{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:6991da2e-3ab2-4084-b8b8-492df275a8a0",
  "version": 1,
  "metadata": {
    "timestamp": "2026-08-12T14:12:57Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "code-red",
      "group": "",
      "version": "1.0.4",
      "description": "code-red",
      "purl": "pkg:npm/code-red@1.0.4",
      "bom-ref": "pkg:npm/code-red@1.0.4",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "build, test, prepublishOnly, repl"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@aashutoshrathi\\n@babel\\n@jridgewell\\n@types"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "pnpm-lock.yaml"
      }
    ]
  },
  "components": [
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "@aashutoshrathi",
      "name": "word-wrap",
      "version": "1.2.6",
      "description": "Wrap words to a specified length.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d588ecd92bccf137e5111fce0f770e8e15963996f9f00dadef0a44d92f577c161388897e5c58501b66e3cb83eed48f8402508d533443603745c056142af5dc20"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40aashutoshrathi/word-wrap@1.2.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/aashutoshrathi/word-wrap"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/aashutoshrathi/word-wrap.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@aashutoshrathi/word-wrap@1.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "code-frame",
      "version": "7.22.10",
      "description": "Generate errors that contain a code frame that point to source locations.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fca288306e1410bdf95a623d3a5bcc86eaf0b72b63bd7a0570636b3afc86f7323303c6263e356d21951fedbd39f933ceec6eff18498b1c36a80a00021e5f6184"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/code-frame@7.22.10",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-code-frame"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/code-frame@7.22.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "helper-validator-identifier",
      "version": "7.22.5",
      "description": "Validate identifier/keywords name",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6895eefba944aeaf25b69f898642547e4d4c4c6cae038bfb7f7a40f812791cb7cd0ba9c04340a98bdb8eaae523f077a1834694887cd641b3952466a8eb3b4101"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-validator-identifier@7.22.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-validator-identifier@7.22.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "highlight",
      "version": "7.22.10",
      "description": "Syntax highlight JavaScript strings for output in terminals.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "efc694b55713ecc52c72bd0ae662049e4c313c4d0c6b1911e51c51c2e1da43e26e5390264cf858f9da3699dcd54e7209269c81825aa5da97a1b812161ee83e59"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/highlight@7.22.10",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-highlight"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/highlight@7.22.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Justin Ridgewell <justin@ridgewell.name>"
        }
      ],
      "group": "@jridgewell",
      "name": "gen-mapping",
      "version": "0.3.3",
      "description": "Generate source maps",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1cb85258e2d18bcef9ce38cc1bfafe36fd28096f2e9866f4060121c97ddd0d7dde83066d07c3ea2e78f3df279db7c4794ad06bcdc838681a6787c500f43d41a1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/gen-mapping@0.3.3",
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/gen-mapping@0.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "benchmark, benchmark:install, benchmark:only, prebuild, build, build:rollup, build:ts, lint, lint:prettier, lint:ts, pretest, test, test:debug, test:lint, test:lint:prettier, test:lint:ts, test:only, test:coverage, test:watch, prepublishOnly, preversion"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build, build:rollup, build:ts, test:watch"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Justin Ridgewell <justin@ridgewell.name>"
        }
      ],
      "group": "@jridgewell",
      "name": "resolve-uri",
      "version": "3.1.1",
      "description": "Resolve a URI relative to an optional base URI",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "75261987b1e1083b422a6e106a45f4c45a6c443aa38ed65ffe48c8fefdd3dcdc2de6bf3fab3fccd7d17dc92c8ea94f78497066786f6db53ba5f989d1e0b3b114"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/resolve-uri@3.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/resolve-uri@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "prebuild, build, build:rollup, build:ts, lint, lint:prettier, lint:ts, pretest, test, test:debug, test:lint, test:lint:prettier, test:lint:ts, test:only, test:coverage, test:watch, prepublishOnly, preversion"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build, build:rollup, build:ts, test:watch"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Justin Ridgewell <justin@ridgewell.name>"
        }
      ],
      "group": "@jridgewell",
      "name": "set-array",
      "version": "1.1.2",
      "description": "Like a Set, but provides the index of the `key` in the backing array",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c6792c7ae3400ccd20b766ecf81be13b4a7bf0c93beb662765db2ecc5574d7c3681b54a3d52090be94aa6bb5d46936a6e6f0066ac00157da9701230a9c533033"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/set-array@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/set-array@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "prebuild, build, build:rollup, build:ts, lint, lint:prettier, lint:ts, pretest, test, test:debug, test:lint, test:lint:prettier, test:lint:ts, test:only, test:coverage, test:watch, prepublishOnly, preversion"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build, build:rollup, build:ts, test:watch"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Justin Ridgewell <justin@ridgewell.name>"
        }
      ],
      "group": "@jridgewell",
      "name": "source-map",
      "version": "0.3.5",
      "description": "Packages @jridgewell/trace-mapping and @jridgewell/gen-mapping into the familiar source-map API",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "513600523ff0be2c1db0c7f3a1226ca49c5b907e68d6c9f3c17d3fff410d5f5bbfe7992465991c4d93fabbd6f028692ff9d924f5ab789b50a9b74b98f3491ca5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/source-map@0.3.5",
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/source-map@0.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "prebuild, build, build:rollup, build:ts, lint, lint:prettier, lint:ts, pretest, test, test:debug, test:lint, test:lint:prettier, test:lint:ts, test:only, test:coverage, test:watch, prepublishOnly, preversion"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build, build:rollup, build:ts, test:watch"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Rich Harris"
        }
      ],
      "group": "@jridgewell",
      "name": "sourcemap-codec",
      "version": "1.4.15",
