{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:ea077fe0-cc2c-4c23-9111-a6a4603c2930",
  "version": 1,
  "metadata": {
    "timestamp": "2026-08-12T12:58:55Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "flora-colossus",
      "group": "",
      "version": "3.0.2",
      "description": "Walks your node_modules tree",
      "purl": "pkg:npm/flora-colossus@3.0.2",
      "bom-ref": "pkg:npm/flora-colossus@3.0.2",
      "author": "Samuel Attard",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "build, prepare, pretest, test, test:watch, lint, lint:fix"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build, test:watch"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:risky_scripts",
          "value": "prepare"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "components": [
        {
          "group": "",
          "name": "xml-test",
          "version": "",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "url": "https://opensource.org/licenses/MIT",
                "properties": [
                  {
                    "name": "cdx:license:category",
                    "value": "Permissive"
                  },
                  {
                    "name": "cdx:license:foss",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:osiApproved",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:fsfLibre",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:deprecated",
                    "value": "false"
                  }
                ]
              }
            }
          ],
          "purl": "pkg:npm/xml-test",
          "type": "application",
          "bom-ref": "pkg:npm/xml-test",
          "properties": [
            {
              "name": "cdx:license:category",
              "value": "Permissive"
            }
          ]
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@ampproject\\n@babel\\n@bcoe\\n@esbuild\\n@isaacs\\n@istanbuljs\\n@jridgewell\\n@pkgjs\\n@rollup\\n@tsconfig\\n@types\\n@vitest"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "test/fixtures/xml2js/yarn.lock\\nyarn.lock"
      }
    ]
  },
  "components": [
    {
      "group": "@ampproject",
      "name": "remapping",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "df4899b403e0cfe2d3218a1e8afa98a3ce777f4da305849de6e1a71a9905574337c4eb7d68def77ab920600999538df1e157ea7272f15bd2a98374792c2e1863"
        }
      ],
      "purl": "pkg:npm/%40ampproject/remapping@2.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/@ampproject/remapping@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-string-parser",
      "version": "7.27.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a8c952c4a6e946502b89d0c4c64f769d2a1bc837693e28d4ab60d6ea80e752a77488e1b19908f2aa13088a123dfb3bf82cfc997518ded9c6af58f6c26d69b778"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-string-parser@7.27.1",
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-string-parser@7.27.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "@babel",
      "name": "helper-validator-identifier",
      "version": "7.27.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0f684ff5e03e4aac75901660cf1661d32d6dadbb94f89a03922130aa1437ea7a1d62a270c842213d274c35dee53a6ff88a8ef696e4cf587db461d6b4c4eb94a3"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-validator-identifier@7.27.1",
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-validator-identifier@7.27.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "parser",
      "version": "7.28.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d5646bcec4eb8d4acb90b8b453875de7534028805970df6c3f313f8b57a0f7b0fe5675b5bad44efb46791b68ed9d52f98f018ac10c95c69f98064bab47e23f2"
        }
      ],
      "purl": "pkg:npm/%40babel/parser@7.28.0",
      "type": "library",
      "bom-ref": "pkg:npm/@babel/parser@7.28.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "@babel",
      "name": "types",
      "version": "7.28.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c742ef1537a48125fef374c8dbc63dc183d47f3ae7976693e7ee502e73babfb992258b4411ebee0d1374174b921d19351b5216642e37a34d18d310c3ae90463d"
        }
      ],
      "purl": "pkg:npm/%40babel/types@7.28.1",
      "type": "library",
      "bom-ref": "pkg:npm/@babel/types@7.28.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@bcoe",
      "name": "v8-coverage",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eb300193f10203f418482435346895c306d07ab50267e4d06e9eb843702099f36fbab1c7d23f13b576b5a9b4a15c0eaaaa4a408f85795bca4fea62ded6670ca8"
        }
      ],
      "purl": "pkg:npm/%40bcoe/v8-coverage@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/@bcoe/v8-coverage@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "aix-ppc64",
      "version": "0.25.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4a16ccff75f1c2ec63162b9504703e7778f977269cd1a11556ad6896e2037fbd61530d1a445e7d755fde7d4b08c059d1ea6f0934cd858d93b399a67cc86eb593"
        }
      ],
      "purl": "pkg:npm/%40esbuild/aix-ppc64@0.25.6",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/aix-ppc64@0.25.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "android-arm64",
      "version": "0.25.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "85de737546abb0aeacb6b5bedd6c62e6a5b0b3eac984209b3220bd419cb3a317e4e6e1d1204f13dbcee0890c7356912f0b0b89f508e0e9b12371125c81f2eaa0"
        }
      ],
      "purl": "pkg:npm/%40esbuild/android-arm64@0.25.6",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/android-arm64@0.25.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "android-arm",
      "version": "0.25.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4bc4e810e55f83ef8053f6c7c1d92c1cd9f22f254cf9e31500e7fac912858ad9f09dbc303cda8aaf7b2bcc545eee7cd5ebd45029be4381c8485f9a6ddcbe77c6"
        }
      ],
      "purl": "pkg:npm/%40esbuild/android-arm@0.25.6",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/android-arm@0.25.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "android-x64",
      "version": "0.25.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d19ecaa474abdd50483bd03fd70713dcd4f2ec4078a0d0b8ba9279c9edd1eed68273619475eca748b02b9e89f91bcb1c3f0694f3ae9ddc7e010ab139c4b5b6e4"
        }
      ],
      "purl": "pkg:npm/%40esbuild/android-x64@0.25.6",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/android-x64@0.25.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "darwin-arm64",
      "version": "0.25.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1450acb33dd705abe3c5c1712ac1b2d8360ae554af26a6bacb91d79632b385167cecbbc48b5ddbacfadfff077297f05ba5b30a24d3abd527748ed5b819ed6900"
        }
      ],
      "purl": "pkg:npm/%40esbuild/darwin-arm64@0.25.6",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/darwin-arm64@0.25.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "darwin-x64",
      "version": "0.25.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "19f5ece64af2fd3906336bcaa8ada8ca22c5ca0251a8a5616b0bb7f8338293b3b12f2ffa8d89165e1947c0ea136f45aa1a7586012eeca28c5b668c32fa92bd62"
        }
      ],
      "purl": "pkg:npm/%40esbuild/darwin-x64@0.25.6",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/darwin-x64@0.25.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "freebsd-arm64",
      "version": "0.25.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6a82c5d9cdcebc39f65c34d1be7f2137a0d1cd55690e58f607f17ae9c95677f1472e21da1b7695663c505f60d8a61039cbf7af6dd1af0ba52cd77b6fcade295a"
        }
      ],
