{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:ed321805-e23d-4970-b231-9e8793cfedb0",
  "version": 1,
  "metadata": {
    "timestamp": "2026-08-28T12:57:37Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "domain-browser",
      "group": "",
      "version": "4.19.0",
      "description": "Node's domain module for the web browser. This is merely an evented try...catch with the same API as node, nothing more.",
      "purl": "pkg:npm/domain-browser@4.19.0",
      "bom-ref": "pkg:npm/domain-browser@4.19.0",
      "author": "2013+ Bevry Pty Ltd <us@bevry.me> (http://bevry.me)",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "our:clean, our:compile, our:deploy, our:meta, our:meta:contributors, our:meta:projectz, our:release, our:release:check-changelog, our:release:check-dirty, our:release:prepare, our:release:push, our:release:tag, our:setup, our:setup:install, our:test, our:verify, our:verify:directory, test"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "our:compile"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/bevry/domain-browser"
        },
        {
          "type": "vcs",
          "url": "https://github.com/bevry/domain-browser.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@bevry"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "@bevry",
      "name": "update-contributors",
      "version": "1.17.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4cc29099552a4ba888b5d3ce10a9fab5a11c5a719090cf26e947ddbe76dcada0c5995c8582d424358322edc6255f29b2c6af845609baa062ab6a19d44f2c868f"
        }
      ],
      "purl": "pkg:npm/%40bevry/update-contributors@1.17.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@bevry/update-contributors/-/update-contributors-1.17.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@bevry/update-contributors@1.17.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@bevry/update-contributors/-/update-contributors-1.17.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "getcontributors",
      "version": "2.22.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a4fff5b7618192848df628ad90f3a3213e7d7b850fc6425fd69a266a6d5e14b7057821f76983019533a832583d05c216ccabe41e0d571a7c9161b6ec86fbf5ae"
        }
      ],
      "purl": "pkg:npm/getcontributors@2.22.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/getcontributors/-/getcontributors-2.22.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/getcontributors@2.22.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/getcontributors/-/getcontributors-2.22.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cross-fetch",
      "version": "3.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2813d46ea8058f35a555c5111be4afa7d4e5840e6e96262d88dc7fd2bf27bf4a5dca979009127d21a488737abfc77abcb7717be5c1eec3156a9751c518708d25"
        }
      ],
      "purl": "pkg:npm/cross-fetch@3.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cross-fetch/-/cross-fetch-3.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cross-fetch@3.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cross-fetch/-/cross-fetch-3.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-fetch",
      "version": "2.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "57869883cf63128551c516f67c974083c147bc8edc13261d54087de071f45082bca09c547e48e50d037d45b331f9b1233fbfa080c885469ad2b62d37d8e8a9c7"
        }
      ],
      "purl": "pkg:npm/node-fetch@2.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-fetch@2.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fellow",
      "version": "6.20.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dec214e1a275ba0d8f2b8fb4479ae8a34730bdeab3231300c5f9c39cc0f04615549e2129cee8d502070ea1634b1b7504be1a1d5deed59378185bc81121528e94"
        }
      ],
      "purl": "pkg:npm/fellow@6.20.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fellow/-/fellow-6.20.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fellow@6.20.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fellow/-/fellow-6.20.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "getrepos",
      "version": "5.16.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "183317244a0da7339b58bea447ac1078cb1a1ea91128cef2e42dec2595f36c39f2028986a7ebd063a563251b634de6ce8c24e1f1221b45d794115b4f7d6ac732"
        }
      ],
      "purl": "pkg:npm/getrepos@5.16.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/getrepos/-/getrepos-5.16.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/getrepos@5.16.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/getrepos/-/getrepos-5.16.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "githubauthreq",
      "version": "5.18.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1df07d7b47f343cd3d41e8eb83010a5f40516cd3914718c011afcc79dd8c733496dff4711936b5841e22ea308b12532bbae561253101a0ed48b5b082e2ca54ca"