      "description": "Encode/decode sourcemap mappings",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "785dabc4246e9442971d34620eb0f2e9eacc616a8dc382cf750f14400e21baec5a42c55e44f165da833ca031b130584951665ff4c7292ed25ab030d96ff0697a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.4.15",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/jridgewell/sourcemap-codec.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/sourcemap-codec@1.4.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "benchmark, benchmark:install, benchmark:only, build, build:rollup, build:ts, lint, lint:prettier, lint:ts, prebuild, prepublishOnly, preversion, pretest, test, test:debug, test:lint, test:lint:prettier, test:lint:ts, test:only, test:coverage, test:watch"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build, build:rollup, build:ts, test:watch"
        },
        {
          "name": "ImportedModules",
          "value": "@jridgewell/sourcemap-codec,encode,@jridgewell/sourcemap-codec/encode"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ],
        "occurrences": [
          {
            "location": "src/print/index.js",
            "line": 3
          },
          {
            "location": "src/print/index.js",
            "line": 120
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Justin Ridgewell <justin@ridgewell.name>"
        }
      ],
      "group": "@jridgewell",
      "name": "trace-mapping",
      "version": "0.3.19",
      "description": "Trace the original position through a source map",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "91fdfb42d7d6f87c31fdbb9618c3dc47ad2217dce21daeabfc26492076e6726e3ed2aad78957717a0007d05eb275d11543bcdd9237060a00b352ef8171b850c7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.19",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/jridgewell/trace-mapping.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/trace-mapping@0.3.19",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "benchmark, benchmark:install, benchmark:only, build, build:rollup, build:ts, lint, lint:prettier, lint:ts, prebuild, prepublishOnly, preversion, test, test:debug, test:lint, test:lint:prettier, test:lint:ts, test:only, test:watch"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build, build:rollup, build:ts, test:watch"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "estree",
      "version": "1.0.1",
      "description": "TypeScript definitions for estree",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2c6e28a55b3600d599d5326829cf77ee232636cb4cfddd1a7b5bcd6e706f061a8249ece05543b370b0aa6c8e5e955f15cba58ac0a8daa91fb33bd54a8ab04108"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40types/estree@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/estree"
        },
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/estree@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "/app/node_modules/@types/estree"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "node",
      "version": "20.4.10",
      "description": "TypeScript definitions for Node.js",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bf0cc58a2cbc467e84d0cb40d77fc2c718296a7fcde9478d611f6852eea4b895b1bbacc293df2dadc0e9f020616ed69ebaaf52ca40a65e416bda558ba0f72f2e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40types/node@20.4.10",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node"
        },
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/node@20.4.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "/app/node_modules/@types/node"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn",
      "version": "8.10.0",
      "description": "ECMAScript parser",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "174480999f2252d4bffe6f039824c0d23961e930ca9074322bac5ce95e0a0d3c99280f5d9ef5fdff7b114d542b5a6efd82550065b9e698d71d6305081d65726f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/acorn@8.10.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/acornjs/acorn"
        },
        {
          "type": "vcs",
          "url": "https://github.com/acornjs/acorn.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn@8.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:bin",
          "value": "acorn"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "prepare"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:risky_scripts",
          "value": "prepare"
        },
        {
          "name": "ImportedModules",
          "value": "acorn"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ],
        "occurrences": [
          {
            "location": "src/index.js",
            "line": 1
          },
          {
            "location": "src/index.js",
            "line": 274
          },
          {
            "location": "src/index.js",
            "line": 299
          },
          {
            "location": "src/index.js",
            "line": 330
          },
          {
            "location": "src/index.js",
            "line": 371
          },
          {
            "location": "src/index.js",
            "line": 386
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "ansi-styles",
      "version": "3.2.1",
      "description": "ANSI escape codes for styling strings in the terminal",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "553d1923a91945d4e1f18c89c3748c6d89bfbbe36a7ec03112958ed0f7fdb2af3f7bde16c713a93cac7d151d459720ad3950cd390fbc9ed96a17189173eaf9a8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ansi-styles@3.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@3.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, screenshot"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "group": "",
      "name": "chalk",
      "version": "2.4.2",
      "description": "Terminal string styling done right",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32d8be7fd96924d730178b5657cfcead34ed1758198be7fc16a97201da2eada95c156150585dbe3600874a18e409bf881412eaf5bb99c04d71724414e29792b9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/chalk@2.4.2",
      "type": "library",
      "bom-ref": "pkg:npm/chalk@2.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, bench, coveralls"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Heather Arthur <fayearthur@gmail.com>"
        }
      ],
      "group": "",
      "name": "color-convert",
      "version": "1.9.3",
      "description": "Plain color conversion functions",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "41f014b5dfaf15d02d150702f020b262dd5f616c52a8088ad9c483eb30c1f0dddca6c10102f471a7dcce1a0e86fd21c7258013f3cfdacff22e0c600bb0d55b1a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/color-convert@1.9.3",
      "type": "library",
      "bom-ref": "pkg:npm/color-convert@1.9.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "pretest, test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "DY <dfcreative@gmail.com>"
        }
      ],
      "group": "",
      "name": "color-name",
      "version": "1.1.3",
