{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:794c1c9c-8a9f-47e5-9167-4cae06849c73",
  "version": 1,
  "metadata": {
    "timestamp": "2026-08-12T12:52:50Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "espree",
      "group": "",
      "version": "5.0.1",
      "description": "An Esprima-compatible JavaScript parser built on Acorn",
      "purl": "pkg:npm/espree@5.0.1",
      "bom-ref": "pkg:npm/espree@5.0.1",
      "author": "Nicholas C. Zakas <nicholas+npm@nczconsulting.com>",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "generate-regex, test, lint, browserify, generate-release, generate-alpharelease, generate-betarelease, generate-rcrelease, publish-release"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint/espree"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@babel\\n@jridgewell\\n@my-scope"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "node_modules/@babel/code-frame/package.json\\nnode_modules/@babel/generator/package.json\\nnode_modules/@babel/helper-globals/package.json\\nnode_modules/@babel/helper-string-parser/package.json\\nnode_modules/@babel/helper-validator-identifier/package.json\\nnode_modules/@babel/parser/package.json\\nnode_modules/@babel/template/package.json\\nnode_modules/@babel/traverse/package.json\\nnode_modules/@babel/types/package.json\\nnode_modules/@jridgewell/gen-mapping/package.json\\nnode_modules/@jridgewell/resolve-uri/package.json\\nnode_modules/@jridgewell/sourcemap-codec/package.json\\nnode_modules/@jridgewell/trace-mapping/package.json\\nnode_modules/Base64/package.json\\nnode_modules/JSONStream/package.json\\nnode_modules/acorn-jsx/package.json\\nnode_modules/acorn-node/node_modules/acorn/package.json\\nnode_modules/acorn-node/node_modules/xtend/package.json\\nnode_modules/acorn-node/package.json\\nnode_modules/acorn-walk/package.json\\nnode_modules/acorn/package.json\\nnode_modules/ajv/package.json\\nnode_modules/amdefine/package.json\\nnode_modules/ansi-escapes/package.json\\nnode_modules/ansi-regex/package.json\\nnode_modules/ansi-styles/package.json\\nnode_modules/argparse/package.json\\nnode_modules/array-find-index/package.json\\nnode_modules/asn1.js/node_modules/bn.js/package.json\\nnode_modules/asn1.js/package.json\\nnode_modules/assert/node_modules/inherits/package.json\\nnode_modules/assert/node_modules/util/package.json\\nnode_modules/assert/package.json\\nnode_modules/assertion-error/package.json\\nnode_modules/astral-regex/package.json\\nnode_modules/astw/node_modules/acorn/package.json\\nnode_modules/astw/package.json\\nnode_modules/async/package.json\\nnode_modules/available-typed-arrays/package.json\\nnode_modules/axios/package.json\\nnode_modules/balanced-match/package.json\\nnode_modules/base64-js/package.json\\nnode_modules/bn.js/package.json\\nnode_modules/brace-expansion/package.json\\nnode_modules/brorand/package.json\\nnode_modules/browser-pack/node_modules/readable-stream/package.json\\nnode_modules/browser-pack/node_modules/through2/package.json\\nnode_modules/browser-pack/package.json\\nnode_modules/browser-resolve/node_modules/resolve/package.json\\nnode_modules/browser-resolve/node_modules/resolve/test/pathfilter/deep_ref/node_modules/deep/package.json\\nnode_modules/browser-resolve/package.json\\nnode_modules/browserify-aes/package.json\\nnode_modules/browserify-cipher/package.json\\nnode_modules/browserify-des/package.json\\nnode_modules/browserify-rsa/package.json\\nnode_modules/browserify-sign/node_modules/isarray/package.json\\nnode_modules/browserify-sign/node_modules/readable-stream/node_modules/safe-buffer/package.json\\nnode_modules/browserify-sign/node_modules/readable-stream/package.json\\nnode_modules/browserify-sign/node_modules/string_decoder/node_modules/safe-buffer/package.json\\nnode_modules/browserify-sign/node_modules/string_decoder/package.json\\nnode_modules/browserify-sign/package.json\\nnode_modules/browserify-zlib/package.json\\nnode_modules/browserify/package.json\\nnode_modules/buffer-xor/package.json\\nnode_modules/buffer/node_modules/isarray/package.json\\nnode_modules/buffer/package.json\\nnode_modules/builtins/package.json\\nnode_modules/call-bind-apply-helpers/package.json\\nnode_modules/call-bind/package.json\\nnode_modules/call-bound/package.json\\nnode_modules/callsite/package.json\\nnode_modules/callsites/package.json\\nnode_modules/camelcase-keys/package.json\\nnode_modules/camelcase/package.json\\nnode_modules/chai/package.json\\nnode_modules/chalk/package.json\\nnode_modules/chardet/package.json\\nnode_modules/cipher-base/package.json\\nnode_modules/cli-color/package.json\\nnode_modules/cli-cursor/package.json\\nnode_modules/cli-width/package.json\\nnode_modules/color-convert/package.json\\nnode_modules/color-name/package.json\\nnode_modules/combine-source-map/package.json\\nnode_modules/commander/package.json\\nnode_modules/commondir/package.json\\nnode_modules/concat-map/package.json\\nnode_modules/concat-stream/package.json\\nnode_modules/console-browserify/package.json\\nnode_modules/constants-browserify/package.json\\nnode_modules/convert-source-map/package.json\\nnode_modules/core-util-is/package.json\\nnode_modules/create-ecdh/node_modules/bn.js/package.json\\nnode_modules/create-ecdh/package.json\\nnode_modules/create-hash/package.json\\nnode_modules/create-hmac/package.json\\nnode_modules/cross-spawn/package.json\\nnode_modules/crypto-browserify/package.json\\nnode_modules/currently-unhandled/package.json\\nnode_modules/dateformat/package.json\\nnode_modules/debug/package.json\\nnode_modules/decamelize/package.json\\nnode_modules/deep-eql/package.json\\nnode_modules/deep-equal/package.json\\nnode_modules/deep-is/package.json\\nnode_modules/define-data-property/package.json\\nnode_modules/defined/package.json\\nnode_modules/deps-sort/node_modules/JSONStream/package.json\\nnode_modules/deps-sort/node_modules/jsonparse/package.json\\nnode_modules/deps-sort/package.json\\nnode_modules/des.js/package.json\\nnode_modules/detective/node_modules/acorn/package.json\\nnode_modules/detective/node_modules/defined/package.json\\nnode_modules/detective/package.json\\nnode_modules/diff/package.json\\nnode_modules/diffie-hellman/node_modules/bn.js/package.json\\nnode_modules/diffie-hellman/package.json\\nnode_modules/difflib/package.json\\nnode_modules/doctrine/package.json\\nnode_modules/domain-browser/package.json\\nnode_modules/dreamopt/package.json\\nnode_modules/dunder-proto/package.json\\nnode_modules/duplexer2/package.json\\nnode_modules/elliptic/node_modules/bn.js/package.json\\nnode_modules/elliptic/package.json\\nnode_modules/emoji-regex/package.json\\nnode_modules/error-ex/package.json\\nnode_modules/es-define-property/package.json\\nnode_modules/es-errors/package.json\\nnode_modules/es-object-atoms/package.json\\nnode_modules/es5-ext/package.json\\nnode_modules/es6-promise/package.json\\nnode_modules/escape-string-regexp/package.json\\nnode_modules/eslint-config-eslint/package.json\\nnode_modules/eslint-plugin-es/package.json\\nnode_modules/eslint-plugin-node/node_modules/ignore/package.json\\nnode_modules/eslint-plugin-node/node_modules/resolve/package.json\\nnode_modules/eslint-plugin-node/node_modules/resolve/test/resolver/baz/package.json\\nnode_modules/eslint-plugin-node/node_modules/resolve/test/resolver/browser_field/package.json\\nnode_modules/eslint-plugin-node/node_modules/resolve/test/resolver/false_main/package.json\\nnode_modules/eslint-plugin-node/node_modules/resolve/test/resolver/invalid_main/package.json\\nnode_modules/eslint-plugin-node/node_modules/resolve/test/resolver/multirepo/package.json\\nnode_modules/eslint-plugin-node/node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json\\nnode_modules/eslint-plugin-node/node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json\\nnode_modules/eslint-plugin-node/node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json\\nnode_modules/eslint-plugin-node/package.json\\nnode_modules/eslint-release/node_modules/shelljs/package.json\\nnode_modules/eslint-release/package.json\\nnode_modules/eslint-scope/package.json\\nnode_modules/eslint-utils/package.json\\nnode_modules/eslint-visitor-keys/package.json\\nnode_modules/eslint/node_modules/glob/package.json\\nnode_modules/eslint/package.json\\nnode_modules/espree/package.json\\nnode_modules/esprima-fb/package.json\\nnode_modules/esprima/package.json\\nnode_modules/esquery/node_modules/estraverse/package.json\\nnode_modules/esquery/package.json\\nnode_modules/esrecurse/node_modules/estraverse/package.json\\nnode_modules/esrecurse/package.json\\nnode_modules/estraverse/package.json\\nnode_modules/esutils/package.json\\nnode_modules/events/package.json\\nnode_modules/evp_bytestokey/package.json\\nnode_modules/external-editor/package.json\\nnode_modules/fast-deep-equal/package.json\\nnode_modules/fast-json-stable-stringify/package.json\\nnode_modules/fast-levenshtein/package.json\\nnode_modules/figures/package.json\\nnode_modules/file-entry-cache/package.json\\nnode_modules/find-up/package.json\\nnode_modules/flat-cache/package.json\\nnode_modules/flatted/package.json\\nnode_modules/follow-redirects/node_modules/debug/package.json\\nnode_modules/follow-redirects/node_modules/ms/package.json\\nnode_modules/follow-redirects/package.json\\nnode_modules/for-each/package.json\\nnode_modules/fs.realpath/package.json\\nnode_modules/function-bind/package.json\\nnode_modules/functional-red-black-tree/package.json\\nnode_modules/get-intrinsic/package.json\\nnode_modules/get-proto/package.json\\nnode_modules/get-stdin/package.json\\nnode_modules/github-api/node_modules/debug/package.json\\nnode_modules/github-api/node_modules/ms/package.json\\nnode_modules/github-api/package.json\\nnode_modules/glob/node_modules/minimatch/package.json\\nnode_modules/glob/package.json\\nnode_modules/globals/package.json\\nnode_modules/gopd/package.json\\nnode_modules/graceful-fs/package.json\\nnode_modules/growl/package.json\\nnode_modules/has-flag/package.json\\nnode_modules/has-property-descriptors/package.json\\nnode_modules/has-symbols/package.json\\nnode_modules/has-tostringtag/package.json\\nnode_modules/hash-base/package.json\\nnode_modules/hash.js/package.json\\nnode_modules/hasown/package.json\\nnode_modules/heap/package.json\\nnode_modules/hmac-drbg/package.json\\nnode_modules/hosted-git-info/package.json\\nnode_modules/http-browserify/package.json\\nnode_modules/https-browserify/package.json\\nnode_modules/iconv-lite/package.json\\nnode_modules/ieee754/package.json\\nnode_modules/ignore/package.json\\nnode_modules/import-fresh/package.json\\nnode_modules/imurmurhash/package.json\\nnode_modules/indent-string/package.json\\nnode_modules/indexof/package.json\\nnode_modules/inflight/package.json\\nnode_modules/inherits/package.json\\nnode_modules/inline-source-map/node_modules/source-map/package.json\\nnode_modules/inline-source-map/package.json\\nnode_modules/inquirer/node_modules/ansi-regex/package.json\\nnode_modules/inquirer/node_modules/strip-ansi/package.json\\nnode_modules/inquirer/package.json\\nnode_modules/insert-module-globals/node_modules/JSONStream/package.json\\nnode_modules/insert-module-globals/node_modules/combine-source-map/package.json\\nnode_modules/insert-module-globals/node_modules/convert-source-map/package.json\\nnode_modules/insert-module-globals/node_modules/inline-source-map/package.json\\nnode_modules/insert-module-globals/node_modules/jsonparse/package.json\\nnode_modules/insert-module-globals/node_modules/process/package.json\\nnode_modules/insert-module-globals/node_modules/source-map/package.json\\nnode_modules/insert-module-globals/node_modules/xtend/package.json\\nnode_modules/insert-module-globals/package.json\\nnode_modules/is-arrayish/package.json\\nnode_modules/is-buffer/package.json\\nnode_modules/is-callable/package.json\\nnode_modules/is-core-module/package.json\\nnode_modules/is-finite/package.json\\nnode_modules/is-fullwidth-code-point/package.json\\nnode_modules/is-typed-array/package.json\\nnode_modules/is-utf8/package.json\\nnode_modules/isarray/package.json\\nnode_modules/isexe/package.json\\nnode_modules/istanbul-lib-coverage/package.json\\nnode_modules/istanbul-lib-instrument/node_modules/semver/package.json\\nnode_modules/istanbul-lib-instrument/package.json\\nnode_modules/jade/node_modules/commander/package.json\\nnode_modules/jade/node_modules/mkdirp/package.json\\nnode_modules/jade/package.json\\nnode_modules/js-base64/package.json\\nnode_modules/js-tokens/package.json\\nnode_modules/js-yaml/package.json\\nnode_modules/jsesc/package.json\\nnode_modules/json-diff/package.json\\nnode_modules/json-schema-traverse/package.json\\nnode_modules/json-stable-stringify-without-jsonify/package.json\\nnode_modules/json-stable-stringify/package.json\\nnode_modules/jsonify/package.json\\nnode_modules/jsonparse/package.json\\nnode_modules/labeled-stream-splicer/package.json\\nnode_modules/leche/package.json\\nnode_modules/levn/package.json\\nnode_modules/lexical-scope/package.json\\nnode_modules/linefix/package.json\\nnode_modules/load-json-file/package.json\\nnode_modules/lodash.memoize/package.json\\nnode_modules/lodash/package.json\\nnode_modules/loud-rejection/package.json\\nnode_modules/lru-cache/package.json\\nnode_modules/map-obj/package.json\\nnode_modules/math-intrinsics/package.json\\nnode_modules/md5.js/package.json\\nnode_modules/meow/package.json\\nnode_modules/miller-rabin/node_modules/bn.js/package.json\\nnode_modules/miller-rabin/package.json\\nnode_modules/mimic-fn/package.json\\nnode_modules/minimalistic-assert/package.json\\nnode_modules/minimalistic-crypto-utils/package.json\\nnode_modules/minimatch/package.json\\nnode_modules/minimist/package.json\\nnode_modules/mkdirp/package.json\\nnode_modules/mocha/node_modules/debug/package.json\\nnode_modules/mocha/node_modules/escape-string-regexp/package.json\\nnode_modules/mocha/node_modules/glob/package.json\\nnode_modules/mocha/node_modules/minimatch/package.json\\nnode_modules/mocha/node_modules/minimist/package.json\\nnode_modules/mocha/node_modules/mkdirp/package.json\\nnode_modules/mocha/node_modules/ms/package.json\\nnode_modules/mocha/node_modules/supports-color/package.json\\nnode_modules/mocha/package.json\\nnode_modules/module-deps/node_modules/JSONStream/package.json\\nnode_modules/module-deps/node_modules/defined/package.json\\nnode_modules/module-deps/node_modules/jsonparse/package.json\\nnode_modules/module-deps/node_modules/parents/package.json\\nnode_modules/module-deps/node_modules/path-platform/package.json\\nnode_modules/module-deps/node_modules/resolve/package.json\\nnode_modules/module-deps/node_modules/resolve/test/resolver/baz/package.json\\nnode_modules/module-deps/node_modules/resolve/test/resolver/browser_field/package.json\\nnode_modules/module-deps/node_modules/resolve/test/resolver/false_main/package.json\\nnode_modules/module-deps/node_modules/resolve/test/resolver/invalid_main/package.json\\nnode_modules/module-deps/node_modules/resolve/test/resolver/multirepo/package.json\\nnode_modules/module-deps/node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json\\nnode_modules/module-deps/node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json\\nnode_modules/module-deps/node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json\\nnode_modules/module-deps/node_modules/xtend/package.json\\nnode_modules/module-deps/package.json\\nnode_modules/ms/package.json\\nnode_modules/mute-stream/package.json\\nnode_modules/natural-compare/package.json\\nnode_modules/nice-try/package.json\\nnode_modules/normalize-package-data/node_modules/resolve/package.json\\nnode_modules/normalize-package-data/node_modules/resolve/test/resolver/baz/package.json\\nnode_modules/normalize-package-data/node_modules/resolve/test/resolver/browser_field/package.json\\nnode_modules/normalize-package-data/node_modules/resolve/test/resolver/false_main/package.json\\nnode_modules/normalize-package-data/node_modules/resolve/test/resolver/invalid_main/package.json\\nnode_modules/normalize-package-data/node_modules/resolve/test/resolver/multirepo/package.json\\nnode_modules/normalize-package-data/node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json\\nnode_modules/normalize-package-data/node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json\\nnode_modules/normalize-package-data/node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json\\nnode_modules/normalize-package-data/package.json\\nnode_modules/nyc/node_modules/ansi-regex/package.json\\nnode_modules/nyc/node_modules/append-transform/package.json\\nnode_modules/nyc/node_modules/archy/package.json\\nnode_modules/nyc/node_modules/arrify/package.json\\nnode_modules/nyc/node_modules/async/package.json\\nnode_modules/nyc/node_modules/balanced-match/package.json\\nnode_modules/nyc/node_modules/brace-expansion/package.json\\nnode_modules/nyc/node_modules/caching-transform/package.json\\nnode_modules/nyc/node_modules/camelcase/package.json\\nnode_modules/nyc/node_modules/cliui/package.json\\nnode_modules/nyc/node_modules/code-point-at/package.json\\nnode_modules/nyc/node_modules/commander/package.json\\nnode_modules/nyc/node_modules/commondir/package.json\\nnode_modules/nyc/node_modules/concat-map/package.json\\nnode_modules/nyc/node_modules/convert-source-map/package.json\\nnode_modules/nyc/node_modules/cross-spawn/package.json\\nnode_modules/nyc/node_modules/debug/package.json\\nnode_modules/nyc/node_modules/decamelize/package.json\\nnode_modules/nyc/node_modules/default-require-extensions/package.json\\nnode_modules/nyc/node_modules/end-of-stream/package.json\\nnode_modules/nyc/node_modules/error-ex/package.json\\nnode_modules/nyc/node_modules/es6-error/package.json\\nnode_modules/nyc/node_modules/execa/node_modules/cross-spawn/package.json\\nnode_modules/nyc/node_modules/execa/package.json\\nnode_modules/nyc/node_modules/find-cache-dir/package.json\\nnode_modules/nyc/node_modules/find-up/package.json\\nnode_modules/nyc/node_modules/foreground-child/package.json\\nnode_modules/nyc/node_modules/fs.realpath/package.json\\nnode_modules/nyc/node_modules/get-caller-file/package.json\\nnode_modules/nyc/node_modules/get-stream/package.json\\nnode_modules/nyc/node_modules/glob/package.json\\nnode_modules/nyc/node_modules/graceful-fs/package.json\\nnode_modules/nyc/node_modules/handlebars/node_modules/source-map/package.json\\nnode_modules/nyc/node_modules/handlebars/package.json\\nnode_modules/nyc/node_modules/has-flag/package.json\\nnode_modules/nyc/node_modules/hasha/package.json\\nnode_modules/nyc/node_modules/hosted-git-info/package.json\\nnode_modules/nyc/node_modules/imurmurhash/package.json\\nnode_modules/nyc/node_modules/inflight/package.json\\nnode_modules/nyc/node_modules/inherits/package.json\\nnode_modules/nyc/node_modules/invert-kv/package.json\\nnode_modules/nyc/node_modules/is-arrayish/package.json\\nnode_modules/nyc/node_modules/is-fullwidth-code-point/package.json\\nnode_modules/nyc/node_modules/is-stream/package.json\\nnode_modules/nyc/node_modules/isexe/package.json\\nnode_modules/nyc/node_modules/istanbul-lib-coverage/package.json\\nnode_modules/nyc/node_modules/istanbul-lib-hook/package.json\\nnode_modules/nyc/node_modules/istanbul-lib-report/node_modules/supports-color/package.json\\nnode_modules/nyc/node_modules/istanbul-lib-report/package.json\\nnode_modules/nyc/node_modules/istanbul-lib-source-maps/node_modules/source-map/package.json\\nnode_modules/nyc/node_modules/istanbul-lib-source-maps/package.json\\nnode_modules/nyc/node_modules/istanbul-reports/package.json\\nnode_modules/nyc/node_modules/json-parse-better-errors/package.json\\nnode_modules/nyc/node_modules/lcid/package.json\\nnode_modules/nyc/node_modules/load-json-file/package.json\\nnode_modules/nyc/node_modules/locate-path/package.json\\nnode_modules/nyc/node_modules/lodash.flattendeep/package.json\\nnode_modules/nyc/node_modules/lodash/package.json\\nnode_modules/nyc/node_modules/lru-cache/package.json\\nnode_modules/nyc/node_modules/make-dir/package.json\\nnode_modules/nyc/node_modules/map-age-cleaner/package.json\\nnode_modules/nyc/node_modules/mem/package.json\\nnode_modules/nyc/node_modules/merge-source-map/node_modules/source-map/package.json\\nnode_modules/nyc/node_modules/merge-source-map/package.json\\nnode_modules/nyc/node_modules/mimic-fn/package.json\\nnode_modules/nyc/node_modules/minimatch/package.json\\nnode_modules/nyc/node_modules/minimist/package.json\\nnode_modules/nyc/node_modules/mkdirp/node_modules/minimist/package.json\\nnode_modules/nyc/node_modules/mkdirp/package.json\\nnode_modules/nyc/node_modules/ms/package.json\\nnode_modules/nyc/node_modules/nice-try/package.json\\nnode_modules/nyc/node_modules/normalize-package-data/package.json\\nnode_modules/nyc/node_modules/npm-run-path/package.json\\nnode_modules/nyc/node_modules/number-is-nan/package.json\\nnode_modules/nyc/node_modules/once/package.json\\nnode_modules/nyc/node_modules/optimist/package.json\\nnode_modules/nyc/node_modules/os-homedir/package.json\\nnode_modules/nyc/node_modules/os-locale/package.json\\nnode_modules/nyc/node_modules/p-defer/package.json\\nnode_modules/nyc/node_modules/p-finally/package.json\\nnode_modules/nyc/node_modules/p-is-promise/package.json\\nnode_modules/nyc/node_modules/p-limit/package.json\\nnode_modules/nyc/node_modules/p-locate/package.json\\nnode_modules/nyc/node_modules/p-try/package.json\\nnode_modules/nyc/node_modules/package-hash/package.json\\nnode_modules/nyc/node_modules/parse-json/package.json\\nnode_modules/nyc/node_modules/path-exists/package.json\\nnode_modules/nyc/node_modules/path-is-absolute/package.json\\nnode_modules/nyc/node_modules/path-key/package.json\\nnode_modules/nyc/node_modules/path-parse/package.json\\nnode_modules/nyc/node_modules/path-type/package.json\\nnode_modules/nyc/node_modules/pify/package.json\\nnode_modules/nyc/node_modules/pkg-dir/package.json\\nnode_modules/nyc/node_modules/pseudomap/package.json\\nnode_modules/nyc/node_modules/pump/package.json\\nnode_modules/nyc/node_modules/read-pkg-up/package.json\\nnode_modules/nyc/node_modules/read-pkg/package.json\\nnode_modules/nyc/node_modules/release-zalgo/package.json\\nnode_modules/nyc/node_modules/require-directory/package.json\\nnode_modules/nyc/node_modules/require-main-filename/package.json\\nnode_modules/nyc/node_modules/resolve-from/package.json\\nnode_modules/nyc/node_modules/resolve/package.json\\nnode_modules/nyc/node_modules/resolve/test/resolver/browser_field/package.json\\nnode_modules/nyc/node_modules/resolve/test/resolver/invalid_main/package.json\\nnode_modules/nyc/node_modules/resolve/test/resolver/multirepo/package.json\\nnode_modules/nyc/node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json\\nnode_modules/nyc/node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json\\nnode_modules/nyc/node_modules/rimraf/package.json\\nnode_modules/nyc/node_modules/safe-buffer/package.json\\nnode_modules/nyc/node_modules/semver/package.json\\nnode_modules/nyc/node_modules/set-blocking/package.json\\nnode_modules/nyc/node_modules/shebang-command/package.json\\nnode_modules/nyc/node_modules/shebang-regex/package.json\\nnode_modules/nyc/node_modules/signal-exit/package.json\\nnode_modules/nyc/node_modules/spawn-wrap/package.json\\nnode_modules/nyc/node_modules/spdx-correct/package.json\\nnode_modules/nyc/node_modules/spdx-exceptions/package.json\\nnode_modules/nyc/node_modules/spdx-expression-parse/package.json\\nnode_modules/nyc/node_modules/spdx-license-ids/package.json\\nnode_modules/nyc/node_modules/string-width/package.json\\nnode_modules/nyc/node_modules/strip-ansi/package.json\\nnode_modules/nyc/node_modules/strip-bom/package.json\\nnode_modules/nyc/node_modules/strip-eof/package.json\\nnode_modules/nyc/node_modules/test-exclude/package.json\\nnode_modules/nyc/node_modules/uglify-js/node_modules/source-map/package.json\\nnode_modules/nyc/node_modules/uglify-js/package.json\\nnode_modules/nyc/node_modules/uuid/package.json\\nnode_modules/nyc/node_modules/validate-npm-package-license/package.json\\nnode_modules/nyc/node_modules/which-module/package.json\\nnode_modules/nyc/node_modules/which/package.json\\nnode_modules/nyc/node_modules/wordwrap/package.json\\nnode_modules/nyc/node_modules/wrap-ansi/node_modules/ansi-regex/package.json\\nnode_modules/nyc/node_modules/wrap-ansi/node_modules/is-fullwidth-code-point/package.json\\nnode_modules/nyc/node_modules/wrap-ansi/node_modules/string-width/package.json\\nnode_modules/nyc/node_modules/wrap-ansi/node_modules/strip-ansi/package.json\\nnode_modules/nyc/node_modules/wrap-ansi/package.json\\nnode_modules/nyc/node_modules/wrappy/package.json\\nnode_modules/nyc/node_modules/write-file-atomic/package.json\\nnode_modules/nyc/node_modules/y18n/package.json\\nnode_modules/nyc/node_modules/yallist/package.json\\nnode_modules/nyc/node_modules/yargs-parser/package.json\\nnode_modules/nyc/node_modules/yargs/package.json\\nnode_modules/nyc/package.json\\nnode_modules/object-assign/package.json\\nnode_modules/once/package.json\\nnode_modules/onetime/package.json\\nnode_modules/optimist/node_modules/wordwrap/package.json\\nnode_modules/optimist/package.json\\nnode_modules/optionator/package.json\\nnode_modules/os-browserify/package.json\\nnode_modules/os-tmpdir/package.json\\nnode_modules/pako/package.json\\nnode_modules/parent-module/package.json\\nnode_modules/parents/package.json\\nnode_modules/parse-asn1/package.json\\nnode_modules/parse-json/package.json\\nnode_modules/path-browserify/package.json\\nnode_modules/path-exists/package.json\\nnode_modules/path-is-absolute/package.json\\nnode_modules/path-is-inside/package.json\\nnode_modules/path-key/package.json\\nnode_modules/path-parse/package.json\\nnode_modules/path-platform/package.json\\nnode_modules/path-type/package.json\\nnode_modules/pbkdf2/package.json\\nnode_modules/picocolors/package.json\\nnode_modules/pify/package.json\\nnode_modules/pinkie-promise/package.json\\nnode_modules/pinkie/package.json\\nnode_modules/possible-typed-array-names/package.json\\nnode_modules/prelude-ls/package.json\\nnode_modules/process-nextick-args/package.json\\nnode_modules/process/package.json\\nnode_modules/progress/package.json\\nnode_modules/public-encrypt/node_modules/bn.js/package.json\\nnode_modules/public-encrypt/package.json\\nnode_modules/punycode/package.json\\nnode_modules/querystring-es3/package.json\\nnode_modules/querystring/package.json\\nnode_modules/randombytes/package.json\\nnode_modules/randomfill/package.json\\nnode_modules/read-pkg-up/package.json\\nnode_modules/read-pkg/package.json\\nnode_modules/readable-stream/package.json\\nnode_modules/readable-wrap/package.json\\nnode_modules/redent/package.json\\nnode_modules/regenerate/package.json\\nnode_modules/regexpp/package.json\\nnode_modules/repeating/package.json\\nnode_modules/resolve-from/package.json\\nnode_modules/resolve/package.json\\nnode_modules/restore-cursor/package.json\\nnode_modules/rfile/node_modules/resolve/package.json\\nnode_modules/rfile/package.json\\nnode_modules/rimraf/node_modules/glob/package.json\\nnode_modules/rimraf/package.json\\nnode_modules/ripemd160/node_modules/hash-base/package.json\\nnode_modules/ripemd160/node_modules/isarray/package.json\\nnode_modules/ripemd160/node_modules/readable-stream/node_modules/safe-buffer/package.json\\nnode_modules/ripemd160/node_modules/readable-stream/package.json\\nnode_modules/ripemd160/node_modules/string_decoder/node_modules/safe-buffer/package.json\\nnode_modules/ripemd160/node_modules/string_decoder/package.json\\nnode_modules/ripemd160/package.json\\nnode_modules/ruglify/node_modules/uglify-js/package.json\\nnode_modules/ruglify/package.json\\nnode_modules/run-async/package.json\\nnode_modules/rxjs/ajax/package.json\\nnode_modules/rxjs/fetch/package.json\\nnode_modules/rxjs/internal-compatibility/package.json\\nnode_modules/rxjs/operators/package.json\\nnode_modules/rxjs/package.json\\nnode_modules/rxjs/src/ajax/package.json\\nnode_modules/rxjs/src/fetch/package.json\\nnode_modules/rxjs/src/internal-compatibility/package.json\\nnode_modules/rxjs/src/operators/package.json\\nnode_modules/rxjs/src/testing/package.json\\nnode_modules/rxjs/src/webSocket/package.json\\nnode_modules/rxjs/testing/package.json\\nnode_modules/rxjs/webSocket/package.json\\nnode_modules/safe-buffer/package.json\\nnode_modules/safer-buffer/package.json\\nnode_modules/semver/package.json\\nnode_modules/set-function-length/package.json\\nnode_modules/sha.js/package.json\\nnode_modules/shallow-copy/package.json\\nnode_modules/shasum/package.json\\nnode_modules/shebang-command/package.json\\nnode_modules/shebang-regex/package.json\\nnode_modules/shell-quote/package.json\\nnode_modules/shelljs-nodecli/node_modules/shelljs/package.json\\nnode_modules/shelljs-nodecli/package.json\\nnode_modules/shelljs/package.json\\nnode_modules/sigmund/package.json\\nnode_modules/signal-exit/package.json\\nnode_modules/slice-ansi/package.json\\nnode_modules/source-map/package.json\\nnode_modules/spdx-correct/package.json\\nnode_modules/spdx-exceptions/package.json\\nnode_modules/spdx-expression-parse/package.json\\nnode_modules/spdx-license-ids/package.json\\nnode_modules/sprintf-js/package.json\\nnode_modules/stream-browserify/package.json\\nnode_modules/stream-combiner2/node_modules/readable-stream/package.json\\nnode_modules/stream-combiner2/node_modules/through2/package.json\\nnode_modules/stream-combiner2/package.json\\nnode_modules/stream-consume/package.json\\nnode_modules/stream-splicer/package.json\\nnode_modules/string-width/package.json\\nnode_modules/string_decoder/package.json\\nnode_modules/strip-ansi/package.json\\nnode_modules/strip-bom/package.json\\nnode_modules/strip-indent/package.json\\nnode_modules/strip-json-comments/package.json\\nnode_modules/subarg/package.json\\nnode_modules/supports-color/package.json\\nnode_modules/supports-preserve-symlinks-flag/package.json\\nnode_modules/syntax-error/package.json\\nnode_modules/table/node_modules/ansi-regex/package.json\\nnode_modules/table/node_modules/string-width/package.json\\nnode_modules/table/node_modules/strip-ansi/package.json\\nnode_modules/table/package.json\\nnode_modules/text-table/package.json\\nnode_modules/through/package.json\\nnode_modules/through2/node_modules/xtend/package.json\\nnode_modules/through2/package.json\\nnode_modules/timers-browserify/node_modules/process/package.json\\nnode_modules/timers-browserify/package.json\\nnode_modules/tmp/package.json\\nnode_modules/to-buffer/node_modules/isarray/package.json\\nnode_modules/to-buffer/package.json\\nnode_modules/to-iso-string/package.json\\nnode_modules/trim-newlines/package.json\\nnode_modules/tslib/package.json\\nnode_modules/tty-browserify/package.json\\nnode_modules/type-check/package.json\\nnode_modules/type-detect/package.json\\nnode_modules/typed-array-buffer/package.json\\nnode_modules/typedarray/package.json\\nnode_modules/uglify-js/node_modules/source-map/package.json\\nnode_modules/uglify-js/package.json\\nnode_modules/uglify-to-browserify/package.json\\nnode_modules/umd/package.json\\nnode_modules/unicode-6.3.0/package.json\\nnode_modules/uri-js/node_modules/punycode/package.json\\nnode_modules/uri-js/package.json\\nnode_modules/url/node_modules/punycode/package.json\\nnode_modules/url/package.json\\nnode_modules/utf8/package.json\\nnode_modules/util-deprecate/package.json\\nnode_modules/util/node_modules/inherits/package.json\\nnode_modules/util/package.json\\nnode_modules/validate-npm-package-license/package.json\\nnode_modules/vm-browserify/package.json\\nnode_modules/which-typed-array/package.json\\nnode_modules/which/package.json\\nnode_modules/window-size/package.json\\nnode_modules/word-wrap/package.json\\nnode_modules/wordwrap/package.json\\nnode_modules/wrappy/package.json\\nnode_modules/write/package.json\\nnode_modules/xtend/package.json\\nnode_modules/yargs/node_modules/camelcase/package.json\\nnode_modules/yargs/node_modules/wordwrap/package.json\\nnode_modules/yargs/package.json"
      }
    ]
  },
  "components": [
    {
      "authors": [
        {
          "name": "Alex Ford <Alex.Ford@CodeTunnel.com> (http://CodeTunnel.com)"
        }
      ],
      "group": "",
      "name": "yargs",
      "version": "3.5.4",
      "description": "Light-weight option parsing with an argv hash. No optstrings attached.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "name": "MIT/X11",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yargs@3.5.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/bcoe/yargs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs@3.5.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/yargs/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/yargs/package.json"
              }
            ],
            "concludedValue": "node_modules/yargs/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "wordwrap",
      "version": "0.0.2",
      "description": "Wrap those words. Show them at what columns to start and stop.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "name": "MIT/X11",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/wordwrap@0.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/substack/node-wordwrap.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wordwrap@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/yargs/node_modules/wordwrap/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/yargs/node_modules/wordwrap/package.json"
              }
            ],
            "concludedValue": "node_modules/yargs/node_modules/wordwrap/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (http://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "camelcase",
      "version": "1.2.1",
      "description": "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar → fooBar",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/camelcase@1.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/yargs/node_modules/camelcase/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/yargs/node_modules/camelcase/package.json"
              }
            ],
            "concludedValue": "node_modules/yargs/node_modules/camelcase/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Raynos <raynos2@gmail.com>"
        }
      ],
      "group": "",
      "name": "xtend",
      "version": "3.0.0",
      "description": "extend like a boss",
      "scope": "optional",
      "purl": "pkg:npm/xtend@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/Raynos/xtend"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xtend@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/xtend/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/xtend/package.json"
              }
            ],
            "concludedValue": "node_modules/xtend/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "write",
      "version": "1.0.3",
      "description": "Write data to a file, replacing the file if it already exists and creating any intermediate directories if they don't already exist. Thin wrapper around node's native fs methods.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/write@1.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/write"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/write@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/write/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/write/package.json"
              }
            ],
            "concludedValue": "node_modules/write/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "wrappy",
      "version": "1.0.2",
      "description": "Callback wrapping utility",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/wrappy@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/wrappy"
        },
        {
          "type": "vcs",
          "url": "https://github.com/npm/wrappy"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrappy@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/wrappy/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/wrappy/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/wrappy/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/wrappy/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "wordwrap",
      "version": "1.0.0",
      "description": "Wrap those words. Show them at what columns to start and stop.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/wordwrap@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/substack/node-wordwrap.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wordwrap@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/wordwrap/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/wordwrap/package.json"
              }
            ],
            "concludedValue": "node_modules/wordwrap/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "word-wrap",
      "version": "1.2.5",
      "description": "Wrap words to a specified length.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/word-wrap@1.2.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/word-wrap"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/word-wrap@1.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/word-wrap/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/word-wrap/package.json"
              }
            ],
            "concludedValue": "node_modules/word-wrap/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "window-size",
      "version": "0.1.0",
      "description": "Reliable way to to get the height and width of the terminal/console in a node.js environment.",
      "scope": "optional",
      "purl": "pkg:npm/window-size@0.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/window-size"
        },
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/window-size.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/window-size@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/window-size/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/window-size/package.json"
              }
            ],
            "concludedValue": "node_modules/window-size/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)"
        }
      ],
      "group": "",
      "name": "which-typed-array",
      "version": "1.1.22",
      "description": "Which kind of Typed Array is this JavaScript value? Works cross-realm, without `instanceof`, and despite Symbol.toStringTag.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/which-typed-array@1.1.22",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/inspect-js/which-typed-array.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which-typed-array@1.1.22",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/which-typed-array/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/which-typed-array/package.json"
              }
            ],
            "concludedValue": "node_modules/which-typed-array/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)"
        }
      ],
      "group": "",
      "name": "which",
      "version": "1.3.1",
      "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/which@1.3.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/node-which.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/which/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/which/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/which/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/which/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "vm-browserify",
      "version": "0.0.4",
      "description": "vm module for the browser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/vm-browserify@0.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/substack/vm-browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vm-browserify@0.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/vm-browserify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/vm-browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/vm-browserify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Kyle E. Mitchell <kyle@kemitchell.com> (https://kemitchell.com)"
        }
      ],
      "group": "",
      "name": "validate-npm-package-license",
      "version": "3.0.4",
      "description": "Give me a string and I'll tell you if it's a valid npm package license string",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/validate-npm-package-license@3.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/validate-npm-package-license@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/validate-npm-package-license/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/validate-npm-package-license/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/validate-npm-package-license/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/validate-npm-package-license/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)"
        }
      ],
      "group": "",
      "name": "util-deprecate",
      "version": "1.0.2",
      "description": "The Node.js `util.deprecate()` function with browser support",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/util-deprecate@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/TooTallNate/util-deprecate"
        },
        {
          "type": "vcs",
          "url": "git://github.com/TooTallNate/util-deprecate.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/util-deprecate@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/util-deprecate/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/util-deprecate/package.json"
              }
            ],
            "concludedValue": "node_modules/util-deprecate/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Joyent (http://www.joyent.com)"
        }
      ],
      "group": "",
      "name": "util",
      "version": "0.10.4",
      "description": "Node.JS util module",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/util@0.10.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/defunctzombie/node-util"
        },
        {
          "type": "vcs",
          "url": "git://github.com/defunctzombie/node-util"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/util@0.10.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/util/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/util/package.json"
              }
            ],
            "concludedValue": "node_modules/util/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.3",
      "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/inherits@2.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/util/node_modules/inherits/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/inherits/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/inherits/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/inherits/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Bynens (https://mathiasbynens.be/)"
        }
      ],
      "group": "",
      "name": "utf8",
      "version": "2.1.2",
      "description": "A well-tested UTF-8 encoder/decoder written in JavaScript.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/utf8@2.1.2",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://mths.be/utf8js"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mathiasbynens/utf8.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/utf8@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/utf8/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/utf8/package.json"
              }
            ],
            "concludedValue": "node_modules/utf8/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "url",
      "version": "0.10.3",
      "description": "The core `url` packaged standalone for use with Browserify.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/url@0.10.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/defunctzombie/node-url.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/url@0.10.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/url/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/url/package.json"
              }
            ],
            "concludedValue": "node_modules/url/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Bynens (https://mathiasbynens.be/)"
        }
      ],
      "group": "",
      "name": "punycode",
      "version": "1.3.2",
      "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/punycode@1.3.2",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://mths.be/punycode"
        },
        {
          "type": "vcs",
          "url": "https://github.com/bestiejs/punycode.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/punycode@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/url/node_modules/punycode/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/url/node_modules/punycode/package.json"
              }
            ],
            "concludedValue": "node_modules/url/node_modules/punycode/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Gary Court <gary.court@gmail.com>"
        }
      ],
      "group": "",
      "name": "uri-js",
      "version": "4.4.1",
      "description": "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/uri-js@4.4.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/garycourt/uri-js"
        },
        {
          "type": "vcs",
          "url": "http://github.com/garycourt/uri-js"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uri-js@4.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/uri-js/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/uri-js/package.json"
              }
            ],
            "concludedValue": "node_modules/uri-js/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Bynens (https://mathiasbynens.be/)"
        }
      ],
      "group": "",
      "name": "punycode",
      "version": "2.3.1",
      "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/punycode@2.3.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://mths.be/punycode"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mathiasbynens/punycode.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/punycode@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/uri-js/node_modules/punycode/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/uri-js/node_modules/punycode/package.json"
              }
            ],
            "concludedValue": "node_modules/uri-js/node_modules/punycode/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Bynens (https://mathiasbynens.be/)"
        }
      ],
      "group": "",
      "name": "unicode-6.3.0",
      "version": "0.1.6",
      "description": "JavaScript-compatible Unicode data. Arrays of code points, arrays of symbols, and regular expressions for Unicode v6.3.0’s categories, scripts, blocks, bidi, and other properties.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/unicode-6.3.0@0.1.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mathiasbynens/unicode-6.3.0"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mathiasbynens/unicode-6.3.0.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unicode-6.3.0@0.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/unicode-6.3.0/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/unicode-6.3.0/package.json"
              }
            ],
            "concludedValue": "node_modules/unicode-6.3.0/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "ForbesLindesay"
        }
      ],
      "group": "",
      "name": "umd",
      "version": "2.1.0",
      "description": "Universal Module Definition for use in automated build systems",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/umd@2.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ForbesLindesay/umd.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/umd@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/umd/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/umd/package.json"
              }
            ],
            "concludedValue": "node_modules/umd/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "ForbesLindesay"
        }
      ],
      "group": "",
      "name": "uglify-to-browserify",
      "version": "1.0.2",
      "description": "A transform to make UglifyJS work in browserify.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/uglify-to-browserify@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ForbesLindesay/uglify-to-browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uglify-to-browserify@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/uglify-to-browserify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/uglify-to-browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/uglify-to-browserify/package.json"
          }
        ]
      },
      "tags": [
        "transform"
      ]
    },
    {
      "authors": [
        {
          "name": "Mihai Bazon <mihai.bazon@gmail.com> (http://lisperator.net/)"
        }
      ],
      "group": "",
      "name": "uglify-js",
      "version": "2.4.24",
      "description": "JavaScript parser, mangler/compressor and beautifier toolkit",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/uglify-js@2.4.24",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://lisperator.net/uglifyjs"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mishoo/UglifyJS2.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uglify-js@2.4.24",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/uglify-js/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/uglify-js/package.json"
              }
            ],
            "concludedValue": "node_modules/uglify-js/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nick Fitzgerald <nfitzgerald@mozilla.com>"
        }
      ],
      "group": "",
      "name": "source-map",
      "version": "0.1.34",
      "description": "Generates and consumes source maps",
      "scope": "optional",
      "purl": "pkg:npm/source-map@0.1.34",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mozilla/source-map"
        },
        {
          "type": "vcs",
          "url": "http://github.com/mozilla/source-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.1.34",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/uglify-js/node_modules/source-map/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/uglify-js/node_modules/source-map/package.json"