        }
      ],
      "purl": "pkg:npm/githubauthreq@5.18.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/githubauthreq/-/githubauthreq-5.18.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/githubauthreq@5.18.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/githubauthreq/-/githubauthreq-5.18.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "editions",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a66524629c9e17a2d8d6d5d73da56bf74daea42792022b29eefb58e6e7654928f7d5e9a145334a071109937d2c0fa0891db6123c087e077183478689bd78bf15"
        }
      ],
      "purl": "pkg:npm/editions@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/editions/-/editions-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/editions@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/editions/-/editions-4.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "errlop",
      "version": "3.17.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4c395bf98331d3c3a268bab583b1eed270dc6bfa0ba3e2e93048042369726c1284d6b07caaca85817cc46e79f52d4e8d7c309f21d55c977d3bdda3b764b4d836"
        }
      ],
      "purl": "pkg:npm/errlop@3.17.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/errlop/-/errlop-3.17.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/errlop@3.17.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/errlop/-/errlop-3.17.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "6.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6f7f5305a4d27d5eb206b6a953cf69e5f29e904da6fcdc270e870e56bb90152d7fbde320773b8f72738cdf833a0b0c56f231ff97111ae6b0680de530bb91c74f"
        }
      ],
      "purl": "pkg:npm/semver@6.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-6.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@6.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-6.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "simplytyped",
      "version": "3.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9b3e1168d74a4d989a297822e8fd64fdc76cc55de0cfecb55a1d8d5c7583e34744c64b4b8785f1fe1e8c15a9264163836478ffdab29ee7d69c69ca4bef866140"
        }
      ],
      "purl": "pkg:npm/simplytyped@3.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/simplytyped/-/simplytyped-3.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/simplytyped@3.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/simplytyped/-/simplytyped-3.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "native-promise-pool",
      "version": "3.15.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e82bee405b584d92915a9a4069292a960fc290884700f56bfd5c5e47392b98b5f47ca359bad20780652cedfba62fa7a51224c85862e4da56fb8df9401cb0d508"
        }
      ],
      "purl": "pkg:npm/native-promise-pool@3.15.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/native-promise-pool/-/native-promise-pool-3.15.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/native-promise-pool@3.15.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/native-promise-pool/-/native-promise-pool-3.15.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "native"
      ]
    },
    {
      "group": "",
      "name": "assert-helpers",
      "version": "8.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a52fb86ca33689344f4a180d5a8900a7fdebb5ca621add4478690395212795e3ba52aef2ec9a5d104cea29c695192cb560d3b6869ad84781cdb1b9cc104a33ff"
        }
      ],
      "purl": "pkg:npm/assert-helpers@8.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/assert-helpers/-/assert-helpers-8.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/assert-helpers@8.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/assert-helpers/-/assert-helpers-8.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@bevry",
      "name": "ansi",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8e44d0cd475aa4092eb2b819500392daf06850ee536b3fbc87368eaf38fb7bb5e55037d466dca04ba2bc3aed3191d6f9f4e48bd880273ba144c78ad34403d29d"
        }
      ],
      "purl": "pkg:npm/%40bevry/ansi@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@bevry/ansi/-/ansi-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@bevry/ansi@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@bevry/ansi/-/ansi-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "editions",
      "version": "6.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a797e250fba399dcfaaf4f8f04d4006c4d6836a9deac4cdf79d2f37e1116e17873a8e7c0b829ed6dc80536b00b22345bf0a01e9ef3fa051a4ff177506b2e5cc3"
        }
      ],
