg:npm/forwarded@0.1.2",
        "pkg:npm/ipaddr.js@1.9.1"
      ]
    },
    {
      "ref": "pkg:npm/destroy@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime@1.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ms@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/send@0.17.1",
      "dependsOn": [
        "pkg:npm/debug@2.6.9",
        "pkg:npm/depd@1.1.2",
        "pkg:npm/destroy@1.0.4",
        "pkg:npm/encodeurl@1.0.2",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/etag@1.8.1",
        "pkg:npm/fresh@0.5.2",
        "pkg:npm/http-errors@1.7.2",
        "pkg:npm/mime@1.6.0",
        "pkg:npm/ms@2.1.1",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/range-parser@1.2.1",
        "pkg:npm/statuses@1.5.0"
      ]
    },
    {
      "ref": "pkg:npm/serve-static@1.14.1",
      "dependsOn": [
        "pkg:npm/encodeurl@1.0.2",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/parseurl@1.3.3",
        "pkg:npm/send@0.17.1"
      ]
    },
    {
      "ref": "pkg:npm/express@4.17.1",
      "dependsOn": [
        "pkg:npm/accepts@1.3.7",
        "pkg:npm/array-flatten@1.1.1",
        "pkg:npm/body-parser@1.19.0",
        "pkg:npm/content-disposition@0.5.3",
        "pkg:npm/content-type@1.0.4",
        "pkg:npm/cookie-signature@1.0.6",
        "pkg:npm/cookie@0.4.0",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/depd@1.1.2",
        "pkg:npm/encodeurl@1.0.2",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/etag@1.8.1",
        "pkg:npm/finalhandler@1.1.2",
        "pkg:npm/fresh@0.5.2",
        "pkg:npm/merge-descriptors@1.0.1",
        "pkg:npm/methods@1.1.2",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/parseurl@1.3.3",
        "pkg:npm/path-to-regexp@0.1.7",
        "pkg:npm/proxy-addr@2.0.6",
        "pkg:npm/qs@6.7.0",
        "pkg:npm/range-parser@1.2.1",
        "pkg:npm/safe-buffer@5.1.2",
        "pkg:npm/send@0.17.1",
        "pkg:npm/serve-static@1.14.1",
        "pkg:npm/setprototypeof@1.1.1",
        "pkg:npm/statuses@1.5.0",
        "pkg:npm/type-is@1.6.18",
        "pkg:npm/utils-merge@1.0.1",
        "pkg:npm/vary@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/html-entities@1.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-proxy-middleware@0.19.1",
      "dependsOn": [
        "pkg:npm/http-proxy@1.18.1",
        "pkg:npm/is-glob@4.0.1",
        "pkg:npm/lodash@4.17.21",
        "pkg:npm/micromatch@3.1.10"
      ]
    },
    {
      "ref": "pkg:npm/p-locate@3.0.0",
      "dependsOn": [
        "pkg:npm/p-limit@2.3.0"
      ]
    },
    {
      "ref": "pkg:npm/locate-path@3.0.0",
      "dependsOn": [
        "pkg:npm/p-locate@3.0.0",
        "pkg:npm/path-exists@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/find-up@3.0.0",
      "dependsOn": [
        "pkg:npm/locate-path@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/pkg-dir@3.0.0",
      "dependsOn": [
        "pkg:npm/find-up@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/resolve-from@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/resolve-cwd@2.0.0",
      "dependsOn": [
        "pkg:npm/resolve-from@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/import-local@2.0.0",
      "dependsOn": [
        "pkg:npm/pkg-dir@3.0.0",
        "pkg:npm/resolve-cwd@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/nice-try@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-key@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shebang-regex@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shebang-command@1.2.0",
      "dependsOn": [
        "pkg:npm/shebang-regex@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/cross-spawn@6.0.5",
      "dependsOn": [
        "pkg:npm/nice-try@1.0.5",
        "pkg:npm/path-key@2.0.1",
        "pkg:npm/semver@5.7.1",
        "pkg:npm/shebang-command@1.2.0",
        "pkg:npm/which@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/end-of-stream@1.4.4",
      "dependsOn": [
        "pkg:npm/once@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/pump@3.0.0",