      "description": "A list of color names and its values",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ef67d27a784cc361d931354778203d2829a91086f35a242c8cdf811dc05b4bdbebd66b6dfaf2633dd92c20135498a016f131540cf24ae52514dd0844f4d1170f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/color-name@1.1.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/dfcreative/color-name"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-name@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Thorsten Lorenz <thlorenz@gmx.de> (http://thlorenz.com)"
        }
      ],
      "group": "",
      "name": "deep-is",
      "version": "0.1.4",
      "description": "node's assert.deepEqual algorithm except for NaN being equal to NaN",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a083f392c993838fccae289a6063bea245c34fbced9ffc37129b6fffe81221d31d2ac268d2ee027d834524fcbee1228cb82a86c36c319c0f9444c837b7c6bf6d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/deep-is@0.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/thlorenz/deep-is.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deep-is@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Luke Edwards <luke.edwards05@gmail.com> (https://lukeed.com)"
        }
      ],
      "group": "",
      "name": "dequal",
      "version": "2.0.3",
      "description": "A tiny (304B to 489B) utility for check for deep equality",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d237bea8f28710ca21bdf453084a370ab3c6e9c033018826ccacb1462612483912e9e1897725499bb59a600e4409a003f702c1d93e0411eca603968555c61708"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/dequal@2.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/dequal@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "build, pretest, postbuild, test"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diff",
      "version": "5.1.0",
      "description": "A javascript text diff implementation.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0fe9a4faa13c542fcf014ae5014df837e55f5debf48217b9cb09a9aab6b0a6199565cd5b11f9f9eaea3daa9c86a75a78c69cce1e4496e33b4177a2fb5f1e000b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/diff@5.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/kpdecker/jsdiff.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "clean, build:node, test"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build:node"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dts-buddy",
      "version": "0.1.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "235d819e053e3456369e36d3142a620eacaf105498a0cc6a329c01b75a7290111b598e836f20ddf66d063b3775861a520c70ee960990527b70e4464f35aa6d34"
        }
      ],
      "purl": "pkg:npm/dts-buddy@0.1.9",
      "type": "library",
      "bom-ref": "pkg:npm/dts-buddy@0.1.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:bin",
          "value": "./src/cli.js"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "prepublishOnly, test"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "escape-string-regexp",
      "version": "1.0.5",
      "description": "Escape RegExp special characters",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bdb468ac1e455105af95ad7a53c47faa06852326b6a86cf00eb366099b982ab6dd494306e88d5908641179f911561b8e9081959deec1437e4349fa35aaf26a16"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@1.0.5",
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Simon Lydell"
        }
      ],
      "group": "",
      "name": "eslump",
      "version": "3.0.0",
      "description": "CLI tool for fuzz testing JavaScript parsers and suchlike programs.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4c0840cad547087324d320f109b4bcf35bae0043dfa2a7679a9da69300e006833995505fa04f67631ab42c2760252f0d01257c57c348505dcde188e18aeb9306"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/eslump@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/eslump@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:bin",
          "value": "eslump"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "doctoc, test, prepublishOnly"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Rich Harris"
        }
      ],
      "group": "",
      "name": "estree-walker",
      "version": "3.0.3",
      "description": "Traverse an ESTree-compliant AST",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ed150a7d781230c933b7a66e5e6a9aa4ebab2c63cf7e08fa97db9167b9511a896f934cb6ca871cdf92dd731282e4f419767d8332a8a8010d8da1672b4ca9a6ea"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/estree-walker@3.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/Rich-Harris/estree-walker"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/estree-walker@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "prepublishOnly, test"
        },
        {
          "name": "ImportedModules",
          "value": "estree-walker,walk,estree-walker/walk"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ],
        "occurrences": [
          {
            "location": "src/index.js",
            "line": 2
          },
          {
            "location": "src/index.js",
            "line": 154
          },
          {
            "location": "src/index.js",
            "line": 372
          },
          {
            "location": "src/index.js",
            "line": 388
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esutils",
      "version": "2.0.3",
      "description": "utility box for ECMAScript language tools",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "915b1ca97938382a7af126747648042958baffc8a3df4d0a0564c9ab7d8ffdd61e5934b02b8d56c93c5a94dd5e46603967d514fcb5fd0fb1564a657d480631ea"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/esutils@2.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/estools/esutils"
        },
        {
          "type": "vcs",
          "url": "http://github.com/estools/esutils.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esutils@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, lint, unit-test, generate-regex"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ramesh Nair <ram@hiddentao.com> (http://www.hiddentao.com/)"
        }
      ],
      "group": "",
      "name": "fast-levenshtein",
      "version": "2.0.6",
      "description": "Efficient implementation of Levenshtein algorithm  with locale-specific collator support.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0c25eee887e1a9c92ced364a6371f1a77cbaaa9858e522599ab58c0eb29c11148e5d641d32153d220fcf62bcf2c3fba5f63388ca1d0de0cd2d6c2e61a1d83c77"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fast-levenshtein@2.0.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/hiddentao/fast-levenshtein.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-levenshtein@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "build, prepublish, benchmark, test"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:risky_scripts",
          "value": "prepublish"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Terkel Gjervig"
        }
      ],
      "group": "",
      "name": "globalyzer",
      "version": "0.1.0",