      "purl": "pkg:npm/editions@6.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/editions/-/editions-6.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/editions@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/editions/-/editions-6.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "errlop",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "845f3ea358d5055f23645cba2acfd16d6a73388b0a0fb2123af199d8e129d0d87cdd1fd842378ad3996f8ea1812dbf1797f7ec57f85e2900c00f14fa9ad61031"
        }
      ],
      "purl": "pkg:npm/errlop@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/errlop/-/errlop-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/errlop@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/errlop/-/errlop-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "version-range",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e189e3d953853a947ddd77bd89bcffd37785fe7109730a7bb07a83e21291472408f899e180ef7829953b83b88de2751de04cecd3bfcf6338ca222595390e7958"
        }
      ],
      "purl": "pkg:npm/version-range@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/version-range/-/version-range-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/version-range@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/version-range/-/version-range-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "version-compare",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0f9ab7c05fad2ff9b36778729e1936fd5d529970f205c93c9f3c0364b4ce40d56032f09b81397d246a23a45aefba7496a7b3fd6fc800751b1438825f81cc1fff"
        }
      ],
      "purl": "pkg:npm/version-compare@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/version-compare/-/version-compare-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/version-compare@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/version-compare/-/version-compare-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "kava",
      "version": "5.12.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3a1416d7d262f161450f739fbc0b12048bb87b34cbebda5134308db09dca844d80aa7c09b4c630c6ec8745ec5606967c74e10111481cb22f9666f690b79f4f80"
        }
      ],
      "purl": "pkg:npm/kava@5.12.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/kava/-/kava-5.12.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kava@5.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/kava/-/kava-5.12.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "event-emitter-grouped",
      "version": "4.15.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "efae9f4ad10bbed8684c93e2217d1d7883f927cb6b765a88a29e23b0540ac0b71ab23a1968c0e46d7aa8ae66f1b17108b8bbd0eb7d858ff95a99797be8c76e39"
        }
      ],
      "purl": "pkg:npm/event-emitter-grouped@4.15.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/event-emitter-grouped/-/event-emitter-grouped-4.15.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/event-emitter-grouped@4.15.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/event-emitter-grouped/-/event-emitter-grouped-4.15.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "taskgroup",
      "version": "7.16.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "425524abaf21ad7839e1e591ab41eaade9a4e3eb092ffd9d4e561b8a8984d745ee5426aaa0bbc0803a308709230f3b9656667b8adf9361beffb8a3730af29d63"
        }
      ],
      "purl": "pkg:npm/taskgroup@7.16.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/taskgroup/-/taskgroup-7.16.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/taskgroup@7.16.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/taskgroup/-/taskgroup-7.16.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ambi",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9e3e6c1cb3c577bbb638b987745b380c7b7780ae9e769370df98534482b223f55dd938797b88a8e74af0d6586609d50d3b6326e3fe059079afeac84400d01673"
        }
      ],
      "purl": "pkg:npm/ambi@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ambi/-/ambi-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ambi@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ambi/-/ambi-3.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "editions",
      "version": "2.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a6d1af9304ef19d19f0b485f84a834313f9344b44a1ad5225860489f13a6e69cfbb2c0037b36a18c251a62e67c0ebf82d39156d001022083ede1607154834484"
        }
      ],
      "purl": "pkg:npm/editions@2.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/editions/-/editions-2.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/editions@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/editions/-/editions-2.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "errlop",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7bae108fdfb8699ce3cf3169642ee9e649a6fdc702adb2e1009a6586c0d7405b3ced74ec5f03a91f8b35228dacf744dabbff2bda3f5fe25fed8610debd18f3c7"
        }
      ],