      "purl": "pkg:npm/%40esbuild/freebsd-arm64@0.25.6",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/freebsd-arm64@0.25.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "freebsd-x64",
      "version": "0.25.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d9292a4e34d2a367588bf8f315b53d3e5b75be4d3e9cd83c602f2b3975de6be880de17cd25679b2983ecdf19ce51ff7e65684a01ac6740d51fd97f4b3a97a231"
        }
      ],
      "purl": "pkg:npm/%40esbuild/freebsd-x64@0.25.6",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/freebsd-x64@0.25.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-arm64",
      "version": "0.25.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6fdebb854d20a8a77d0ebb21fd4b809b6d4a869a21ea63c14a0cfc98a46ae0fe6654af1ba40fa14339a6fd9c065542d2341cca7593d00514f7f96b956af716b1"
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-arm64@0.25.6",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-arm64@0.25.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-arm",
      "version": "0.25.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4991d0973beabf80eee4faca1367da374aa56ec696ff74107d451ceb23b612315c03cdf19f09bdd546c4115c7802967d679a06f01c73e2a3c4f87170b5571fcb"
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-arm@0.25.6",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-arm@0.25.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-ia32",
      "version": "0.25.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "68759d43600096d4642cf3ac29d8b7c6fd2667c7d418f7652848c8121c423e6e722844e17148c7a5607589d37be257d71a76794942d04a0b6be50a2ce41d1b3f"
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-ia32@0.25.6",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-ia32@0.25.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-loong64",
      "version": "0.25.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "560282b0775745243b135f905c67513e543f7b4f1b37a58c41bdbbfd331f57ebcf8e34c89ae4fd3e62d7ba94650bdd12d4978d356e65ce40043bf31c29e276ca"
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-loong64@0.25.6",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-loong64@0.25.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-mips64el",
      "version": "0.25.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "59588d9698af44a4fdfe9cb79029a41e79f8e069065d57577dd73876b366465d79cd5436f83dae1707651a1e88b8ae40027193a36a8f0750e3a698feb7bf2bcf"
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-mips64el@0.25.6",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-mips64el@0.25.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-ppc64",
      "version": "0.25.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c3260a67d35376600c6f9ef7d08dfc941a95bba70a97865f61722cdf505a7fc6a83ad078c521a2dd31e60d8b7805314793bfc47158b190e576b997f053743627"
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-ppc64@0.25.6",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-ppc64@0.25.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-riscv64",
      "version": "0.25.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "29987b6c018672b8a7123e2ace2949e21a936370e0d94f3673c6eff9ed71a8da990ab0b273e4cbf405049f9586283ce6dc27c2e5138313fa9cf7a39c6c87b7df"
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-riscv64@0.25.6",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-riscv64@0.25.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-s390x",
      "version": "0.25.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f4dd4bb13c00b84f688fa947332c8033eb9cc468959c4a94769e2fec868c9abc1bd3a653115088b37a0f3e9955b278cf7f28e6c701f11cc17c6fabf35150141b"
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-s390x@0.25.6",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-s390x@0.25.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-x64",
      "version": "0.25.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "03a6c9078d5be2528559128dad6a0fd8b1ec8d5ccd89abab7fbc328ff5ed14d4ec9cfbb1c040561cbb72f9913475604ab922b57ef2a0aca68d8c14bba9b14a8a"
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-x64@0.25.6",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-x64@0.25.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "netbsd-arm64",
      "version": "0.25.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "22303e0dcc285698c4bf2c5975d0ea058fae2764a773a76e2e98e69179bfbf8c6e4b71fedc590b6650e6f59b006c5f6bb1f3f7cde034fc0acd0ce45982bc51fd"
        }
      ],
      "purl": "pkg:npm/%40esbuild/netbsd-arm64@0.25.6",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/netbsd-arm64@0.25.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "netbsd-x64",
      "version": "0.25.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7545ee66be567a720394c1dd324bc3735140bb8c5d5a2c5309180fed140b04e9241a0c2ebb368649870ea56e23171ce9ccbd5e8dbf3217adb453102a9c1ad1f6"
        }
      ],
      "purl": "pkg:npm/%40esbuild/netbsd-x64@0.25.6",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/netbsd-x64@0.25.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "openbsd-arm64",
      "version": "0.25.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "97c642bd73f4b5b4c9de26aa74d7f7a6368e49de5ec7f7bafe898b21009504b9874e57d75b7cc0c50e1f9c398f2ce075c7dc6b7128bfc6d096170099448684c2"
        }
      ],
      "purl": "pkg:npm/%40esbuild/openbsd-arm64@0.25.6",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/openbsd-arm64@0.25.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "openbsd-x64",
      "version": "0.25.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "84aae60dad1a3853abef5290ff5f490bb6b3d4fd065ad08dd6dd9a85801fe0ed34ec31d9b7f756f329b9f8251d26143faa46662351c017c2a425b105b422fb83"
        }
      ],
      "purl": "pkg:npm/%40esbuild/openbsd-x64@0.25.6",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/openbsd-x64@0.25.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "openharmony-arm64",
      "version": "0.25.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f92a817005a80757d82a6a56a103f8a46b71fa95140bffd135884575b712035ebad7b71c86eaf2ba13824693ec8c26e52ae9007245ac57e690dd4293fd130f70"
        }
      ],
      "purl": "pkg:npm/%40esbuild/openharmony-arm64@0.25.6",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/openharmony-arm64@0.25.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "sunos-x64",
      "version": "0.25.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "772086c6fd7f06becc8920b8daa8a718bf0a906e245f4a44b1d6f4f932a19896600940c11a6ca8d7f02b0a334688e2e220081d6d68265a089be07a028b9b7b90"
        }
      ],
      "purl": "pkg:npm/%40esbuild/sunos-x64@0.25.6",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/sunos-x64@0.25.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "win32-arm64",
      "version": "0.25.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e3640e81c65e64ebd77ec081245e407f0ef7b78bde38877ffd70f78beffd812921495e8693754f9569dc72d23e25c3b2111bfce45528ed1c6ec46cbecfc038dd"
        }
      ],
      "purl": "pkg:npm/%40esbuild/win32-arm64@0.25.6",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/win32-arm64@0.25.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "win32-ia32",
      "version": "0.25.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e005a1817983b9837bac923a39107eb94f431cbabf7ab05bb8ca00b81e155894eee4ab4281c2983f29c5d1823556404db847e33652eb16bf4a64f273aed2e4ad"
        }
      ],
      "purl": "pkg:npm/%40esbuild/win32-ia32@0.25.6",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/win32-ia32@0.25.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "win32-x64",