              }
            ],
            "concludedValue": "node_modules/uglify-js/node_modules/source-map/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "typedarray",
      "version": "0.0.7",
      "description": "TypedArray polyfill for old browsers",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/typedarray@0.0.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/es-shims/typedarray"
        },
        {
          "type": "vcs",
          "url": "git://github.com/es-shims/typedarray.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typedarray@0.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/typedarray/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/typedarray/package.json"
              }
            ],
            "concludedValue": "node_modules/typedarray/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "typed-array-buffer",
      "version": "1.0.3",
      "description": "Get the ArrayBuffer out of a TypedArray, robustly.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/typed-array-buffer@1.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/typed-array-buffer#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/typed-array-buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typed-array-buffer@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/typed-array-buffer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/typed-array-buffer/package.json"
              }
            ],
            "concludedValue": "node_modules/typed-array-buffer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jake Luer <jake@alogicalparadox.com> (http://alogicalparadox.com)"
        }
      ],
      "group": "",
      "name": "type-detect",
      "version": "0.1.1",
      "description": "Improved typeof detection for node.js and the browser.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/type-detect@0.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/type-detect@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/type-detect/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/type-detect/package.json"
              }
            ],
            "concludedValue": "node_modules/type-detect/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "George Zahariev <z@georgezahariev.com>"
        }
      ],
      "group": "",
      "name": "type-check",
      "version": "0.3.2",
      "description": "type-check allows you to check the types of JavaScript values at runtime with a Haskell like type syntax.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/type-check@0.3.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/gkz/type-check"
        },
        {
          "type": "vcs",
          "url": "git://github.com/gkz/type-check.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-check@0.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/type-check/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/type-check/package.json"
              }
            ],
            "concludedValue": "node_modules/type-check/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "tty-browserify",
      "version": "0.0.1",
      "description": "the tty module from node core for browsers",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tty-browserify@0.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/browserify/tty-browserify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/browserify/tty-browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tty-browserify@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tty-browserify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tty-browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/tty-browserify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Microsoft Corp."
        }
      ],
      "group": "",
      "name": "tslib",
      "version": "1.14.1",
      "description": "Runtime library for TypeScript helper functions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "0BSD",
            "url": "https://opensource.org/licenses/0BSD",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tslib@1.14.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.typescriptlang.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/Microsoft/tslib.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tslib@1.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tslib/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tslib/package.json"
              }
            ],
            "concludedValue": "node_modules/tslib/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "trim-newlines",
      "version": "1.0.0",
      "description": "Trim newlines from the start and/or end of a string",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/trim-newlines@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/trim-newlines@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/trim-newlines/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/trim-newlines/package.json"
              }
            ],
            "concludedValue": "node_modules/trim-newlines/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-iso-string",
      "version": "0.0.2",
      "description": "Cross-browser toISOString support.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/to-iso-string@0.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/to-iso-string@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/to-iso-string/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/to-iso-string/package.json"
              }
            ],
            "concludedValue": "node_modules/to-iso-string/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Buus (@mafintosh)"
        }
      ],
      "group": "",
      "name": "to-buffer",
      "version": "1.2.2",
      "description": "Pass in a string, array, Buffer, Data View, or Uint8Array, and get a Buffer back.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/to-buffer@1.2.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/browserify/to-buffer"
        },
        {
          "type": "vcs",
          "url": "https://github.com/browserify/to-buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-buffer@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/to-buffer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/to-buffer/package.json"
              }
            ],
            "concludedValue": "node_modules/to-buffer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)"
        }
      ],
      "group": "",
      "name": "isarray",
      "version": "2.0.5",
      "description": "Array#isArray for older browsers",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/isarray@2.0.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/juliangruber/isarray"
        },
        {
          "type": "vcs",
          "url": "git://github.com/juliangruber/isarray.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isarray@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/to-buffer/node_modules/isarray/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/to-buffer/node_modules/isarray/package.json"
              }
            ],
            "concludedValue": "node_modules/to-buffer/node_modules/isarray/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "KARASZI István <github@spam.raszi.hu> (http://raszi.hu/)"
        }
      ],
      "group": "",
      "name": "tmp",
      "version": "0.0.33",
      "description": "Temporary file and directory creator",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tmp@0.0.33",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/raszi/node-tmp"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tmp@0.0.33",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tmp/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tmp/package.json"
              }
            ],
            "concludedValue": "node_modules/tmp/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "J. Ryan Stinnett <jryans@gmail.com> (http://convolv.es/)"
        }
      ],
      "group": "",
      "name": "timers-browserify",
      "version": "1.4.2",
      "description": "timers module for browserify",
      "scope": "optional",
      "purl": "pkg:npm/timers-browserify@1.4.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jryans/timers-browserify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/jryans/timers-browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/timers-browserify@1.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/timers-browserify/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/timers-browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/timers-browserify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Roman Shtylman <shtylman@gmail.com>"
        }
      ],
      "group": "",
      "name": "process",
      "version": "0.11.10",
      "description": "process information for node.js and browsers",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/process@0.11.10",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/shtylman/node-process.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/process@0.11.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/timers-browserify/node_modules/process/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/insert-module-globals/node_modules/process/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/insert-module-globals/node_modules/process/package.json"
              }
            ],
            "concludedValue": "node_modules/insert-module-globals/node_modules/process/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Rod Vagg <r@va.gg> (https://github.com/rvagg)"
        }
      ],
      "group": "",
      "name": "through2",
      "version": "1.1.1",
      "description": "A tiny wrapper around Node streams2 Transform to avoid explicit subclassing noise",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/through2@1.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/rvagg/through2.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/through2@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/through2/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/through2/package.json"
              }
            ],
            "concludedValue": "node_modules/through2/package.json"
          }
        ]
      },
      "tags": [
        "transform"
      ]
    },
    {
      "authors": [
        {
          "name": "Raynos <raynos2@gmail.com>"
        }
      ],
      "group": "",
      "name": "xtend",
      "version": "4.0.2",
      "description": "extend like a boss",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/xtend@4.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/Raynos/xtend"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xtend@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/through2/node_modules/xtend/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/module-deps/node_modules/xtend/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/insert-module-globals/node_modules/xtend/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/acorn-node/node_modules/xtend/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/acorn-node/node_modules/xtend/package.json"
              }
            ],
            "concludedValue": "node_modules/acorn-node/node_modules/xtend/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Dominic Tarr <dominic.tarr@gmail.com> (dominictarr.com)"
        }
      ],
      "group": "",
      "name": "through",
      "version": "2.3.8",
      "description": "simplified stream construction",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/through@2.3.8",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/dominictarr/through"
        },
        {
          "type": "vcs",
          "url": "https://github.com/dominictarr/through.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/through@2.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/through/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/through/package.json"
              }
            ],
            "concludedValue": "node_modules/through/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "text-table",
      "version": "0.2.0",
      "description": "borderless text tables with alignment",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/text-table@0.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/text-table"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/text-table.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/text-table@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/text-table/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/text-table/package.json"
              }
            ],
            "concludedValue": "node_modules/text-table/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Gajus Kuizinas <gajus@gajus.com> (http://gajus.com)"
        }
      ],
      "group": "",
      "name": "table",
      "version": "5.4.6",
      "description": "Formats data into a string table.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/table@5.4.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/gajus/table"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/table@5.4.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/table/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/table/package.json"
              }
            ],
            "concludedValue": "node_modules/table/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "strip-ansi",
      "version": "5.2.0",
      "description": "Strip ANSI escape codes from a string",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strip-ansi@5.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@5.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/table/node_modules/strip-ansi/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/inquirer/node_modules/strip-ansi/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/inquirer/node_modules/strip-ansi/package.json"
              }
            ],
            "concludedValue": "node_modules/inquirer/node_modules/strip-ansi/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "string-width",
      "version": "3.1.0",
      "description": "Get the visual width of a string - the number of columns required to display it",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/string-width@3.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/string-width@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/table/node_modules/string-width/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/table/node_modules/string-width/package.json"
              }
            ],
            "concludedValue": "node_modules/table/node_modules/string-width/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "ansi-regex",
      "version": "4.1.1",
      "description": "Regular expression for matching ANSI escape codes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ansi-regex@4.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/table/node_modules/ansi-regex/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/inquirer/node_modules/ansi-regex/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/inquirer/node_modules/ansi-regex/package.json"
              }
            ],
            "concludedValue": "node_modules/inquirer/node_modules/ansi-regex/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "syntax-error",
      "version": "1.4.0",
      "description": "detect and report syntax errors in source code strings",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/syntax-error@1.4.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/node-syntax-error"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/node-syntax-error.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/syntax-error@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/syntax-error/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/syntax-error/package.json"
              }
            ],
            "concludedValue": "node_modules/syntax-error/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "supports-preserve-symlinks-flag",
      "version": "1.0.0",
      "description": "Determine if the current node version supports the `--preserve-symlinks` flag.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/supports-preserve-symlinks-flag@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/node-supports-preserve-symlinks-flag#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/node-supports-preserve-symlinks-flag.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-preserve-symlinks-flag@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/supports-preserve-symlinks-flag/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/supports-preserve-symlinks-flag/package.json"
              }
            ],
            "concludedValue": "node_modules/supports-preserve-symlinks-flag/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "supports-color",
      "version": "5.5.0",
      "description": "Detect whether a terminal supports color",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/supports-color@5.5.0",
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@5.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/supports-color/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/supports-color/package.json"
              }
            ],
            "concludedValue": "node_modules/supports-color/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "subarg",
      "version": "1.0.0",
      "description": "parse arguments with recursive contexts",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/subarg@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/subarg"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/subarg.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/subarg@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/subarg/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/subarg/package.json"
              }
            ],
            "concludedValue": "node_modules/subarg/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "strip-json-comments",
      "version": "2.0.1",
      "description": "Strip comments from JSON. Lets you use comments in your JSON files!",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strip-json-comments@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/strip-json-comments@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/strip-json-comments/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/strip-json-comments/package.json"
              }
            ],
            "concludedValue": "node_modules/strip-json-comments/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (http://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "strip-indent",
      "version": "1.0.1",
      "description": "Strip leading whitespace from every line in a string",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strip-indent@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/strip-indent@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/strip-indent/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/strip-indent/package.json"
              }
            ],
            "concludedValue": "node_modules/strip-indent/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "strip-bom",
      "version": "2.0.0",
      "description": "Strip UTF-8 byte order mark (BOM) from a string/buffer",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strip-bom@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/strip-bom@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/strip-bom/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/strip-bom/package.json"
              }
            ],
            "concludedValue": "node_modules/strip-bom/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "strip-ansi",
      "version": "4.0.0",
      "description": "Strip ANSI escape codes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strip-ansi@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/strip-ansi/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/strip-ansi/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/strip-ansi/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/strip-ansi/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "0.10.31",
      "description": "The string_decoder module from Node core",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/string_decoder@0.10.31",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/rvagg/string_decoder"
        },
        {
          "type": "vcs",
          "url": "git://github.com/rvagg/string_decoder.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@0.10.31",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/string_decoder/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/string_decoder/package.json"
              }
            ],
            "concludedValue": "node_modules/string_decoder/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "string-width",
      "version": "2.1.1",
      "description": "Get the visual width of a string - the number of columns required to display it",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/string-width@2.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/string-width@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/string-width/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/string-width/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/string-width/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/string-width/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "stream-splicer",
      "version": "1.3.2",
      "description": "streaming pipeline with a mutable configuration",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/stream-splicer@1.3.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/stream-splicer"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/stream-splicer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-splicer@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/stream-splicer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/stream-splicer/package.json"
              }
            ],
            "concludedValue": "node_modules/stream-splicer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Aron Nopanen"
        }
      ],
      "group": "",
      "name": "stream-consume",
      "version": "0.1.1",
      "description": "Consume a stream to ensure it keeps flowing",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/stream-consume@0.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/aroneous/stream-consume"
        },
        {
          "type": "vcs",
          "url": "https://github.com/aroneous/stream-consume.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-consume@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/stream-consume/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/stream-consume/package.json"
              }
            ],
            "concludedValue": "node_modules/stream-consume/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "'Dominic Tarr' <dominic.tarr@gmail.com> (http://dominictarr.com)"
        }
      ],
      "group": "",
      "name": "stream-combiner2",
      "version": "1.0.2",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/stream-combiner2@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/stream-combiner2"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/stream-combiner2.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-combiner2@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/stream-combiner2/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/stream-combiner2/package.json"
              }
            ],
            "concludedValue": "node_modules/stream-combiner2/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Rod Vagg <r@va.gg> (https://github.com/rvagg)"
        }
      ],
      "group": "",
      "name": "through2",
      "version": "0.5.1",
      "description": "A tiny wrapper around Node streams2 Transform to avoid explicit subclassing noise",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/through2@0.5.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/rvagg/through2.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/through2@0.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/stream-combiner2/node_modules/through2/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/browser-pack/node_modules/through2/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browser-pack/node_modules/through2/package.json"
              }
            ],
            "concludedValue": "node_modules/browser-pack/node_modules/through2/package.json"
          }
        ]
      },
      "tags": [
        "transform"
      ]
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "readable-stream",
      "version": "1.0.34",
      "description": "Streams2, a user-land copy of the stream library from Node.js v0.10.x",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/readable-stream@1.0.34",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/readable-stream"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@1.0.34",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/stream-combiner2/node_modules/readable-stream/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/browser-pack/node_modules/readable-stream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browser-pack/node_modules/readable-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/browser-pack/node_modules/readable-stream/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "stream-browserify",
      "version": "1.0.0",
      "description": "the stream module from node core for browsers",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/stream-browserify@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/stream-browserify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/stream-browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-browserify@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/stream-browserify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/stream-browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/stream-browserify/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "Alexandru Marasteanu <hello@alexei.ro> (http://alexei.ro/)"
        }
      ],
      "group": "",
      "name": "sprintf-js",
      "version": "1.0.3",
      "description": "JavaScript sprintf implementation",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/sprintf-js@1.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/alexei/sprintf.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sprintf-js@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/sprintf-js/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/sprintf-js/package.json"
              }
            ],
            "concludedValue": "node_modules/sprintf-js/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Shinnosuke Watanabe (https://github.com/shinnn)"
        }
      ],
      "group": "",
      "name": "spdx-license-ids",
      "version": "3.0.23",
      "description": "A list of SPDX license identifiers",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0",
            "url": "https://opensource.org/licenses/CC0-1.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Public Domain"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/spdx-license-ids@3.0.23",
      "type": "library",
      "bom-ref": "pkg:npm/spdx-license-ids@3.0.23",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/spdx-license-ids/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Public Domain"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/spdx-license-ids/package.json"
              }
            ],
            "concludedValue": "node_modules/spdx-license-ids/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Kyle E. Mitchell <kyle@kemitchell.com> (https://kemitchell.com)"
        }
      ],
      "group": "",
      "name": "spdx-expression-parse",
      "version": "3.0.1",
      "description": "parse SPDX license expressions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/spdx-expression-parse@3.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/spdx-expression-parse@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/spdx-expression-parse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/spdx-expression-parse/package.json"
              }
            ],
            "concludedValue": "node_modules/spdx-expression-parse/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Linux Foundation"
        }
      ],
      "group": "",
      "name": "spdx-exceptions",
      "version": "2.5.0",
      "description": "list of SPDX standard license exceptions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "CC-BY-3.0",
            "url": "https://opensource.org/licenses/CC-BY-3.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/spdx-exceptions@2.5.0",
      "type": "library",
      "bom-ref": "pkg:npm/spdx-exceptions@2.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/spdx-exceptions/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/spdx-exceptions/package.json"
              }
            ],
            "concludedValue": "node_modules/spdx-exceptions/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-correct",
      "version": "3.2.0",
      "description": "correct invalid SPDX expressions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/spdx-correct@3.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/spdx-correct@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/spdx-correct/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/spdx-correct/package.json"
              }
            ],
            "concludedValue": "node_modules/spdx-correct/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nick Fitzgerald <nfitzgerald@mozilla.com>"
        }
      ],
      "group": "",
      "name": "source-map",
      "version": "0.1.43",
      "description": "Generates and consumes source maps",
      "scope": "optional",
      "purl": "pkg:npm/source-map@0.1.43",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mozilla/source-map"
        },
        {
          "type": "vcs",
          "url": "http://github.com/mozilla/source-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.1.43",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/source-map/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/source-map/package.json"
              }
            ],
            "concludedValue": "node_modules/source-map/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "slice-ansi",
      "version": "2.1.0",
      "description": "Slice a string with ANSI escape codes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/slice-ansi@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/slice-ansi@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/slice-ansi/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/slice-ansi/package.json"
              }
            ],
            "concludedValue": "node_modules/slice-ansi/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Ben Coe <ben@npmjs.com>"
        }
      ],
      "group": "",
      "name": "signal-exit",
      "version": "3.0.7",
      "description": "when you want to fire an event no matter how a process exits.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/signal-exit@3.0.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/tapjs/signal-exit"
        },
        {
          "type": "vcs",
          "url": "https://github.com/tapjs/signal-exit.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/signal-exit@3.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/signal-exit/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/signal-exit/package.json"
              }
            ],
            "concludedValue": "node_modules/signal-exit/package.json"
          }
        ]
      },
      "tags": [
        "event"
      ]
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "sigmund",
      "version": "1.0.1",
      "description": "Quick and dirty signatures for Objects.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/sigmund@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/sigmund"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sigmund@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/sigmund/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/sigmund/package.json"
              }
            ],
            "concludedValue": "node_modules/sigmund/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zakas"
        }
      ],
      "group": "",
      "name": "shelljs-nodecli",
      "version": "0.1.1",
      "description": "ShellJS Node CLI Extension",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/shelljs-nodecli@0.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/shelljs-nodecli@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/shelljs-nodecli/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "shelljs-nodecli"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/shelljs-nodecli/package.json"
              }
            ],
            "concludedValue": "node_modules/shelljs-nodecli/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "Makefile.js",
            "line": 16
          }
        ]
      },
      "tags": [
        "cli"
      ]
    },
    {
      "authors": [
        {
          "name": "Artur Adib <aadib@mozilla.com>"
        }
      ],
      "group": "",
      "name": "shelljs",
      "version": "0.2.6",
      "description": "Portable Unix shell commands for Node.js",
      "scope": "required",
      "purl": "pkg:npm/shelljs@0.2.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/arturadib/shelljs"
        },
        {
          "type": "vcs",
          "url": "git://github.com/arturadib/shelljs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shelljs@0.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/shelljs-nodecli/node_modules/shelljs/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "shelljs/make,shelljs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/shelljs-nodecli/node_modules/shelljs/package.json"
              }
            ],
            "concludedValue": "node_modules/shelljs-nodecli/node_modules/shelljs/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "Makefile.js",
            "line": 14
          },
          {
            "location": "tools/update-tests-esprima.js",
            "line": 18
          },
          {
            "location": "tools/update-tests.js",
            "line": 18
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Artur Adib <aadib@mozilla.com>"
        }
      ],
      "group": "",
      "name": "shelljs",
      "version": "0.3.0",
      "description": "Portable Unix shell commands for Node.js",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "BSD*",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/shelljs@0.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/arturadib/shelljs"
        },
        {
          "type": "vcs",
          "url": "git://github.com/arturadib/shelljs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shelljs@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/shelljs/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "shelljs/make,shelljs"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/shelljs/package.json"
              }
            ],
            "concludedValue": "node_modules/shelljs/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "Makefile.js",
            "line": 14
          },
          {
            "location": "tools/update-tests-esprima.js",
            "line": 18
          },
          {
            "location": "tools/update-tests.js",
            "line": 18
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "shell-quote",
      "version": "0.0.1",
      "description": "quote and parse shell commands",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/shell-quote@0.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/substack/node-shell-quote.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shell-quote@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/shell-quote/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/shell-quote/package.json"
              }
            ],
            "concludedValue": "node_modules/shell-quote/package.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "shebang-regex",
      "version": "1.0.0",
      "description": "Regular expression for matching a shebang",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/shebang-regex@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/shebang-regex@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/shebang-regex/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/shebang-regex/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/shebang-regex/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/shebang-regex/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Kevin Martensson <kevinmartensson@gmail.com> (github.com/kevva)"
        }
      ],
      "group": "",
      "name": "shebang-command",
      "version": "1.2.0",
      "description": "Get the command from a shebang",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/shebang-command@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/shebang-command@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/shebang-command/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/shebang-command/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/shebang-command/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/shebang-command/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "'Dominic Tarr' <dominic.tarr@gmail.com> (http://dominictarr.com)"
        }
      ],
      "group": "",
      "name": "shasum",
      "version": "1.0.2",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/shasum@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/dominictarr/shasum"
        },
        {
          "type": "vcs",
          "url": "git://github.com/dominictarr/shasum.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shasum@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/shasum/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/shasum/package.json"
              }
            ],
            "concludedValue": "node_modules/shasum/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "shallow-copy",
      "version": "0.0.1",
      "description": "make a shallow copy of an object or array",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/shallow-copy@0.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/shallow-copy"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/shallow-copy.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shallow-copy@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/shallow-copy/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/shallow-copy/package.json"
              }
            ],
            "concludedValue": "node_modules/shallow-copy/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Dominic Tarr <dominic.tarr@gmail.com> (dominictarr.com)"
        }
      ],
      "group": "",
      "name": "sha.js",
      "version": "2.4.12",
      "description": "Streamable SHA hashes in pure javascript",
      "scope": "optional",
      "licenses": [
        {
          "expression": "MIT AND BSD-3-Clause"
        }
      ],
      "purl": "pkg:npm/sha.js@2.4.12",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/sha.js"
        },
        {
          "type": "vcs",
          "url": "git://github.com/crypto-browserify/sha.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sha.js@2.4.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/sha.js/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/sha.js/package.json"
              }
            ],
            "concludedValue": "node_modules/sha.js/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "set-function-length",
      "version": "1.2.2",
      "description": "Set a function's length property",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/set-function-length@1.2.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/set-function-length#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/set-function-length.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/set-function-length@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/set-function-length/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/set-function-length/package.json"
              }
            ],
            "concludedValue": "node_modules/set-function-length/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "semver",
      "version": "5.7.2",
      "description": "The semantic version parser used by npm.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/semver@5.7.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/node-semver.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@5.7.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/semver/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/semver/package.json"
              }
            ],
            "concludedValue": "node_modules/semver/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nikita Skovoroda <chalkerx@gmail.com> (https://github.com/ChALkeR)"
        }
      ],
      "group": "",
      "name": "safer-buffer",
      "version": "2.1.2",
      "description": "Modern Buffer API polyfill without footguns",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/safer-buffer@2.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/ChALkeR/safer-buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safer-buffer@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/safer-buffer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/safer-buffer/package.json"
              }
            ],
            "concludedValue": "node_modules/safer-buffer/package.json"
          }
        ]
      },
      "tags": [
        "api"
      ]
    },
    {
      "authors": [
        {
          "name": "Feross Aboukhadijeh <feross@feross.org> (https://feross.org)"
        }
      ],
      "group": "",
      "name": "safe-buffer",
      "version": "5.2.1",
      "description": "Safer Node.js Buffer API",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/feross/safe-buffer"
        },
        {
          "type": "vcs",
          "url": "git://github.com/feross/safe-buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/safe-buffer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/safe-buffer/package.json"
              }
            ],
            "concludedValue": "node_modules/safe-buffer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Lesh <ben@benlesh.com>"
        }
      ],
      "group": "",
      "name": "rxjs",
      "version": "6.6.7",
      "description": "Reactive Extensions for modern JavaScript",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/rxjs@6.6.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ReactiveX/RxJS"
        },
        {
          "type": "vcs",
          "url": "https://github.com/reactivex/rxjs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rxjs@6.6.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/rxjs/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/rxjs/package.json"
              }
            ],
            "concludedValue": "node_modules/rxjs/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rxjs/webSocket",
      "version": "",
      "scope": "optional",
      "purl": "pkg:npm/rxjs%2FwebSocket",
      "type": "library",
      "bom-ref": "pkg:npm/rxjs/webSocket",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/rxjs/webSocket/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/rxjs/src/webSocket/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/rxjs/src/webSocket/package.json"
              }
            ],
            "concludedValue": "node_modules/rxjs/src/webSocket/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rxjs/testing",
      "version": "",
      "scope": "optional",
      "purl": "pkg:npm/rxjs%2Ftesting",
      "type": "library",
      "bom-ref": "pkg:npm/rxjs/testing",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/rxjs/testing/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/rxjs/src/testing/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/rxjs/src/testing/package.json"
              }
            ],
            "concludedValue": "node_modules/rxjs/src/testing/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rxjs/operators",
      "version": "",
      "scope": "optional",
      "purl": "pkg:npm/rxjs%2Foperators",
      "type": "library",
      "bom-ref": "pkg:npm/rxjs/operators",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/rxjs/src/operators/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/rxjs/operators/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/rxjs/operators/package.json"
              }
            ],
            "concludedValue": "node_modules/rxjs/operators/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rxjs/internal-compatibility",
      "version": "",
      "scope": "optional",
      "purl": "pkg:npm/rxjs%2Finternal-compatibility",
      "type": "library",
      "bom-ref": "pkg:npm/rxjs/internal-compatibility",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/rxjs/src/internal-compatibility/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/rxjs/internal-compatibility/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/rxjs/internal-compatibility/package.json"
              }
            ],
            "concludedValue": "node_modules/rxjs/internal-compatibility/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rxjs/fetch",
      "version": "",
      "scope": "optional",
      "purl": "pkg:npm/rxjs%2Ffetch",
      "type": "library",
      "bom-ref": "pkg:npm/rxjs/fetch",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/rxjs/src/fetch/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/rxjs/fetch/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/rxjs/fetch/package.json"
              }
            ],
            "concludedValue": "node_modules/rxjs/fetch/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rxjs/ajax",
      "version": "",
      "scope": "optional",
      "purl": "pkg:npm/rxjs%2Fajax",
      "type": "library",
      "bom-ref": "pkg:npm/rxjs/ajax",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/rxjs/src/ajax/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/rxjs/ajax/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/rxjs/ajax/package.json"
              }
            ],
            "concludedValue": "node_modules/rxjs/ajax/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Simon Boudrias <admin@simonboudrias.com>"
        }
      ],
      "group": "",
      "name": "run-async",
      "version": "2.4.1",
      "description": "Utility method to run function either synchronously or asynchronously using the common `this.async()` style.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/run-async@2.4.1",
      "type": "library",
      "bom-ref": "pkg:npm/run-async@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/run-async/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/run-async/package.json"
              }
            ],
            "concludedValue": "node_modules/run-async/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "ForbesLindesay"
        }
      ],
      "group": "",
      "name": "ruglify",
      "version": "1.0.0",
      "description": "'Require' minified JavaScript as a string",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ruglify@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ForbesLindesay/ruglify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ruglify@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ruglify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ruglify/package.json"
              }
            ],
            "concludedValue": "node_modules/ruglify/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uglify-js",
      "version": "2.2.5",
      "description": "JavaScript parser, mangler/compressor and beautifier toolkit",
      "scope": "optional",
      "purl": "pkg:npm/uglify-js@2.2.5",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://lisperator.net/uglifyjs"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uglify-js@2.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ruglify/node_modules/uglify-js/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ruglify/node_modules/uglify-js/package.json"
              }
            ],
            "concludedValue": "node_modules/ruglify/node_modules/uglify-js/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ripemd160",
      "version": "2.0.3",
      "description": "Compute ripemd160 of bytes or strings.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ripemd160@2.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/ripemd160"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ripemd160@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ripemd160/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ripemd160/package.json"
              }
            ],
            "concludedValue": "node_modules/ripemd160/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "1.1.1",
      "description": "The string_decoder module from Node core",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/string_decoder@1.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/nodejs/string_decoder"
        },
        {
          "type": "vcs",
          "url": "git://github.com/nodejs/string_decoder.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ripemd160/node_modules/string_decoder/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/browserify-sign/node_modules/string_decoder/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browserify-sign/node_modules/string_decoder/package.json"
              }
            ],
            "concludedValue": "node_modules/browserify-sign/node_modules/string_decoder/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Feross Aboukhadijeh <feross@feross.org> (http://feross.org)"
        }
      ],
      "group": "",
      "name": "safe-buffer",
      "version": "5.1.2",