      "purl": "pkg:npm/errlop@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/errlop/-/errlop-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/errlop@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/errlop/-/errlop-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typechecker",
      "version": "4.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "973dfd31cfddd5405c17fb9014be4ff0bfa859d227fecb6f9148077f4b4f456e1a13018612b7b0357a3635be967b65ac95689f9f4d2b85c1db6d15917131a1bb"
        }
      ],
      "purl": "pkg:npm/typechecker@4.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typechecker/-/typechecker-4.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typechecker@4.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typechecker/-/typechecker-4.11.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eachr",
      "version": "4.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f48ebae115a9ea9f23bdc1d9230a3b6d66a249a526035c0d48b2b03591226988ea893011ab77068f246222e9eca2966fe103265f74f91ecd7b4283c0cdd6317e"
        }
      ],
      "purl": "pkg:npm/eachr@4.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eachr/-/eachr-4.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eachr@4.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eachr/-/eachr-4.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typechecker",
      "version": "6.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "11b3aefbdb33635de6865d04b2f2d79d1fa94c26b78131d040f2dd71eef6ba3702f5f4475e554504d5ed1de4618332f12e5294878cc0f42d2d7b32c382c85ff8"
        }
      ],
      "purl": "pkg:npm/typechecker@6.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typechecker/-/typechecker-6.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typechecker@6.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typechecker/-/typechecker-6.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extendr",
      "version": "5.15.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6b56a9bd4cbe9dd0cf02998a7391bf9cb75fbfbb00b43588fffcbdeb08195d1a3763ca5326018777a962ad2cd191af82514f6b3ec7720b660d797ed6eb9c494c"
        }
      ],
      "purl": "pkg:npm/extendr@5.15.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extendr/-/extendr-5.15.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extendr@5.15.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extendr/-/extendr-5.15.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typechecker",
      "version": "7.16.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "58b492e7ee3a4c721fbe30cf5ed9acdc821160edaa5f1276a8151512ad622a9f82895dbd9177e2f193d3b7c416f49d6c2c40990153b1e763817e93d5cc6cdc43"
        }
      ],
      "purl": "pkg:npm/typechecker@7.16.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typechecker/-/typechecker-7.16.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typechecker@7.16.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typechecker/-/typechecker-7.16.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unbounded",
      "version": "3.12.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6a1932941caf7ccffa15ec73bf7ae3e21ab0586b84aa5ee917a9bd771916d0f4730e5267c19f6767c77e3634f6c7bfeae3efcbce8a9ef32c024abf95243dede7"
        }
      ],
      "purl": "pkg:npm/unbounded@3.12.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unbounded/-/unbounded-3.12.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unbounded@3.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unbounded/-/unbounded-3.12.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "projectz",
      "version": "2.16.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b9b96a45b66feaeca9e91790d092ef16c0ef3861c65b077ad48d06c0cd257fcc56e236dd67aedc3e8bbc6c5b867b744683c4aa873c7b6d5f812365ee525b38a3"
        }
      ],
      "purl": "pkg:npm/projectz@2.16.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/projectz/-/projectz-2.16.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/projectz@2.16.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/projectz/-/projectz-2.16.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "badges",
      "version": "4.23.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f027acaaaa7ddc969fcd792078d08aea917a62f509bd36e01f1287567a6f1602bb5deaa0293d3c37154703650a62bdad63ced88572a51c7c51f854477c8469f6"
        }
      ],
      "purl": "pkg:npm/badges@4.23.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/badges/-/badges-4.23.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/badges@4.23.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/badges/-/badges-4.23.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caterpillar",
      "version": "6.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2162bb60e3944577fa641fbca3dcd9a23fb9730666a0a3232e413479cee24ba04e00927f5267e7bf24cbda26136134ba767b02bda16cfe8db9f1156845a986d1"