      "version": "0.25.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "36024f1c76c4a4b4200c7d8c8d0bbdd29cd6ff9bef5c867b28e9cfc8d066f7603a5a067fedbe9f2725018e8ba62ea78e4101aa636423431468f7b6a1e128f470"
        }
      ],
      "purl": "pkg:npm/%40esbuild/win32-x64@0.25.6",
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/win32-x64@0.25.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@isaacs",
      "name": "cliui",
      "version": "8.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3bc8dc8da6d76a578e1bd0d0d3e0115d66414df9cfe16340ab3ba224aee5978e009b118abff2763384cf8f18d8df39c109fbc15c5cee726d6dc1dc85c9b16a10"
        }
      ],
      "purl": "pkg:npm/%40isaacs/cliui@8.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/@isaacs/cliui@8.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@istanbuljs",
      "name": "schema",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "657458e2336f56049543c0cbdcb4dc6a4680b57c13554c44f3586c96cc83d80b685d6ff05686f5d0790e2755ffa4095c23b0fed98a192a0e5da3c1bfc3a45880"
        }
      ],
      "purl": "pkg:npm/%40istanbuljs/schema@0.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/@istanbuljs/schema@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "gen-mapping",
      "version": "0.3.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3ae2c60b8e938c1e416cdd5d1fc2542d555963859376417bb55f58b3ac0b2f5aee6d99c232cb4e84d1ee794e5b2c2ae746e0e128f0cce20eacc3805e9791b3aa"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/gen-mapping@0.3.12",
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/gen-mapping@0.3.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "resolve-uri",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6d12128022233f6d3fb5b5923d63048b9e1054f45913192e0fd9492fe508c542adc15240f305b54eb6f58ccb354455e8d42053359ff98690bd42f98a59da292b"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/resolve-uri@3.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/resolve-uri@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "sourcemap-codec",
      "version": "1.5.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "553dbe1b5550b3ff68cf4efc6cbad86de71d64ab3dd76cd09647a5629b9ff925c5f90bd90d82656f1fcb4b1fa679203074316717c1555d6f760158e39159a017"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.5.4",
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/sourcemap-codec@1.5.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "trace-mapping",
      "version": "0.3.29",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bb0ea0ba25bf81c0063c384b99defbffa956f102de895e51513b005f8e836faa0b8466958f89619cfc1bd7ce2cd5b91cf2475583ffa1f7cf1dae8f06443a6661"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.29",
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/trace-mapping@0.3.29",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@pkgjs",
      "name": "parseargs",
      "version": "0.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fb55648dd0f44012cfa1d1ab2547aa6ab1fc54022f40e0c86f087d5e93f94b28ac7fb628420b0928f345a2aa8b425bbe550fed552b21311ea5a0f327f14f9d3e"
        }
      ],
      "purl": "pkg:npm/%40pkgjs/parseargs@0.11.0",
      "type": "library",
      "bom-ref": "pkg:npm/@pkgjs/parseargs@0.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@rollup",
      "name": "rollup-android-arm-eabi",
      "version": "4.45.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "da8fc580009b8e2e2d5b57735cea80575e44bbb0dd81b2ac17640a7317c6e316e1e62c14ef2af94513f9fd4fb46ac42589262fe4ce28ec17af94622848bd0b5e"
        }
      ],
      "purl": "pkg:npm/%40rollup/rollup-android-arm-eabi@4.45.0",
      "type": "library",
      "bom-ref": "pkg:npm/@rollup/rollup-android-arm-eabi@4.45.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@rollup",
      "name": "rollup-android-arm64",
      "version": "4.45.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3d26744af30e8c4031c19793c77d9e23f8f9c5262d0c24711aee64f73bf3a18efbc5436cb1933e595e876012d13a96390a45ec6d08efcf8d1f05bed63f00eab5"
        }
      ],
      "purl": "pkg:npm/%40rollup/rollup-android-arm64@4.45.0",
      "type": "library",
      "bom-ref": "pkg:npm/@rollup/rollup-android-arm64@4.45.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@rollup",
      "name": "rollup-darwin-arm64",
      "version": "4.45.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "040e323c83ecb0f076691016ce6ab3437cb6fcaa2d90bc99ba4541ee3de9b0afd4de754975c7a8eaaafda4b336c4dea244fff029fc446ce6f5cab9591fab1866"
        }
      ],
      "purl": "pkg:npm/%40rollup/rollup-darwin-arm64@4.45.0",
      "type": "library",
      "bom-ref": "pkg:npm/@rollup/rollup-darwin-arm64@4.45.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@rollup",
      "name": "rollup-darwin-x64",
      "version": "4.45.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3ebda8d25bd3c2c886e070abe37672f715eb1eca7232fb2f130e05c0a62a8658b816e2c4e458dc673b90e1c7cf7b4894142bd2406ea5002234c63ef814364a44"
        }
      ],
      "purl": "pkg:npm/%40rollup/rollup-darwin-x64@4.45.0",
      "type": "library",
      "bom-ref": "pkg:npm/@rollup/rollup-darwin-x64@4.45.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@rollup",
      "name": "rollup-freebsd-arm64",
      "version": "4.45.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "95813c2e41398786bffba5679cb88bd78cd630f9f1eb035b0c6db719c605a515b557d858587030f65059e99508ace6a82bb365885d6c7706068959b3894178bc"
        }
      ],
      "purl": "pkg:npm/%40rollup/rollup-freebsd-arm64@4.45.0",
      "type": "library",
      "bom-ref": "pkg:npm/@rollup/rollup-freebsd-arm64@4.45.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@rollup",
      "name": "rollup-freebsd-x64",
      "version": "4.45.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3d541664af6c6f3a6fa82f50d0695e84d35254747ee26efec044feec58129ca1b7722e6700c8069abf661815f302e1394af82e08a27a9872fabead49689fe0bf"
        }
      ],
      "purl": "pkg:npm/%40rollup/rollup-freebsd-x64@4.45.0",
      "type": "library",
      "bom-ref": "pkg:npm/@rollup/rollup-freebsd-x64@4.45.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@rollup",
      "name": "rollup-linux-arm-gnueabihf",
      "version": "4.45.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "84bae6465e77a6b09c0fe6174df36f5ddefbe874f1361f303c032596eb10f9a99c426b60a375798bf9e484f37a15a916f9054ba1452bd80b1bb4844f154df120"
        }
      ],
      "purl": "pkg:npm/%40rollup/rollup-linux-arm-gnueabihf@4.45.0",
      "type": "library",
      "bom-ref": "pkg:npm/@rollup/rollup-linux-arm-gnueabihf@4.45.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@rollup",
      "name": "rollup-linux-arm-musleabihf",
      "version": "4.45.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5c128649872b91d89146397ef17beb511dc0a2c5d4d0dbc5ed5baa32c9bbb399d1cbe9ede7c64c075f49769d5176a7b02dc6989e993ccde56cff83252d9109c7"
        }
      ],
      "purl": "pkg:npm/%40rollup/rollup-linux-arm-musleabihf@4.45.0",
      "type": "library",
      "bom-ref": "pkg:npm/@rollup/rollup-linux-arm-musleabihf@4.45.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@rollup",
      "name": "rollup-linux-arm64-gnu",
      "version": "4.45.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7d1bd964f522073ecdced044ff6427092e40b6a2d585799438f8fd20795f1845e46a980899fe16f7e15290bf1c5aaa008e8cf2533a85992738ce1da8a1a785ea"
        }
      ],
      "purl": "pkg:npm/%40rollup/rollup-linux-arm64-gnu@4.45.0",
      "type": "library",