      "description": "Safer Node.js Buffer API",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/feross/safe-buffer"
        },
        {
          "type": "vcs",
          "url": "git://github.com/feross/safe-buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ripemd160/node_modules/string_decoder/node_modules/safe-buffer/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/ripemd160/node_modules/readable-stream/node_modules/safe-buffer/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/safe-buffer/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/browserify-sign/node_modules/string_decoder/node_modules/safe-buffer/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/browserify-sign/node_modules/readable-stream/node_modules/safe-buffer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browserify-sign/node_modules/readable-stream/node_modules/safe-buffer/package.json"
              }
            ],
            "concludedValue": "node_modules/browserify-sign/node_modules/readable-stream/node_modules/safe-buffer/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "2.3.8",
      "description": "Streams3, a user-land copy of the stream library from Node.js",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/readable-stream@2.3.8",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/nodejs/readable-stream"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@2.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ripemd160/node_modules/readable-stream/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/browserify-sign/node_modules/readable-stream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browserify-sign/node_modules/readable-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/browserify-sign/node_modules/readable-stream/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)"
        }
      ],
      "group": "",
      "name": "isarray",
      "version": "1.0.0",
      "description": "Array#isArray for older browsers",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/isarray@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/juliangruber/isarray"
        },
        {
          "type": "vcs",
          "url": "git://github.com/juliangruber/isarray.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isarray@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ripemd160/node_modules/isarray/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/buffer/node_modules/isarray/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/browserify-sign/node_modules/isarray/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browserify-sign/node_modules/isarray/package.json"
              }
            ],
            "concludedValue": "node_modules/browserify-sign/node_modules/isarray/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Kirill Fomichev <fanatid@ya.ru> (https://github.com/fanatid)"
        }
      ],
      "group": "",
      "name": "hash-base",
      "version": "3.1.2",
      "description": "abstract base class for hash-streams",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/hash-base@3.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/hash-base"
        },
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/hash-base.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hash-base@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ripemd160/node_modules/hash-base/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ripemd160/node_modules/hash-base/package.json"
              }
            ],
            "concludedValue": "node_modules/ripemd160/node_modules/hash-base/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "rimraf",
      "version": "2.6.3",
      "description": "A deep deletion module for node (like `rm -rf`)",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/rimraf@2.6.3",
      "type": "library",
      "bom-ref": "pkg:npm/rimraf@2.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/rimraf/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/rimraf/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/rimraf/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/rimraf/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "glob",
      "version": "7.2.3",
      "description": "a little globber",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/glob@7.2.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/node-glob.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@7.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/rimraf/node_modules/glob/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/eslint/node_modules/glob/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint/node_modules/glob/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint/node_modules/glob/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "ForbesLindesay"
        }
      ],
      "group": "",
      "name": "rfile",
      "version": "1.0.0",
      "description": "Require a plain text or binary file in node.js",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/rfile@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ForbesLindesay/rfile.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rfile@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/rfile/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/rfile/package.json"
              }
            ],
            "concludedValue": "node_modules/rfile/package.json"
          }
        ]
      },
      "tags": [
        "binary"
      ]
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "resolve",
      "version": "0.3.1",
      "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/resolve@0.3.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/substack/node-resolve.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve@0.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/rfile/node_modules/resolve/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/rfile/node_modules/resolve/package.json"
              }
            ],
            "concludedValue": "node_modules/rfile/node_modules/resolve/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "restore-cursor",
      "version": "2.0.0",
      "description": "Gracefully restore the CLI cursor on exit",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/restore-cursor@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/restore-cursor@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/restore-cursor/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/restore-cursor/package.json"
              }
            ],
            "concludedValue": "node_modules/restore-cursor/package.json"
          }
        ]
      },
      "tags": [
        "cli"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "resolve-from",
      "version": "4.0.0",
      "description": "Resolve the path of a module like `require.resolve()` but from a given path",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/resolve-from@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/resolve-from@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/resolve-from/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/resolve-from/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/resolve-from/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/resolve-from/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "resolve",
      "version": "0.7.4",
      "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/resolve@0.7.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/substack/node-resolve.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve@0.7.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/resolve/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/resolve/package.json"
              }
            ],
            "concludedValue": "node_modules/resolve/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "repeating",
      "version": "2.0.1",
      "description": "Repeat a string - fast",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/repeating@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/repeating@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/repeating/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/repeating/package.json"
              }
            ],
            "concludedValue": "node_modules/repeating/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Toru Nagashima (https://github.com/mysticatea)"
        }
      ],
      "group": "",
      "name": "regexpp",
      "version": "2.0.1",
      "description": "Regular expression parser for ECMAScript 2018.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/regexpp@2.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mysticatea/regexpp#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/mysticatea/regexpp.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regexpp@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/regexpp/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/regexpp/package.json"
              }
            ],
            "concludedValue": "node_modules/regexpp/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Bynens (http://mathiasbynens.be/)"
        }
      ],
      "group": "",
      "name": "regenerate",
      "version": "0.5.4",
      "description": "Generate JavaScript-compatible regular expressions based on a given set of Unicode symbols or code points.",
      "scope": "required",
      "purl": "pkg:npm/regenerate@0.5.4",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://mths.be/regenerate"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mathiasbynens/regenerate.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regenerate@0.5.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/regenerate/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "regenerate"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/regenerate/package.json"
              }
            ],
            "concludedValue": "node_modules/regenerate/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "tools/generate-identifier-regex.js",
            "line": 3
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "redent",
      "version": "1.0.0",
      "description": "Strip redundant indentation and indent the string",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/redent@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/redent@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/redent/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/redent/package.json"
              }
            ],
            "concludedValue": "node_modules/redent/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "readable-wrap",
      "version": "1.0.0",
      "description": "upgrade streams1 to streams2 streams as a standalone module",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/readable-wrap@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/readable-wrap"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/readable-wrap.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-wrap@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/readable-wrap/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/readable-wrap/package.json"
              }
            ],
            "concludedValue": "node_modules/readable-wrap/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "readable-stream",
      "version": "1.1.14",
      "description": "Streams3, a user-land copy of the stream library from Node.js v0.11.x",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/readable-stream@1.1.14",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/readable-stream"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@1.1.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/readable-stream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/readable-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/readable-stream/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "read-pkg-up",
      "version": "1.0.1",
      "description": "Read the closest package.json file",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/read-pkg-up@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/read-pkg-up@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/read-pkg-up/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/read-pkg-up/package.json"
              }
            ],
            "concludedValue": "node_modules/read-pkg-up/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "read-pkg",
      "version": "1.1.0",
      "description": "Read a package.json file",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/read-pkg@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/read-pkg@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/read-pkg/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/read-pkg/package.json"
              }
            ],
            "concludedValue": "node_modules/read-pkg/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "randomfill",
      "version": "1.0.4",
      "description": "random fill from browserify stand alone",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/randomfill@1.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/randomfill"
        },
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/randomfill.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/randomfill@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/randomfill/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/randomfill/package.json"
              }
            ],
            "concludedValue": "node_modules/randomfill/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "randombytes",
      "version": "2.1.0",
      "description": "random bytes from browserify stand alone",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/randombytes@2.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/randombytes"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/randombytes@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/randombytes/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/randombytes/package.json"
              }
            ],
            "concludedValue": "node_modules/randombytes/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Irakli Gozalishvili <rfobic@gmail.com>"
        }
      ],
      "group": "",
      "name": "querystring-es3",
      "version": "0.2.1",
      "description": "Node's querystring module for all engines. (ES3 compat fork)",
      "scope": "optional",
      "purl": "pkg:npm/querystring-es3@0.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/mike-spainhower/querystring.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/querystring-es3@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/querystring-es3/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/querystring-es3/package.json"
              }
            ],
            "concludedValue": "node_modules/querystring-es3/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Irakli Gozalishvili <rfobic@gmail.com>"
        }
      ],
      "group": "",
      "name": "querystring",
      "version": "0.2.0",
      "description": "Node's querystring module for all engines.",
      "scope": "optional",
      "purl": "pkg:npm/querystring@0.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/Gozala/querystring.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/querystring@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/querystring/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/querystring/package.json"
              }
            ],
            "concludedValue": "node_modules/querystring/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Bynens <mathias@qiwi.be> (http://mathiasbynens.be/)"
        }
      ],
      "group": "",
      "name": "punycode",
      "version": "1.2.4",
      "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.",
      "scope": "optional",
      "purl": "pkg:npm/punycode@1.2.4",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://mths.be/punycode"
        },
        {
          "type": "vcs",
          "url": "https://github.com/bestiejs/punycode.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/punycode@1.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/punycode/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/punycode/package.json"
              }
            ],
            "concludedValue": "node_modules/punycode/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Calvin Metcalf"
        }
      ],
      "group": "",
      "name": "public-encrypt",
      "version": "4.0.3",
      "description": "browserify version of publicEncrypt & privateDecrypt",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/public-encrypt@4.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/publicEncrypt"
        },
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/publicEncrypt.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/public-encrypt@4.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/public-encrypt/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/public-encrypt/package.json"
              }
            ],
            "concludedValue": "node_modules/public-encrypt/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Fedor Indutny <fedor@indutny.com>"
        }
      ],
      "group": "",
      "name": "bn.js",
      "version": "4.12.5",
      "description": "Big number implementation in pure javascript",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bn.js@4.12.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/indutny/bn.js"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bn.js@4.12.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/public-encrypt/node_modules/bn.js/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/miller-rabin/node_modules/bn.js/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/elliptic/node_modules/bn.js/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/diffie-hellman/node_modules/bn.js/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/create-ecdh/node_modules/bn.js/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/asn1.js/node_modules/bn.js/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/asn1.js/node_modules/bn.js/package.json"
              }
            ],
            "concludedValue": "node_modules/asn1.js/node_modules/bn.js/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca>"
        }
      ],
      "group": "",
      "name": "progress",
      "version": "2.0.3",
      "description": "Flexible ascii progress bar",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/progress@2.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/visionmedia/node-progress"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/progress@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/progress/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/progress/package.json"
              }
            ],
            "concludedValue": "node_modules/progress/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "process-nextick-args",
      "version": "2.0.1",
      "description": "process.nextTick but always with args",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/process-nextick-args@2.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/calvinmetcalf/process-nextick-args"
        },
        {
          "type": "vcs",
          "url": "https://github.com/calvinmetcalf/process-nextick-args.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/process-nextick-args@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/process-nextick-args/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/process-nextick-args/package.json"
              }
            ],
            "concludedValue": "node_modules/process-nextick-args/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Roman Shtylman <shtylman@gmail.com>"
        }
      ],
      "group": "",
      "name": "process",
      "version": "0.8.0",
      "description": "process information for node.js and browsers",
      "scope": "optional",
      "purl": "pkg:npm/process@0.8.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/shtylman/node-process.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/process@0.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/process/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/process/package.json"
              }
            ],
            "concludedValue": "node_modules/process/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "George Zahariev <z@georgezahariev.com>"
        }
      ],
      "group": "",
      "name": "prelude-ls",
      "version": "1.1.2",
      "description": "prelude.ls is a functionally oriented utility library. It is powerful and flexible. Almost all of its functions are curried. It is written in, and is the recommended base library for, LiveScript.",
      "scope": "optional",
      "purl": "pkg:npm/prelude-ls@1.1.2",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://preludels.com"
        },
        {
          "type": "vcs",
          "url": "git://github.com/gkz/prelude-ls.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prelude-ls@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/prelude-ls/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/prelude-ls/package.json"
              }
            ],
            "concludedValue": "node_modules/prelude-ls/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "possible-typed-array-names",
      "version": "1.1.0",
      "description": "A simple list of possible Typed Array names.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/possible-typed-array-names@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/possible-typed-array-names#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/possible-typed-array-names.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/possible-typed-array-names@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/possible-typed-array-names/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/possible-typed-array-names/package.json"
              }
            ],
            "concludedValue": "node_modules/possible-typed-array-names/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Vsevolod Strukchinsky <floatdrop@gmail.com> (github.com/floatdrop)"
        }
      ],
      "group": "",
      "name": "pinkie-promise",
      "version": "2.0.1",
      "description": "ES2015 Promise ponyfill",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pinkie-promise@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/pinkie-promise@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/pinkie-promise/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/pinkie-promise/package.json"
              }
            ],
            "concludedValue": "node_modules/pinkie-promise/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Vsevolod Strukchinsky <floatdrop@gmail.com> (github.com/floatdrop)"
        }
      ],
      "group": "",
      "name": "pinkie",
      "version": "2.0.4",
      "description": "Itty bitty little widdle twinkie pinkie ES2015 Promise implementation",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pinkie@2.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/pinkie@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/pinkie/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/pinkie/package.json"
              }
            ],
            "concludedValue": "node_modules/pinkie/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "pify",
      "version": "2.3.0",
      "description": "Promisify a callback-style function",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pify@2.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/pify@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/pify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/pify/package.json"
              }
            ],
            "concludedValue": "node_modules/pify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Alexey Raspopov"
        }
      ],
      "group": "",
      "name": "picocolors",
      "version": "1.1.1",
      "description": "The tiniest and the fastest library for terminal output formatting with ANSI colors",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/picocolors@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/picocolors@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/picocolors/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/picocolors/package.json"
              }
            ],
            "concludedValue": "node_modules/picocolors/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Daniel Cousens"
        }
      ],
      "group": "",
      "name": "pbkdf2",
      "version": "3.1.6",
      "description": "This library provides the functionality of PBKDF2 with the ability to use any supported hashing algorithm returned from crypto.getHashes()",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pbkdf2@3.1.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/browserify/pbkdf2"
        },
        {
          "type": "vcs",
          "url": "https://github.com/browserify/pbkdf2.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pbkdf2@3.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/pbkdf2/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/pbkdf2/package.json"
              }
            ],
            "concludedValue": "node_modules/pbkdf2/package.json"
          }
        ]
      },
      "tags": [
        "crypto"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "path-type",
      "version": "1.1.0",
      "description": "Check if a path is a file, directory, or symlink",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-type@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/path-type@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/path-type/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/path-type/package.json"
              }
            ],
            "concludedValue": "node_modules/path-type/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Timothy J Fontaine <tjfontaine@gmail.com> (http://atxconsulting.com)"
        }
      ],
      "group": "",
      "name": "path-platform",
      "version": "0.0.1",
      "description": "Provide access to win32 and posix path operations",
      "scope": "optional",
      "purl": "pkg:npm/path-platform@0.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/tjfontaine/node-path-platform"
        },
        {
          "type": "vcs",
          "url": "http://github.com/tjfontaine/node-path-platform.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-platform@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/path-platform/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/path-platform/package.json"
              }
            ],
            "concludedValue": "node_modules/path-platform/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Javier Blanco <http://jbgutierrez.info>"
        }
      ],
      "group": "",
      "name": "path-parse",
      "version": "1.0.7",
      "description": "Node.js path.parse() ponyfill",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-parse@1.0.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jbgutierrez/path-parse#readme"
        },
        {
          "type": "vcs",
          "url": "https://github.com/jbgutierrez/path-parse.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-parse@1.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/path-parse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/path-parse/package.json"
              }
            ],
            "concludedValue": "node_modules/path-parse/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "path-key",
      "version": "2.0.1",
      "description": "Get the PATH environment variable key cross-platform",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-key@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/path-key@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/path-key/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/path-key/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/path-key/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/path-key/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Domenic Denicola <d@domenic.me> (https://domenic.me)"
        }
      ],
      "group": "",
      "name": "path-is-inside",
      "version": "1.0.2",
      "description": "Tests whether one path is inside another path",
      "scope": "optional",
      "licenses": [
        {
          "expression": "WTFPL OR MIT"
        }
      ],
      "purl": "pkg:npm/path-is-inside@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/path-is-inside@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/path-is-inside/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/path-is-inside/package.json"
              }
            ],
            "concludedValue": "node_modules/path-is-inside/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "path-is-absolute",
      "version": "1.0.1",
      "description": "Node.js 0.12 path.isAbsolute() ponyfill",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-is-absolute@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/path-is-absolute@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/path-is-absolute/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/path-is-absolute/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/path-is-absolute/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/path-is-absolute/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "path-exists",
      "version": "2.1.0",
      "description": "Check if a path exists",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-exists@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/path-exists@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/path-exists/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/path-exists/package.json"
              }
            ],
            "concludedValue": "node_modules/path-exists/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "path-browserify",
      "version": "0.0.1",
      "description": "the path module from node core for browsers",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-browserify@0.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/path-browserify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/path-browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-browserify@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/path-browserify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/path-browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/path-browserify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "parse-json",
      "version": "2.2.0",
      "description": "Parse JSON with more helpful errors",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/parse-json@2.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/parse-json@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/parse-json/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/parse-json/package.json"
              }
            ],
            "concludedValue": "node_modules/parse-json/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "group": "",
      "name": "parse-asn1",
      "version": "5.1.9",
      "description": "utility library for parsing asn1 files for use with browserify-sign.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/parse-asn1@5.1.9",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/crypto-browserify/parse-asn1.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-asn1@5.1.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/parse-asn1/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/parse-asn1/package.json"
              }
            ],
            "concludedValue": "node_modules/parse-asn1/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "parents",
      "version": "0.0.3",
      "description": "return all the parent directories for a directory",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/parents@0.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/node-parents"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/node-parents.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parents@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/parents/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/parents/package.json"
              }
            ],
            "concludedValue": "node_modules/parents/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "parent-module",
      "version": "1.0.1",
      "description": "Get the path of the parent module",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/parent-module@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/parent-module@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/parent-module/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/parent-module/package.json"
              }
            ],
            "concludedValue": "node_modules/parent-module/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pako",
      "version": "0.2.9",
      "description": "zlib port to javascript - fast, modularized, with browser support",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pako@0.2.9",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/nodeca/pako"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pako@0.2.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/pako/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/pako/package.json"
              }
            ],
            "concludedValue": "node_modules/pako/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "os-tmpdir",
      "version": "1.0.2",
      "description": "Node.js os.tmpdir() ponyfill",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/os-tmpdir@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/os-tmpdir@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/os-tmpdir/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/os-tmpdir/package.json"
              }
            ],
            "concludedValue": "node_modules/os-tmpdir/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Drew Young"
        }
      ],
      "group": "",
      "name": "os-browserify",
      "version": "0.1.2",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/os-browserify@0.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/drewyoung1/os-browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/os-browserify@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/os-browserify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/os-browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/os-browserify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "George Zahariev <z@georgezahariev.com>"
        }
      ],
      "group": "",
      "name": "optionator",
      "version": "0.8.3",
      "description": "option parsing and help generation",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/optionator@0.8.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/gkz/optionator"
        },
        {
          "type": "vcs",
          "url": "git://github.com/gkz/optionator.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/optionator@0.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/optionator/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/optionator/package.json"
              }
            ],
            "concludedValue": "node_modules/optionator/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "optimist",
      "version": "0.3.7",
      "description": "Light-weight option parsing with an argv hash. No optstrings attached.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "name": "MIT/X11",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/optimist@0.3.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/substack/node-optimist.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/optimist@0.3.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/optimist/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/optimist/package.json"
              }
            ],
            "concludedValue": "node_modules/optimist/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "wordwrap",
      "version": "0.0.3",
      "description": "Wrap those words. Show them at what columns to start and stop.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/wordwrap@0.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/substack/node-wordwrap.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wordwrap@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/optimist/node_modules/wordwrap/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/wordwrap/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/wordwrap/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/wordwrap/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "onetime",
      "version": "2.0.1",
      "description": "Ensure a function is only called once",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/onetime@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/onetime@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/onetime/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/onetime/package.json"
              }
            ],
            "concludedValue": "node_modules/onetime/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "once",
      "version": "1.4.0",
      "description": "Run a function exactly one time",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/once@1.4.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/once"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/once@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/once/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/once/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/once/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/once/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "object-assign",
      "version": "4.1.1",
      "description": "ES2015 `Object.assign()` ponyfill",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/object-assign@4.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/object-assign@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/object-assign/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/object-assign/package.json"
              }
            ],
            "concludedValue": "node_modules/object-assign/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Coe <ben@npmjs.com>"
        }
      ],
      "group": "",
      "name": "nyc",
      "version": "13.3.0",
      "description": "the Istanbul command line interface",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/nyc@13.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/nyc@13.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Coe <ben@npmjs.com>"
        }
      ],
      "group": "",
      "name": "yargs-parser",
      "version": "11.1.1",
      "description": "the mighty option parser used by yargs",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yargs-parser@11.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/yargs/yargs-parser#readme"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/yargs/yargs-parser.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs-parser@11.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/yargs-parser/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/yargs-parser/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/yargs-parser/package.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "yargs",
      "version": "12.0.5",
      "description": "yargs the modern, pirate-themed, successor to optimist.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yargs@12.0.5",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://yargs.js.org/"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/yargs/yargs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs@12.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/yargs/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/yargs/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/yargs/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "yallist",
      "version": "2.1.2",
      "description": "Yet Another Linked List",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yallist@2.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/yallist#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/yallist.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yallist@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/yallist/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/yallist/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/yallist/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Coe <ben@npmjs.com>"
        }
      ],
      "group": "",
      "name": "y18n",
      "version": "4.0.0",
      "description": "the bare-bones internationalization library used by yargs",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/y18n@4.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/yargs/y18n"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/yargs/y18n.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/y18n@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/y18n/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/y18n/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/y18n/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Rebecca Turner <me@re-becca.org> (http://re-becca.org)"
        }
      ],
      "group": "",
      "name": "write-file-atomic",
      "version": "2.4.2",
      "description": "Write files in an atomic fashion w/configurable ownership",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/write-file-atomic@2.4.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/iarna/write-file-atomic"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/iarna/write-file-atomic.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/write-file-atomic@2.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/write-file-atomic/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/write-file-atomic/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/write-file-atomic/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "wrap-ansi",
      "version": "2.1.0",
      "description": "Wordwrap a string with ANSI escape codes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/wrap-ansi@2.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/chalk/wrap-ansi#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/chalk/wrap-ansi.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrap-ansi@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/wrap-ansi/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/wrap-ansi/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/wrap-ansi/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "strip-ansi",
      "version": "3.0.1",
      "description": "Strip ANSI escape codes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strip-ansi@3.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/chalk/strip-ansi#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/chalk/strip-ansi.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/wrap-ansi/node_modules/strip-ansi/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/wrap-ansi/node_modules/strip-ansi/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/wrap-ansi/node_modules/strip-ansi/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "string-width",
      "version": "1.0.2",
      "description": "Get the visual width of a string - the number of columns required to display it",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/string-width@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/string-width#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/string-width.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string-width@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/wrap-ansi/node_modules/string-width/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/wrap-ansi/node_modules/string-width/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/wrap-ansi/node_modules/string-width/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "is-fullwidth-code-point",
      "version": "1.0.0",
      "description": "Check if the character represented by a given Unicode code point is fullwidth",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-fullwidth-code-point@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-fullwidth-code-point@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/wrap-ansi/node_modules/is-fullwidth-code-point/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/wrap-ansi/node_modules/is-fullwidth-code-point/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/wrap-ansi/node_modules/is-fullwidth-code-point/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "ansi-regex",
      "version": "2.1.1",
      "description": "Regular expression for matching ANSI escape codes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ansi-regex@2.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/chalk/ansi-regex#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/chalk/ansi-regex.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/wrap-ansi/node_modules/ansi-regex/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/wrap-ansi/node_modules/ansi-regex/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/wrap-ansi/node_modules/ansi-regex/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "nexdrew"
        }
      ],
      "group": "",
      "name": "which-module",
      "version": "2.0.0",
      "description": "Find the module object for something that was require()d",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/which-module@2.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/nexdrew/which-module#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/nexdrew/which-module.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which-module@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/which-module/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/which-module/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/which-module/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uuid",
      "version": "3.3.2",
      "description": "RFC4122 (v1, v4, and v5) UUIDs",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/uuid@3.3.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/kelektiv/node-uuid#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/kelektiv/node-uuid.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uuid@3.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/uuid/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/uuid/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/uuid/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mihai Bazon <mihai.bazon@gmail.com> (http://lisperator.net/)"
        }
      ],
      "group": "",
      "name": "uglify-js",
      "version": "3.4.9",
      "description": "JavaScript parser, mangler/compressor and beautifier toolkit",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/uglify-js@3.4.9",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mishoo/UglifyJS2#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/mishoo/UglifyJS2.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uglify-js@3.4.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/uglify-js/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/uglify-js/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/uglify-js/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nick Fitzgerald <nfitzgerald@mozilla.com>"
        }
      ],
      "group": "",
      "name": "source-map",
      "version": "0.6.1",
      "description": "Generates and consumes source maps",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/source-map@0.6.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mozilla/source-map"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/mozilla/source-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/uglify-js/node_modules/source-map/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/merge-source-map/node_modules/source-map/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/istanbul-lib-source-maps/node_modules/source-map/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/handlebars/node_modules/source-map/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/handlebars/node_modules/source-map/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/handlebars/node_modules/source-map/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Coe <ben@npmjs.com>"
        }
      ],
      "group": "",
      "name": "test-exclude",
      "version": "5.1.0",
      "description": "test for inclusion or exclusion of paths using pkg-conf and globs",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/test-exclude@5.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/istanbuljs/istanbuljs#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/istanbuljs/istanbuljs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/test-exclude@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/test-exclude/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/test-exclude/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/test-exclude/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "strip-eof",
      "version": "1.0.0",
      "description": "Strip the End-Of-File (EOF) character from a string/buffer",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strip-eof@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/strip-eof#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/strip-eof.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-eof@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/strip-eof/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/strip-eof/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/strip-eof/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "strip-bom",
      "version": "3.0.0",
      "description": "Strip UTF-8 byte order mark (BOM) from a string",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strip-bom@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/strip-bom#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/strip-bom.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-bom@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/strip-bom/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/strip-bom/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/strip-bom/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Shinnosuke Watanabe (https://github.com/shinnn)"