        }
      ],
      "purl": "pkg:npm/caterpillar@6.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/caterpillar/-/caterpillar-6.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/caterpillar@6.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/caterpillar/-/caterpillar-6.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-current-line",
      "version": "6.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4015dd2585b22424f99520ca0d0739ee6ab6035e2a0ba0e391bf67d5968f7203f0868846e4eb76a3f92511e96ace0c7c8bcd459d2957fcd4bd5f0d444192fdf5"
        }
      ],
      "purl": "pkg:npm/get-current-line@6.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-current-line/-/get-current-line-6.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-current-line@6.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-current-line/-/get-current-line-6.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rfc-log-levels",
      "version": "3.14.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3b1b64f3dbae3454da9683524709c78dbbd8c2e3948b7457c0e38b57fcd1d4f7b28873fdedcadc08a168beba1005d980caf1df34399ccf44b86ef8590dfd5f98"
        }
      ],
      "purl": "pkg:npm/rfc-log-levels@3.14.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rfc-log-levels/-/rfc-log-levels-3.14.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rfc-log-levels@3.14.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rfc-log-levels/-/rfc-log-levels-3.14.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cson-parser",
      "version": "4.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e09685a225c1f2dd37aea273c9b1e31f64ebb00e97dccc8435db1c3e0d2d83f13085c5b8fad60565bbc09fb3a94ec2e71096b2450af0538a8bc1a983303df43"
        }
      ],
      "purl": "pkg:npm/cson-parser@4.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cson-parser/-/cson-parser-4.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cson-parser@4.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cson-parser/-/cson-parser-4.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "coffeescript",
      "version": "1.12.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a4b5c717140c3e4955a047a4a3093c6f77ab3729c2f83549cc28714bf2c2041811ebff002641e2be49bfff36e8c1c7dcec14c2023af2ba1c7a80fa8f45fb05a0"
        }
      ],
      "purl": "pkg:npm/coffeescript@1.12.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/coffeescript/-/coffeescript-1.12.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/coffeescript@1.12.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/coffeescript/-/coffeescript-1.12.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-cli-arg",
      "version": "6.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "82cc2e21829ec6a2ade2fa4166129de6552bd08aff493ba0be042b458c3ab4723a865ce675b07f2d490f494015e96c077e9a338fc5e3b102c3cebe8f3d61e5d1"
        }
      ],
      "purl": "pkg:npm/get-cli-arg@6.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-cli-arg/-/get-cli-arg-6.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-cli-arg@6.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-cli-arg/-/get-cli-arg-6.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "normalify",
      "version": "2.20.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32120c1e773ed067f7b8a9106622932a5871b769cd407d453f4eb0ef2d4fb7b8769f2af562bb4396362f8ba4f20ecf24caa2ef663f5ccd56d4c4de4ac1d19d83"
        }
      ],
      "purl": "pkg:npm/normalify@2.20.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/normalify/-/normalify-2.20.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalify@2.20.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/normalify/-/normalify-2.20.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-expression-parse",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "71ba87ba7b105a724d13a2a155232c31e1f91ff2fd129ca66f3a93437b8bc0d08b675438f35a166a87ea1fb9cee95d3bc655f063a3e141d43621e756c7f64ae1"
        }
      ],
      "purl": "pkg:npm/spdx-expression-parse@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-expression-parse@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-exceptions",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fed4eb60e0bb3cf2359d4020c77e21529a97bb2246f834c72539c850b1b8ac3ca08b8c6efed7e09aad5ed5c211c11cf0660a3834bc928beae270b919930e22e4"
        }
      ],
      "purl": "pkg:npm/spdx-exceptions@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-exceptions@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-license-ids",
      "version": "3.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fa8ad02bcde4c8cbdadd6c8f7f9f64d7e639db972c8f925e8e2716bade79cde4d600db8dd7ba928922d45d6b731de3563914af4fb18b0c9fc4fd78885a85c14f"