      "bom-ref": "pkg:npm/@rollup/rollup-linux-arm64-gnu@4.45.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@rollup",
      "name": "rollup-linux-arm64-musl",
      "version": "4.45.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "06dbf659164e7141a2f1753cd17c08bf34e0e14ebe97a0f457ab194eb671db5e27af0c70e67022f21cac6978ff99cb720a55a07accaec5b78bca508135aba29a"
        }
      ],
      "purl": "pkg:npm/%40rollup/rollup-linux-arm64-musl@4.45.0",
      "type": "library",
      "bom-ref": "pkg:npm/@rollup/rollup-linux-arm64-musl@4.45.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@rollup",
      "name": "rollup-linux-loongarch64-gnu",
      "version": "4.45.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2e2d1e98d9f0b5465d2f01e340f0719f8556ced72bc3f87b9a02f21e2108e59d0c8697851a5cda8811e948d54e301ff1b9c8d74d370ef9d86fe3af438ebd7a28"
        }
      ],
      "purl": "pkg:npm/%40rollup/rollup-linux-loongarch64-gnu@4.45.0",
      "type": "library",
      "bom-ref": "pkg:npm/@rollup/rollup-linux-loongarch64-gnu@4.45.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@rollup",
      "name": "rollup-linux-powerpc64le-gnu",
      "version": "4.45.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b01f3ea5f918c7692fa4309f77addde527184f4173d4b3ba8c86f6ccb66f98af686f60fc0de56aae60431348832bc2a50559ac4cdceb8ebdc6d715787946614b"
        }
      ],
      "purl": "pkg:npm/%40rollup/rollup-linux-powerpc64le-gnu@4.45.0",
      "type": "library",
      "bom-ref": "pkg:npm/@rollup/rollup-linux-powerpc64le-gnu@4.45.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@rollup",
      "name": "rollup-linux-riscv64-gnu",
      "version": "4.45.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e4643a3c5861ec4ea3426ef4a75696d391b671aa79ccc3af3b4b1ee4931e707780763e598561076c9e2188aa5f8b59e79c47536ae0d7c4f81769efe6aa3a30f7"
        }
      ],
      "purl": "pkg:npm/%40rollup/rollup-linux-riscv64-gnu@4.45.0",
      "type": "library",
      "bom-ref": "pkg:npm/@rollup/rollup-linux-riscv64-gnu@4.45.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@rollup",
      "name": "rollup-linux-riscv64-musl",
      "version": "4.45.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "37f7ae2ec05dd6b7a459cb9db9a913a3f749c3a53ab013f7794abe45733d44d7cfb964ef1b6c3f58e6c3908bc9d8a0a1cbaa316663920b4f0093638903452200"
        }
      ],
      "purl": "pkg:npm/%40rollup/rollup-linux-riscv64-musl@4.45.0",
      "type": "library",
      "bom-ref": "pkg:npm/@rollup/rollup-linux-riscv64-musl@4.45.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@rollup",
      "name": "rollup-linux-s390x-gnu",
      "version": "4.45.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "da5f6c03b77b41d8a42f4c50c0d30edf15110543445b21d51df02c1ec51dabe13fa602d351c084fa08a1e4f09d9b21e67d30de5d459586a2f4599ce0d27b9ade"
        }
      ],
      "purl": "pkg:npm/%40rollup/rollup-linux-s390x-gnu@4.45.0",
      "type": "library",
      "bom-ref": "pkg:npm/@rollup/rollup-linux-s390x-gnu@4.45.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@rollup",
      "name": "rollup-linux-x64-gnu",
      "version": "4.45.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5d9743ddf10441cc06d8aac90dd110bbb36b1e89cfc71695d3fc361e9bc834175ca9e6f3d5a2fed2f33658526ae037a20154fa17949441ab3ae47639243aa83f"
        }
      ],
      "purl": "pkg:npm/%40rollup/rollup-linux-x64-gnu@4.45.0",
      "type": "library",
      "bom-ref": "pkg:npm/@rollup/rollup-linux-x64-gnu@4.45.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@rollup",
      "name": "rollup-linux-x64-musl",
      "version": "4.45.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "edac9f82fb6699680a5819021a0e7ec53434af9575a30566ebbcd3aec118d74d3c2f9ae8ee60b2198391a26011b7f3aab81f4a63b2e9c550597acfa84a788001"
        }
      ],
      "purl": "pkg:npm/%40rollup/rollup-linux-x64-musl@4.45.0",
      "type": "library",
      "bom-ref": "pkg:npm/@rollup/rollup-linux-x64-musl@4.45.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@rollup",
      "name": "rollup-win32-arm64-msvc",
      "version": "4.45.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "07e20981c0671366e6f778c45b99078acaaf3c84ece1d74b39138070e73f762060ac4890249e907236f2ef9ac54a61f978c1aba89af252024386b7e3f78d9aa5"
        }
      ],
      "purl": "pkg:npm/%40rollup/rollup-win32-arm64-msvc@4.45.0",
      "type": "library",
      "bom-ref": "pkg:npm/@rollup/rollup-win32-arm64-msvc@4.45.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@rollup",
      "name": "rollup-win32-ia32-msvc",
      "version": "4.45.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f825f0c06eba834fc5a563a73ffbf51e7ac65523b280afe8b146eedf03d1cbc1025e3a182a3440c9fc58a4340e7e0842e6a3c960b3c7d283783023a3c2074cba"
        }
      ],
      "purl": "pkg:npm/%40rollup/rollup-win32-ia32-msvc@4.45.0",
      "type": "library",
      "bom-ref": "pkg:npm/@rollup/rollup-win32-ia32-msvc@4.45.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@rollup",
      "name": "rollup-win32-x64-msvc",
      "version": "4.45.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4917f5732b46ef0a9c1d52eb05cf55b4f2b8a54e70c6207f94d2243665b6029297220f91a6ac077ec6842be7bb787e00d41a48e815ff681597c59088ac9837b8"
        }
      ],
      "purl": "pkg:npm/%40rollup/rollup-win32-x64-msvc@4.45.0",
      "type": "library",
      "bom-ref": "pkg:npm/@rollup/rollup-win32-x64-msvc@4.45.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@tsconfig",
      "name": "node22",
      "version": "22.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2a6c23e2ef2c0d10eb31846837d14311c5c3f14a4149a3d0436e06cfe19a9aa7e6ef1c67f86051ee07bf67ba4af0e5cd1b25336d2c098fe4c7e81f834bf7a9c8"
        }
      ],
      "purl": "pkg:npm/%40tsconfig/node22@22.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/@tsconfig/node22@22.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "chai",
      "version": "5.2.2",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f24077d11ec7c2a7f8d093e22a1573a1d26cd90735649e73b93deecf0e47abf7613429771b797cde37e9748d5edb404fdf8f3e7d5ed520bffe17169792a0665a"
        }
      ],
      "purl": "pkg:npm/%40types/chai@5.2.2",
      "type": "library",
      "bom-ref": "pkg:npm/@types/chai@5.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "@types",
      "name": "debug",
      "version": "4.1.12",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bc80a159d546dcb1b548cc44bc8fc02be15626d865aea953bbb7dbae5cb04e491a38dc24fd40066942d74657fcbe4cc504b566d3390c742aae84be5a3a38573d"
        }
      ],
      "purl": "pkg:npm/%40types/debug@4.1.12",
      "type": "library",
      "bom-ref": "pkg:npm/@types/debug@4.1.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "deep-eql",
      "version": "4.0.2",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "73d87d75554c8a030f7386f04ef0b9771aada8967040f78fb168cf96948e9e88dba2bea91aa764e78d657c0ec0a8542be6907505176ad23b98f5d6fcd41c3217"
        }
      ],
      "purl": "pkg:npm/%40types/deep-eql@4.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/@types/deep-eql@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "estree",
      "version": "1.0.8",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7561f31dad96a845c8fced44f4e8eba1c313289976992ac4a258752289abbfa53e26e3706875ec5f1f5b2eee601bb05458520dd2c90840943f2f5ac87b1e17eb"
        }
      ],
      "purl": "pkg:npm/%40types/estree@1.0.8",
      "type": "library",
      "bom-ref": "pkg:npm/@types/estree@1.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "ms",