      "description": "Detects and extract the glob part of a string",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e34a0d4ccf547c6e9a066b8ac64fe08879f99d0f11573fd24b822beb38333aff7fa82de4299f6fe1eb464dc25b125fcdc95407ec5194eddf97d5e82be7b31dd9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/globalyzer@0.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/terkelg/globalyzer"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globalyzer@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Terkel Gjervig"
        }
      ],
      "group": "",
      "name": "globrex",
      "version": "0.1.2",
      "description": "Glob to regular expression with support for extended globs",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b872606f000cc0d15fe662ecb7b2162cd835e31d4291eaa09496ff2b77688b8770eaad88bc002633f63cd647afcbcdf03fe4acb7e9eeb454d838683777596cc6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/globrex@0.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/terkelg/globrex"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globrex@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "has-flag",
      "version": "3.0.0",
      "description": "Check if argv has a specific flag",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b0a25fd7e71e401af848c92f427043343b5fe135e95615466ad7aed2df75f1b977d059db1369b8bcd2d7f9559efdda6395bf87ba0198cd6eee4171fdf073c463"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/has-flag@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/has-flag@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Rich Harris"
        }
      ],
      "group": "",
      "name": "is-reference",
      "version": "3.0.1",
      "description": "Determine whether an AST node is a reference",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6da2497502e261a25dbc56c9a97adc1afdd6537402cc1954708e5085b7ac226ebfc4fb2f98efb6083a22fc630e141404426f8f5e4c0e3eba7d28ae68cd9b29db"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-reference@3.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/Rich-Harris/is-reference#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/Rich-Harris/is-reference.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-reference@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, prepublishOnly"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Simon Lydell"
        }
      ],
      "group": "",
      "name": "js-tokens",
      "version": "4.0.0",
      "description": "A regex that tokenizes JavaScript.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "45d2547e5704ddc5332a232a420b02bb4e853eef5474824ed1b7986cf84737893a6a9809b627dca02b53f5b7313a9601b690f690233a49bce0e026aeb16fcf29"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/js-tokens@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/js-tokens@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, esprima-compare, build, dev"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Luke Edwards <luke.edwards05@gmail.com> (https://lukeed.com)"
        }
      ],
      "group": "",
      "name": "kleur",
      "version": "4.1.5",
      "description": "The fastest Node.js library for formatting terminal text with ANSI colors~!",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a3e34efbc5ab462404138ffb9f044984dd475a9566266e75d690475313cbb69d015084b3941a653916129937250a726f42adad2aefec825df156991ced95ae41"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/kleur@4.1.5",
      "type": "library",
      "bom-ref": "pkg:npm/kleur@4.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "build, test"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "George Zahariev <z@georgezahariev.com>"
        }
      ],
      "group": "",
      "name": "levn",
      "version": "0.4.1",
      "description": "Light ECMAScript (JavaScript) Value Notation - human written, concise, typed, flexible",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f9b4f6b87e04e4b184ee1fe7ddebdc4bfb109495c2a48a7aca6f0e589e5e57afbaec3b2a97f2da693eea24102ddabcdfa1aff94011818710e2c7574cb7691029"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/levn@0.4.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/gkz/levn"
        },
        {
          "type": "vcs",
          "url": "git://github.com/gkz/levn.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/levn@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Rich Harris"
        }
      ],
      "group": "",
      "name": "locate-character",
      "version": "3.0.0",
      "description": "Get the line and column number of a specific character in a string",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "496d77c2cec18da789ea9ed0e823b69dc85b6047375f727a5ab9934c3b68ef230fa954994d4c98e538db89df806fc80b9c04edca062d8832091904519f664e88"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/locate-character@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://gitlab.com/Rich-Harris/locate-character#README"
        },
        {
          "type": "vcs",
          "url": "git+https://gitlab.com/Rich-Harris/locate-character.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/locate-character@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, build, prepublishOnly"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Rich Harris"
        }
      ],
      "group": "",
      "name": "magic-string",
      "version": "0.30.2",
      "description": "Modify strings, generate sourcemaps",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "94d65dbbba5ec2dabf66f594a7d5a97ffc7b5b3313b11dba4d6574dc1459ad716cbfe048e9dcbc44088a826d6e33f932474ac27d472abce957286eba2a1206ba"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/magic-string@0.30.2",
      "type": "library",
      "bom-ref": "pkg:npm/magic-string@0.30.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "build, changelog, format, lint, prepare, prepublishOnly, release, pretest, test, bench, watch"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build, watch"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:risky_scripts",
          "value": "prepare"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mkdirp",
      "version": "1.0.4",
      "description": "Recursively mkdir, like `mkdir -p`",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bd5a95650c9fdd62f1d9285dd2a27dc6ebea800c8a3cb022a884c4b6a5b4a08523ce8dcf78f0dde9f5bd885cf7d1e7fb62ca7fa225aa6e1b33786596d93e86cf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mkdirp@1.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/node-mkdirp.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:bin",
          "value": "bin/cmd.js"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, snap, preversion, postversion, postpublish"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Luke Edwards <luke.edwards05@gmail.com> (https://lukeed.com)"
        }
      ],
      "group": "",
      "name": "mri",
      "version": "1.2.0",
      "description": "Quickly scan for CLI flags and arguments",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b73cec91bddb1bc2ef606145fe60d3a6ade3a48e90f707372c49816a086ef83742b2c77515a90dec17348553661321aad5bab74607e409bddc9902e934f3aba0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mri@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/mri@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "build, bench, pretest, test"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      },