        }
      ],
      "purl": "pkg:npm/spdx-license-ids@3.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-license-ids@3.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-license-list",
      "version": "6.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "433f2bbb95552b94f8705381aec848ce0833ad0d797d505ca63a592c2573da3f4a367a6c9466f0f30d6bd3abf6be2e983fa6e7512639097b0509f532a4b67618"
        }
      ],
      "purl": "pkg:npm/spdx-license-list@6.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-license-list/-/spdx-license-list-6.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-license-list@6.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-license-list/-/spdx-license-list-6.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "valid-directory",
      "version": "3.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ecf681c00130a352cd1af1e84849fc1f97a4ea8e1a800505b22c640678f3ad9d19e4e0b93e75551e379bba7dfcd6c0fe11694ab6ad4461858070470202bb304e"
        }
      ],
      "purl": "pkg:npm/valid-directory@3.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/valid-directory/-/valid-directory-3.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/valid-directory@3.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/valid-directory/-/valid-directory-3.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readdir-cluster",
      "version": "3.13.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5d5abe66a743f6292f427bb4d95ed23ad6f6366625a9a8f57a5b623dd60bcd9e5d993aac159ed89b59261d755295ba1599c84697db051642b9e7e6139967d2dd"
        }
      ],
      "purl": "pkg:npm/readdir-cluster@3.13.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readdir-cluster/-/readdir-cluster-3.13.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readdir-cluster@3.13.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readdir-cluster/-/readdir-cluster-3.13.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "valid-filename",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3bdf6c75f85d182896a0de1cbfa527ab8789d84b97c11b0e2c2792c3e209c8c620c152b404f99a527ce1590c3913caa49cb4d5ad51310abeb1c53067441bedb1"
        }
      ],
      "purl": "pkg:npm/valid-filename@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/valid-filename/-/valid-filename-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/valid-filename@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/valid-filename/-/valid-filename-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "filename-reserved-regex",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "abf73dfab735d045440abfea2d91f389ebbfa229"
        }
      ],
      "purl": "pkg:npm/filename-reserved-regex@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/filename-reserved-regex/-/filename-reserved-regex-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/filename-reserved-regex@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/filename-reserved-regex/-/filename-reserved-regex-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/node-fetch@2.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cross-fetch@3.0.6",
      "dependsOn": [
        "pkg:npm/node-fetch@2.6.1"
      ]
    },
    {
      "ref": "pkg:npm/fellow@6.20.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/errlop@3.17.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/semver@6.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/editions@4.2.0",
      "dependsOn": [
        "pkg:npm/errlop@3.17.0",
        "pkg:npm/semver@6.3.0"
      ]
    },
    {
      "ref": "pkg:npm/simplytyped@3.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/githubauthreq@5.18.0",
      "dependsOn": [
        "pkg:npm/editions@4.2.0",
        "pkg:npm/simplytyped@3.3.0"
      ]
    },
    {
      "ref": "pkg:npm/native-promise-pool@3.15.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/getrepos@5.16.0",
      "dependsOn": [
        "pkg:npm/cross-fetch@3.0.6",
        "pkg:npm/githubauthreq@5.18.0",
        "pkg:npm/native-promise-pool@3.15.0",
        "pkg:npm/simplytyped@3.3.0"
      ]
    },
    {
      "ref": "pkg:npm/getcontributors@2.22.0",
      "dependsOn": [
        "pkg:npm/cross-fetch@3.0.6",
        "pkg:npm/fellow@6.20.0",
        "pkg:npm/getrepos@5.16.0",
        "pkg:npm/githubauthreq@5.18.0",
        "pkg:npm/simplytyped@3.3.0"
      ]
    },
    {
      "ref": "pkg:npm/@bevry/update-contributors@1.17.0",
      "dependsOn": [
        "pkg:npm/getcontributors@2.22.0"
      ]
    },
    {
      "ref": "pkg:npm/@bevry/ansi@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/errlop@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/version-compare@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/version-range@1.0.0",
      "dependsOn": [