      "version": "0.7.31",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8a25202b357d02e684919aa438b0c8be54222fa96db9977db46716de0c299d7f096ee8ae8459441a69855c45e4379d02beaeceb3cf08636bf47640ea5d859580"
        }
      ],
      "purl": "pkg:npm/%40types/ms@0.7.31",
      "type": "library",
      "bom-ref": "pkg:npm/@types/ms@0.7.31",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "node",
      "version": "22.16.3",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b2be17cfbe0a39479869d7b1a35afc8a6851b6555772cfa3dd72b74dca22624ec1d6ddd8455260b5a0f77305fbdcd61bef5a6656e30b351849f5729da0307be2"
        }
      ],
      "purl": "pkg:npm/%40types/node@22.16.3",
      "type": "library",
      "bom-ref": "pkg:npm/@types/node@22.16.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@vitest",
      "name": "coverage-v8",
      "version": "3.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "13217d49753a912e4abbf53cd84db9f564a7be0e9cf0a4e3a6952772e35d9b9407a5ed7b9b04441e78c3ce8cc2f31f4c674c5f05415268b911bf84cc03be402d"
        }
      ],
      "purl": "pkg:npm/%40vitest/coverage-v8@3.2.4",
      "type": "library",
      "bom-ref": "pkg:npm/@vitest/coverage-v8@3.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@vitest",
      "name": "expect",
      "version": "3.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "228d32c8e46707ab2290596df105b92bbb256383a3a8d5fd8e6250d3640375af25c8ce81e68360556a12a0a3da73cfe4827094cee1d02ab48bb6efee3aaaab8a"
        }
      ],
      "purl": "pkg:npm/%40vitest/expect@3.2.4",
      "type": "library",
      "bom-ref": "pkg:npm/@vitest/expect@3.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "@vitest",
      "name": "mocker",
      "version": "3.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e3aaf24c4f5164efeb7c377ba44a8597b7adbb2cde93312151b4d6dc1be678efc170230482ae7d04a85e9377570d68008f8a0c2ba3998bebd1af5c0f5baaa311"
        }
      ],
      "purl": "pkg:npm/%40vitest/mocker@3.2.4",
      "type": "library",
      "bom-ref": "pkg:npm/@vitest/mocker@3.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@vitest",
      "name": "pretty-format",
      "version": "3.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2153598a4f085512514ebf5fc658ad30a78979714514dd09681f4f1cf190f0d2906c6a5f8e54f1f733b845e7cdf20a7b7aa8cdcbc9f22b7359981cce3de231b4"
        }
      ],
      "purl": "pkg:npm/%40vitest/pretty-format@3.2.4",
      "type": "library",
      "bom-ref": "pkg:npm/@vitest/pretty-format@3.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@vitest",
      "name": "runner",
      "version": "3.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a2e91f293f4c938d4bade116d3dbede397fcc31ec3a2b76859464c61d63f732024ef0e535a44d108d65817bb17ee7db007b8f218097be0ec60c213e029aa8331"
        }
      ],
      "purl": "pkg:npm/%40vitest/runner@3.2.4",
      "type": "library",
      "bom-ref": "pkg:npm/@vitest/runner@3.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@vitest",
      "name": "snapshot",
      "version": "3.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "74462d4bba903f60a3536ed0042e6850ec4b13fbf978b906a8f13464a1080c632ce2f2967bb22380b39e6ae1ec4740f962ebb270644ee684915e7c27980efc7d"
        }
      ],
      "purl": "pkg:npm/%40vitest/snapshot@3.2.4",
      "type": "library",
      "bom-ref": "pkg:npm/@vitest/snapshot@3.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@vitest",
      "name": "spy",
      "version": "3.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bc07dab0239ee8020aef488fe540f5d40738b22354349f62ffd3d9dcd2b1d3bb06eac53179a8352d674dacc59e28a6012e5cee2be1a7eb961de67c8be9db3e9f"
        }
      ],
      "purl": "pkg:npm/%40vitest/spy@3.2.4",
      "type": "library",
      "bom-ref": "pkg:npm/@vitest/spy@3.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@vitest",
      "name": "utils",
      "version": "3.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7c1d95d0916b41232c0a8f47892ab7133a5dbf8898697446d52c7c79d5f7330c5fc8d9fcde62a21b339c1fe164c6de0c1f1af7cb8d9f422d68780227aa05f640"
        }
      ],
      "purl": "pkg:npm/%40vitest/utils@3.2.4",
      "type": "library",
      "bom-ref": "pkg:npm/@vitest/utils@3.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-regex",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aae2505e54d25062f62c7f52517a3c570b18e2ca1a9e1828e8b3529bce04d4b05c13cb373b4c29762473c91f73fd9649325316bf7eea38e6fda5d26531410a15"
        }
      ],
      "purl": "pkg:npm/ansi-regex@5.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-regex",
      "version": "6.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ec7497e1041be02b297222e9545c3245eefd3b7c6c2190c32c4476d6411143bd6868fa1d17c8cbef6e408093050186e8a08aa8949a112ee33cd52a5e524a64bc"
        }
      ],
      "purl": "pkg:npm/ansi-regex@6.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@6.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "4.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cdb07dac22404f5adb8e25436f686a2851cd60bc60b64f0d511c59dc86700f717a36dc5b5d94029e74a2d4b931f880e885d3e5169db6db05402c885e64941212"
        }
      ],
      "purl": "pkg:npm/ansi-styles@4.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "6.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6cdefdf2015f417faf8b0dd1ef2ac6591aa7acdda84641245238e5e09367e04f06c716e3b46dc56eb108218de5f3f86bc14c0878266f8b842e3933f8304ad5ba"
        }
      ],
      "purl": "pkg:npm/ansi-styles@6.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@6.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "assertion-error",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2338bc45071f7ea09e3558058a02a58b5b2c92521ba479c261ce809275c662807a82b26ac9e6f2ee3bf5d895108264c09c80e76dc935bb192c4f87733773d604"
        }
      ],
      "purl": "pkg:npm/assertion-error@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/assertion-error@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ast-v8-to-istanbul",
      "version": "0.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32e5ccad22d556803ab1837fe8791ed7cbccceb4f84d935b6488ff86f8747e7605a4efbf9055dc2c86a23f05d759a4143e0e32243f1f8fe95f27bff51017289f"
        }
      ],
      "purl": "pkg:npm/ast-v8-to-istanbul@0.3.3",
      "type": "library",
      "bom-ref": "pkg:npm/ast-v8-to-istanbul@0.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "balanced-match",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "de849e50ed13315ebb84dd4099b5ec2b8c9aa94eed8e21e56f144364ea47d0a5bdf82797e1b440697d009f1b74b71d8cae94695b041a3f02252121098585393f"
        }
      ],
      "purl": "pkg:npm/balanced-match@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/balanced-match@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brace-expansion",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "26dd2f1f233e8e6501aa88c1ec4d4d21869db74bc8d10c63c5dd9312b5bde300f3f84d8b026e6f28c5d7c20e996414c73ee5250e0407297be318175f705d590d"
        }
      ],
      "purl": "pkg:npm/brace-expansion@2.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cac",
      "version": "6.7.14",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6fa225bacf9cdd1add0e4f8984b2940107f3ce02c43f2eb0717a92edfff17b51044efb033fa18e446ed216e3ace9c203e5892a7215bf2d765b5f96dcf23ed971"
        }
      ],
      "purl": "pkg:npm/cac@6.7.14",
      "type": "library",
      "bom-ref": "pkg:npm/cac@6.7.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chai",