      "dependsOn": [
        "pkg:npm/end-of-stream@1.4.4",
        "pkg:npm/once@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/get-stream@4.1.0",
      "dependsOn": [
        "pkg:npm/pump@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/npm-run-path@2.0.2",
      "dependsOn": [
        "pkg:npm/path-key@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/p-finally@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/signal-exit@3.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-eof@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/execa@1.0.0",
      "dependsOn": [
        "pkg:npm/cross-spawn@6.0.5",
        "pkg:npm/get-stream@4.1.0",
        "pkg:npm/is-stream@1.1.0",
        "pkg:npm/npm-run-path@2.0.2",
        "pkg:npm/p-finally@1.0.0",
        "pkg:npm/signal-exit@3.0.3",
        "pkg:npm/strip-eof@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/ip-regex@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/default-gateway@4.2.0",
      "dependsOn": [
        "pkg:npm/execa@1.0.0",
        "pkg:npm/ip-regex@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/internal-ip@4.3.0",
      "dependsOn": [
        "pkg:npm/default-gateway@4.2.0",
        "pkg:npm/ipaddr.js@1.9.1"
      ]
    },
    {
      "ref": "pkg:npm/is-absolute-url@3.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/killable@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/loglevel@1.7.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-wsl@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/opn@5.5.0",
      "dependsOn": [
        "pkg:npm/is-wsl@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/retry@0.12.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/p-retry@3.0.1",
      "dependsOn": [
        "pkg:npm/retry@0.12.0"
      ]
    },
    {
      "ref": "pkg:npm/async@2.6.3",
      "dependsOn": [
        "pkg:npm/lodash@4.17.21"
      ]
    },
    {
      "ref": "pkg:npm/debug@3.2.7",
      "dependsOn": [
        "pkg:npm/ms@2.1.3"
      ]
    },
    {
      "ref": "pkg:npm/portfinder@1.0.28",
      "dependsOn": [
        "pkg:npm/async@2.6.3",
        "pkg:npm/debug@3.2.7",
        "pkg:npm/mkdirp@0.5.5"
      ]
    },
    {
      "ref": "pkg:npm/ajv-errors@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/schema-utils@1.0.0",
      "dependsOn": [
        "pkg:npm/ajv-errors@1.0.1",
        "pkg:npm/ajv-keywords@3.5.2",
        "pkg:npm/ajv@6.12.6"
      ]
    },
    {
      "ref": "pkg:npm/node-forge@0.10.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/selfsigned@1.10.8",
      "dependsOn": [
        "pkg:npm/node-forge@0.10.0"
      ]
    },
    {
      "ref": "pkg:npm/batch@0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/setprototypeof@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-errors@1.6.3",
      "dependsOn": [
        "pkg:npm/depd@1.1.2",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/setprototypeof@1.1.0",
        "pkg:npm/statuses@1.5.0"
      ]
    },
    {
      "ref": "pkg:npm/serve-index@1.9.1",
      "dependsOn": [
        "pkg:npm/accepts@1.3.7",
        "pkg:npm/batch@0.6.1",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/http-errors@1.6.3",
        "pkg:npm/mime-types@2.1.29",
        "pkg:npm/parseurl@1.3.3"
      ]
    },
    {
      "ref": "pkg:npm/http-parser-js@0.5.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/websocket-extensions@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/websocket-driver@0.7.4",
      "dependsOn": [
        "pkg:npm/http-parser-js@0.5.3",
        "pkg:npm/safe-buffer@5.1.2",
        "pkg:npm/websocket-extensions@0.1.4"
      ]
    },
    {
      "ref": "pkg:npm/faye-websocket@0.11.3",
      "dependsOn": [
        "pkg:npm/websocket-driver@0.7.4"
      ]
    },
    {
      "ref": "pkg:npm/sockjs@0.3.21",
      "dependsOn": [
        "pkg:npm/faye-websocket@0.11.3",
        "pkg:npm/uuid@3.4.0",
        "pkg:npm/websocket-driver@0.7.4"
      ]
    },
    {
      "ref": "pkg:npm/querystringify@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/url-parse@1.5.1",