        }
      ],
      "group": "",
      "name": "spdx-license-ids",
      "version": "3.0.3",
      "description": "A list of SPDX license identifiers",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0",
            "url": "https://opensource.org/licenses/CC0-1.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Public Domain"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/spdx-license-ids@3.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/shinnn/spdx-license-ids#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/shinnn/spdx-license-ids.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-license-ids@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/spdx-license-ids/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Public Domain"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/spdx-license-ids/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/spdx-license-ids/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Kyle E. Mitchell <kyle@kemitchell.com> (http://kemitchell.com)"
        }
      ],
      "group": "",
      "name": "spdx-expression-parse",
      "version": "3.0.0",
      "description": "parse SPDX license expressions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/spdx-expression-parse@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jslicense/spdx-expression-parse.js#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/jslicense/spdx-expression-parse.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-expression-parse@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/spdx-expression-parse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/spdx-expression-parse/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/spdx-expression-parse/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Linux Foundation"
        }
      ],
      "group": "",
      "name": "spdx-exceptions",
      "version": "2.2.0",
      "description": "list of SPDX standard license exceptions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "CC-BY-3.0",
            "url": "https://opensource.org/licenses/CC-BY-3.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/spdx-exceptions@2.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/kemitchell/spdx-exceptions.json#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/kemitchell/spdx-exceptions.json.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-exceptions@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/spdx-exceptions/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/spdx-exceptions/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/spdx-exceptions/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Kyle E. Mitchell <kyle@kemitchell.com> (https://kemitchell.com)"
        }
      ],
      "group": "",
      "name": "spdx-correct",
      "version": "3.1.0",
      "description": "correct invalid SPDX expressions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/spdx-correct@3.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jslicense/spdx-correct.js#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/jslicense/spdx-correct.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-correct@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/spdx-correct/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/spdx-correct/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/spdx-correct/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "spawn-wrap",
      "version": "1.4.2",
      "description": "Wrap all spawned Node.js child processes by adding environs and arguments ahead of the main JavaScript file argument.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/spawn-wrap@1.4.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/spawn-wrap#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/spawn-wrap.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spawn-wrap@1.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/spawn-wrap/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/spawn-wrap/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/spawn-wrap/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Coe <ben@npmjs.com>"
        }
      ],
      "group": "",
      "name": "signal-exit",
      "version": "3.0.2",
      "description": "when you want to fire an event no matter how a process exits.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/signal-exit@3.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/tapjs/signal-exit"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/tapjs/signal-exit.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/signal-exit@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/signal-exit/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/signal-exit/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/signal-exit/package.json"
          }
        ]
      },
      "tags": [
        "event"
      ]
    },
    {
      "authors": [
        {
          "name": "Ben Coe <ben@npmjs.com>"
        }
      ],
      "group": "",
      "name": "set-blocking",
      "version": "2.0.0",
      "description": "set blocking stdio and stderr ensuring that terminal output does not truncate",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/set-blocking@2.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/yargs/set-blocking#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/yargs/set-blocking.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/set-blocking@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/set-blocking/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/set-blocking/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/set-blocking/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "5.6.0",
      "description": "The semantic version parser used by npm.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/semver@5.6.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/node-semver#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/npm/node-semver.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@5.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/semver/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/semver/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/semver/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "resolve",
      "version": "1.10.0",
      "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/resolve@1.10.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/browserify/resolve#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/browserify/resolve.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve@1.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/resolve/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/resolve/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/resolve/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "monorepo-symlink-test",
      "version": "0.0.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/monorepo-symlink-test@0.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/monorepo-symlink-test@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/resolve/test/resolver/multirepo/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/resolve/test/resolver/multirepo/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/resolve/test/resolver/multirepo/package.json"
          }
        ]
      }
    },
    {
      "group": "@my-scope",
      "name": "package-b",
      "version": "0.0.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40my-scope/package-b@0.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/@my-scope/package-b@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/normalize-package-data/node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/module-deps/node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json"
          }
        ]
      }
    },
    {
      "group": "@my-scope",
      "name": "package-a",
      "version": "0.0.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40my-scope/package-a@0.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/@my-scope/package-a@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/normalize-package-data/node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/module-deps/node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "invalid main",
      "version": "",
      "scope": "optional",
      "purl": "pkg:npm/invalid%20main",
      "type": "library",
      "bom-ref": "pkg:npm/invalid main",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/resolve/test/resolver/invalid_main/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/resolve/test/resolver/invalid_main/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/resolve/test/resolver/invalid_main/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browser_field",
      "version": "",
      "scope": "optional",
      "purl": "pkg:npm/browser_field",
      "type": "library",
      "bom-ref": "pkg:npm/browser_field",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/resolve/test/resolver/browser_field/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/normalize-package-data/node_modules/resolve/test/resolver/browser_field/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/module-deps/node_modules/resolve/test/resolver/browser_field/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/browser_field/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/browser_field/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/browser_field/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Coe <ben@npmjs.com>"
        }
      ],
      "group": "",
      "name": "require-main-filename",
      "version": "1.0.1",
      "description": "shim for require.main.filename() that works in as many environments as possible",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/require-main-filename@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/yargs/require-main-filename#readme"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/yargs/require-main-filename.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/require-main-filename@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/require-main-filename/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/require-main-filename/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/require-main-filename/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Troy Goode <troygoode@gmail.com> (http://github.com/troygoode/)"
        }
      ],
      "group": "",
      "name": "require-directory",
      "version": "2.1.1",
      "description": "Recursively iterates over specified directory, require()'ing each file, and returning a nested hash structure containing those modules.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/require-directory@2.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/troygoode/node-require-directory/"
        },
        {
          "type": "vcs",
          "url": "git://github.com/troygoode/node-require-directory.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/require-directory@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/require-directory/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/require-directory/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/require-directory/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mark Wubben (https://novemberborn.net/)"
        }
      ],
      "group": "",
      "name": "release-zalgo",
      "version": "1.0.0",
      "description": "Helps you write code with promise-like chains that can run both synchronously and asynchronously",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/release-zalgo@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/novemberborn/release-zalgo#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/novemberborn/release-zalgo.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/release-zalgo@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/release-zalgo/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/release-zalgo/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/release-zalgo/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "read-pkg-up",
      "version": "4.0.0",
      "description": "Read the closest package.json file",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/read-pkg-up@4.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/read-pkg-up#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/read-pkg-up.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/read-pkg-up@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/read-pkg-up/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/read-pkg-up/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/read-pkg-up/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "read-pkg",
      "version": "3.0.0",
      "description": "Read a package.json file",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/read-pkg@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/read-pkg#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/read-pkg.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/read-pkg@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/read-pkg/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/read-pkg/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/read-pkg/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Buus Madsen <mathiasbuus@gmail.com>"
        }
      ],
      "group": "",
      "name": "pump",
      "version": "3.0.0",
      "description": "pipe streams together and close all of them if one of them closes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pump@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/pump#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/mafintosh/pump.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pump@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/pump/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/pump/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/pump/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "pseudomap",
      "version": "1.0.2",
      "description": "A thing that is a lot like ES6 `Map`, but without iterators, for use in environments where `for..of` syntax and `Map` are not available.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pseudomap@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/pseudomap#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/pseudomap.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pseudomap@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/pseudomap/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/pseudomap/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/pseudomap/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "pkg-dir",
      "version": "3.0.0",
      "description": "Find the root directory of a Node.js project or npm package",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pkg-dir@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/pkg-dir#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/pkg-dir.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pkg-dir@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/pkg-dir/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/pkg-dir/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/pkg-dir/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "pify",
      "version": "3.0.0",
      "description": "Promisify a callback-style function",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pify@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/pify#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/pify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pify@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/pify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/pify/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/pify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "path-type",
      "version": "3.0.0",
      "description": "Check if a path is a file, directory, or symlink",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-type@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/path-type#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/path-type.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-type@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/path-type/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/path-type/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/path-type/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Javier Blanco <http://jbgutierrez.info>"
        }
      ],
      "group": "",
      "name": "path-parse",
      "version": "1.0.6",
      "description": "Node.js path.parse() ponyfill",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-parse@1.0.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jbgutierrez/path-parse#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/jbgutierrez/path-parse.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-parse@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/path-parse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/path-parse/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/path-parse/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "path-exists",
      "version": "3.0.0",
      "description": "Check if a path exists",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-exists@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/path-exists#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/path-exists.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-exists@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/path-exists/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/path-exists/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/path-exists/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "parse-json",
      "version": "4.0.0",
      "description": "Parse JSON with more helpful errors",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/parse-json@4.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/parse-json#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/parse-json.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-json@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/parse-json/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/parse-json/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/parse-json/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Mark Wubben (https://novemberborn.net/)"
        }
      ],
      "group": "",
      "name": "package-hash",
      "version": "3.0.0",
      "description": "Generates a hash for an installed npm package, useful for salting caches",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/package-hash@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/novemberborn/package-hash#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/novemberborn/package-hash.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/package-hash@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/package-hash/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/package-hash/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/package-hash/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "p-try",
      "version": "2.0.0",
      "description": "`Start a promise chain",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/p-try@2.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/p-try#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/p-try.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-try@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/p-try/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/p-try/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/p-try/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "p-locate",
      "version": "3.0.0",
      "description": "Get the first fulfilled promise that satisfies the provided testing function",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/p-locate@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/p-locate#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/p-locate.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-locate@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/p-locate/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/p-locate/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/p-locate/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "p-limit",
      "version": "2.1.0",
      "description": "Run multiple promise-returning & async functions with limited concurrency",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/p-limit@2.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/p-limit#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/p-limit.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-limit@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/p-limit/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/p-limit/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/p-limit/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "p-is-promise",
      "version": "2.0.0",
      "description": "Check if something is a promise",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/p-is-promise@2.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/p-is-promise#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/p-is-promise.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-is-promise@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/p-is-promise/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/p-is-promise/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/p-is-promise/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "p-finally",
      "version": "1.0.0",
      "description": "`Promise#finally()` ponyfill - Invoked when the promise is settled regardless of outcome",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/p-finally@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/p-finally#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/p-finally.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-finally@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/p-finally/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/p-finally/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/p-finally/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "p-defer",
      "version": "1.0.0",
      "description": "Create a deferred promise",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/p-defer@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/p-defer#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/p-defer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-defer@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/p-defer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/p-defer/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/p-defer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "os-locale",
      "version": "3.1.0",
      "description": "Get the system locale",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/os-locale@3.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/os-locale#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/os-locale.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/os-locale@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/os-locale/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/os-locale/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/os-locale/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "os-homedir",
      "version": "1.0.2",
      "description": "Node.js 4 `os.homedir()` ponyfill",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/os-homedir@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/os-homedir#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/os-homedir.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/os-homedir@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/os-homedir/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/os-homedir/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/os-homedir/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "optimist",
      "version": "0.6.1",
      "description": "Light-weight option parsing with an argv hash. No optstrings attached.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "name": "MIT/X11",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/optimist@0.6.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/node-optimist#readme"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/substack/node-optimist.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/optimist@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/optimist/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/optimist/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/optimist/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "number-is-nan",
      "version": "1.0.1",
      "description": "ES2015 Number.isNaN() ponyfill",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/number-is-nan@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/number-is-nan#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/number-is-nan.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/number-is-nan@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/number-is-nan/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/number-is-nan/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/number-is-nan/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "npm-run-path",
      "version": "2.0.2",
      "description": "Get your PATH prepended with locally installed binaries",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/npm-run-path@2.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/npm-run-path#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/npm-run-path.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/npm-run-path@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/npm-run-path/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/npm-run-path/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/npm-run-path/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Meryn Stol <merynstol@gmail.com>"
        }
      ],
      "group": "",
      "name": "normalize-package-data",
      "version": "2.5.0",
      "description": "Normalizes data that can be found in package.json files.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/normalize-package-data@2.5.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/normalize-package-data#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/npm/normalize-package-data.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalize-package-data@2.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/normalize-package-data/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/normalize-package-data/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/normalize-package-data/package.json"
              }
            ],
            "concludedValue": "node_modules/normalize-package-data/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nice-try",
      "version": "1.0.5",
      "description": "Tries to execute a function and discards any error that occurs",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/nice-try@1.0.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/electerious/nice-try"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/electerious/nice-try.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nice-try@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/nice-try/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/nice-try/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nice-try/package.json"
              }
            ],
            "concludedValue": "node_modules/nice-try/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.1.1",
      "description": "Tiny millisecond conversion utility",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ms@2.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/zeit/ms#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/zeit/ms.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/ms/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/ms/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/ms/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "mkdirp",
      "version": "0.5.1",
      "description": "Recursively mkdir, like `mkdir -p`",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mkdirp@0.5.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/node-mkdirp#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/substack/node-mkdirp.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@0.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/mkdirp/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/mocha/node_modules/mkdirp/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/mocha/node_modules/mkdirp/package.json"
              }
            ],
            "concludedValue": "node_modules/mocha/node_modules/mkdirp/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "minimist",
      "version": "0.0.8",
      "description": "parse argument options",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimist@0.0.8",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/minimist"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/minimist.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@0.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/mkdirp/node_modules/minimist/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/mocha/node_modules/minimist/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/mocha/node_modules/minimist/package.json"
              }
            ],
            "concludedValue": "node_modules/mocha/node_modules/minimist/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "minimist",
      "version": "0.0.10",
      "description": "parse argument options",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimist@0.0.10",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/minimist"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/minimist.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@0.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/minimist/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/minimist/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/minimist/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)"
        }
      ],
      "group": "",
      "name": "minimatch",
      "version": "3.0.4",
      "description": "a glob matcher in javascript",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimatch@3.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/minimatch#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/minimatch.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/minimatch/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/minimatch/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/minimatch/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "mimic-fn",
      "version": "1.2.0",
      "description": "Make a function mimic another one",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mimic-fn@1.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/mimic-fn#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/mimic-fn.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mimic-fn@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/mimic-fn/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/mimic-fn/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/mimic-fn/package.json"
              }
            ],
            "concludedValue": "node_modules/mimic-fn/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "keik <k4t0.kei@gmail.com>"
        }
      ],
      "group": "",
      "name": "merge-source-map",
      "version": "1.1.0",
      "description": "Merge old source map and new source map in multi-transform flow",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/merge-source-map@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/keik/merge-source-map#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/keik/merge-source-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/merge-source-map@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/merge-source-map/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/merge-source-map/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/merge-source-map/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "mem",
      "version": "4.1.0",
      "description": "Memoize functions - An optimization used to speed up consecutive function calls by caching the result of calls with identical input",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mem@4.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/mem#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/mem.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mem@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/mem/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/mem/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/mem/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sam Verschueren <sam.verschueren@gmail.com> (github.com/SamVerschueren)"
        }
      ],
      "group": "",
      "name": "map-age-cleaner",
      "version": "0.1.3",
      "description": "Automatically cleanup expired items in a Map",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/map-age-cleaner@0.1.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/SamVerschueren/map-age-cleaner#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/SamVerschueren/map-age-cleaner.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/map-age-cleaner@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/map-age-cleaner/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/map-age-cleaner/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/map-age-cleaner/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "make-dir",
      "version": "1.3.0",
      "description": "Make a directory and its parents if needed - Think `mkdir -p`",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/make-dir@1.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/make-dir#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/make-dir.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/make-dir@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/make-dir/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/make-dir/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/make-dir/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me>"
        }
      ],
      "group": "",
      "name": "lru-cache",
      "version": "4.1.5",
      "description": "A cache object that deletes the least-recently-used items.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lru-cache@4.1.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/node-lru-cache#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/node-lru-cache.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@4.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/lru-cache/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/lru-cache/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/lru-cache/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/)"
        }
      ],
      "group": "",
      "name": "lodash.flattendeep",
      "version": "4.4.0",
      "description": "The lodash method `_.flattenDeep` exported as a module.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.flattendeep@4.4.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://lodash.com/"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/lodash/lodash.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.flattendeep@4.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/lodash.flattendeep/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/lodash.flattendeep/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/lodash.flattendeep/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/)"
        }
      ],
      "group": "",
      "name": "lodash",
      "version": "4.17.11",
      "description": "Lodash modular utilities.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash@4.17.11",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://lodash.com/"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/lodash/lodash.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@4.17.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/lodash/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/lodash/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/lodash/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "locate-path",
      "version": "3.0.0",
      "description": "Get the first path that exists on disk of multiple paths",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/locate-path@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/locate-path#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/locate-path.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/locate-path@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/locate-path/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/locate-path/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/locate-path/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "load-json-file",
      "version": "4.0.0",
      "description": "Read and parse a JSON file",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/load-json-file@4.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/load-json-file#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/load-json-file.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/load-json-file@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/load-json-file/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/load-json-file/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/load-json-file/package.json"
          }
        ]
      },
      "tags": [
        "json",
        "parse"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "lcid",
      "version": "2.0.0",
      "description": "Mapping between standard locale identifiers and Windows locale identifiers (LCID)",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lcid@2.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/lcid#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/lcid.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lcid@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/lcid/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/lcid/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/lcid/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Kat Marchán <kzm@zkat.tech>"
        }
      ],
      "group": "",
      "name": "json-parse-better-errors",
      "version": "1.0.2",
      "description": "JSON.parse with context information on error",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json-parse-better-errors@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/zkat/json-parse-better-errors#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/zkat/json-parse-better-errors.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-parse-better-errors@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/json-parse-better-errors/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/json-parse-better-errors/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/json-parse-better-errors/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Krishnan Anantheswaran <kananthmail-github@yahoo.com>"
        }
      ],
      "group": "",
      "name": "istanbul-reports",
      "version": "2.1.1",
      "description": "istanbul reports",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/istanbul-reports@2.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/istanbuljs/istanbuljs"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-reports@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/istanbul-reports/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/istanbul-reports/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/istanbul-reports/package.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "authors": [
        {
          "name": "Krishnan Anantheswaran <kananthmail-github@yahoo.com>"
        }
      ],
      "group": "",
      "name": "istanbul-lib-source-maps",
      "version": "3.0.2",
      "description": "Source maps support for istanbul",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/istanbul-lib-source-maps@3.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/istanbuljs/istanbuljs#readme"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-source-maps@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/istanbul-lib-source-maps/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/istanbul-lib-source-maps/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/istanbul-lib-source-maps/package.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "authors": [
        {
          "name": "Krishnan Anantheswaran <kananthmail-github@yahoo.com>"
        }
      ],
      "group": "",
      "name": "istanbul-lib-report",
      "version": "2.0.4",
      "description": "Base reporting library for istanbul",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/istanbul-lib-report@2.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/istanbuljs/istanbuljs"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-report@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/istanbul-lib-report/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/istanbul-lib-report/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/istanbul-lib-report/package.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "supports-color",
      "version": "6.1.0",
      "description": "Detect whether a terminal supports color",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/supports-color@6.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/chalk/supports-color#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/chalk/supports-color.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@6.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/istanbul-lib-report/node_modules/supports-color/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/istanbul-lib-report/node_modules/supports-color/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/istanbul-lib-report/node_modules/supports-color/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Krishnan Anantheswaran <kananthmail-github@yahoo.com>"
        }
      ],
      "group": "",
      "name": "istanbul-lib-hook",
      "version": "2.0.3",
      "description": "Hooks for require, vm and script used in istanbul",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/istanbul-lib-hook@2.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/istanbuljs/istanbuljs#readme"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-hook@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/istanbul-lib-hook/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/istanbul-lib-hook/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/istanbul-lib-hook/package.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "authors": [
        {
          "name": "Krishnan Anantheswaran <kananthmail-github@yahoo.com>"
        }
      ],
      "group": "",
      "name": "istanbul-lib-coverage",
      "version": "2.0.3",
      "description": "Data library for istanbul coverage objects",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/istanbul-lib-coverage@2.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/istanbuljs/istanbuljs"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-coverage@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/istanbul-lib-coverage/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/istanbul-lib-coverage/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/istanbul-lib-coverage/package.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "isexe",
      "version": "2.0.0",
      "description": "Minimal module to check if a file is executable.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/isexe@2.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/isexe#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/isexe.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isexe@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/isexe/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/isexe/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/isexe/package.json"
              }
            ],
            "concludedValue": "node_modules/isexe/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "is-stream",
      "version": "1.1.0",
      "description": "Check if something is a Node.js stream",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-stream@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/is-stream#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/is-stream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-stream@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/is-stream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/is-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/is-stream/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "is-fullwidth-code-point",
      "version": "2.0.0",
      "description": "Check if the character represented by a given Unicode code point is fullwidth",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-fullwidth-code-point@2.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-fullwidth-code-point@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/is-fullwidth-code-point/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/is-fullwidth-code-point/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-fullwidth-code-point/package.json"
              }
            ],
            "concludedValue": "node_modules/is-fullwidth-code-point/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Qix (http://github.com/qix-)"
        }
      ],
      "group": "",
      "name": "is-arrayish",
      "version": "0.2.1",
      "description": "Determines if an object can be used as an array",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-arrayish@0.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/qix-/node-is-arrayish#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/qix-/node-is-arrayish.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-arrayish@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/is-arrayish/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/is-arrayish/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-arrayish/package.json"
              }
            ],
            "concludedValue": "node_modules/is-arrayish/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "invert-kv",
      "version": "2.0.0",
      "description": "Invert the key/value of an object. Example: `{foo: 'bar'}` → `{bar: 'foo'}`",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/invert-kv@2.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/invert-kv#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/invert-kv.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/invert-kv@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/invert-kv/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/invert-kv/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/invert-kv/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "inflight",
      "version": "1.0.6",
      "description": "Add callbacks to requests in flight to avoid async duplication",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/inflight@1.0.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/inflight"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/npm/inflight.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inflight@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/inflight/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/inflight/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/inflight/package.json"
              }
            ],
            "concludedValue": "node_modules/inflight/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jens Taylor <jensyt@gmail.com> (https://github.com/homebrewing)"
        }
      ],
      "group": "",
      "name": "imurmurhash",
      "version": "0.1.4",
      "description": "An incremental implementation of MurmurHash3",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/imurmurhash@0.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jensyt/imurmurhash-js"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/jensyt/imurmurhash-js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/imurmurhash@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/imurmurhash/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/imurmurhash/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/imurmurhash/package.json"
              }
            ],
            "concludedValue": "node_modules/imurmurhash/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Rebecca Turner <me@re-becca.org> (http://re-becca.org)"
        }
      ],
      "group": "",
      "name": "hosted-git-info",
      "version": "2.7.1",
      "description": "Provides metadata and conversions from repository urls for Github, Bitbucket and Gitlab",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/hosted-git-info@2.7.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/hosted-git-info"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/npm/hosted-git-info.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hosted-git-info@2.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/hosted-git-info/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/hosted-git-info/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/hosted-git-info/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "hasha",
      "version": "3.0.0",
      "description": "Hashing made simple. Get the hash of a buffer/string/stream/file.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/hasha@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/hasha#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/hasha.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hasha@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/hasha/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/hasha/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/hasha/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "has-flag",