      "version": "5.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e67171854ad7d0faadca882860e03c20fb30cb9b191533ac04597ff5b36c9832e0b31613cd26502433e9a439d93d341bcd2126d21a868d63f345e9900986c3e8"
        }
      ],
      "purl": "pkg:npm/chai@5.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/chai@5.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "check-error",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "38095bf93ed5e0ea7d3b07648e682e611aa771d971e498a87f038052499317e8cd747c334da4ece2c4401a9ccb177a0ecf9c40c831ab3e07880c54260ce4e227"
        }
      ],
      "purl": "pkg:npm/check-error@2.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/check-error@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-convert",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4511023ec8fb8aeff16f9a0a61cb051d2a6914d9ec8ffe763954d129be333f9a275f0545df3566993a0d70e7c60be0910e97cafd4e7ce1f320dfc64709a12529"
        }
      ],
      "purl": "pkg:npm/color-convert@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/color-convert@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-name",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "74ecbedc0b96ddadb035b64722e319a537208c6b8b53fb812ffb9b71917d3976c3a3c7dfe0ef32569e417f479f4bcb84a18a39ab8171edd63d3a04065e002c40"
        }
      ],
      "purl": "pkg:npm/color-name@1.1.4",
      "type": "library",
      "bom-ref": "pkg:npm/color-name@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cross-spawn",
      "version": "7.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b95d903963f69d6ceccb668ca7c69189b862f5d9731791e0879487681f4e893184c834e2249cb1d2ecb9d505ddc966ed00736e6b85c9cd429c6b73b3294777bc"
        }
      ],
      "purl": "pkg:npm/cross-spawn@7.0.6",
      "type": "library",
      "bom-ref": "pkg:npm/cross-spawn@7.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "4.4.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "29c282aa27ed049719afefbbca4a03204c126b75d6a304df34fa3dd816318d78b260456b51087668bca1c410b0c30fa17a8aed505c44258711ce8b2cb5310161"
        }
      ],
      "purl": "pkg:npm/debug@4.4.1",
      "type": "library",
      "bom-ref": "pkg:npm/debug@4.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "ImportedModules",
          "value": "debug"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "dist/Walker.js",
            "line": 4
          },
          {
            "location": "dist/Walker.js",
            "line": 7
          },
          {
            "location": "src/Walker.ts",
            "line": 5
          },
          {
            "location": "src/Walker.ts",
            "line": 24
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-eql",
      "version": "5.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "87993fe54e74209245a737cbea73bd8da6ae99f8cefdfd8d8cafe8601d838f39b8a7d2fedd3f6a5a966a6768406cb3eeb98abdc2b534f164320532f919b3e4e5"
        }
      ],
      "purl": "pkg:npm/deep-eql@5.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/deep-eql@5.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eastasianwidth",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "23cf1361959cf578981d1438ff7739ae38df8248e12f25b696e18885e18445b350e8e63bc93c9b6a74a90d765af32ed550ff589837186be7b2ab871aee22ea58"
        }
      ],
      "purl": "pkg:npm/eastasianwidth@0.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/eastasianwidth@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "emoji-regex",
      "version": "8.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3128d8cdc58d380d1ec001e9cf4331a5816fc20eb28f2d4d1b7c6d7a8ab3eb8e150a8fd13e09ebd7f186b7e89cde2253cd0f04bb74dd335e126b09d5526184e8"
        }
      ],
      "purl": "pkg:npm/emoji-regex@8.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/emoji-regex@8.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "emoji-regex",
      "version": "9.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f5f03689b17494936fb8da9bfc98bb398c94f686a164144e23db5c0e9a06d4aac67684bef636c514efce60f515e0a37b3464d815978d93887a7766d3affd5ca"
        }
      ],
      "purl": "pkg:npm/emoji-regex@9.2.2",
      "type": "library",
      "bom-ref": "pkg:npm/emoji-regex@9.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-module-lexer",
      "version": "1.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8c44280b093c8726f6019ce220e2e10eaa66e7edb0c39b8813a9643bfea370e0aeb1f93a2e1307a575df04b5d367b61dcadd23e15a1442feae18d61b756fa404"
        }
      ],
      "purl": "pkg:npm/es-module-lexer@1.7.0",
      "type": "library",
      "bom-ref": "pkg:npm/es-module-lexer@1.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esbuild",
      "version": "0.25.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "195bb3b94c2d76c821137a1c27d06cf0f368175dc7350e535db122d8086f55bf31535230b7d168b3d1446a67e879efaefd33ac9fb19459cd38973e3a9f66db4e"
        }
      ],
      "purl": "pkg:npm/esbuild@0.25.6",
      "type": "library",
      "bom-ref": "pkg:npm/esbuild@0.25.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "estree-walker",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ed150a7d781230c933b7a66e5e6a9aa4ebab2c63cf7e08fa97db9167b9511a896f934cb6ca871cdf92dd731282e4f419767d8332a8a8010d8da1672b4ca9a6ea"
        }
      ],
      "purl": "pkg:npm/estree-walker@3.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/estree-walker@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "expect-type",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2611460d527bb660c922d2a162024218b3968ee2bdbcfc625e85052f02c373df4d9669258a56e2409c2872d66db75dfec4cc3dd4c0a4fd111a9fa3161ea0e3c8"
        }
      ],
      "purl": "pkg:npm/expect-type@1.2.2",
      "type": "library",
      "bom-ref": "pkg:npm/expect-type@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "fdir",
      "version": "6.4.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "862168aa9c9971f366d72738bbca1609ff40d9ce03dd08c2ae4b37ce6a15295c69411ce63cd6abd615097011b64501ef11518337e266f356617952c040c2bafb"
        }
      ],
      "purl": "pkg:npm/fdir@6.4.6",
      "type": "library",
      "bom-ref": "pkg:npm/fdir@6.4.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "foreground-child",
      "version": "3.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8085e32aab45b96120cc544903d58241e4892d90e380950e302333c6dbc5abfdfb2a88ccd41146b9faac0b2d2be2a4909982ec65831ec91ab321638cba9d37b3"
        }
      ],
      "purl": "pkg:npm/foreground-child@3.3.1",
      "type": "library",
      "bom-ref": "pkg:npm/foreground-child@3.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fsevents",
      "version": "2.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e71a037d7f9f2fb7da0139da82658fa5b16dc21fd1efb5a630caaa1c64bae42defbc1d181eb805f81d58999df8e35b4c8f99fade4d36d765cda09c339617df43"
        }
      ],
      "purl": "pkg:npm/fsevents@2.3.3",
      "type": "library",
      "bom-ref": "pkg:npm/fsevents@2.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "10.4.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ec1bfc445d24eb18e8edde00fcfc582db5027dbe9cf95a5ddbf981db244395ec3b25be611178820fd89b7ceef0a64f22e2c7af2ba0c59f2f61ec461b337fec1e"
        }
      ],
      "purl": "pkg:npm/glob@10.4.5",
      "type": "library",
      "bom-ref": "pkg:npm/glob@10.4.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-flag",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1329094ff4352a34d672da698080207d23b4b4a56e6548e180caf5ee4a93ba6325e807efdc421295e53ba99533a170c54c01d30c2e0d3a81bf67153712f94c3d"
        }
      ],