      "dependsOn": [
        "pkg:npm/querystringify@2.2.0",
        "pkg:npm/requires-port@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/original@1.0.2",
      "dependsOn": [
        "pkg:npm/url-parse@1.5.1"
      ]
    },
    {
      "ref": "pkg:npm/eventsource@1.0.7",
      "dependsOn": [
        "pkg:npm/original@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/json3@3.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sockjs-client@1.5.0",
      "dependsOn": [
        "pkg:npm/debug@3.2.7",
        "pkg:npm/eventsource@1.0.7",
        "pkg:npm/faye-websocket@0.11.3",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/json3@3.3.3",
        "pkg:npm/url-parse@1.5.1"
      ]
    },
    {
      "ref": "pkg:npm/handle-thing@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-deceiver@1.2.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/select-hose@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/detect-node@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/obuf@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimalistic-assert@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wbuf@1.7.3",
      "dependsOn": [
        "pkg:npm/minimalistic-assert@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/hpack.js@2.1.6",
      "dependsOn": [
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/obuf@1.1.2",
        "pkg:npm/readable-stream@2.3.7",
        "pkg:npm/wbuf@1.7.3"
      ]
    },
    {
      "ref": "pkg:npm/spdy-transport@3.0.0",
      "dependsOn": [
        "pkg:npm/debug@4.3.1",
        "pkg:npm/detect-node@2.0.4",
        "pkg:npm/hpack.js@2.1.6",
        "pkg:npm/obuf@1.1.2",
        "pkg:npm/readable-stream@3.6.0",
        "pkg:npm/wbuf@1.7.3"
      ]
    },
    {
      "ref": "pkg:npm/spdy@4.0.2",
      "dependsOn": [
        "pkg:npm/debug@4.3.1",
        "pkg:npm/handle-thing@2.0.1",
        "pkg:npm/http-deceiver@1.2.7",
        "pkg:npm/select-hose@2.0.0",
        "pkg:npm/spdy-transport@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/supports-color@6.1.0",
      "dependsOn": [
        "pkg:npm/has-flag@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/punycode@1.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/querystring@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/url@0.11.0",
      "dependsOn": [
        "pkg:npm/punycode@1.3.2",
        "pkg:npm/querystring@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/prr@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/errno@0.1.8",
      "dependsOn": [
        "pkg:npm/prr@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/memory-fs@0.4.1",
      "dependsOn": [
        "pkg:npm/errno@0.1.8",
        "pkg:npm/readable-stream@2.3.7"
      ]
    },
    {
      "ref": "pkg:npm/ansi-colors@3.2.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/webpack-log@2.0.0",
      "dependsOn": [
        "pkg:npm/ansi-colors@3.2.4",
        "pkg:npm/uuid@3.4.0"
      ]
    },
    {
      "ref": "pkg:npm/webpack-dev-middleware@3.7.3",
      "dependsOn": [
        "pkg:npm/memory-fs@0.4.1",
        "pkg:npm/mime@2.5.2",
        "pkg:npm/mkdirp@0.5.5",
        "pkg:npm/range-parser@1.2.1",
        "pkg:npm/webpack-log@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/async-limiter@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ws@6.2.1",
      "dependsOn": [
        "pkg:npm/async-limiter@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/emoji-regex@7.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-regex@4.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-ansi@5.2.0",
      "dependsOn": [
        "pkg:npm/ansi-regex@4.1.0"
      ]
    },
    {
      "ref": "pkg:npm/string-width@3.1.0",
      "dependsOn": [
        "pkg:npm/emoji-regex@7.0.3",
        "pkg:npm/is-fullwidth-code-point@2.0.0",
        "pkg:npm/strip-ansi@5.2.0"
      ]
    },
    {
      "ref": "pkg:npm/wrap-ansi@5.1.0",
      "dependsOn": [
        "pkg:npm/ansi-styles@3.2.1",
        "pkg:npm/string-width@3.1.0",