      "tags": [
        "cli"
      ]
    },
    {
      "authors": [
        {
          "name": "villa.gao <jky239@gmail.com>"
        }
      ],
      "group": "",
      "name": "multimap",
      "version": "1.1.0",
      "description": "multi-map which allow multiple values for the same key",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d19211f4f6ac3f1197991b0417c8ec0f39ddcc70e3eed21abfe2549af20507f587b30962167aaec44093fc37bb191e3283df64cbf36544a253f361b5cb6ef56f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/multimap@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/villadora/multi-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/multimap@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "lint, test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "object-assign",
      "version": "4.1.1",
      "description": "ES2015 `Object.assign()` ponyfill",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ac98134279149c7d6c170f324fa552537cc3dec5a6bbab19848b1e63c557f8646edcfe85ec5bbe24d0e85df9251256cb2529dcdc55101d57b8714e618fe05c52"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/object-assign@4.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/object-assign@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, bench"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "George Zahariev <z@georgezahariev.com>"
        }
      ],
      "group": "",
      "name": "optionator",
      "version": "0.9.3",
      "description": "option parsing and help generation",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2630a8ca9a7e8ca9f5b6d105131c617ad08a789b7dce102002f7b91571e2c53bc50d6ff968492d5fd6ee7c128b45131d53b6cdb692df706bbde01ddc7442608e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/optionator@0.9.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/gkz/optionator"
        },
        {
          "type": "vcs",
          "url": "git://github.com/gkz/optionator.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/optionator@0.9.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "periscopic",
      "version": "3.1.0",
      "description": "periscopic",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bca890f1146d925f4ffabffea1e7e1db90b77e1c9ba6d9072826523e5717889bb1dad245e791a7123dc1567e00e6029fabd3565975ebc641c1c153d47c7d28a7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/periscopic@3.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/periscopic@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, prepublishOnly"
        },
        {
          "name": "ImportedModules",
          "value": "periscopic"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ],
        "occurrences": [
          {
            "location": "src/print/index.js",
            "line": 1
          },
          {
            "location": "src/print/index.js",
            "line": 53
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "George Zahariev <z@georgezahariev.com>"
        }
      ],
      "group": "",
      "name": "prelude-ls",
      "version": "1.2.1",
      "description": "prelude.ls is a functionally oriented utility library. It is powerful and flexible. Almost all of its functions are curried. It is written in, and is the recommended base library for, LiveScript.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "be47033eb459a354192db9f944b18fa60fd698843ae6aa165a170629ffdbe5ea659246ab5f49bdcfca6909ab789a53aa52c5a9c8db9880edd5472ad81d2cd7e6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/prelude-ls@1.2.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://preludels.com"
        },
        {
          "type": "vcs",
          "url": "git://github.com/gkz/prelude-ls.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prelude-ls@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "random-int",
      "version": "2.0.1",
      "description": "Generate a random integer",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6002e358ad91b7d10c22ff4117fde6be5cc55906ad86cbdbe5466637542685f20e7dc4185dcfd470bce0d1a6e5a9eb120690552edd93970bff793b818782d751"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/random-int@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/random-int@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "random-item",
      "version": "3.1.0",
      "description": "Get a random item from an array",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d03c804fc2d804d40a4a4a9c3e389afc736858267925605d0105a3050561e43315bf716fed5f7423cfc0b947fc356e337459f6ee2f6a8fc2a9eb023926c8a238"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/random-item@3.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/random-item@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Luke Edwards <luke.edwards05@gmail.com> (https://lukeed.com)"
        }
      ],
      "group": "",
      "name": "sade",
      "version": "1.8.1",
      "description": "Smooth (CLI) operator 🎶",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5a9770995f55e5a3f938029c0216b1d50028bd7c1a89ed5fa6c2106cb9fff520e29b072d3df057b1f966bfe5032e6f0d3da5267fbbc118f0f5a07af26c5e9d4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/sade@1.8.1",
      "type": "library",
      "bom-ref": "pkg:npm/sade@1.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "build, test"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Shape Security"
        }
      ],
      "group": "",
      "name": "shift-ast",
      "version": "6.0.0",
      "description": "constructors for the Shift AST format",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5d7c43704056541cea5977cd60994bc89d7ff6432f3975515e2a8f8e43ab4c20b9a91b01bc43093112cb161537b67f2e7b9e98ec8672044e9b7b116e9b940b53"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/shift-ast@6.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/shapesecurity/shift-ast-js"
        },
        {
          "type": "vcs",
          "url": "https://github.com/shapesecurity/shift-ast-js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shift-ast@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, build, lint, prepare"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:risky_scripts",
          "value": "prepare"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Shape Security"
        }
      ],
      "group": "",
      "name": "shift-ast",
      "version": "6.1.0",
      "description": "constructors for the Shift AST format",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "563e1750824814f221e95701189d618c7fe433cf1719eafde0fafb46fc5afa2744ca50ecaf0b4bc36ebc1e8c46a39c5178be93dc375197ff7f3ebd578a167ff1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/shift-ast@6.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/shapesecurity/shift-ast-js"
        },
        {
          "type": "vcs",
          "url": "https://github.com/shapesecurity/shift-ast-js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shift-ast@6.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, build, lint, prepare"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:risky_scripts",