      "version": "3.0.0",
      "description": "Check if argv has a specific flag",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/has-flag@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/has-flag#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/has-flag.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-flag@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/has-flag/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/has-flag/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/has-flag/package.json"
              }
            ],
            "concludedValue": "node_modules/has-flag/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Yehuda Katz"
        }
      ],
      "group": "",
      "name": "handlebars",
      "version": "4.1.0",
      "description": "Handlebars provides the power necessary to let you build semantic templates effectively with no frustration",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/handlebars@4.1.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://www.handlebarsjs.com/"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/wycats/handlebars.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/handlebars@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/handlebars/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/handlebars/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/handlebars/package.json"
          }
        ]
      },
      "tags": [
        "templates"
      ]
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "4.1.15",
      "description": "A drop-in replacement for fs, making various improvements.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/graceful-fs@4.1.15",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/node-graceful-fs#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/node-graceful-fs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@4.1.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/graceful-fs/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/graceful-fs/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/graceful-fs/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "glob",
      "version": "7.1.3",
      "description": "a little globber",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/glob@7.1.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/node-glob#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/node-glob.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@7.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/glob/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/glob/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/glob/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "get-stream",
      "version": "4.1.0",
      "description": "Get a stream as a string, buffer, or array",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/get-stream@4.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/get-stream#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/get-stream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-stream@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/get-stream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/get-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/get-stream/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "Stefan Penner"
        }
      ],
      "group": "",
      "name": "get-caller-file",
      "version": "1.0.3",
      "description": "[![Build Status](https://travis-ci.org/stefanpenner/get-caller-file.svg?branch=master)](https://travis-ci.org/stefanpenner/get-caller-file) [![Build status](https://ci.appveyor.com/api/projects/status/ol2q94g1932cy14a/branch/master?svg=true)](https://ci.appveyor.com/project/embercli/get-caller-file/branch/master)",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/get-caller-file@1.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/stefanpenner/get-caller-file#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/stefanpenner/get-caller-file.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-caller-file@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/get-caller-file/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/get-caller-file/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/get-caller-file/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "fs.realpath",
      "version": "1.0.0",
      "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fs.realpath@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/fs.realpath#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/fs.realpath.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs.realpath@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/fs.realpath/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/fs.realpath/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fs.realpath/package.json"
              }
            ],
            "concludedValue": "node_modules/fs.realpath/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "foreground-child",
      "version": "1.5.6",
      "description": "Run a child as if it's the foreground process.  Give it stdio.  Exit when it exits.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/foreground-child@1.5.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/tapjs/foreground-child#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/tapjs/foreground-child.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/foreground-child@1.5.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/foreground-child/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/foreground-child/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/foreground-child/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "find-up",
      "version": "3.0.0",
      "description": "Find a file or directory by walking up parent directories",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/find-up@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/find-up#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/find-up.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-up@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/find-up/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/find-up/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/find-up/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-cache-dir",
      "version": "2.0.0",
      "description": "Finds the common standard cache directory",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/find-cache-dir@2.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/avajs/find-cache-dir#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/avajs/find-cache-dir.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-cache-dir@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/find-cache-dir/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/find-cache-dir/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/find-cache-dir/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "execa",
      "version": "1.0.0",
      "description": "A better `child_process`",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/execa@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/execa#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/execa.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/execa@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/execa/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/execa/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/execa/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "André Cruz <andre@moxy.studio>"
        }
      ],
      "group": "",
      "name": "cross-spawn",
      "version": "6.0.5",
      "description": "Cross platform child_process#spawn and child_process#spawnSync",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cross-spawn@6.0.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/moxystudio/node-cross-spawn"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/moxystudio/node-cross-spawn.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cross-spawn@6.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/execa/node_modules/cross-spawn/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/execa/node_modules/cross-spawn/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/execa/node_modules/cross-spawn/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Youngblood"
        }
      ],
      "group": "",
      "name": "es6-error",
      "version": "4.1.1",
      "description": "Easily-extendable error for use with ES6 classes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/es6-error@4.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/bjyoungblood/es6-error"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/bjyoungblood/es6-error.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-error@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/es6-error/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/es6-error/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/es6-error/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "error-ex",
      "version": "1.3.2",
      "description": "Easy error subclassing and stack customization",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/error-ex@1.3.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/qix-/node-error-ex#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/qix-/node-error-ex.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/error-ex@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/error-ex/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/error-ex/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/error-ex/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Buus <mathiasbuus@gmail.com>"
        }
      ],
      "group": "",
      "name": "end-of-stream",
      "version": "1.4.1",
      "description": "Call a callback when a readable/writable/duplex stream has completed or failed.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/end-of-stream@1.4.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/end-of-stream"
        },
        {
          "type": "vcs",
          "url": "git://github.com/mafintosh/end-of-stream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/end-of-stream@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/end-of-stream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/end-of-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/end-of-stream/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "James Talmage <james@talmage.io> (github.com/jamestalmage)"
        }
      ],
      "group": "",
      "name": "default-require-extensions",
      "version": "2.0.0",
      "description": "Node's default require extensions as a separate module",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/default-require-extensions@2.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/avajs/default-require-extensions#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/avajs/default-require-extensions.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/default-require-extensions@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/default-require-extensions/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/default-require-extensions/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/default-require-extensions/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "decamelize",
      "version": "1.2.0",
      "description": "Convert a camelized string into a lowercased one with a custom separator: unicornRainbow → unicorn_rainbow",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/decamelize@1.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/decamelize#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/decamelize.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/decamelize@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/decamelize/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/decamelize/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/decamelize/package.json"
              }
            ],
            "concludedValue": "node_modules/decamelize/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca>"
        }
      ],
      "group": "",
      "name": "debug",
      "version": "4.1.1",
      "description": "small debugging utility",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/debug@4.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/visionmedia/debug#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/visionmedia/debug.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/debug/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/debug/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/debug/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "IndigoUnited <hello@indigounited.com> (http://indigounited.com)"
        }
      ],
      "group": "",
      "name": "cross-spawn",
      "version": "4.0.2",
      "description": "Cross platform child_process#spawn and child_process#spawnSync",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cross-spawn@4.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/IndigoUnited/node-cross-spawn#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/IndigoUnited/node-cross-spawn.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cross-spawn@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/cross-spawn/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/cross-spawn/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/cross-spawn/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Thorsten Lorenz <thlorenz@gmx.de> (http://thlorenz.com)"
        }
      ],
      "group": "",
      "name": "convert-source-map",
      "version": "1.6.0",
      "description": "Converts a source-map from/to  different formats and allows adding/changing properties.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/convert-source-map@1.6.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/thlorenz/convert-source-map"
        },
        {
          "type": "vcs",
          "url": "git://github.com/thlorenz/convert-source-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/convert-source-map@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/convert-source-map/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/convert-source-map/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/convert-source-map/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "concat-map",
      "version": "0.0.1",
      "description": "concatenative mapdashery",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/concat-map@0.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/node-concat-map#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/node-concat-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-map@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/concat-map/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/concat-map/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/concat-map/package.json"
              }
            ],
            "concludedValue": "node_modules/concat-map/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "commondir",
      "version": "1.0.1",
      "description": "compute the closest common parent for file paths",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/commondir@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/node-commondir#readme"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/substack/node-commondir.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commondir@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/commondir/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/commondir/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/commondir/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca>"
        }
      ],
      "group": "",
      "name": "commander",
      "version": "2.17.1",
      "description": "the complete solution for node.js command-line programs",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/commander@2.17.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/tj/commander.js#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/tj/commander.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.17.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/commander/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/commander/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/commander/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "code-point-at",
      "version": "1.1.0",
      "description": "ES2015 `String#codePointAt()` ponyfill",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/code-point-at@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/code-point-at#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/code-point-at.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/code-point-at@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/code-point-at/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/code-point-at/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/code-point-at/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Coe <ben@npmjs.com>"
        }
      ],
      "group": "",
      "name": "cliui",
      "version": "4.1.0",
      "description": "easily create complex multi-column command-line-interfaces",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cliui@4.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/yargs/cliui#readme"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/yargs/cliui.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cliui@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/cliui/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/cliui/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/cliui/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "camelcase",
      "version": "5.0.0",
      "description": "Convert a dash/dot/underscore/space separated string to camelCase or PascalCase: `foo-bar` → `fooBar`",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/camelcase@5.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/camelcase#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/camelcase.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/camelcase/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/camelcase/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/camelcase/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caching-transform",
      "version": "3.0.1",
      "description": "Wraps a transform and provides caching",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/caching-transform@3.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/istanbuljs/caching-transform#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/istanbuljs/caching-transform.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/caching-transform@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/caching-transform/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/caching-transform/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/caching-transform/package.json"
          }
        ]
      },
      "tags": [
        "transform"
      ]
    },
    {
      "authors": [
        {
          "name": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)"
        }
      ],
      "group": "",
      "name": "brace-expansion",
      "version": "1.1.11",
      "description": "Brace expansion as known from sh/bash",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.11",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/juliangruber/brace-expansion"
        },
        {
          "type": "vcs",
          "url": "git://github.com/juliangruber/brace-expansion.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@1.1.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/brace-expansion/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/brace-expansion/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/brace-expansion/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)"
        }
      ],
      "group": "",
      "name": "balanced-match",
      "version": "1.0.0",
      "description": "Match balanced character pairs, like \"{\" and \"}\"",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/balanced-match@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/juliangruber/balanced-match"
        },
        {
          "type": "vcs",
          "url": "git://github.com/juliangruber/balanced-match.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/balanced-match@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/balanced-match/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/balanced-match/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/balanced-match/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Caolan McMahon"
        }
      ],
      "group": "",
      "name": "async",
      "version": "2.6.2",
      "description": "Higher-order functions and common patterns for asynchronous code",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/async@2.6.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://caolan.github.io/async/"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/caolan/async.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@2.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/async/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/async/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/async/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "arrify",
      "version": "1.0.1",
      "description": "Convert a value to an array",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/arrify@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/arrify#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/arrify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arrify@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/arrify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/arrify/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/arrify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "archy",
      "version": "1.0.0",
      "description": "render nested hierarchies `npm ls` style with unicode pipes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/archy@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/node-archy#readme"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/substack/node-archy.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/archy@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/archy/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/archy/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/archy/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Talmage <james@talmage.io> (github.com/jamestalmage)"
        }
      ],
      "group": "",
      "name": "append-transform",
      "version": "1.0.0",
      "description": "Install a transform to `require.extensions` that always runs last, even if additional extensions are added later.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/append-transform@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/istanbuljs/append-transform#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/istanbuljs/append-transform.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/append-transform@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/append-transform/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/append-transform/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/append-transform/package.json"
          }
        ]
      },
      "tags": [
        "transform"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "ansi-regex",
      "version": "3.0.0",
      "description": "Regular expression for matching ANSI escape codes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ansi-regex@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/chalk/ansi-regex#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/chalk/ansi-regex.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/ansi-regex/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/ansi-regex/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/ansi-regex/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "resolve",
      "version": "1.22.12",
      "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/resolve@1.22.12",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "ssh://github.com/browserify/resolve.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve@1.22.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/normalize-package-data/node_modules/resolve/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/module-deps/node_modules/resolve/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-node/node_modules/resolve/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-plugin-node/node_modules/resolve/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-plugin-node/node_modules/resolve/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mylib",
      "version": "0.0.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mylib@0.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/mylib@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/normalize-package-data/node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/module-deps/node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ljharb-monorepo-symlink-test",
      "version": "0.0.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ljharb-monorepo-symlink-test@0.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/ljharb-monorepo-symlink-test@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/normalize-package-data/node_modules/resolve/test/resolver/multirepo/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/module-deps/node_modules/resolve/test/resolver/multirepo/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/multirepo/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/multirepo/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/multirepo/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "invalid_main",
      "version": "",
      "scope": "optional",
      "purl": "pkg:npm/invalid_main",
      "type": "library",
      "bom-ref": "pkg:npm/invalid_main",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/normalize-package-data/node_modules/resolve/test/resolver/invalid_main/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/module-deps/node_modules/resolve/test/resolver/invalid_main/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/invalid_main/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/invalid_main/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/invalid_main/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "false_main",
      "version": "",
      "scope": "optional",
      "purl": "pkg:npm/false_main",
      "type": "library",
      "bom-ref": "pkg:npm/false_main",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/normalize-package-data/node_modules/resolve/test/resolver/false_main/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/module-deps/node_modules/resolve/test/resolver/false_main/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/false_main/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/false_main/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/false_main/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "baz",
      "version": "",
      "scope": "optional",
      "purl": "pkg:npm/baz",
      "type": "library",
      "bom-ref": "pkg:npm/baz",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/normalize-package-data/node_modules/resolve/test/resolver/baz/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/module-deps/node_modules/resolve/test/resolver/baz/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/baz/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/baz/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/baz/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Lauri Rooden (https://github.com/litejs/natural-compare-lite)"
        }
      ],
      "group": "",
      "name": "natural-compare",
      "version": "1.4.0",
      "description": "Compare strings containing a mix of letters and numbers in the way a human being would in sort order.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/natural-compare@1.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/natural-compare@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/natural-compare/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/natural-compare/package.json"
              }
            ],
            "concludedValue": "node_modules/natural-compare/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "mute-stream",
      "version": "0.0.7",
      "description": "Bytes go in, but they don't come out (when muted).",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mute-stream@0.0.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/mute-stream"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mute-stream@0.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/mute-stream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/mute-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/mute-stream/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.1.3",
      "description": "Tiny millisecond conversion utility",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ms@2.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ms/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ms/package.json"
              }
            ],
            "concludedValue": "node_modules/ms/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "module-deps",
      "version": "3.9.1",
      "description": "walk the dependency graph to generate json output that can be fed into browser-pack",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/module-deps@3.9.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/module-deps"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/module-deps.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/module-deps@3.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/module-deps/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/module-deps/package.json"
              }
            ],
            "concludedValue": "node_modules/module-deps/package.json"
          }
        ]
      },
      "tags": [
        "graph",
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Timothy J Fontaine <tjfontaine@gmail.com> (http://atxconsulting.com)"
        }
      ],
      "group": "",
      "name": "path-platform",
      "version": "0.11.15",
      "description": "Provide access to win32 and posix path operations; sourced directly from upstream Node.js",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-platform@0.11.15",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/tjfontaine/node-path-platform"
        },
        {
          "type": "vcs",
          "url": "http://github.com/tjfontaine/node-path-platform.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-platform@0.11.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/module-deps/node_modules/path-platform/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/module-deps/node_modules/path-platform/package.json"
              }
            ],
            "concludedValue": "node_modules/module-deps/node_modules/path-platform/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "parents",
      "version": "1.0.1",
      "description": "return all the parent directories for a directory",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/parents@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/node-parents"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/node-parents.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parents@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/module-deps/node_modules/parents/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/module-deps/node_modules/parents/package.json"
              }
            ],
            "concludedValue": "node_modules/module-deps/node_modules/parents/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Tim Caswell <tim@creationix.com>"
        }
      ],
      "group": "",
      "name": "jsonparse",
      "version": "1.3.1",
      "description": "This is a pure-js JSON streaming parser for node.js",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jsonparse@1.3.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/creationix/jsonparse.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsonparse@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/module-deps/node_modules/jsonparse/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/insert-module-globals/node_modules/jsonparse/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/deps-sort/node_modules/jsonparse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/deps-sort/node_modules/jsonparse/package.json"
              }
            ],
            "concludedValue": "node_modules/deps-sort/node_modules/jsonparse/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "defined",
      "version": "1.0.1",
      "description": "return the first argument that is `!== undefined`",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/defined@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/defined"
        },
        {
          "type": "vcs",
          "url": "git://github.com/inspect-js/defined.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/defined@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/module-deps/node_modules/defined/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/detective/node_modules/defined/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/detective/node_modules/defined/package.json"
              }
            ],
            "concludedValue": "node_modules/detective/node_modules/defined/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Dominic Tarr <dominic.tarr@gmail.com> (http://bit.ly/dominictarr)"
        }
      ],
      "group": "",
      "name": "JSONStream",
      "version": "1.3.5",
      "description": "rawStream.pipe(JSONStream.parse()).pipe(streamOfObjects)",
      "scope": "optional",
      "licenses": [
        {
          "expression": "MIT OR Apache-2.0"
        }
      ],
      "purl": "pkg:npm/JSONStream@1.3.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/dominictarr/JSONStream"
        },
        {
          "type": "vcs",
          "url": "git://github.com/dominictarr/JSONStream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/JSONStream@1.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/module-deps/node_modules/JSONStream/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/insert-module-globals/node_modules/JSONStream/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/deps-sort/node_modules/JSONStream/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/deps-sort/node_modules/JSONStream/package.json"
              }
            ],
            "concludedValue": "node_modules/deps-sort/node_modules/JSONStream/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca>"
        }
      ],
      "group": "",
      "name": "mocha",
      "version": "2.5.3",
      "description": "simple, flexible, fun test framework",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mocha@2.5.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/mochajs/mocha.git"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/mocha@2.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/mocha/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/mocha/package.json"
              }
            ],
            "concludedValue": "node_modules/mocha/package.json"
          }
        ]
      },
      "tags": [
        "framework",
        "test"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (http://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "supports-color",
      "version": "1.2.0",
      "description": "Detect whether a terminal supports color",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/supports-color@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/mocha/node_modules/supports-color/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/mocha/node_modules/supports-color/package.json"
              }
            ],
            "concludedValue": "node_modules/mocha/node_modules/supports-color/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "0.7.1",
      "description": "Tiny ms conversion utility",
      "scope": "optional",
      "purl": "pkg:npm/ms@0.7.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/guille/ms.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@0.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/mocha/node_modules/ms/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/mocha/node_modules/ms/package.json"
              }
            ],
            "concludedValue": "node_modules/mocha/node_modules/ms/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)"
        }
      ],
      "group": "",
      "name": "minimatch",
      "version": "0.3.0",
      "description": "a glob matcher in javascript",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimatch@0.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/minimatch.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/mocha/node_modules/minimatch/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/mocha/node_modules/minimatch/package.json"
              }
            ],
            "concludedValue": "node_modules/mocha/node_modules/minimatch/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "glob",
      "version": "3.2.11",
      "description": "a little globber",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/glob@3.2.11",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/node-glob.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@3.2.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/mocha/node_modules/glob/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/mocha/node_modules/glob/package.json"
              }
            ],
            "concludedValue": "node_modules/mocha/node_modules/glob/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (http://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "escape-string-regexp",
      "version": "1.0.2",
      "description": "Escape RegExp special characters",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/mocha/node_modules/escape-string-regexp/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/mocha/node_modules/escape-string-regexp/package.json"
              }
            ],
            "concludedValue": "node_modules/mocha/node_modules/escape-string-regexp/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca>"
        }
      ],
      "group": "",
      "name": "debug",
      "version": "2.2.0",
      "description": "small debugging utility",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/debug@2.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/visionmedia/debug.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/mocha/node_modules/debug/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/mocha/node_modules/debug/package.json"
              }
            ],
            "concludedValue": "node_modules/mocha/node_modules/debug/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "mkdirp",
      "version": "0.5.6",
      "description": "Recursively mkdir, like `mkdir -p`",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mkdirp@0.5.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/node-mkdirp.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@0.5.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/mkdirp/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/mkdirp/package.json"
              }
            ],
            "concludedValue": "node_modules/mkdirp/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "minimist",
      "version": "1.2.8",
      "description": "parse argument options",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimist@1.2.8",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/minimistjs/minimist"
        },
        {
          "type": "vcs",
          "url": "git://github.com/minimistjs/minimist.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@1.2.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/minimist/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/minimist/package.json"
              }
            ],
            "concludedValue": "node_modules/minimist/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)"
        }
      ],
      "group": "",
      "name": "minimatch",
      "version": "3.1.5",
      "description": "a glob matcher in javascript",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimatch@3.1.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/minimatch.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@3.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/minimatch/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/minimatch/package.json"
              }
            ],
            "concludedValue": "node_modules/minimatch/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Fedor Indutny <fedor@indutny.com>"
        }
      ],
      "group": "",
      "name": "minimalistic-crypto-utils",
      "version": "1.0.1",
      "description": "Minimalistic tools for JS crypto modules",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimalistic-crypto-utils@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/indutny/minimalistic-crypto-utils#readme"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/indutny/minimalistic-crypto-utils.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimalistic-crypto-utils@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/minimalistic-crypto-utils/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/minimalistic-crypto-utils/package.json"
              }
            ],
            "concludedValue": "node_modules/minimalistic-crypto-utils/package.json"
          }
        ]
      },
      "tags": [
        "crypto",
        "tools"
      ]
    },
    {
      "group": "",
      "name": "minimalistic-assert",
      "version": "1.0.1",
      "description": "minimalistic-assert ===",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimalistic-assert@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/calvinmetcalf/minimalistic-assert"
        },
        {
          "type": "vcs",
          "url": "https://github.com/calvinmetcalf/minimalistic-assert.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimalistic-assert@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/minimalistic-assert/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/minimalistic-assert/package.json"
              }
            ],
            "concludedValue": "node_modules/minimalistic-assert/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Fedor Indutny <fedor@indutny.com>"
        }
      ],
      "group": "",
      "name": "miller-rabin",
      "version": "4.0.1",
      "description": "Miller Rabin algorithm for primality test",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/miller-rabin@4.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/indutny/miller-rabin"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/miller-rabin@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/miller-rabin/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/miller-rabin/package.json"
              }
            ],
            "concludedValue": "node_modules/miller-rabin/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "meow",
      "version": "3.7.0",
      "description": "CLI app helper",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/meow@3.7.0",
      "type": "library",
      "bom-ref": "pkg:npm/meow@3.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/meow/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/meow/package.json"
              }
            ],
            "concludedValue": "node_modules/meow/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Kirill Fomichev <fanatid@ya.ru> (https://github.com/fanatid)"
        }
      ],
      "group": "",
      "name": "md5.js",
      "version": "1.3.5",
      "description": "node style md5 on pure JavaScript",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/md5.js@1.3.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/md5.js"
        },
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/md5.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/md5.js@1.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/md5.js/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/md5.js/package.json"
              }
            ],
            "concludedValue": "node_modules/md5.js/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "math-intrinsics",
      "version": "1.1.0",
      "description": "ES Math-related intrinsics and helpers, robustly cached.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/math-intrinsics@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/es-shims/math-intrinsics#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/es-shims/math-intrinsics.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/math-intrinsics@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/math-intrinsics/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/math-intrinsics/package.json"
              }
            ],
            "concludedValue": "node_modules/math-intrinsics/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "map-obj",
      "version": "1.0.1",
      "description": "Map object keys and values into a new object",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/map-obj@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/map-obj@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/map-obj/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/map-obj/package.json"
              }
            ],
            "concludedValue": "node_modules/map-obj/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me>"
        }
      ],
      "group": "",
      "name": "lru-cache",
      "version": "2.7.3",
      "description": "A cache object that deletes the least-recently-used items.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lru-cache@2.7.3",
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@2.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lru-cache/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lru-cache/package.json"
              }
            ],
            "concludedValue": "node_modules/lru-cache/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "loud-rejection",
      "version": "1.6.0",
      "description": "Make unhandled promise rejections fail loudly instead of the default silent fail",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/loud-rejection@1.6.0",
      "type": "library",
      "bom-ref": "pkg:npm/loud-rejection@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/loud-rejection/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/loud-rejection/package.json"
              }
            ],
            "concludedValue": "node_modules/loud-rejection/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/)"
        }
      ],
      "group": "",
      "name": "lodash.memoize",
      "version": "3.0.4",
      "description": "The modern build of lodash’s `_.memoize` as a module.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.memoize@3.0.4",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://lodash.com/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.memoize@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lodash.memoize/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lodash.memoize/package.json"
              }
            ],
            "concludedValue": "node_modules/lodash.memoize/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "John-David Dalton <john.david.dalton@gmail.com>"
        }
      ],
      "group": "",
      "name": "lodash",
      "version": "4.18.1",
      "description": "Lodash modular utilities.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash@4.18.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://lodash.com/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@4.18.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lodash/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lodash/package.json"
              }
            ],
            "concludedValue": "node_modules/lodash/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "load-json-file",
      "version": "1.1.0",
      "description": "Read and parse a JSON file",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/load-json-file@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/load-json-file@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/load-json-file/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/load-json-file/package.json"
              }
            ],
            "concludedValue": "node_modules/load-json-file/package.json"
          }
        ]
      },
      "tags": [
        "json",
        "parse"
      ]
    },
    {
      "authors": [
        {
          "name": "Jordan Hoff"
        }
      ],
      "group": "",
      "name": "linefix",
      "version": "0.1.1",
      "description": "Recursively repair line endings",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/linefix@0.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/jhoff/linefix.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/linefix@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/linefix/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/linefix/package.json"
              }
            ],
            "concludedValue": "node_modules/linefix/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "lexical-scope",
      "version": "1.2.0",
      "description": "detect global and local lexical identifiers from javascript source code",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lexical-scope@1.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/lexical-scope"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/lexical-scope.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lexical-scope@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lexical-scope/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lexical-scope/package.json"
              }
            ],