      "purl": "pkg:npm/has-flag@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/has-flag@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "html-escaper",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1f688cb5dd08e0cb7979889aa517480e3a7e5f37a55d0d2d144e094bb605c057af5d73263a9f66c8dad4bc28340fac2cf22aa444f05f28781bc228354a694b7e"
        }
      ],
      "purl": "pkg:npm/html-escaper@2.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/html-escaper@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-fullwidth-code-point",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf29a6e7ebbeb02b125b20fda8d69e8d5dc316f84229c94a762cd868952e1c0f3744b8dbee74ae1a775d0871afd2193e298ec130096c59e2b851e83a115e9742"
        }
      ],
      "purl": "pkg:npm/is-fullwidth-code-point@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-fullwidth-code-point@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isexe",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "447c4c2e9f659ca1c61d19e0f5016144231b600715a67ebdb2648672addfdfac638155564e18f8aaa2db4cb96aed2b23f01f9f210d44b8210623694ab3241e23"
        }
      ],
      "purl": "pkg:npm/isexe@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/isexe@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "istanbul-lib-coverage",
      "version": "3.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3bc769b05fabd1657ff0c35129f9e6aed09686e2a3c6bab6c3e8e9cc12f95192938b62de5569d63a6591c4595eb0938d99cfb02c01af29064439a9e4a342c54e"
        }
      ],
      "purl": "pkg:npm/istanbul-lib-coverage@3.2.2",
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-coverage@3.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "istanbul-lib-report",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1827c4d66b6c1c63842c253c7bf67b616ce99b26ebc7ff9d4937cbaef63ca9199a63acd74ca5a7e964088da005c34ebd89c9ba19530d920bb437323888f65437"
        }
      ],
      "purl": "pkg:npm/istanbul-lib-report@3.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-report@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "istanbul-lib-source-maps",
      "version": "5.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ca0d9df849b82a2cd90b99e25a141a2289a07f95a52f8bce3a3679c460a617c4a73c4fe60d659782f444c5d7290a087d94b4516b5fdf498a76ca699b275a48f8"
        }
      ],
      "purl": "pkg:npm/istanbul-lib-source-maps@5.0.6",
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-source-maps@5.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "istanbul-reports",
      "version": "3.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "05ec265172267ae464d986343d56f180a032b2f8513d4404d21e5044cfbe9d55b2b9b28657497ca90e68a7cf81d833a6c127badc98af8f406390f4157fc7cfe6"
        }
      ],
      "purl": "pkg:npm/istanbul-reports@3.1.7",
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-reports@3.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jackspeak",
      "version": "3.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "386959429cf6c9f6a103f45dd58f0277d48812caaf5e42d5a12c3f720c219e114c0dbb1015e658a0927b6c86414bd05c6a6516f7a6acabf9e93d6ba033e45007"
        }
      ],
      "purl": "pkg:npm/jackspeak@3.4.3",
      "type": "library",
      "bom-ref": "pkg:npm/jackspeak@3.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-tokens",
      "version": "9.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9b16bd13d21314eb746da9f78fa2f93298f07a01b3ea505098cd4826459e05919c331b68e74f9e59d8c2ff9db10db4b6bf2d24eef20c2b415edb07cbf4e412a5"
        }
      ],
      "purl": "pkg:npm/js-tokens@9.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/js-tokens@9.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "loupe",
      "version": "3.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c09ce42b026b85e2ad92708e28d12d0cae22aa0fccc6666178432d49362f9f345d118699ce6807f7bea77a7a7c59d251771e557355fff4c3b43acce5e9ecde5e"
        }
      ],
      "purl": "pkg:npm/loupe@3.1.4",
      "type": "library",
      "bom-ref": "pkg:npm/loupe@3.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-cache",
      "version": "10.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "24d03365c5eb0ade365462ee633d337c0cc37c0bc9596e807d8943050c835790c2948da6e6c0262be3883bbb39f577ec46c587a74da3009ad169d3d1193b7a49"
        }
      ],
      "purl": "pkg:npm/lru-cache@10.4.3",
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@10.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "magic-string",
      "version": "0.30.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b0d3ca1efca355fee0ca3c12e31193696fe60a717cc278ed89f281121c5f67b13f4bcb50d2bb2caf018d9faabc247fe8848b497d2429f6606d418b93947e509c"
        }
      ],
      "purl": "pkg:npm/magic-string@0.30.17",
      "type": "library",
      "bom-ref": "pkg:npm/magic-string@0.30.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "magicast",
      "version": "0.3.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f45a1b6d0e5fb604eb326ef10e2caedf5b7500d0e434210d9de99976c7f6babd546cddb018d0408e4871de2f98c3f926cea4e094122d32d43807127f509f501"
        }
      ],
      "purl": "pkg:npm/magicast@0.3.5",
      "type": "library",
      "bom-ref": "pkg:npm/magicast@0.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "make-dir",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8577544d960854eb75131fff8c0422fb04d9669529c018ffd10b0ecea7a06f7ac630c78989212ee712c79d87c1ad1578447dbe38248e3bde48b3fef1d562786f"
        }
      ],
      "purl": "pkg:npm/make-dir@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/make-dir@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "9.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1ba4f4657e3cc60a33c7be7cee4a1e5fd62cd8d632e869affff3fcf6c12d7bd57dc2121aa4c345e2274ac675b642d09c2e24d695bff07c269b02d0055a1841a3"
        }
      ],
      "purl": "pkg:npm/minimatch@9.0.5",
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@9.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minipass",
      "version": "7.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a8e3b34b57014d6605e011fc7d578f0c138ef62a6d327194119c0d73f70c5a74d5da754b67b56835610f1e461ccd9034a5da00edd97a7bb14beb9f675fd4b66b"
        }
      ],
      "purl": "pkg:npm/minipass@7.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/minipass@7.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e85973b9b4cb646dc9d9afcd542025784863ceae68c601f268253dc985ef70bb2fa1568726afece715c8ebf5d73fab73ed1f7100eb479d23bfb57b45dd645394"
        }
      ],
      "purl": "pkg:npm/ms@2.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nanoid",
      "version": "3.3.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "37c4a97cf527529d5b2be3cc616f2a496765f54fb0c0d588e102b13980f2f4902ba3758c5fba7639e55117dbfedf8ee99da90d7af3e688784d999d876c503beb"
        }
      ],
      "purl": "pkg:npm/nanoid@3.3.11",
      "type": "library",
      "bom-ref": "pkg:npm/nanoid@3.3.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "package-json-from-dist",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5046484b7fdbcb8382f2f2f73f67535d1113a5e6cb236362239bc8ae3683ff952dae4157fed35bc234d2440182ffeec2028da921c05a4605a670104772c68223"
        }
      ],
      "purl": "pkg:npm/package-json-from-dist@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/package-json-from-dist@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-key",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a2399e374a9dfb2d23b3312da18e3caf43deab97703049089423aee90e5fe3595f92cc17b8ab58ae18284e92e7c887079b6e1486ac7ee53aa6d889d2c0b844e9"
        }