          "value": "prepare"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Shape Security"
        }
      ],
      "group": "",
      "name": "shift-codegen",
      "version": "7.0.3",
      "description": "code generator for Shift format ASTs",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "75f09555d045d2a67aa646a34376e3c5174d125b72c4421355eeed049910b76782237ce75244b1ab45527bfb535aad4b2877804b81ee3a2a9812e1cc1644aaf7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/shift-codegen@7.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/shapesecurity/shift-codegen-js"
        },
        {
          "type": "vcs",
          "url": "https://github.com/shapesecurity/shift-codegen-js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shift-codegen@7.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, build, lint, prepare"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:risky_scripts",
          "value": "prepare"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Shape Security"
        }
      ],
      "group": "",
      "name": "shift-fuzzer",
      "version": "2.0.0",
      "description": "generate random valid Shift format ASTs",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8605788ea5c42d84745291039539d872fd065ef85757fcb797260dc86b53ab543a11d1480bd2cb1e396b7d516deddd55cb326a3e497f7cc137d6d6b42ab1e24d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/shift-fuzzer@2.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/shapesecurity/shift-fuzzer-js"
        },
        {
          "type": "vcs",
          "url": "https://github.com/shapesecurity/shift-fuzzer-js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shift-fuzzer@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, build, prepublish"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:risky_scripts",
          "value": "prepublish"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Shape Security"
        }
      ],
      "group": "",
      "name": "shift-parser",
      "version": "7.0.3",
      "description": "ECMAScript parser that produces a Shift format AST",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b985f6391c997ca66b51ce2228a90ef4a3a1cd44b10ab48193b40ae9999284877e04ea35821d48c1e715cbdef29f2393a6684f594b6d8c2f01cec9d097ae597b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/shift-parser@7.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/shapesecurity/shift-parser-js"
        },
        {
          "type": "vcs",
          "url": "https://github.com/shapesecurity/shift-parser-js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shift-parser@7.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "clean, test-specific, test, coverage, lint, build, prepare, benchmark, profile, regenerate-unicode"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:risky_scripts",
          "value": "prepare"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "authors": [
        {
          "name": "Shape Security"
        }
      ],
      "group": "",
      "name": "shift-reducer",
      "version": "6.0.0",
      "description": "reducer for the Shift AST format",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dab26b6913fc76b20e8ef684fec00b6bed2d18998c554ce5992df02097ab25b698b828e9140885d168e44ce155b73d75e38366fc40a6a9e1beef2461b8c56c32"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/shift-reducer@6.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/shapesecurity/shift-reducer-js"
        },
        {
          "type": "vcs",
          "url": "https://github.com/shapesecurity/shift-reducer-js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shift-reducer@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, build, prepare, lint"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:risky_scripts",
          "value": "prepare"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Shape Security"
        }
      ],
      "group": "",
      "name": "shift-regexp-acceptor",
      "version": "2.0.3",
      "description": "Regexp acceptor for ECMAScript 2018",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b312fb7b924d505c66fa0bad1515e4b57d83e8a5600c01cdb83b24e571c1f59f8de725e8a191baa5d6751846e8dc9cfa945ec44d82c10b85808c8166d9129398"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/shift-regexp-acceptor@2.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/shapesecurity/shift-regexp-acceptor-js"
        },
        {
          "type": "vcs",
          "url": "https://github.com/shapesecurity/shift-regexp-acceptor-js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shift-regexp-acceptor@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, build, prepare, lint"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:risky_scripts",
          "value": "prepare"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "supports-color",
      "version": "5.5.0",
      "description": "Detect whether a terminal supports color",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "423563c1d5c8b78d3c308880a825f8a142ac814d84a801b3b363e9926e1a4186e39be644584716e127c5353af8b8c35999ad1ecb87f99602eb901d1a5f440ca3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/supports-color@5.5.0",
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@5.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Terkel Gjervig <terkel@terkel.com> (https://terkel.com)"
        }
      ],
      "group": "",
      "name": "tiny-glob",
      "version": "0.2.9",
      "description": "Tiny and extremely fast globbing",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83fe79b2c44f5234a187ec647f1f543c35ea85c90712c1ebe1577dcd7e79a1274665cfcc0f49b7b1f7ab3a4c16b69f7c6effa47157c41ed449801549cde96bce"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tiny-glob@0.2.9",
      "type": "library",
      "bom-ref": "pkg:npm/tiny-glob@0.2.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "bench, test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ts-api-utils",
      "version": "0.0.46",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "60a25e4b1dfd9f498c93e86ba721cac93831037b3b3f3fe3d5c5d847eb7c1dcc3066ea73391e710c62a7384c378262da51e15442ddc5243dfd007f408e7fe674"
        }
      ],
      "purl": "pkg:npm/ts-api-utils@0.0.46",
      "type": "library",
      "bom-ref": "pkg:npm/ts-api-utils@0.0.46",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "George Zahariev <z@georgezahariev.com>"
        }
      ],
      "group": "",
      "name": "type-check",
      "version": "0.4.0",
      "description": "type-check allows you to check the types of JavaScript values at runtime with a Haskell like type syntax.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e5794a1cf6ec065ea8d6c176944d9026ccc705679f39f10036befc7552be7121c8b15c83fef0b9c50e0469954df4bacead7aa765b2415fbbe69ee0aefd3a87b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/type-check@0.4.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/gkz/type-check"
        },
        {
          "type": "vcs",
          "url": "git://github.com/gkz/type-check.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-check@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Microsoft Corp."