        "pkg:npm/version-compare@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/editions@6.0.0",
      "dependsOn": [
        "pkg:npm/errlop@4.0.0",
        "pkg:npm/version-range@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/assert-helpers@8.1.0",
      "dependsOn": [
        "pkg:npm/@bevry/ansi@2.1.0",
        "pkg:npm/editions@6.0.0",
        "pkg:npm/errlop@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/errlop@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/editions@2.3.1",
      "dependsOn": [
        "pkg:npm/errlop@2.2.0",
        "pkg:npm/semver@6.3.0"
      ]
    },
    {
      "ref": "pkg:npm/typechecker@4.11.0",
      "dependsOn": [
        "pkg:npm/editions@2.3.1"
      ]
    },
    {
      "ref": "pkg:npm/ambi@3.2.0",
      "dependsOn": [
        "pkg:npm/editions@2.3.1",
        "pkg:npm/typechecker@4.11.0"
      ]
    },
    {
      "ref": "pkg:npm/typechecker@6.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eachr@4.5.0",
      "dependsOn": [
        "pkg:npm/typechecker@6.4.0"
      ]
    },
    {
      "ref": "pkg:npm/typechecker@7.16.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/extendr@5.15.0",
      "dependsOn": [
        "pkg:npm/typechecker@7.16.0"
      ]
    },
    {
      "ref": "pkg:npm/unbounded@3.12.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/taskgroup@7.16.0",
      "dependsOn": [
        "pkg:npm/ambi@3.2.0",
        "pkg:npm/eachr@4.5.0",
        "pkg:npm/extendr@5.15.0",
        "pkg:npm/unbounded@3.12.0"
      ]
    },
    {
      "ref": "pkg:npm/event-emitter-grouped@4.15.0",
      "dependsOn": [
        "pkg:npm/taskgroup@7.16.0",
        "pkg:npm/unbounded@3.12.0"
      ]
    },
    {
      "ref": "pkg:npm/kava@5.12.0",
      "dependsOn": [
        "pkg:npm/event-emitter-grouped@4.15.0",
        "pkg:npm/taskgroup@7.16.0"
      ]
    },
    {
      "ref": "pkg:npm/badges@4.23.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-current-line@6.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rfc-log-levels@3.14.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/caterpillar@6.6.0",
      "dependsOn": [
        "pkg:npm/@bevry/ansi@2.1.0",
        "pkg:npm/editions@6.0.0",
        "pkg:npm/get-current-line@6.2.0",
        "pkg:npm/rfc-log-levels@3.14.0"
      ]
    },
    {
      "ref": "pkg:npm/coffeescript@1.12.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cson-parser@4.0.5",
      "dependsOn": [
        "pkg:npm/coffeescript@1.12.7"
      ]
    },
    {
      "ref": "pkg:npm/normalify@2.20.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-cli-arg@6.7.0",
      "dependsOn": [
        "pkg:npm/normalify@2.20.0"
      ]
    },
    {
      "ref": "pkg:npm/spdx-exceptions@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/spdx-license-ids@3.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/spdx-expression-parse@3.0.1",
      "dependsOn": [
        "pkg:npm/spdx-exceptions@2.3.0",
        "pkg:npm/spdx-license-ids@3.0.6"
      ]
    },
    {
      "ref": "pkg:npm/spdx-license-list@6.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/projectz@2.16.0",
      "dependsOn": [
        "pkg:npm/badges@4.23.0",
        "pkg:npm/caterpillar@6.6.0",
        "pkg:npm/cson-parser@4.0.5",
        "pkg:npm/errlop@3.17.0",
        "pkg:npm/fellow@6.20.0",
        "pkg:npm/get-cli-arg@6.7.0",
        "pkg:npm/spdx-expression-parse@3.0.1",
        "pkg:npm/spdx-license-list@6.3.0",
        "pkg:npm/typechecker@7.16.0"
      ]
    },
    {
      "ref": "pkg:npm/readdir-cluster@3.13.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/filename-reserved-regex@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/valid-filename@3.1.0",
      "dependsOn": [
        "pkg:npm/filename-reserved-regex@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/valid-directory@3.4.0",
      "dependsOn": [
        "pkg:npm/editions@4.2.0",
        "pkg:npm/readdir-cluster@3.13.0",
        "pkg:npm/valid-filename@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/domain-browser@4.19.0",
      "dependsOn": [
        "pkg:npm/@bevry/update-contributors@1.17.0",
        "pkg:npm/assert-helpers@8.1.0",
        "pkg:npm/kava@5.12.0",
        "pkg:npm/projectz@2.16.0",
        "pkg:npm/valid-directory@3.4.0"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/domain-browser@4.19.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-08-28T12:57:37Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Friday, August 28, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'domain-browser' with version '4.19.0'. The package type in this SBOM is npm with a single purl namespace '@bevry' described under components. The components were identified from the source files: package-lock.json."
    }
  ]
}