            "concludedValue": "node_modules/lexical-scope/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "George Zahariev <z@georgezahariev.com>"
        }
      ],
      "group": "",
      "name": "levn",
      "version": "0.3.0",
      "description": "Light ECMAScript (JavaScript) Value Notation - human written, concise, typed, flexible",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/levn@0.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/gkz/levn"
        },
        {
          "type": "vcs",
          "url": "git://github.com/gkz/levn.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/levn@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/levn/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/levn/package.json"
              }
            ],
            "concludedValue": "node_modules/levn/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "nzakas"
        }
      ],
      "group": "",
      "name": "leche",
      "version": "1.0.3",
      "description": "A JavaScript testing utility designed to work with Mocha and Sinon",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/leche@1.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/box/leche"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/leche@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/leche/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/leche/package.json"
              }
            ],
            "concludedValue": "node_modules/leche/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "labeled-stream-splicer",
      "version": "1.0.2",
      "description": "stream splicer with labels",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/labeled-stream-splicer@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/labeled-stream-splicer"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/labeled-stream-splicer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/labeled-stream-splicer@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/labeled-stream-splicer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/labeled-stream-splicer/package.json"
              }
            ],
            "concludedValue": "node_modules/labeled-stream-splicer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Tim Caswell <tim@creationix.com>"
        }
      ],
      "group": "",
      "name": "jsonparse",
      "version": "0.0.5",
      "description": "This is a pure-js JSON streaming parser for node.js",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jsonparse@0.0.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/creationix/jsonparse.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsonparse@0.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/jsonparse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/jsonparse/package.json"
              }
            ],
            "concludedValue": "node_modules/jsonparse/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Douglas Crockford (https://crockford.com/)"
        }
      ],
      "group": "",
      "name": "jsonify",
      "version": "0.0.1",
      "description": "JSON without touching any globals",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "name": "Public Domain",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Public Domain"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jsonify@0.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/jsonify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsonify@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/jsonify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Public Domain"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/jsonify/package.json"
              }
            ],
            "concludedValue": "node_modules/jsonify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "json-stable-stringify-without-jsonify",
      "version": "1.0.1",
      "description": "deterministic JSON.stringify() with custom sorting to get deterministic hashes from stringified results, with no public domain dependencies",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json-stable-stringify-without-jsonify@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/samn/json-stable-stringify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/samn/json-stable-stringify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-stable-stringify-without-jsonify@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/json-stable-stringify-without-jsonify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/json-stable-stringify-without-jsonify/package.json"
              }
            ],
            "concludedValue": "node_modules/json-stable-stringify-without-jsonify/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "json-stable-stringify",
      "version": "0.0.1",
      "description": "deterministic JSON.stringify() with custom sorting to get deterministic hashes from stringified results",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json-stable-stringify@0.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/json-stable-stringify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/json-stable-stringify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-stable-stringify@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/json-stable-stringify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/json-stable-stringify/package.json"
              }
            ],
            "concludedValue": "node_modules/json-stable-stringify/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Evgeny Poberezkin"
        }
      ],
      "group": "",
      "name": "json-schema-traverse",
      "version": "0.4.1",
      "description": "Traverse JSON Schema passing each schema object to callback",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json-schema-traverse@0.4.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/epoberezkin/json-schema-traverse#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/epoberezkin/json-schema-traverse.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-schema-traverse@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/json-schema-traverse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/json-schema-traverse/package.json"
              }
            ],
            "concludedValue": "node_modules/json-schema-traverse/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Andrey Tarantsov <andreyvit@me.com>"
        }
      ],
      "group": "",
      "name": "json-diff",
      "version": "0.3.1",
      "description": "JSON diff",
      "scope": "optional",
      "purl": "pkg:npm/json-diff@0.3.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/andreyvit/json-diff"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-diff@0.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/json-diff/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/json-diff/package.json"
              }
            ],
            "concludedValue": "node_modules/json-diff/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Bynens (https://mathiasbynens.be/)"
        }
      ],
      "group": "",
      "name": "jsesc",
      "version": "3.1.0",
      "description": "Given some data, jsesc returns the shortest possible stringified & ASCII-safe representation of that data.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jsesc@3.1.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://mths.be/jsesc"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mathiasbynens/jsesc.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsesc@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/jsesc/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/jsesc/package.json"
              }
            ],
            "concludedValue": "node_modules/jsesc/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Vladimir Zapparov <dervus.grim@gmail.com>"
        }
      ],
      "group": "",
      "name": "js-yaml",
      "version": "3.15.1",
      "description": "YAML 1.2 parser and serializer",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/js-yaml@3.15.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/nodeca/js-yaml"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-yaml@3.15.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/js-yaml/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/js-yaml/package.json"
              }
            ],
            "concludedValue": "node_modules/js-yaml/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Simon Lydell"
        }
      ],
      "group": "",
      "name": "js-tokens",
      "version": "4.0.0",
      "description": "A regex that tokenizes JavaScript.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/js-tokens@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/js-tokens@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/js-tokens/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/js-tokens/package.json"
              }
            ],
            "concludedValue": "node_modules/js-tokens/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Dan Kogai"
        }
      ],
      "group": "",
      "name": "js-base64",
      "version": "2.6.4",
      "description": "Yet another Base64 transcoder in pure-JS",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/js-base64@2.6.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/dankogai/js-base64.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-base64@2.6.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/js-base64/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/js-base64/package.json"
              }
            ],
            "concludedValue": "node_modules/js-base64/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca>"
        }
      ],
      "group": "",
      "name": "jade",
      "version": "0.26.3",
      "description": "Jade template engine",
      "scope": "optional",
      "purl": "pkg:npm/jade@0.26.3",
      "type": "library",
      "bom-ref": "pkg:npm/jade@0.26.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/jade/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/jade/package.json"
              }
            ],
            "concludedValue": "node_modules/jade/package.json"
          }
        ]
      },
      "tags": [
        "template"
      ]
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "mkdirp",
      "version": "0.3.0",
      "description": "Recursively mkdir, like `mkdir -p`",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "name": "MIT/X11",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mkdirp@0.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/substack/node-mkdirp.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/jade/node_modules/mkdirp/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/jade/node_modules/mkdirp/package.json"
              }
            ],
            "concludedValue": "node_modules/jade/node_modules/mkdirp/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca>"
        }
      ],
      "group": "",
      "name": "commander",
      "version": "0.6.1",
      "description": "the complete solution for node.js command-line programs",
      "scope": "optional",
      "purl": "pkg:npm/commander@0.6.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/visionmedia/commander.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/jade/node_modules/commander/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/jade/node_modules/commander/package.json"
              }
            ],
            "concludedValue": "node_modules/jade/node_modules/commander/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Krishnan Anantheswaran <kananthmail-github@yahoo.com>"
        }
      ],
      "group": "",
      "name": "istanbul-lib-instrument",
      "version": "3.3.0",
      "description": "Core istanbul API for JS code coverage",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/istanbul-lib-instrument@3.3.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://istanbul.js.org/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-instrument@3.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/istanbul-lib-instrument/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/istanbul-lib-instrument/package.json"
              }
            ],
            "concludedValue": "node_modules/istanbul-lib-instrument/package.json"
          }
        ]
      },
      "tags": [
        "api",
        "test"
      ]
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "semver",
      "version": "6.3.1",
      "description": "The semantic version parser used by npm.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/semver@6.3.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/node-semver.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@6.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/istanbul-lib-instrument/node_modules/semver/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/istanbul-lib-instrument/node_modules/semver/package.json"
              }
            ],
            "concludedValue": "node_modules/istanbul-lib-instrument/node_modules/semver/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Krishnan Anantheswaran <kananthmail-github@yahoo.com>"
        }
      ],
      "group": "",
      "name": "istanbul-lib-coverage",
      "version": "2.0.5",
      "description": "Data library for istanbul coverage objects",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/istanbul-lib-coverage@2.0.5",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://istanbul.js.org/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-coverage@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/istanbul-lib-coverage/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/istanbul-lib-coverage/package.json"
              }
            ],
            "concludedValue": "node_modules/istanbul-lib-coverage/package.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "authors": [
        {
          "name": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)"
        }
      ],
      "group": "",
      "name": "isarray",
      "version": "0.0.1",
      "description": "Array#isArray for older browsers",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/isarray@0.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/juliangruber/isarray"
        },
        {
          "type": "vcs",
          "url": "git://github.com/juliangruber/isarray.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isarray@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/isarray/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/isarray/package.json"
              }
            ],
            "concludedValue": "node_modules/isarray/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "wayfind"
        }
      ],
      "group": "",
      "name": "is-utf8",
      "version": "0.2.1",
      "description": "Detect if a buffer is utf8 encoded.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-utf8@0.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/is-utf8@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-utf8/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-utf8/package.json"
              }
            ],
            "concludedValue": "node_modules/is-utf8/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)"
        }
      ],
      "group": "",
      "name": "is-typed-array",
      "version": "1.1.15",
      "description": "Is this value a JS Typed Array? This module works cross-realm/iframe, does not depend on `instanceof` or mutable properties, and despite ES6 Symbol.toStringTag.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-typed-array@1.1.15",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/inspect-js/is-typed-array.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-typed-array@1.1.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-typed-array/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-typed-array/package.json"
              }
            ],
            "concludedValue": "node_modules/is-typed-array/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "is-finite",
      "version": "1.1.0",
      "description": "ES2015 Number.isFinite() ponyfill",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-finite@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-finite@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-finite/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-finite/package.json"
              }
            ],
            "concludedValue": "node_modules/is-finite/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "is-core-module",
      "version": "2.16.2",
      "description": "Is this specifier a node.js core module?",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-core-module@2.16.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/is-core-module"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/is-core-module.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-core-module@2.16.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-core-module/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-core-module/package.json"
              }
            ],
            "concludedValue": "node_modules/is-core-module/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)"
        }
      ],
      "group": "",
      "name": "is-callable",
      "version": "1.2.7",
      "description": "Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-callable@1.2.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/inspect-js/is-callable.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-callable@1.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-callable/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-callable/package.json"
              }
            ],
            "concludedValue": "node_modules/is-callable/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Feross Aboukhadijeh <feross@feross.org> (http://feross.org/)"
        }
      ],
      "group": "",
      "name": "is-buffer",
      "version": "1.1.6",
      "description": "Determine if an object is a Buffer",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-buffer@1.1.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/feross/is-buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-buffer@1.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-buffer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-buffer/package.json"
              }
            ],
            "concludedValue": "node_modules/is-buffer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "insert-module-globals",
      "version": "6.6.3",
      "description": "insert implicit module globals into a module-deps stream",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/insert-module-globals@6.6.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/insert-module-globals"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/insert-module-globals.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/insert-module-globals@6.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/insert-module-globals/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/insert-module-globals/package.json"
              }
            ],
            "concludedValue": "node_modules/insert-module-globals/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nick Fitzgerald <nfitzgerald@mozilla.com>"
        }
      ],
      "group": "",
      "name": "source-map",
      "version": "0.4.4",
      "description": "Generates and consumes source maps",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/source-map@0.4.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mozilla/source-map"
        },
        {
          "type": "vcs",
          "url": "http://github.com/mozilla/source-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/insert-module-globals/node_modules/source-map/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/insert-module-globals/node_modules/source-map/package.json"
              }
            ],
            "concludedValue": "node_modules/insert-module-globals/node_modules/source-map/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Thorsten Lorenz <thlorenz@gmx.de> (http://thlorenz.com)"
        }
      ],
      "group": "",
      "name": "inline-source-map",
      "version": "0.5.0",
      "description": "Adds source mappings and base64 encodes them, so they can be inlined in your generated file.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/inline-source-map@0.5.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/thlorenz/inline-source-map"
        },
        {
          "type": "vcs",
          "url": "git://github.com/thlorenz/inline-source-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inline-source-map@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/insert-module-globals/node_modules/inline-source-map/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/insert-module-globals/node_modules/inline-source-map/package.json"
              }
            ],
            "concludedValue": "node_modules/insert-module-globals/node_modules/inline-source-map/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Thorsten Lorenz <thlorenz@gmx.de> (http://thlorenz.com)"
        }
      ],
      "group": "",
      "name": "convert-source-map",
      "version": "1.1.3",
      "description": "Converts a source-map from/to  different formats and allows adding/changing properties.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/convert-source-map@1.1.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/thlorenz/convert-source-map"
        },
        {
          "type": "vcs",
          "url": "git://github.com/thlorenz/convert-source-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/convert-source-map@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/insert-module-globals/node_modules/convert-source-map/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/insert-module-globals/node_modules/convert-source-map/package.json"
              }
            ],
            "concludedValue": "node_modules/insert-module-globals/node_modules/convert-source-map/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Thorsten Lorenz <thlorenz@gmx.de> (http://thlorenz.com)"
        }
      ],
      "group": "",
      "name": "combine-source-map",
      "version": "0.6.1",
      "description": "Add source maps of multiple files, offset them and then combine them into one source map",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/combine-source-map@0.6.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/thlorenz/combine-source-map"
        },
        {
          "type": "vcs",
          "url": "git://github.com/thlorenz/combine-source-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/combine-source-map@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/insert-module-globals/node_modules/combine-source-map/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/insert-module-globals/node_modules/combine-source-map/package.json"
              }
            ],
            "concludedValue": "node_modules/insert-module-globals/node_modules/combine-source-map/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Simon Boudrias <admin@simonboudrias.com>"
        }
      ],
      "group": "",
      "name": "inquirer",
      "version": "6.5.2",
      "description": "A collection of common interactive command line user interfaces.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/inquirer@6.5.2",
      "type": "library",
      "bom-ref": "pkg:npm/inquirer@6.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/inquirer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/inquirer/package.json"
              }
            ],
            "concludedValue": "node_modules/inquirer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Thorsten Lorenz <thlorenz@gmx.de> (http://thlorenz.com)"
        }
      ],
      "group": "",
      "name": "inline-source-map",
      "version": "0.3.1",
      "description": "Adds source mappings and base64 encodes them, so they can be inlined in your generated file.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/inline-source-map@0.3.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/thlorenz/inline-source-map"
        },
        {
          "type": "vcs",
          "url": "git://github.com/thlorenz/inline-source-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inline-source-map@0.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/inline-source-map/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/inline-source-map/package.json"
              }
            ],
            "concludedValue": "node_modules/inline-source-map/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nick Fitzgerald <nfitzgerald@mozilla.com>"
        }
      ],
      "group": "",
      "name": "source-map",
      "version": "0.3.0",
      "description": "Generates and consumes source maps",
      "scope": "optional",
      "purl": "pkg:npm/source-map@0.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mozilla/source-map"
        },
        {
          "type": "vcs",
          "url": "http://github.com/mozilla/source-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/inline-source-map/node_modules/source-map/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/inline-source-map/node_modules/source-map/package.json"
              }
            ],
            "concludedValue": "node_modules/inline-source-map/node_modules/source-map/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.4",
      "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/inherits@2.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/inherits/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/inherits/package.json"
              }
            ],
            "concludedValue": "node_modules/inherits/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "indexof",
      "version": "0.0.1",
      "description": "Microsoft sucks",
      "scope": "optional",
      "purl": "pkg:npm/indexof@0.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/indexof@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/indexof/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/indexof/package.json"
              }
            ],
            "concludedValue": "node_modules/indexof/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "indent-string",
      "version": "2.1.0",
      "description": "Indent each line in a string",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/indent-string@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/indent-string@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/indent-string/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/indent-string/package.json"
              }
            ],
            "concludedValue": "node_modules/indent-string/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "import-fresh",
      "version": "3.3.1",
      "description": "Import a module while bypassing the cache",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/import-fresh@3.3.1",
      "type": "library",
      "bom-ref": "pkg:npm/import-fresh@3.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/import-fresh/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/import-fresh/package.json"
              }
            ],
            "concludedValue": "node_modules/import-fresh/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "kael"
        }
      ],
      "group": "",
      "name": "ignore",
      "version": "4.0.6",
      "description": "Ignore is a manager and filter for .gitignore rules.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ignore@4.0.6",
      "type": "library",
      "bom-ref": "pkg:npm/ignore@4.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ignore/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ignore/package.json"
              }
            ],
            "concludedValue": "node_modules/ignore/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Feross Aboukhadijeh <feross@feross.org> (https://feross.org)"
        }
      ],
      "group": "",
      "name": "ieee754",
      "version": "1.2.1",
      "description": "Read/write IEEE754 floating point numbers from/to a Buffer or array-like object",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ieee754@1.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/feross/ieee754.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ieee754@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ieee754/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ieee754/package.json"
              }
            ],
            "concludedValue": "node_modules/ieee754/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Alexander Shtuchkin <ashtuchkin@gmail.com>"
        }
      ],
      "group": "",
      "name": "iconv-lite",
      "version": "0.4.24",
      "description": "Convert character encodings in pure javascript.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/iconv-lite@0.4.24",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ashtuchkin/iconv-lite"
        },
        {
          "type": "vcs",
          "url": "git://github.com/ashtuchkin/iconv-lite.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/iconv-lite@0.4.24",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/iconv-lite/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/iconv-lite/package.json"
              }
            ],
            "concludedValue": "node_modules/iconv-lite/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "https-browserify",
      "version": "0.0.1",
      "description": "https module compatability for browserify",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/https-browserify@0.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/https-browserify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/https-browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/https-browserify@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/https-browserify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/https-browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/https-browserify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "http-browserify",
      "version": "1.7.0",
      "description": "http module compatability for browserify",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "name": "MIT/X11",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/http-browserify@1.7.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/substack/http-browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-browserify@1.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/http-browserify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/http-browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/http-browserify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Rebecca Turner <me@re-becca.org> (http://re-becca.org)"
        }
      ],
      "group": "",
      "name": "hosted-git-info",
      "version": "2.8.9",
      "description": "Provides metadata and conversions from repository urls for Github, Bitbucket and Gitlab",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/hosted-git-info@2.8.9",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/hosted-git-info"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/npm/hosted-git-info.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hosted-git-info@2.8.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/hosted-git-info/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/hosted-git-info/package.json"
              }
            ],
            "concludedValue": "node_modules/hosted-git-info/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Fedor Indutny <fedor@indutny.com>"
        }
      ],
      "group": "",
      "name": "hmac-drbg",
      "version": "1.0.1",
      "description": "Deterministic random bit generator (hmac)",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/hmac-drbg@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/indutny/hmac-drbg#readme"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/indutny/hmac-drbg.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hmac-drbg@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/hmac-drbg/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/hmac-drbg/package.json"
              }
            ],
            "concludedValue": "node_modules/hmac-drbg/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Xueqiao Xu <xueqiaoxu@gmail.com>"
        }
      ],
      "group": "",
      "name": "heap",
      "version": "0.2.7",
      "description": "binary heap (priority queue) algorithms (ported from Python's heapq module)",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/heap@0.2.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/qiao/heap.js"
        },
        {
          "type": "vcs",
          "url": "git://github.com/qiao/heap.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/heap@0.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/heap/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/heap/package.json"
              }
            ],
            "concludedValue": "node_modules/heap/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "hasown",
      "version": "2.0.4",
      "description": "A robust, ES3 compatible, \"has own property\" predicate.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/hasown@2.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/hasOwn#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/hasOwn.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hasown@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/hasown/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/hasown/package.json"
              }
            ],
            "concludedValue": "node_modules/hasown/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Fedor Indutny <fedor@indutny.com>"
        }
      ],
      "group": "",
      "name": "hash.js",
      "version": "1.1.7",
      "description": "Various hash functions that could be run by both browser and node",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/hash.js@1.1.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/indutny/hash.js"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hash.js@1.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/hash.js/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/hash.js/package.json"
              }
            ],
            "concludedValue": "node_modules/hash.js/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Kirill Fomichev <fanatid@ya.ru> (https://github.com/fanatid)"
        }
      ],
      "group": "",
      "name": "hash-base",
      "version": "3.0.5",
      "description": "abstract base class for hash-streams",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/hash-base@3.0.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/hash-base"
        },
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/hash-base.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hash-base@3.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/hash-base/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/hash-base/package.json"
              }
            ],
            "concludedValue": "node_modules/hash-base/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)"
        }
      ],
      "group": "",
      "name": "has-tostringtag",
      "version": "1.0.2",
      "description": "Determine if the JS environment has `Symbol.toStringTag` support. Supports spec, or shams.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/has-tostringtag@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/has-tostringtag#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/has-tostringtag.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-tostringtag@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/has-tostringtag/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/has-tostringtag/package.json"
              }
            ],
            "concludedValue": "node_modules/has-tostringtag/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)"
        }
      ],
      "group": "",
      "name": "has-symbols",
      "version": "1.1.0",
      "description": "Determine if the JS environment has Symbol support. Supports spec, or shams.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/has-symbols@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/has-symbols#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/inspect-js/has-symbols.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-symbols@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/has-symbols/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/has-symbols/package.json"
              }
            ],
            "concludedValue": "node_modules/has-symbols/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "has-property-descriptors",
      "version": "1.0.2",
      "description": "Does the environment have full property descriptor support? Handles IE 8's broken defineProperty/gOPD.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/has-property-descriptors@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/has-property-descriptors#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/has-property-descriptors.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-property-descriptors@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/has-property-descriptors/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/has-property-descriptors/package.json"
              }
            ],
            "concludedValue": "node_modules/has-property-descriptors/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca>"
        }
      ],
      "group": "",
      "name": "growl",
      "version": "1.9.2",
      "description": "Growl unobtrusive notifications",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/growl@1.9.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/tj/node-growl.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/growl@1.9.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/growl/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/growl/package.json"
              }
            ],
            "concludedValue": "node_modules/growl/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "4.2.11",
      "description": "A drop-in replacement for fs, making various improvements.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/graceful-fs@4.2.11",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/node-graceful-fs"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@4.2.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/graceful-fs/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/graceful-fs/package.json"
              }
            ],
            "concludedValue": "node_modules/graceful-fs/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "gopd",
      "version": "1.2.0",
      "description": "`Object.getOwnPropertyDescriptor`, but accounts for IE's broken implementation.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/gopd@1.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/gopd#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/gopd.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gopd@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/gopd/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/gopd/package.json"
              }
            ],
            "concludedValue": "node_modules/gopd/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "globals",
      "version": "11.12.0",
      "description": "Global identifiers from different JavaScript environments",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/globals@11.12.0",
      "type": "library",
      "bom-ref": "pkg:npm/globals@11.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/globals/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/globals/package.json"
              }
            ],
            "concludedValue": "node_modules/globals/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "glob",
      "version": "4.5.3",
      "description": "a little globber",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/glob@4.5.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/node-glob.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@4.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/glob/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/glob/package.json"
              }
            ],
            "concludedValue": "node_modules/glob/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)"
        }
      ],
      "group": "",
      "name": "minimatch",
      "version": "2.0.10",
      "description": "a glob matcher in javascript",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimatch@2.0.10",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/minimatch.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@2.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/glob/node_modules/minimatch/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/glob/node_modules/minimatch/package.json"
              }
            ],
            "concludedValue": "node_modules/glob/node_modules/minimatch/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "github-api",
      "version": "2.3.0",
      "description": "A higher-level wrapper around the Github API.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause-Clear",
            "url": "https://opensource.org/licenses/BSD-3-Clause-Clear",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/github-api@2.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/michael/github.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/github-api@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/github-api/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/github-api/package.json"
              }
            ],
            "concludedValue": "node_modules/github-api/package.json"
          }
        ]
      },
      "tags": [
        "api"
      ]
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.0.0",
      "description": "Tiny milisecond conversion utility",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ms@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/github-api/node_modules/ms/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/follow-redirects/node_modules/ms/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/follow-redirects/node_modules/ms/package.json"
              }
            ],
            "concludedValue": "node_modules/follow-redirects/node_modules/ms/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca>"
        }
      ],
      "group": "",
      "name": "debug",
      "version": "2.6.9",
      "description": "small debugging utility",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/debug@2.6.9",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/visionmedia/debug.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@2.6.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/github-api/node_modules/debug/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/follow-redirects/node_modules/debug/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/follow-redirects/node_modules/debug/package.json"
              }
            ],
            "concludedValue": "node_modules/follow-redirects/node_modules/debug/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (http://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "get-stdin",
      "version": "4.0.1",
      "description": "Easier stdin",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/get-stdin@4.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/get-stdin@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/get-stdin/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/get-stdin/package.json"
              }
            ],
            "concludedValue": "node_modules/get-stdin/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "get-proto",
      "version": "1.0.1",
      "description": "Robustly get the [[Prototype]] of an object",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/get-proto@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/get-proto#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/get-proto.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-proto@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/get-proto/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/get-proto/package.json"
              }
            ],
            "concludedValue": "node_modules/get-proto/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "get-intrinsic",
      "version": "1.3.0",
      "description": "Get and robustly cache all JS language-level intrinsics at first require time",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/get-intrinsic@1.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/get-intrinsic#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/get-intrinsic.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-intrinsic@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/get-intrinsic/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/get-intrinsic/package.json"
              }
            ],
            "concludedValue": "node_modules/get-intrinsic/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mikola Lysenko"
        }
      ],
      "group": "",
      "name": "functional-red-black-tree",
      "version": "1.0.1",
      "description": "A fully persistent balanced binary search tree",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/functional-red-black-tree@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/mikolalysenko/functional-red-black-tree.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/functional-red-black-tree@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/functional-red-black-tree/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/functional-red-black-tree/package.json"
              }
            ],
            "concludedValue": "node_modules/functional-red-black-tree/package.json"
          }
        ]
      },
      "tags": [
        "binary"
      ]
    },
    {
      "authors": [
        {
          "name": "Raynos <raynos2@gmail.com>"
        }
      ],
      "group": "",
      "name": "function-bind",
      "version": "1.1.2",
      "description": "Implementation of Function.prototype.bind",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/function-bind@1.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/Raynos/function-bind"
        },
        {
          "type": "vcs",
          "url": "https://github.com/Raynos/function-bind.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/function-bind@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/function-bind/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/function-bind/package.json"
              }
            ],
            "concludedValue": "node_modules/function-bind/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Raynos <raynos2@gmail.com>"
        }
      ],
      "group": "",
      "name": "for-each",
      "version": "0.3.5",
      "description": "A better forEach",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/for-each@0.3.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/Raynos/for-each"
        },
        {
          "type": "vcs",
          "url": "https://github.com/Raynos/for-each.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/for-each@0.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/for-each/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/for-each/package.json"
              }
            ],
            "concludedValue": "node_modules/for-each/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Olivier Lalonde <olalonde@gmail.com> (http://www.syskall.com)"
        }
      ],
      "group": "",
      "name": "follow-redirects",
      "version": "0.0.7",
      "description": "HTTP and HTTPS modules that follow redirects.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/follow-redirects@0.0.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/olalonde/follow-redirects"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/follow-redirects@0.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/follow-redirects/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/follow-redirects/package.json"
              }
            ],
            "concludedValue": "node_modules/follow-redirects/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Andrea Giammarchi"
        }
      ],
      "group": "",
      "name": "flatted",
      "version": "2.0.2",
      "description": "A super light and fast circular JSON parser.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/flatted@2.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/WebReflection/flatted#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/WebReflection/flatted.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/flatted@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/flatted/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/flatted/package.json"
              }
            ],
            "concludedValue": "node_modules/flatted/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Roy Riojas (http://royriojas.com)"
        }
      ],
      "group": "",
      "name": "flat-cache",
      "version": "2.0.1",
      "description": "A stupidly simple key/value storage using files to persist some data",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/flat-cache@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/flat-cache@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/flat-cache/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/flat-cache/package.json"
              }
            ],
            "concludedValue": "node_modules/flat-cache/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "find-up",
      "version": "1.1.2",
      "description": "Find a file by walking up parent directories",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/find-up@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/find-up@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/find-up/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/find-up/package.json"
              }
            ],