        }
      ],
      "group": "",
      "name": "typescript",
      "version": "5.1.6",
      "description": "TypeScript is a language for application scale JavaScript development",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cda582a33459e832c4580585ad50f3d47e85557cd449f4f2e4550c5ac42553c626e493fd78ee31913211385090be141feb5cfa3bf1baba0c374a0027bef9be1c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/typescript@5.1.6",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.typescriptlang.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/Microsoft/TypeScript.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typescript@5.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:bin",
          "value": "tsc, tsserver"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, test:eslint-rules, build, build:compiler, build:tests, build:tests:notypecheck, start, clean, gulp, lint, setup-hooks"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build, build:compiler, build:tests, build:tests:notypecheck"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Bynens (https://mathiasbynens.be/)"
        }
      ],
      "group": "",
      "name": "unicode-canonical-property-names-ecmascript",
      "version": "1.0.4",
      "description": "The set of canonical Unicode property names supported in ECMAScript RegExp property escapes.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8c3acd9d7587778a07893667c7f646ee0b544d5a7e8027134caafc2f41e3970a6144e116dfe1e29be229bc2fb17091057a06a988c67265ed360b2b8e9d199b9d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/unicode-canonical-property-names-ecmascript@1.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mathiasbynens/unicode-canonical-property-names-ecmascript"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mathiasbynens/unicode-canonical-property-names-ecmascript.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unicode-canonical-property-names-ecmascript@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Bynens (https://mathiasbynens.be/)"
        }
      ],
      "group": "",
      "name": "unicode-match-property-ecmascript",
      "version": "1.0.4",
      "description": "Match a Unicode property or property alias to its canonical property name per the algorithm used for RegExp Unicode property escapes in ECMAScript.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f8428875e6f4df9edb27e0fd73aa71ee946d0b75782348ed37e5f12976da7a6315e1313e7543abe0339958746ff95f73234be93f63d5f0e1214263d224474ae"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/unicode-match-property-ecmascript@1.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mathiasbynens/unicode-match-property-ecmascript"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mathiasbynens/unicode-match-property-ecmascript.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unicode-match-property-ecmascript@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Bynens (https://mathiasbynens.be/)"
        }
      ],
      "group": "",
      "name": "unicode-match-property-value-ecmascript",
      "version": "1.0.2",
      "description": "Match a Unicode property or property alias to its canonical property name per the algorithm used for RegExp Unicode property escapes in ECMAScript.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "471ef2383642d4bfd3f172a8ff690dcd501069113cf0068cbc8d4417f5e78f7196db0ccde9fa29f430d6b8500a515147eefa33933dba0f33f4ab258b28b2153d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/unicode-match-property-value-ecmascript@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mathiasbynens/unicode-match-property-value-ecmascript"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mathiasbynens/unicode-match-property-value-ecmascript.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unicode-match-property-value-ecmascript@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "build, test"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Bynens (https://mathiasbynens.be/)"
        }
      ],
      "group": "",
      "name": "unicode-property-aliases-ecmascript",
      "version": "1.0.4",
      "description": "Unicode property alias mappings in JavaScript format for property names that are supported in ECMAScript RegExp property escapes.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d9648b6ba39d61dda783ca2a8862169c9ab2140aef867fb9be0c79193c4c6d462309829472e292eb660b145d11fc10c6941d72cd78d038bb4f01f1ec822ac4a6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/unicode-property-aliases-ecmascript@1.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mathiasbynens/unicode-property-aliases-ecmascript"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mathiasbynens/unicode-property-aliases-ecmascript.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unicode-property-aliases-ecmascript@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "download, build, test"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uvu",
      "version": "0.5.6",
      "description": "uvu is an extremely fast and lightweight test runner for Node.js and the browser",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fa0f043517b2afc62c39ce9fbff35526cdaf15d1c19c135d7c4e3daec86b4f30d63a5531e06abb28e4b6183f1eaa1cb68fe123ab6f7e49b287f328e402a5eaa0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/uvu@0.5.6",
      "type": "library",
      "bom-ref": "pkg:npm/uvu@0.5.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:bin",
          "value": "uvu"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "build, test"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      },
      "tags": [
        "test"
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/@aashutoshrathi/word-wrap@1.2.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/code-frame@7.22.10",
      "dependsOn": [
        "pkg:npm/@babel/highlight@7.22.10",
        "pkg:npm/chalk@2.4.2"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-validator-identifier@7.22.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/highlight@7.22.10",
      "dependsOn": [
        "pkg:npm/@babel/helper-validator-identifier@7.22.5",
        "pkg:npm/chalk@2.4.2",
        "pkg:npm/js-tokens@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@jridgewell/gen-mapping@0.3.3",
      "dependsOn": [
        "pkg:npm/@jridgewell/set-array@1.1.2",
        "pkg:npm/@jridgewell/sourcemap-codec@1.4.15",
        "pkg:npm/@jridgewell/trace-mapping@0.3.19"
      ]
    },
    {
      "ref": "pkg:npm/@jridgewell/resolve-uri@3.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/set-array@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/source-map@0.3.5",
      "dependsOn": [
        "pkg:npm/@jridgewell/gen-mapping@0.3.3",
        "pkg:npm/@jridgewell/trace-mapping@0.3.19"
      ]
    },
    {
      "ref": "pkg:npm/@jridgewell/sourcemap-codec@1.4.15",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/trace-mapping@0.3.19",