        "pkg:npm/strip-ansi@5.2.0"
      ]
    },
    {
      "ref": "pkg:npm/cliui@5.0.0",
      "dependsOn": [
        "pkg:npm/string-width@3.1.0",
        "pkg:npm/strip-ansi@5.2.0",
        "pkg:npm/wrap-ansi@5.1.0"
      ]
    },
    {
      "ref": "pkg:npm/require-main-filename@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/set-blocking@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/which-module@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/y18n@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/camelcase@5.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/decamelize@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs-parser@13.1.2",
      "dependsOn": [
        "pkg:npm/camelcase@5.3.1",
        "pkg:npm/decamelize@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/yargs@13.3.2",
      "dependsOn": [
        "pkg:npm/cliui@5.0.0",
        "pkg:npm/find-up@3.0.0",
        "pkg:npm/get-caller-file@2.0.5",
        "pkg:npm/require-directory@2.1.1",
        "pkg:npm/require-main-filename@2.0.0",
        "pkg:npm/set-blocking@2.0.0",
        "pkg:npm/string-width@3.1.0",
        "pkg:npm/which-module@2.0.0",
        "pkg:npm/y18n@4.0.1",
        "pkg:npm/yargs-parser@13.1.2"
      ]
    },
    {
      "ref": "pkg:npm/webpack-dev-server@3.11.2",
      "dependsOn": [
        "pkg:npm/ansi-html@0.0.7",
        "pkg:npm/bonjour@3.5.0",
        "pkg:npm/chokidar@2.1.8",
        "pkg:npm/compression@1.7.4",
        "pkg:npm/connect-history-api-fallback@1.6.0",
        "pkg:npm/debug@4.3.1",
        "pkg:npm/del@4.1.1",
        "pkg:npm/express@4.17.1",
        "pkg:npm/html-entities@1.4.0",
        "pkg:npm/http-proxy-middleware@0.19.1",
        "pkg:npm/import-local@2.0.0",
        "pkg:npm/internal-ip@4.3.0",
        "pkg:npm/ip@1.1.5",
        "pkg:npm/is-absolute-url@3.0.3",
        "pkg:npm/killable@1.0.1",
        "pkg:npm/loglevel@1.7.1",
        "pkg:npm/opn@5.5.0",
        "pkg:npm/p-retry@3.0.1",
        "pkg:npm/portfinder@1.0.28",
        "pkg:npm/schema-utils@1.0.0",
        "pkg:npm/selfsigned@1.10.8",
        "pkg:npm/semver@6.3.0",
        "pkg:npm/serve-index@1.9.1",
        "pkg:npm/sockjs-client@1.5.0",
        "pkg:npm/sockjs@0.3.21",
        "pkg:npm/spdy@4.0.2",
        "pkg:npm/strip-ansi@3.0.1",
        "pkg:npm/supports-color@6.1.0",
        "pkg:npm/url@0.11.0",
        "pkg:npm/webpack-dev-middleware@3.7.3",
        "pkg:npm/webpack-log@2.0.0",
        "pkg:npm/ws@6.2.1",
        "pkg:npm/yargs@13.3.2"
      ]
    },
    {
      "ref": "pkg:npm/casesensitivepathswebpackpluginDemo@0.0.1",
      "dependsOn": [
        "pkg:npm/@babel/core@7.12.17",
        "pkg:npm/@babel/preset-env@7.12.17",
        "pkg:npm/@babel/preset-react@7.12.13",
        "pkg:npm/babel-loader@8.2.2",
        "pkg:npm/html-webpack-plugin@5.2.0",
        "pkg:npm/jasmine-core@3.6.0",
        "pkg:npm/jasmine@3.6.4",
        "pkg:npm/karma-chrome-launcher@3.1.0",
        "pkg:npm/karma-cli@2.0.0",
        "pkg:npm/karma-coverage@2.0.3",
        "pkg:npm/karma-jasmine@4.0.1",
        "pkg:npm/karma-phantomjs-launcher@1.0.4",
        "pkg:npm/karma-webpack@5.0.0",
        "pkg:npm/karma@6.1.1",
        "pkg:npm/phantomjs-polyfill@0.0.2",
        "pkg:npm/phantomjs-prebuilt@2.1.16",
        "pkg:npm/react-dom@15.7.0",
        "pkg:npm/react@15.7.0",
        "pkg:npm/webpack-dev-server@3.11.2",
        "pkg:npm/webpack@5.23.0"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/case-sensitive-paths-webpack-plugin@2.4.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-07-24T21:47:53Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Friday, July 24, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'case-sensitive-paths-webpack-plugin' with version '2.4.0'. The application also has 1 child modules/components. The package type in this SBOM is npm with 7 purl namespaces described under components. The components were identified from the source files: demo/package-lock.json, package-lock.json."
    }
  ]
}