            "concludedValue": "node_modules/find-up/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Roy Riojas (http://royriojas.com)"
        }
      ],
      "group": "",
      "name": "file-entry-cache",
      "version": "5.0.1",
      "description": "Super simple cache for file metadata, useful for process that work o a given series of files and that only need to repeat the job on the changed ones since the previous run of the process",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/file-entry-cache@5.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/file-entry-cache@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/file-entry-cache/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/file-entry-cache/package.json"
              }
            ],
            "concludedValue": "node_modules/file-entry-cache/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "figures",
      "version": "2.0.0",
      "description": "Unicode symbols with Windows CMD fallbacks",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/figures@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/figures@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/figures/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/figures/package.json"
              }
            ],
            "concludedValue": "node_modules/figures/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ramesh Nair <ram@hiddentao.com> (http://www.hiddentao.com/)"
        }
      ],
      "group": "",
      "name": "fast-levenshtein",
      "version": "2.0.6",
      "description": "Efficient implementation of Levenshtein algorithm  with locale-specific collator support.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fast-levenshtein@2.0.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/hiddentao/fast-levenshtein.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-levenshtein@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/fast-levenshtein/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fast-levenshtein/package.json"
              }
            ],
            "concludedValue": "node_modules/fast-levenshtein/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "fast-json-stable-stringify",
      "version": "2.1.0",
      "description": "deterministic `JSON.stringify()` - a faster version of substack's json-stable-strigify without jsonify",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fast-json-stable-stringify@2.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/epoberezkin/fast-json-stable-stringify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/epoberezkin/fast-json-stable-stringify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-json-stable-stringify@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/fast-json-stable-stringify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fast-json-stable-stringify/package.json"
              }
            ],
            "concludedValue": "node_modules/fast-json-stable-stringify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Evgeny Poberezkin"
        }
      ],
      "group": "",
      "name": "fast-deep-equal",
      "version": "3.1.3",
      "description": "Fast deep equal",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fast-deep-equal@3.1.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/epoberezkin/fast-deep-equal#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/epoberezkin/fast-deep-equal.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-deep-equal@3.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/fast-deep-equal/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fast-deep-equal/package.json"
              }
            ],
            "concludedValue": "node_modules/fast-deep-equal/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Kevin Gravier <kevin@mrkmg.com> (https://mrkmg.com)"
        }
      ],
      "group": "",
      "name": "external-editor",
      "version": "3.1.0",
      "description": "Edit a string with the users preferred text editor using $VISUAL or $ENVIRONMENT",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/external-editor@3.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mrkmg/node-external-editor#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/mrkmg/node-external-editor.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/external-editor@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/external-editor/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/external-editor/package.json"
              }
            ],
            "concludedValue": "node_modules/external-editor/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Calvin Metcalf <calvin.metcalf@gmail.com>"
        }
      ],
      "group": "",
      "name": "evp_bytestokey",
      "version": "1.0.3",
      "description": "The insecure key derivation algorithm from OpenSSL",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/evp_bytestokey@1.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/EVP_BytesToKey"
        },
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/EVP_BytesToKey.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/evp_bytestokey@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/evp_bytestokey/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/evp_bytestokey/package.json"
              }
            ],
            "concludedValue": "node_modules/evp_bytestokey/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Irakli Gozalishvili <rfobic@gmail.com> (http://jeditoolkit.com)"
        }
      ],
      "group": "",
      "name": "events",
      "version": "1.0.2",
      "description": "Node's event emitter for all engines.",
      "scope": "optional",
      "purl": "pkg:npm/events@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/Gozala/events.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/events@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/events/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/events/package.json"
              }
            ],
            "concludedValue": "node_modules/events/package.json"
          }
        ]
      },
      "tags": [
        "event"
      ]
    },
    {
      "group": "",
      "name": "esutils",
      "version": "2.0.3",
      "description": "utility box for ECMAScript language tools",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/esutils@2.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/estools/esutils"
        },
        {
          "type": "vcs",
          "url": "http://github.com/estools/esutils.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esutils@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/esutils/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/esutils/package.json"
              }
            ],
            "concludedValue": "node_modules/esutils/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "estraverse",
      "version": "4.3.0",
      "description": "ECMAScript JS AST traversal functions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/estraverse@4.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/estools/estraverse"
        },
        {
          "type": "vcs",
          "url": "http://github.com/estools/estraverse.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/estraverse@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/estraverse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/estraverse/package.json"
              }
            ],
            "concludedValue": "node_modules/estraverse/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esrecurse",
      "version": "4.3.0",
      "description": "ECMAScript AST recursive visitor",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/esrecurse@4.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/estools/esrecurse"
        },
        {
          "type": "vcs",
          "url": "https://github.com/estools/esrecurse.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esrecurse@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/esrecurse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/esrecurse/package.json"
              }
            ],
            "concludedValue": "node_modules/esrecurse/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "estraverse",
      "version": "5.3.0",
      "description": "ECMAScript JS AST traversal functions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/estraverse@5.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/estools/estraverse"
        },
        {
          "type": "vcs",
          "url": "http://github.com/estools/estraverse.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/estraverse@5.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/esrecurse/node_modules/estraverse/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/esquery/node_modules/estraverse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/esquery/node_modules/estraverse/package.json"
              }
            ],
            "concludedValue": "node_modules/esquery/node_modules/estraverse/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Joel Feenstra <jrfeenst+esquery@gmail.com>"
        }
      ],
      "group": "",
      "name": "esquery",
      "version": "1.7.0",
      "description": "A query library for ECMAScript AST using a CSS selector like query language.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/esquery@1.7.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/estools/esquery/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/estools/esquery.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esquery@1.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/esquery/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/esquery/package.json"
              }
            ],
            "concludedValue": "node_modules/esquery/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ariya Hidayat <ariya.hidayat@gmail.com>"
        }
      ],
      "group": "",
      "name": "esprima-fb",
      "version": "8001.2001.0-dev-harmony-fb",
      "description": "Facebook-specific fork of the esprima project",
      "scope": "optional",
      "purl": "pkg:npm/esprima-fb@8001.2001.0-dev-harmony-fb",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/facebook/esprima/tree/fb-harmony"
        },
        {
          "type": "vcs",
          "url": "http://github.com/facebook/esprima.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima-fb@8001.2001.0-dev-harmony-fb",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/esprima-fb/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/esprima-fb/package.json"
              }
            ],
            "concludedValue": "node_modules/esprima-fb/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ariya Hidayat <ariya.hidayat@gmail.com>"
        }
      ],
      "group": "",
      "name": "esprima",
      "version": "4.0.1",
      "description": "ECMAScript parsing infrastructure for multipurpose analysis",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/esprima@4.0.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://esprima.org"
        },
        {
          "type": "vcs",
          "url": "https://github.com/jquery/esprima.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/esprima/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "esprima"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/esprima/package.json"
              }
            ],
            "concludedValue": "node_modules/esprima/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "tools/update-tests-esprima.js",
            "line": 19
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zakas <nicholas+npm@nczconsulting.com>"
        }
      ],
      "group": "",
      "name": "espree",
      "version": "5.0.1",
      "description": "An Esprima-compatible JavaScript parser built on Acorn",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/espree@5.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint/espree"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/espree@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/espree/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "../espree"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/espree/package.json"
              }
            ],
            "concludedValue": "node_modules/espree/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "tools/update-tests.js",
            "line": 19
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Toru Nagashima (https://github.com/mysticatea)"
        }
      ],
      "group": "",
      "name": "eslint-visitor-keys",
      "version": "1.3.0",
      "description": "Constants and utilities about visitor keys to traverse AST.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/eslint-visitor-keys@1.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint/eslint-visitor-keys#readme"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-visitor-keys@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-visitor-keys/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "eslint-visitor-keys"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-visitor-keys/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-visitor-keys/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "espree.js",
            "line": 171
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Toru Nagashima"
        }
      ],
      "group": "",
      "name": "eslint-utils",
      "version": "1.4.3",
      "description": "Utilities for ESLint plugins.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/eslint-utils@1.4.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mysticatea/eslint-utils#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/mysticatea/eslint-utils.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-utils@1.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-utils/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-utils/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-utils/package.json"
          }
        ]
      },
      "tags": [
        "plugins"
      ]
    },
    {
      "group": "",
      "name": "eslint-scope",
      "version": "4.0.3",
      "description": "ECMAScript scope analyzer for ESLint",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/eslint-scope@4.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/eslint/eslint-scope"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-scope@4.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-scope/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-scope/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-scope/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zakas"
        }
      ],
      "group": "",
      "name": "eslint-release",
      "version": "1.2.0",
      "description": "ESLint Release Tools",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/eslint-release@1.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint/eslint-release#readme"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-release@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-release/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-release/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-release/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Artur Adib <arturadib@gmail.com>"
        }
      ],
      "group": "",
      "name": "shelljs",
      "version": "0.5.3",
      "description": "Portable Unix shell commands for Node.js",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "name": "BSD*",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/shelljs@0.5.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/arturadib/shelljs"
        },
        {
          "type": "vcs",
          "url": "git://github.com/arturadib/shelljs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shelljs@0.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-release/node_modules/shelljs/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "shelljs/make,shelljs"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-release/node_modules/shelljs/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-release/node_modules/shelljs/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "Makefile.js",
            "line": 14
          },
          {
            "location": "tools/update-tests-esprima.js",
            "line": 18
          },
          {
            "location": "tools/update-tests.js",
            "line": 18
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Toru Nagashima"
        }
      ],
      "group": "",
      "name": "eslint-plugin-node",
      "version": "8.0.1",
      "description": "Additional ESLint's rules for Node.js",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/eslint-plugin-node@8.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mysticatea/eslint-plugin-node#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/mysticatea/eslint-plugin-node.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-node@8.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-node/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-plugin-node/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-plugin-node/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "kael"
        }
      ],
      "group": "",
      "name": "ignore",
      "version": "5.3.2",
      "description": "Ignore is a manager and filter for .gitignore rules, the one used by eslint, gitbook and many others.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ignore@5.3.2",
      "type": "library",
      "bom-ref": "pkg:npm/ignore@5.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-node/node_modules/ignore/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-plugin-node/node_modules/ignore/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-plugin-node/node_modules/ignore/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Toru Nagashima (https://github.com/mysticatea)"
        }
      ],
      "group": "",
      "name": "eslint-plugin-es",
      "version": "1.4.1",
      "description": "ESLint plugin about ECMAScript syntactic features.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/eslint-plugin-es@1.4.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mysticatea/eslint-plugin-es#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/mysticatea/eslint-plugin-es.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-es@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-es/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-plugin-es/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-plugin-es/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zakas <nicholas+npm@nczconsulting.com>"
        }
      ],
      "group": "",
      "name": "eslint-config-eslint",
      "version": "5.0.1",
      "description": "Default ESLint configuration for ESLint projects.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/eslint-config-eslint@5.0.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://eslint.org"
        },
        {
          "type": "vcs",
          "url": "https://github.com/eslint/eslint"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-config-eslint@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-config-eslint/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-config-eslint/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-config-eslint/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zakas <nicholas+npm@nczconsulting.com>"
        }
      ],
      "group": "",
      "name": "eslint",
      "version": "5.16.0",
      "description": "An AST-based pattern checker for JavaScript.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/eslint@5.16.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://eslint.org"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint@5.16.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "escape-string-regexp",
      "version": "1.0.5",
      "description": "Escape RegExp special characters",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@1.0.5",
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/escape-string-regexp/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/escape-string-regexp/package.json"
              }
            ],
            "concludedValue": "node_modules/escape-string-regexp/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Yehuda Katz"
        },
        {
          "name": " Tom Dale"
        },
        {
          "name": " Stefan Penner and contributors (Conversion to ES6 API by Jake Archibald)"
        }
      ],
      "group": "",
      "name": "es6-promise",
      "version": "3.3.1",
      "description": "A lightweight library that provides tools for organizing asynchronous code",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/es6-promise@3.3.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/stefanpenner/es6-promise.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-promise@3.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/es6-promise/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/es6-promise/package.json"
              }
            ],
            "concludedValue": "node_modules/es6-promise/package.json"
          }
        ]
      },
      "tags": [
        "tools"
      ]
    },
    {
      "authors": [
        {
          "name": "Mariusz Nowak <medikoo+es5-ext@medikoo.com> (http://www.medikoo.com/)"
        }
      ],
      "group": "",
      "name": "es5-ext",
      "version": "0.8.2",
      "description": "ECMAScript5 extensions",
      "scope": "optional",
      "purl": "pkg:npm/es5-ext@0.8.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/medikoo/es5-ext.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es5-ext@0.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/es5-ext/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/es5-ext/package.json"
              }
            ],
            "concludedValue": "node_modules/es5-ext/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "es-object-atoms",
      "version": "1.1.2",
      "description": "ES Object-related atoms: Object, ToObject, RequireObjectCoercible",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/es-object-atoms@1.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/es-object-atoms#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/es-object-atoms.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-object-atoms@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/es-object-atoms/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/es-object-atoms/package.json"
              }
            ],
            "concludedValue": "node_modules/es-object-atoms/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "es-errors",
      "version": "1.3.0",
      "description": "A simple cache for a few of the JS Error constructors.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/es-errors@1.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/es-errors#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/es-errors.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-errors@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/es-errors/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/es-errors/package.json"
              }
            ],
            "concludedValue": "node_modules/es-errors/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "es-define-property",
      "version": "1.0.1",
      "description": "`Object.defineProperty`, but not IE 8's broken one.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/es-define-property@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/es-define-property#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/es-define-property.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-define-property@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/es-define-property/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/es-define-property/package.json"
              }
            ],
            "concludedValue": "node_modules/es-define-property/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "error-ex",
      "version": "1.3.4",
      "description": "Easy error subclassing and stack customization",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/error-ex@1.3.4",
      "type": "library",
      "bom-ref": "pkg:npm/error-ex@1.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/error-ex/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/error-ex/package.json"
              }
            ],
            "concludedValue": "node_modules/error-ex/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Bynens (https://mathiasbynens.be/)"
        }
      ],
      "group": "",
      "name": "emoji-regex",
      "version": "7.0.3",
      "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/emoji-regex@7.0.3",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://mths.be/emoji-regex"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mathiasbynens/emoji-regex.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/emoji-regex@7.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/emoji-regex/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/emoji-regex/package.json"
              }
            ],
            "concludedValue": "node_modules/emoji-regex/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Fedor Indutny <fedor@indutny.com>"
        }
      ],
      "group": "",
      "name": "elliptic",
      "version": "6.6.1",
      "description": "EC cryptography",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/elliptic@6.6.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/indutny/elliptic"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/elliptic@6.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/elliptic/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/elliptic/package.json"
              }
            ],
            "concludedValue": "node_modules/elliptic/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Conrad Pankoff <deoxxa@fknsrs.biz> (http://www.fknsrs.biz/)"
        }
      ],
      "group": "",
      "name": "duplexer2",
      "version": "0.0.2",
      "description": "Like duplexer (http://npm.im/duplexer) but using streams2",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/duplexer2@0.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/deoxxa/duplexer2.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/duplexer2@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/duplexer2/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/duplexer2/package.json"
              }
            ],
            "concludedValue": "node_modules/duplexer2/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "dunder-proto",
      "version": "1.0.1",
      "description": "If available, the `Object.prototype.__proto__` accessor and mutator, call-bound",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/dunder-proto@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/es-shims/dunder-proto#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/es-shims/dunder-proto.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dunder-proto@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/dunder-proto/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/dunder-proto/package.json"
              }
            ],
            "concludedValue": "node_modules/dunder-proto/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Andrey Tarantsov <andreyvit@me.com>"
        }
      ],
      "group": "",
      "name": "dreamopt",
      "version": "0.6.0",
      "description": "Command-line parser with readable syntax from your sweetest dreams",
      "scope": "optional",
      "purl": "pkg:npm/dreamopt@0.6.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/andreyvit/dreamopt.js"
        },
        {
          "type": "vcs",
          "url": "git://github.com/andreyvit/dreamopt.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dreamopt@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/dreamopt/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/dreamopt/package.json"
              }
            ],
            "concludedValue": "node_modules/dreamopt/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "2013+ Bevry Pty Ltd <us@bevry.me> (http://bevry.me)"
        }
      ],
      "group": "",
      "name": "domain-browser",
      "version": "1.1.7",
      "description": "Node's domain module for the web browser. This is merely an evented try...catch with the same API as node, nothing more.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/domain-browser@1.1.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/bevry/domain-browser"
        },
        {
          "type": "vcs",
          "url": "http://github.com/bevry/domain-browser.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domain-browser@1.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/domain-browser/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/domain-browser/package.json"
              }
            ],
            "concludedValue": "node_modules/domain-browser/package.json"
          }
        ]
      },
      "tags": [
        "api",
        "web"
      ]
    },
    {
      "group": "",
      "name": "doctrine",
      "version": "3.0.0",
      "description": "JSDoc parser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/doctrine@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint/doctrine"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/doctrine@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/doctrine/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/doctrine/package.json"
              }
            ],
            "concludedValue": "node_modules/doctrine/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Xueqiao Xu <xueqiaoxu@gmail.com>"
        }
      ],
      "group": "",
      "name": "difflib",
      "version": "0.2.4",
      "description": "text diff library ported from Python's difflib module",
      "scope": "optional",
      "purl": "pkg:npm/difflib@0.2.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/qiao/difflib.js"
        },
        {
          "type": "vcs",
          "url": "git://github.com/qiao/difflib.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/difflib@0.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/difflib/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/difflib/package.json"
              }
            ],
            "concludedValue": "node_modules/difflib/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Calvin Metcalf"
        }
      ],
      "group": "",
      "name": "diffie-hellman",
      "version": "5.0.3",
      "description": "pure js diffie-hellman",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/diffie-hellman@5.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/diffie-hellman"
        },
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/diffie-hellman.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diffie-hellman@5.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/diffie-hellman/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/diffie-hellman/package.json"
              }
            ],
            "concludedValue": "node_modules/diffie-hellman/package.json"
          }
        ]
      },
      "tags": [
        "native"
      ]
    },
    {
      "group": "",
      "name": "diff",
      "version": "1.4.0",
      "description": "A javascript text diff implementation.",
      "scope": "optional",
      "purl": "pkg:npm/diff@1.4.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/kpdecker/jsdiff.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/diff/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/diff/package.json"
              }
            ],
            "concludedValue": "node_modules/diff/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "detective",
      "version": "4.7.1",
      "description": "find all require() calls by walking the AST",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/detective@4.7.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/browserify/detective.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/detective@4.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/detective/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/detective/package.json"
              }
            ],
            "concludedValue": "node_modules/detective/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn",
      "version": "5.7.4",
      "description": "ECMAScript parser",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/acorn@5.7.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/acornjs/acorn"
        },
        {
          "type": "vcs",
          "url": "https://github.com/acornjs/acorn.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn@5.7.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/detective/node_modules/acorn/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "acorn"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/detective/node_modules/acorn/package.json"
              }
            ],
            "concludedValue": "node_modules/detective/node_modules/acorn/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "espree.js",
            "line": 61
          },
          {
            "location": "lib/espree.js",
            "line": 4
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Fedor Indutny <fedor@indutny.com>"
        }
      ],
      "group": "",
      "name": "des.js",
      "version": "1.1.0",
      "description": "DES implementation",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/des.js@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/indutny/des.js#readme"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/indutny/des.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/des.js@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/des.js/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/des.js/package.json"
              }
            ],
            "concludedValue": "node_modules/des.js/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "deps-sort",
      "version": "1.3.9",
      "description": "sort module-deps output for deterministic browserify bundles",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/deps-sort@1.3.9",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/deps-sort"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/deps-sort.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deps-sort@1.3.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/deps-sort/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/deps-sort/package.json"
              }
            ],
            "concludedValue": "node_modules/deps-sort/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "defined",
      "version": "0.0.0",
      "description": "return the first argument that is `!== undefined`",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/defined@0.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/defined"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/defined.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/defined@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/defined/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/defined/package.json"
              }
            ],
            "concludedValue": "node_modules/defined/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "define-data-property",
      "version": "1.1.4",
      "description": "Define a data property on an object. Will fall back to assignment in an engine without descriptors.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/define-data-property@1.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/define-data-property#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/define-data-property.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/define-data-property@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/define-data-property/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/define-data-property/package.json"
              }
            ],
            "concludedValue": "node_modules/define-data-property/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Thorsten Lorenz <thlorenz@gmx.de> (http://thlorenz.com)"
        }
      ],
      "group": "",
      "name": "deep-is",
      "version": "0.1.4",
      "description": "node's assert.deepEqual algorithm except for NaN being equal to NaN",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/deep-is@0.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/thlorenz/deep-is.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deep-is@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/deep-is/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/deep-is/package.json"
              }
            ],
            "concludedValue": "node_modules/deep-is/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "deep-equal",
      "version": "0.2.2",
      "description": "node's assert.deepEqual algorithm",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/deep-equal@0.2.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/substack/node-deep-equal.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deep-equal@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/deep-equal/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/deep-equal/package.json"
              }
            ],
            "concludedValue": "node_modules/deep-equal/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jake Luer <jake@alogicalparadox.com>"
        }
      ],
      "group": "",
      "name": "deep-eql",
      "version": "0.1.3",
      "description": "Improved deep equality testing for Node.js and the browser.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/deep-eql@0.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/deep-eql@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/deep-eql/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/deep-eql/package.json"
              }
            ],
            "concludedValue": "node_modules/deep-eql/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Josh Junon (https://github.com/qix-)"
        }
      ],
      "group": "",
      "name": "debug",
      "version": "4.4.3",
      "description": "Lightweight debugging utility for Node.js and the browser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/debug@4.4.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/debug-js/debug.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@4.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/debug/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/debug/package.json"
              }
            ],
            "concludedValue": "node_modules/debug/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Steven Levithan"
        }
      ],
      "group": "",
      "name": "dateformat",
      "version": "1.0.12",
      "description": "A node.js package for Steven Levithan's excellent dateFormat() function.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/dateformat@1.0.12",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/felixge/node-dateformat"
        },
        {
          "type": "vcs",
          "url": "https://github.com/felixge/node-dateformat.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dateformat@1.0.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/dateformat/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/dateformat/package.json"
              }
            ],
            "concludedValue": "node_modules/dateformat/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Talmage <james@talmage.io> (github.com/jamestalmage)"
        }
      ],
      "group": "",
      "name": "currently-unhandled",
      "version": "0.4.1",
      "description": "Track the list of currently unhandled promise rejections.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/currently-unhandled@0.4.1",
      "type": "library",
      "bom-ref": "pkg:npm/currently-unhandled@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/currently-unhandled/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/currently-unhandled/package.json"
              }
            ],
            "concludedValue": "node_modules/currently-unhandled/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Dominic Tarr <dominic.tarr@gmail.com> (dominictarr.com)"
        }
      ],
      "group": "",
      "name": "crypto-browserify",
      "version": "3.12.1",
      "description": "implementation of crypto for the browser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/crypto-browserify@3.12.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/browserify/crypto-browserify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/browserify/crypto-browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/crypto-browserify@3.12.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/crypto-browserify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/crypto-browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/crypto-browserify/package.json"
          }
        ]
      },
      "tags": [
        "crypto"
      ]
    },
    {
      "authors": [
        {
          "name": "André Cruz <andre@moxy.studio>"
        }
      ],
      "group": "",
      "name": "cross-spawn",
      "version": "6.0.6",
      "description": "Cross platform child_process#spawn and child_process#spawnSync",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cross-spawn@6.0.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/moxystudio/node-cross-spawn"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cross-spawn@6.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/cross-spawn/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cross-spawn/package.json"
              }
            ],
            "concludedValue": "node_modules/cross-spawn/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "create-hmac",
      "version": "1.1.7",
      "description": "node style hmacs in the browser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/create-hmac@1.1.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/createHmac"
        },
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/createHmac.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/create-hmac@1.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/create-hmac/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/create-hmac/package.json"
              }
            ],
            "concludedValue": "node_modules/create-hmac/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "create-hash",
      "version": "1.2.0",
      "description": "create hashes for browserify",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/create-hash@1.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/createHash"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/create-hash@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/create-hash/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/create-hash/package.json"
              }
            ],
            "concludedValue": "node_modules/create-hash/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Calvin Metcalf"
        }
      ],
      "group": "",
      "name": "create-ecdh",
      "version": "4.0.4",
      "description": "createECDH but browserifiable",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/create-ecdh@4.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/createECDH"
        },
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/createECDH.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/create-ecdh@4.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/create-ecdh/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/create-ecdh/package.json"
              }
            ],
            "concludedValue": "node_modules/create-ecdh/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "core-util-is",
      "version": "1.0.3",
      "description": "The `util.is*` functions introduced in Node v0.12.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/core-util-is@1.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/core-util-is"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-util-is@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/core-util-is/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/core-util-is/package.json"
              }
            ],
            "concludedValue": "node_modules/core-util-is/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Thorsten Lorenz <thlorenz@gmx.de> (http://thlorenz.com)"
        }
      ],
      "group": "",
      "name": "convert-source-map",
      "version": "0.3.5",
      "description": "Converts a source-map from/to  different formats and allows adding/changing properties.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/convert-source-map@0.3.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/thlorenz/convert-source-map"
        },
        {
          "type": "vcs",
          "url": "git://github.com/thlorenz/convert-source-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/convert-source-map@0.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/convert-source-map/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/convert-source-map/package.json"
              }
            ],
            "concludedValue": "node_modules/convert-source-map/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Julian Gruber <julian@juliangruber.com> (http://juliangruber.com)"
        }
      ],
      "group": "",
      "name": "constants-browserify",
      "version": "0.0.1",
      "description": "node's constants module for the browser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/constants-browserify@0.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/juliangruber/constants-browserify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/juliangruber/constants-browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/constants-browserify@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/constants-browserify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/constants-browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/constants-browserify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Raynos <raynos2@gmail.com>"
        }
      ],
      "group": "",
      "name": "console-browserify",
      "version": "1.2.0",
      "description": "Emulate console for all the browsers",
      "scope": "optional",
      "purl": "pkg:npm/console-browserify@1.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/browserify/console-browserify"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/console-browserify@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/console-browserify/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/console-browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/console-browserify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Max Ogden <max@maxogden.com>"
        }
      ],
      "group": "",
      "name": "concat-stream",
      "version": "1.4.11",
      "description": "writable stream that concatenates strings or binary data and calls a callback with the result",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/concat-stream@1.4.11",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/maxogden/concat-stream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-stream@1.4.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/concat-stream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/concat-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/concat-stream/package.json"
          }
        ]
      },
      "tags": [
        "binary",
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "commondir",
      "version": "0.0.1",
      "description": "Compute the closest common parent for file paths",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "name": "MIT/X11",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/commondir@0.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/substack/node-commondir.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commondir@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/commondir/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/commondir/package.json"
              }
            ],
            "concludedValue": "node_modules/commondir/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca>"
        }
      ],
      "group": "",
      "name": "commander",
      "version": "2.3.0",
      "description": "the complete solution for node.js command-line programs",
      "scope": "optional",
      "purl": "pkg:npm/commander@2.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/visionmedia/commander.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/commander/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/commander/package.json"
              }
            ],
            "concludedValue": "node_modules/commander/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Thorsten Lorenz <thlorenz@gmx.de> (http://thlorenz.com)"
        }
      ],
      "group": "",
      "name": "combine-source-map",
      "version": "0.3.0",
      "description": "Add source maps of multiple files, offset them and then combine them into one source map",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/combine-source-map@0.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/thlorenz/combine-source-map"
        },
        {
          "type": "vcs",
          "url": "git://github.com/thlorenz/combine-source-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/combine-source-map@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/combine-source-map/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/combine-source-map/package.json"
              }
            ],
            "concludedValue": "node_modules/combine-source-map/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "DY <dfcreative@gmail.com>"
        }
      ],
      "group": "",
      "name": "color-name",
      "version": "1.1.3",
      "description": "A list of color names and its values",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/color-name@1.1.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/dfcreative/color-name"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-name@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/color-name/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/color-name/package.json"