      "dependsOn": [
        "pkg:npm/@jridgewell/resolve-uri@3.1.1",
        "pkg:npm/@jridgewell/sourcemap-codec@1.4.15"
      ]
    },
    {
      "ref": "pkg:npm/@types/estree@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/node@20.4.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/acorn@8.10.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-styles@3.2.1",
      "dependsOn": [
        "pkg:npm/color-convert@1.9.3"
      ]
    },
    {
      "ref": "pkg:npm/chalk@2.4.2",
      "dependsOn": [
        "pkg:npm/ansi-styles@3.2.1",
        "pkg:npm/escape-string-regexp@1.0.5",
        "pkg:npm/supports-color@5.5.0"
      ]
    },
    {
      "ref": "pkg:npm/color-convert@1.9.3",
      "dependsOn": [
        "pkg:npm/color-name@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/color-name@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/deep-is@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dequal@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/diff@5.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dts-buddy@0.1.9",
      "dependsOn": [
        "pkg:npm/@jridgewell/source-map@0.3.5",
        "pkg:npm/@jridgewell/sourcemap-codec@1.4.15",
        "pkg:npm/globrex@0.1.2",
        "pkg:npm/kleur@4.1.5",
        "pkg:npm/locate-character@3.0.0",
        "pkg:npm/magic-string@0.30.2",
        "pkg:npm/sade@1.8.1",
        "pkg:npm/tiny-glob@0.2.9",
        "pkg:npm/ts-api-utils@0.0.46",
        "pkg:npm/typescript@5.1.6"
      ]
    },
    {
      "ref": "pkg:npm/escape-string-regexp@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eslump@3.0.0",
      "dependsOn": [
        "pkg:npm/@babel/code-frame@7.22.10",
        "pkg:npm/mkdirp@1.0.4",
        "pkg:npm/optionator@0.9.3",
        "pkg:npm/random-int@2.0.1",
        "pkg:npm/random-item@3.1.0",
        "pkg:npm/shift-codegen@7.0.3",
        "pkg:npm/shift-fuzzer@2.0.0",
        "pkg:npm/shift-parser@7.0.3",
        "pkg:npm/shift-reducer@6.0.0"
      ]
    },
    {
      "ref": "pkg:npm/estree-walker@3.0.3",
      "dependsOn": [
        "pkg:npm/@types/estree@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/esutils@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-levenshtein@2.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/globalyzer@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/globrex@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-flag@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-reference@3.0.1",
      "dependsOn": [
        "pkg:npm/@types/estree@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/js-tokens@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/kleur@4.1.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/levn@0.4.1",
      "dependsOn": [
        "pkg:npm/prelude-ls@1.2.1",
        "pkg:npm/type-check@0.4.0"
      ]
    },
    {
      "ref": "pkg:npm/locate-character@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/magic-string@0.30.2",
      "dependsOn": [
        "pkg:npm/@jridgewell/sourcemap-codec@1.4.15"
      ]
    },
    {
      "ref": "pkg:npm/mkdirp@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mri@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/multimap@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object-assign@4.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/optionator@0.9.3",
      "dependsOn": [
        "pkg:npm/@aashutoshrathi/word-wrap@1.2.6",
        "pkg:npm/deep-is@0.1.4",
        "pkg:npm/fast-levenshtein@2.0.6",
        "pkg:npm/levn@0.4.1",
        "pkg:npm/prelude-ls@1.2.1",
        "pkg:npm/type-check@0.4.0"
      ]
    },
    {
      "ref": "pkg:npm/periscopic@3.1.0",
      "dependsOn": [
        "pkg:npm/@types/estree@1.0.1",
        "pkg:npm/estree-walker@3.0.3",
        "pkg:npm/is-reference@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/prelude-ls@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/random-int@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/random-item@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sade@1.8.1",
      "dependsOn": [
        "pkg:npm/mri@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/shift-ast@6.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shift-ast@6.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shift-codegen@7.0.3",
      "dependsOn": [
        "pkg:npm/esutils@2.0.3",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/shift-reducer@6.0.0"
      ]
    },
    {
      "ref": "pkg:npm/shift-fuzzer@2.0.0",
      "dependsOn": [
        "pkg:npm/shift-ast@6.1.0"
      ]
    },
    {
      "ref": "pkg:npm/shift-parser@7.0.3",
      "dependsOn": [
        "pkg:npm/multimap@1.1.0",
        "pkg:npm/shift-ast@6.0.0",
        "pkg:npm/shift-reducer@6.0.0",
        "pkg:npm/shift-regexp-acceptor@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/shift-reducer@6.0.0",
      "dependsOn": [
        "pkg:npm/shift-ast@6.0.0"
      ]
    },
    {
      "ref": "pkg:npm/shift-regexp-acceptor@2.0.3",
      "dependsOn": [
        "pkg:npm/unicode-match-property-ecmascript@1.0.4",
        "pkg:npm/unicode-match-property-value-ecmascript@1.0.2",
        "pkg:npm/unicode-property-aliases-ecmascript@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/supports-color@5.5.0",
      "dependsOn": [
        "pkg:npm/has-flag@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/tiny-glob@0.2.9",
      "dependsOn": [
        "pkg:npm/globalyzer@0.1.0",
        "pkg:npm/globrex@0.1.2"
      ]
    },
    {
      "ref": "pkg:npm/ts-api-utils@0.0.46",
      "dependsOn": [
        "pkg:npm/typescript@5.1.6"
      ]
    },
    {
      "ref": "pkg:npm/type-check@0.4.0",
      "dependsOn": [
        "pkg:npm/prelude-ls@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/typescript@5.1.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/unicode-canonical-property-names-ecmascript@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/unicode-match-property-ecmascript@1.0.4",
      "dependsOn": [
        "pkg:npm/unicode-canonical-property-names-ecmascript@1.0.4",
        "pkg:npm/unicode-property-aliases-ecmascript@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/unicode-match-property-value-ecmascript@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/unicode-property-aliases-ecmascript@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uvu@0.5.6",
      "dependsOn": [
        "pkg:npm/dequal@2.0.3",
        "pkg:npm/diff@5.1.0",
        "pkg:npm/kleur@4.1.5",
        "pkg:npm/sade@1.8.1"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/code-red@1.0.4"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-08-12T14:12:57Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Wednesday, August 12, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'code-red' with version '1.0.4'. The package type in this SBOM is npm with 4 purl namespaces described under components. The components were identified from the source files: pnpm-lock.yaml."
    }
  ]
}