              }
            ],
            "concludedValue": "node_modules/color-name/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Heather Arthur <fayearthur@gmail.com>"
        }
      ],
      "group": "",
      "name": "color-convert",
      "version": "1.9.3",
      "description": "Plain color conversion functions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/color-convert@1.9.3",
      "type": "library",
      "bom-ref": "pkg:npm/color-convert@1.9.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/color-convert/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/color-convert/package.json"
              }
            ],
            "concludedValue": "node_modules/color-convert/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ilya Radchenko <knownasilya@gmail.com>"
        }
      ],
      "group": "",
      "name": "cli-width",
      "version": "2.2.1",
      "description": "Get stdout window width, with two fallbacks, tty and then a default.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cli-width@2.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/knownasilya/cli-width"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cli-width@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/cli-width/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cli-width/package.json"
              }
            ],
            "concludedValue": "node_modules/cli-width/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "cli-cursor",
      "version": "2.1.0",
      "description": "Toggle the CLI cursor",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cli-cursor@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/cli-cursor@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/cli-cursor/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cli-cursor/package.json"
              }
            ],
            "concludedValue": "node_modules/cli-cursor/package.json"
          }
        ]
      },
      "tags": [
        "cli"
      ]
    },
    {
      "authors": [
        {
          "name": "Mariusz Nowak <medikoo+cli-color@medikoo.com> (http://www.medikoo.com/)"
        }
      ],
      "group": "",
      "name": "cli-color",
      "version": "0.1.7",
      "description": "Colors, formatting and other tools for the console",
      "scope": "optional",
      "purl": "pkg:npm/cli-color@0.1.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/medikoo/cli-color.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cli-color@0.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/cli-color/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cli-color/package.json"
              }
            ],
            "concludedValue": "node_modules/cli-color/package.json"
          }
        ]
      },
      "tags": [
        "tools"
      ]
    },
    {
      "authors": [
        {
          "name": "Calvin Metcalf <calvin.metcalf@gmail.com>"
        }
      ],
      "group": "",
      "name": "cipher-base",
      "version": "1.0.7",
      "description": "abstract base class for crypto-streams",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cipher-base@1.0.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/cipher-base#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/crypto-browserify/cipher-base.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cipher-base@1.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/cipher-base/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cipher-base/package.json"
              }
            ],
            "concludedValue": "node_modules/cipher-base/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Dmitry Shirokov <deadrunk@gmail.com>"
        }
      ],
      "group": "",
      "name": "chardet",
      "version": "0.7.0",
      "description": "Character detector",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/chardet@0.7.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/runk/node-chardet"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chardet@0.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/chardet/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/chardet/package.json"
              }
            ],
            "concludedValue": "node_modules/chardet/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "2.4.2",
      "description": "Terminal string styling done right",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/chalk@2.4.2",
      "type": "library",
      "bom-ref": "pkg:npm/chalk@2.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/chalk/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/chalk/package.json"
              }
            ],
            "concludedValue": "node_modules/chalk/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jake Luer <jake@alogicalparadox.com>"
        }
      ],
      "group": "",
      "name": "chai",
      "version": "1.10.0",
      "description": "BDD/TDD assertion library for node.js and the browser. Test framework agnostic.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/chai@1.10.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://chaijs.com"
        },
        {
          "type": "vcs",
          "url": "https://github.com/chaijs/chai"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/chai@1.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/chai/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/chai/package.json"
              }
            ],
            "concludedValue": "node_modules/chai/package.json"
          }
        ]
      },
      "tags": [
        "framework",
        "test"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (http://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "camelcase-keys",
      "version": "2.1.0",
      "description": "Convert object keys to camelCase",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/camelcase-keys@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/camelcase-keys@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/camelcase-keys/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/camelcase-keys/package.json"
              }
            ],
            "concludedValue": "node_modules/camelcase-keys/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (http://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "camelcase",
      "version": "2.1.1",
      "description": "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar → fooBar",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/camelcase@2.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/camelcase/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/camelcase/package.json"
              }
            ],
            "concludedValue": "node_modules/camelcase/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "callsites",
      "version": "3.1.0",
      "description": "Get callsites from the V8 stack trace API",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/callsites@3.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/callsites@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/callsites/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/callsites/package.json"
              }
            ],
            "concludedValue": "node_modules/callsites/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca>"
        }
      ],
      "group": "",
      "name": "callsite",
      "version": "1.0.0",
      "description": "access to v8's CallSites",
      "scope": "optional",
      "purl": "pkg:npm/callsite@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/callsite@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/callsite/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/callsite/package.json"
              }
            ],
            "concludedValue": "node_modules/callsite/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "call-bound",
      "version": "1.0.4",
      "description": "Robust call-bound JavaScript intrinsics, using `call-bind` and `get-intrinsic`.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/call-bound@1.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/call-bound#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/call-bound.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/call-bound@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/call-bound/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/call-bound/package.json"
              }
            ],
            "concludedValue": "node_modules/call-bound/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "call-bind-apply-helpers",
      "version": "1.0.2",
      "description": "Helper functions around Function call/apply/bind, for use in `call-bind`",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/call-bind-apply-helpers@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/call-bind-apply-helpers#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/call-bind-apply-helpers.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/call-bind-apply-helpers@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/call-bind-apply-helpers/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/call-bind-apply-helpers/package.json"
              }
            ],
            "concludedValue": "node_modules/call-bind-apply-helpers/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "call-bind",
      "version": "1.0.9",
      "description": "Robustly `.call.bind()` a function",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/call-bind@1.0.9",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/call-bind#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/call-bind.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/call-bind@1.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/call-bind/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/call-bind/package.json"
              }
            ],
            "concludedValue": "node_modules/call-bind/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "builtins",
      "version": "0.0.7",
      "description": "List of node.js builtin modules",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/builtins@0.0.7",
      "type": "library",
      "bom-ref": "pkg:npm/builtins@0.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/builtins/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/builtins/package.json"
              }
            ],
            "concludedValue": "node_modules/builtins/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Daniel Cousens"
        }
      ],
      "group": "",
      "name": "buffer-xor",
      "version": "1.0.3",
      "description": "A simple module for bitwise-xor on buffers",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/buffer-xor@1.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/buffer-xor"
        },
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/buffer-xor.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer-xor@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/buffer-xor/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/buffer-xor/package.json"
              }
            ],
            "concludedValue": "node_modules/buffer-xor/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Feross Aboukhadijeh <feross@feross.org> (http://feross.org)"
        }
      ],
      "group": "",
      "name": "buffer",
      "version": "3.6.2",
      "description": "Node.js Buffer API, for the browser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/buffer@3.6.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/feross/buffer"
        },
        {
          "type": "vcs",
          "url": "git://github.com/feross/buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer@3.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/buffer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/buffer/package.json"
              }
            ],
            "concludedValue": "node_modules/buffer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Devon Govett <devongovett@gmail.com>"
        }
      ],
      "group": "",
      "name": "browserify-zlib",
      "version": "0.1.4",
      "description": "Full zlib module for browserify",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserify-zlib@0.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/devongovett/browserify-zlib.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify-zlib@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/browserify-zlib/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browserify-zlib/package.json"
              }
            ],
            "concludedValue": "node_modules/browserify-zlib/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browserify-sign",
      "version": "4.2.6",
      "description": "adds node crypto signing for browsers",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserify-sign@4.2.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/browserify-sign.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify-sign@4.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/browserify-sign/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browserify-sign/package.json"
              }
            ],
            "concludedValue": "node_modules/browserify-sign/package.json"
          }
        ]
      },
      "tags": [
        "crypto"
      ]
    },
    {
      "group": "",
      "name": "browserify-rsa",
      "version": "4.1.1",
      "description": "RSA for browserify",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserify-rsa@4.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/browserify-rsa.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify-rsa@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/browserify-rsa/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browserify-rsa/package.json"
              }
            ],
            "concludedValue": "node_modules/browserify-rsa/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Calvin Metcalf <calvin.metcalf@gmail.com>"
        }
      ],
      "group": "",
      "name": "browserify-des",
      "version": "1.0.2",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserify-des@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/browserify-des#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/crypto-browserify/browserify-des.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify-des@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/browserify-des/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browserify-des/package.json"
              }
            ],
            "concludedValue": "node_modules/browserify-des/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Calvin Metcalf <calvin.metcalf@gmail.com>"
        }
      ],
      "group": "",
      "name": "browserify-cipher",
      "version": "1.0.1",
      "description": "ciphers for the browser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserify-cipher@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/browserify-cipher@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/browserify-cipher/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browserify-cipher/package.json"
              }
            ],
            "concludedValue": "node_modules/browserify-cipher/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browserify-aes",
      "version": "1.2.0",
      "description": "aes, for browserify",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserify-aes@1.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/browserify-aes"
        },
        {
          "type": "vcs",
          "url": "git://github.com/crypto-browserify/browserify-aes.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify-aes@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/browserify-aes/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browserify-aes/package.json"
              }
            ],
            "concludedValue": "node_modules/browserify-aes/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "browserify",
      "version": "7.1.0",
      "description": "browser-side require() the node way",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserify@7.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/substack/node-browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify@7.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/browserify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/browserify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Roman Shtylman <shtylman@gmail.com>"
        }
      ],
      "group": "",
      "name": "browser-resolve",
      "version": "1.11.3",
      "description": "resolve which handles browser field support in package.json",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browser-resolve@1.11.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/shtylman/node-browser-resolve.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browser-resolve@1.11.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/browser-resolve/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browser-resolve/package.json"
              }
            ],
            "concludedValue": "node_modules/browser-resolve/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "resolve",
      "version": "1.1.7",
      "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/resolve@1.1.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/substack/node-resolve.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve@1.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/browser-resolve/node_modules/resolve/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browser-resolve/node_modules/resolve/package.json"
              }
            ],
            "concludedValue": "node_modules/browser-resolve/node_modules/resolve/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep",
      "version": "1.2.3",
      "scope": "optional",
      "purl": "pkg:npm/deep@1.2.3",
      "type": "library",
      "bom-ref": "pkg:npm/deep@1.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/browser-resolve/node_modules/resolve/test/pathfilter/deep_ref/node_modules/deep/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browser-resolve/node_modules/resolve/test/pathfilter/deep_ref/node_modules/deep/package.json"
              }
            ],
            "concludedValue": "node_modules/browser-resolve/node_modules/resolve/test/pathfilter/deep_ref/node_modules/deep/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "browser-pack",
      "version": "3.2.0",
      "description": "pack node-style source files from a json stream into a browser bundle",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browser-pack@3.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/browser-pack"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/browser-pack.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browser-pack@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/browser-pack/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browser-pack/package.json"
              }
            ],
            "concludedValue": "node_modules/browser-pack/package.json"
          }
        ]
      },
      "tags": [
        "json",
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "Fedor Indutny <fedor@indutny.com>"
        }
      ],
      "group": "",
      "name": "brorand",
      "version": "1.1.0",
      "description": "Random number generator for browsers and node.js",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/brorand@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/indutny/brorand"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brorand@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/brorand/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/brorand/package.json"
              }
            ],
            "concludedValue": "node_modules/brorand/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)"
        }
      ],
      "group": "",
      "name": "brace-expansion",
      "version": "1.1.18",
      "description": "Brace expansion as known from sh/bash",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.18",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/juliangruber/brace-expansion"
        },
        {
          "type": "vcs",
          "url": "git://github.com/juliangruber/brace-expansion.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@1.1.18",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/brace-expansion/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/brace-expansion/package.json"
              }
            ],
            "concludedValue": "node_modules/brace-expansion/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Fedor Indutny <fedor@indutny.com>"
        }
      ],
      "group": "",
      "name": "bn.js",
      "version": "5.2.5",
      "description": "Big number implementation in pure javascript",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bn.js@5.2.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/indutny/bn.js"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bn.js@5.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/bn.js/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/bn.js/package.json"
              }
            ],
            "concludedValue": "node_modules/bn.js/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "T. Jameson Little <t.jameson.little@gmail.com>"
        }
      ],
      "group": "",
      "name": "base64-js",
      "version": "0.0.8",
      "description": "Base64 encoding/decoding in pure JS",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/base64-js@0.0.8",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/beatgammit/base64-js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/base64-js@0.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/base64-js/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/base64-js/package.json"
              }
            ],
            "concludedValue": "node_modules/base64-js/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)"
        }
      ],
      "group": "",
      "name": "balanced-match",
      "version": "1.0.2",
      "description": "Match balanced character pairs, like \"{\" and \"}\"",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/balanced-match@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/juliangruber/balanced-match"
        },
        {
          "type": "vcs",
          "url": "git://github.com/juliangruber/balanced-match.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/balanced-match@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/balanced-match/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/balanced-match/package.json"
              }
            ],
            "concludedValue": "node_modules/balanced-match/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Matt Zabriskie"
        }
      ],
      "group": "",
      "name": "axios",
      "version": "0.10.0",
      "description": "Promise based HTTP client for the browser and node.js",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/axios@0.10.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mzabriskie/axios"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mzabriskie/axios.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/axios@0.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/axios/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/axios/package.json"
              }
            ],
            "concludedValue": "node_modules/axios/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "available-typed-arrays",
      "version": "1.0.7",
      "description": "Returns an array of Typed Array names that are available in the current environment",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/available-typed-arrays@1.0.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/available-typed-arrays#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/available-typed-arrays.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/available-typed-arrays@1.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/available-typed-arrays/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/available-typed-arrays/package.json"
              }
            ],
            "concludedValue": "node_modules/available-typed-arrays/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Caolan McMahon"
        }
      ],
      "group": "",
      "name": "async",
      "version": "0.2.10",
      "description": "Higher-order functions and common patterns for asynchronous code",
      "scope": "optional",
      "purl": "pkg:npm/async@0.2.10",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/caolan/async.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@0.2.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/async/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/async/package.json"
              }
            ],
            "concludedValue": "node_modules/async/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "astw",
      "version": "2.2.0",
      "description": "walk the ast with references to parent nodes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/astw@2.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/astw"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/astw.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/astw@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/astw/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/astw/package.json"
              }
            ],
            "concludedValue": "node_modules/astw/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn",
      "version": "4.0.13",
      "description": "ECMAScript parser",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/acorn@4.0.13",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ternjs/acorn"
        },
        {
          "type": "vcs",
          "url": "https://github.com/ternjs/acorn.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn@4.0.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/astw/node_modules/acorn/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "acorn"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/astw/node_modules/acorn/package.json"
              }
            ],
            "concludedValue": "node_modules/astw/node_modules/acorn/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "espree.js",
            "line": 61
          },
          {
            "location": "lib/espree.js",
            "line": 4
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Kevin Mårtensson <kevinmartensson@gmail.com> (github.com/kevva)"
        }
      ],
      "group": "",
      "name": "astral-regex",
      "version": "1.0.0",
      "description": "Regular expression for matching astral symbols",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/astral-regex@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/astral-regex@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/astral-regex/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/astral-regex/package.json"
              }
            ],
            "concludedValue": "node_modules/astral-regex/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jake Luer <jake@qualiancy.com> (http://qualiancy.com)"
        }
      ],
      "group": "",
      "name": "assertion-error",
      "version": "1.0.0",
      "description": "Error constructor for test and validation frameworks that implements standardized AssertionError specification.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/assertion-error@1.0.0",
      "type": "framework",
      "bom-ref": "pkg:npm/assertion-error@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/assertion-error/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/assertion-error/package.json"
              }
            ],
            "concludedValue": "node_modules/assertion-error/package.json"
          }
        ]
      },
      "tags": [
        "framework",
        "test",
        "validation"
      ]
    },
    {
      "group": "",
      "name": "assert",
      "version": "1.1.2",
      "description": "commonjs assert - node.js api compatible",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/assert@1.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/defunctzombie/commonjs-assert"
        },
        {
          "type": "vcs",
          "url": "git://github.com/defunctzombie/commonjs-assert.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/assert@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/assert/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/assert/package.json"
              }
            ],
            "concludedValue": "node_modules/assert/package.json"
          }
        ]
      },
      "tags": [
        "api"
      ]
    },
    {
      "authors": [
        {
          "name": "Joyent (http://www.joyent.com)"
        }
      ],
      "group": "",
      "name": "util",
      "version": "0.10.3",
      "description": "Node.JS util module",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/util@0.10.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/defunctzombie/node-util"
        },
        {
          "type": "vcs",
          "url": "git://github.com/defunctzombie/node-util"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/util@0.10.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/assert/node_modules/util/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/assert/node_modules/util/package.json"
              }
            ],
            "concludedValue": "node_modules/assert/node_modules/util/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.1",
      "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/inherits@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/assert/node_modules/inherits/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/assert/node_modules/inherits/package.json"
              }
            ],
            "concludedValue": "node_modules/assert/node_modules/inherits/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Fedor Indutny"
        }
      ],
      "group": "",
      "name": "asn1.js",
      "version": "4.10.1",
      "description": "ASN.1 encoder and decoder",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/asn1.js@4.10.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/indutny/asn1.js"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asn1.js@4.10.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/asn1.js/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/asn1.js/package.json"
              }
            ],
            "concludedValue": "node_modules/asn1.js/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "array-find-index",
      "version": "1.0.2",
      "description": "ES2015 `Array#findIndex()` ponyfill",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/array-find-index@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/array-find-index@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/array-find-index/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/array-find-index/package.json"
              }
            ],
            "concludedValue": "node_modules/array-find-index/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "argparse",
      "version": "1.0.10",
      "description": "Very powerful CLI arguments parser. Native port of argparse - python's options parsing library",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/argparse@1.0.10",
      "type": "library",
      "bom-ref": "pkg:npm/argparse@1.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/argparse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/argparse/package.json"
              }
            ],
            "concludedValue": "node_modules/argparse/package.json"
          }
        ]
      },
      "tags": [
        "cli"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "ansi-styles",
      "version": "3.2.1",
      "description": "ANSI escape codes for styling strings in the terminal",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ansi-styles@3.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@3.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ansi-styles/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ansi-styles/package.json"
              }
            ],
            "concludedValue": "node_modules/ansi-styles/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "ansi-regex",
      "version": "3.0.1",
      "description": "Regular expression for matching ANSI escape codes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ansi-regex@3.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ansi-regex/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ansi-regex/package.json"
              }
            ],
            "concludedValue": "node_modules/ansi-regex/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "ansi-escapes",
      "version": "3.2.0",
      "description": "ANSI escape codes for manipulating the terminal",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ansi-escapes@3.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-escapes@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ansi-escapes/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ansi-escapes/package.json"
              }
            ],
            "concludedValue": "node_modules/ansi-escapes/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "James Burke <jrburke@gmail.com> (http://github.com/jrburke)"
        }
      ],
      "group": "",
      "name": "amdefine",
      "version": "1.0.1",
      "description": "Provide AMD's define() API for declaring modules in the AMD format",
      "scope": "optional",
      "licenses": [
        {
          "expression": "BSD-3-Clause OR MIT"
        }
      ],
      "purl": "pkg:npm/amdefine@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/jrburke/amdefine"
        },
        {
          "type": "vcs",
          "url": "https://github.com/jrburke/amdefine.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/amdefine@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/amdefine/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/amdefine/package.json"
              }
            ],
            "concludedValue": "node_modules/amdefine/package.json"
          }
        ]
      },
      "tags": [
        "api"
      ]
    },
    {
      "authors": [
        {
          "name": "Evgeny Poberezkin"
        }
      ],
      "group": "",
      "name": "ajv",
      "version": "6.15.0",
      "description": "Another JSON Schema Validator",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ajv@6.15.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ajv-validator/ajv"
        },
        {
          "type": "vcs",
          "url": "https://github.com/ajv-validator/ajv.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ajv@6.15.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ajv/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ajv/package.json"
              }
            ],
            "concludedValue": "node_modules/ajv/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "group": "",
      "name": "acorn-walk",
      "version": "7.2.0",
      "description": "ECMAScript (ESTree) AST walker",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/acorn-walk@7.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/acornjs/acorn"
        },
        {
          "type": "vcs",
          "url": "https://github.com/acornjs/acorn.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn-walk@7.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/acorn-walk/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/acorn-walk/package.json"
              }
            ],
            "concludedValue": "node_modules/acorn-walk/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Renée Kooi <renee@kooi.me>"
        }
      ],
      "group": "",
      "name": "acorn-node",
      "version": "1.8.2",
      "description": "the acorn javascript parser, preloaded with plugins for syntax parity with recent node versions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/acorn-node@1.8.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/browserify/acorn-node"
        },
        {
          "type": "vcs",
          "url": "https://github.com/browserify/acorn-node.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn-node@1.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/acorn-node/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/acorn-node/package.json"
              }
            ],
            "concludedValue": "node_modules/acorn-node/package.json"
          }
        ]
      },
      "tags": [
        "plugins"
      ]
    },
    {
      "group": "",
      "name": "acorn",
      "version": "7.4.1",
      "description": "ECMAScript parser",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/acorn@7.4.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/acornjs/acorn"
        },
        {
          "type": "vcs",
          "url": "https://github.com/acornjs/acorn.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn@7.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/acorn-node/node_modules/acorn/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "acorn"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/acorn-node/node_modules/acorn/package.json"
              }
            ],
            "concludedValue": "node_modules/acorn-node/node_modules/acorn/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "espree.js",
            "line": 61
          },
          {
            "location": "lib/espree.js",
            "line": 4
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn-jsx",
      "version": "5.3.2",
      "description": "Modern, fast React.js JSX parser",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/acorn-jsx@5.3.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/acornjs/acorn-jsx"
        },
        {
          "type": "vcs",
          "url": "https://github.com/acornjs/acorn-jsx"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn-jsx@5.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/acorn-jsx/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "acorn-jsx"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/acorn-jsx/package.json"
              }
            ],
            "concludedValue": "node_modules/acorn-jsx/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "espree.js",
            "line": 62
          },
          {
            "location": "lib/espree.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn",
      "version": "6.4.2",
      "description": "ECMAScript parser",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/acorn@6.4.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/acornjs/acorn"
        },
        {
          "type": "vcs",
          "url": "https://github.com/acornjs/acorn.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn@6.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/acorn/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "acorn"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/acorn/package.json"
              }
            ],
            "concludedValue": "node_modules/acorn/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "espree.js",
            "line": 61
          },
          {
            "location": "lib/espree.js",
            "line": 4
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Dominic Tarr <dominic.tarr@gmail.com> (http://bit.ly/dominictarr)"
        }
      ],
      "group": "",
      "name": "JSONStream",
      "version": "0.8.4",
      "description": "rawStream.pipe(JSONStream.parse()).pipe(streamOfObjects)",
      "scope": "optional",
      "purl": "pkg:npm/JSONStream@0.8.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/dominictarr/JSONStream"
        },
        {
          "type": "vcs",
          "url": "git://github.com/dominictarr/JSONStream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/JSONStream@0.8.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/JSONStream/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/JSONStream/package.json"
              }
            ],
            "concludedValue": "node_modules/JSONStream/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "David Chambers <dc@davidchambers.me>"
        }
      ],
      "group": "",
      "name": "Base64",
      "version": "0.2.1",
      "description": "Base64 encoding and decoding",
      "scope": "optional",
      "purl": "pkg:npm/Base64@0.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/davidchambers/Base64.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/Base64@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/Base64/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/Base64/package.json"
              }
            ],
            "concludedValue": "node_modules/Base64/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Justin Ridgewell <justin@ridgewell.name>"
        }
      ],
      "group": "@jridgewell",
      "name": "trace-mapping",
      "version": "0.3.31",
      "description": "Trace the original position through a source map",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.31",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/trace-mapping"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/jridgewell/sourcemaps.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/trace-mapping@0.3.31",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@jridgewell/trace-mapping/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@jridgewell/trace-mapping/package.json"
              }
            ],
            "concludedValue": "node_modules/@jridgewell/trace-mapping/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Justin Ridgewell <justin@ridgewell.name>"
        }
      ],
      "group": "@jridgewell",
      "name": "sourcemap-codec",
      "version": "1.5.5",
      "description": "Encode/decode sourcemap mappings",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.5.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/sourcemap-codec"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/jridgewell/sourcemaps.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/sourcemap-codec@1.5.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@jridgewell/sourcemap-codec/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@jridgewell/sourcemap-codec/package.json"
              }
            ],
            "concludedValue": "node_modules/@jridgewell/sourcemap-codec/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Justin Ridgewell <justin@ridgewell.name>"
        }
      ],
      "group": "@jridgewell",
      "name": "resolve-uri",
      "version": "3.1.2",
      "description": "Resolve a URI relative to an optional base URI",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/resolve-uri@3.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/resolve-uri@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@jridgewell/resolve-uri/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@jridgewell/resolve-uri/package.json"
              }
            ],
            "concludedValue": "node_modules/@jridgewell/resolve-uri/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Justin Ridgewell <justin@ridgewell.name>"
        }
      ],
      "group": "@jridgewell",
      "name": "gen-mapping",
      "version": "0.3.13",
      "description": "Generate source maps",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/gen-mapping@0.3.13",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/gen-mapping"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/jridgewell/sourcemaps.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/gen-mapping@0.3.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@jridgewell/gen-mapping/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@jridgewell/gen-mapping/package.json"
              }
            ],
            "concludedValue": "node_modules/@jridgewell/gen-mapping/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "types",
      "version": "7.29.8",
      "description": "Babel Types is a Lodash-esque utility library for AST nodes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/types@7.29.8",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-types"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/types@7.29.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@babel/types/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@babel/types/package.json"
              }
            ],
            "concludedValue": "node_modules/@babel/types/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "traverse",
      "version": "7.29.8",
      "description": "The Babel Traverse module maintains the overall tree state, and is responsible for replacing, removing, and adding nodes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/traverse@7.29.8",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-traverse"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/traverse@7.29.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@babel/traverse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@babel/traverse/package.json"
              }
            ],
            "concludedValue": "node_modules/@babel/traverse/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "template",
      "version": "7.29.7",
      "description": "Generate an AST from a string template.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/template@7.29.7",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-template"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/template@7.29.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@babel/template/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@babel/template/package.json"
              }
            ],
            "concludedValue": "node_modules/@babel/template/package.json"
          }
        ]
      },
      "tags": [
        "template"
      ]
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "parser",
      "version": "7.29.8",
      "description": "A JavaScript parser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/parser@7.29.8",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-parser"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/parser@7.29.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@babel/parser/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@babel/parser/package.json"
              }
            ],
            "concludedValue": "node_modules/@babel/parser/package.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "helper-validator-identifier",
      "version": "7.29.7",
      "description": "Validate identifier/keywords name",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-validator-identifier@7.29.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-validator-identifier@7.29.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@babel/helper-validator-identifier/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@babel/helper-validator-identifier/package.json"
              }
            ],
            "concludedValue": "node_modules/@babel/helper-validator-identifier/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "helper-string-parser",
      "version": "7.29.7",
      "description": "A utility package to parse strings",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-string-parser@7.29.7",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-helper-string-parser"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-string-parser@7.29.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@babel/helper-string-parser/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@babel/helper-string-parser/package.json"
              }
            ],
            "concludedValue": "node_modules/@babel/helper-string-parser/package.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "helper-globals",
      "version": "7.29.7",
      "description": "A collection of JavaScript globals for Babel internal usage",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-globals@7.29.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-globals@7.29.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@babel/helper-globals/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@babel/helper-globals/package.json"
              }
            ],
            "concludedValue": "node_modules/@babel/helper-globals/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "generator",
      "version": "7.29.8",
      "description": "Turns an AST into code.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/generator@7.29.8",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-generator"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/generator@7.29.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@babel/generator/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@babel/generator/package.json"
              }
            ],
            "concludedValue": "node_modules/@babel/generator/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "code-frame",
      "version": "7.29.7",
      "description": "Generate errors that contain a code frame that point to source locations.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/code-frame@7.29.7",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-code-frame"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/code-frame@7.29.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@babel/code-frame/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@babel/code-frame/package.json"
              }
            ],
            "concludedValue": "node_modules/@babel/code-frame/package.json"
          }
        ]
      }
    }
  ],
  "dependencies": [],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/espree@5.0.1"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-08-12T12:52:50Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Wednesday, August 12, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'espree' with version '5.0.1'. The package type in this SBOM is npm with 3 purl namespaces described under components. The components were identified from 618 source files."
    }
  ]
}