      ],
      "purl": "pkg:npm/path-key@3.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/path-key@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-scurry",
      "version": "1.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5dae0dc35ec54bd02940527dba62e2252e28ac68e6ed9cf052bc1a99c190b874b30f2b61f5ba0a0dac9c61d0dc643baa6004d7c381c55e06aa59372d5bfbf51c"
        }
      ],
      "purl": "pkg:npm/path-scurry@1.11.1",
      "type": "library",
      "bom-ref": "pkg:npm/path-scurry@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pathe",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5948c6700a8fd6041a72841ef8e049b0503b2dde03c97b9422367971cef970b1ef27b76d36c4ee8298712000f0b294be02b68051e3c22ab495b4f2c58ff17cf3"
        }
      ],
      "purl": "pkg:npm/pathe@2.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/pathe@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pathval",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fff9ec8660f9e5ce3a16e170dbac55ff1140681e4717d5dd6a9ec7241067aca74077afc6c4305a340d7cef43bbf7ef6e7a0eb57192d255cf8e68595f98e6d855"
        }
      ],
      "purl": "pkg:npm/pathval@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/pathval@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "picocolors",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5c787dac9e1b5be4cf658aa0ec984c39ea57b7efa993664117fe311bfd1c4d1727a036e97b78db250973fd1438ff2dcbb45fc284c8c71e3f69eda5a1eb0c454"
        }
      ],
      "purl": "pkg:npm/picocolors@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/picocolors@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "picomatch",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "33b04057a465732e6efa6ea83e100f160253cc08a85ffe81d03c72bc3968f65f3e4f79cb29badcce0d962d4cb3778e4bf11a9f50cc863f37a46ccbd7d8b764c2"
        }
      ],
      "purl": "pkg:npm/picomatch@4.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/picomatch@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss",
      "version": "8.5.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dd86e2d6d02ec003fdb34af5510d89e27e58d06d396c99295083b4fdb23d321c260fbd12e5a4d66d7181c311eb7a54fe5ccd64e9d334a64f92c0d9294d137b3e"
        }
      ],
      "purl": "pkg:npm/postcss@8.5.6",
      "type": "library",
      "bom-ref": "pkg:npm/postcss@8.5.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prettier",
      "version": "3.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "23b0088396e802be51d0516d27aac27c3f8b16c587a7cd5da25ac50fc4bbf54f6d6fc033da71ab2677273129f2b3e6e94097d1533aacf619c0f35380037842b9"
        }
      ],
      "purl": "pkg:npm/prettier@3.6.2",
      "type": "library",
      "bom-ref": "pkg:npm/prettier@3.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rollup",
      "version": "4.45.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "58b8c4709448a3b8b75830e038826a548d9dfa5002dc4c2f386cbe5dfaba86cf8642e000e038bf1fbdb199790e86b216160d8f15848a6587c7d1fe2f7ca5cde0"
        }
      ],
      "purl": "pkg:npm/rollup@4.45.0",
      "type": "library",
      "bom-ref": "pkg:npm/rollup@4.45.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "7.7.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "445d05c3eacee4031ff4c0326915c8e005745258f994c1ea571c5d4a08956e2c52097a049a65ff8e4d02b89c38fb74aaae860ef55a1487e1dcb898afbed25e98"
        }
      ],
      "purl": "pkg:npm/semver@7.7.2",
      "type": "library",
      "bom-ref": "pkg:npm/semver@7.7.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shebang-command",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "907c6bdb366962d766acdd6a0e3aeb5ff675ad1d641bc0f1fa09292b51b87979af5ecc26704d614d6056614ce5ada630d7fc99a7a62e0d8efb62dbdb3747660c"
        }
      ],
      "purl": "pkg:npm/shebang-command@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/shebang-command@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shebang-regex",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "efef9d161b5cc77df9dee05aabc0c347836ec417ad0730bb6503a19934089c711de9b4ab5dd884cb30af1b4ed9e3851874b4a1594c97b7933fca1cfc7a471bd4"
        }
      ],
      "purl": "pkg:npm/shebang-regex@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/shebang-regex@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "siginfo",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c9bc7458ed7ff1b4812c459766f11dee0316dd29f7245956dd3bd7d674446c32d135035a78d37c58ad26781c0f74068e23b4ed4514499ff12cd7386bac21eeee"
        }
      ],
      "purl": "pkg:npm/siginfo@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/siginfo@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "signal-exit",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6f3c99d5ef3cc3d3b588d25b2a73a5bd84eb58f0e5e3a3b56c6d03dd7227bfef6d90faf1acdf235144e21650e4926296827d4ce827c8035dd2b86a8e6bd2a8af"
        }
      ],
      "purl": "pkg:npm/signal-exit@4.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/signal-exit@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map-js",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "51758c2a12cec1529bef6f0852d40f5f17d853ebac7726ed52b2bff2e184f0240cbeb84ea70bf30c1c23d108522fb31073bbc8b084811bc550f3e203431a5f40"
        }
      ],
      "purl": "pkg:npm/source-map-js@1.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/source-map-js@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stackback",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d573091397d0a358c61fa63fede6e7c0f3811242049d3e10177d9de51d7e557757bde334201309b7ccdf6b15f53f7421570ad87bee7bebe8e400db524b69816f"
        }
      ],
      "purl": "pkg:npm/stackback@0.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/stackback@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "std-env",
      "version": "3.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "506be3ca0afa17ab691fba36ab2a91e90629c2b6888ca49db73c81772cad14e1e63d963dd7b9307702c6d116ce8d63a72a69e6dcf7878daa0b2cc89eee43cb43"
        }
      ],
      "purl": "pkg:npm/std-env@3.9.0",
      "type": "library",
      "bom-ref": "pkg:npm/std-env@3.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string-width",
      "version": "4.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c0ac90450a63274b08a7ad84ad265d1ac8cc256b1aa79a1136284786ee86ec954effd8c807a5327af2feb57b8eaab9e0f23fdcc4a4d6c96530bd24eb8a2673fe"
        }
      ],
      "purl": "pkg:npm/string-width@4.2.3",
      "type": "library",
      "bom-ref": "pkg:npm/string-width@4.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string-width",
      "version": "5.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1e72ce091def8dc63c6dea0d2ed723679fe7c67d9a7e6304ea586b0eb79ba24a8c6a9f976de5bc9fd4d7a4f0cea9d18ae6a708de84f418a4d6eb00bb10c895a8"
        }
      ],
      "purl": "pkg:npm/string-width@5.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/string-width@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-ansi",
      "version": "6.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "637f153d21dcaa416b0a916743dbee4979aabaebf9a1738aa46793e9a1abaf7a3719cf409556ba2417d448e0a76f1186645fbfd28a08ecaacfb944b3b54754e4"
        }
      ],
      "purl": "pkg:npm/strip-ansi@6.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@6.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-ansi",
      "version": "7.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8aae9e55523ae274104d162ad8ab44836776b94ecb125853270b07e18cc81d9b21c658199acff021ce15a03413946fc8bd522b04a1b4e82ad99e9d2abfb86471"
        }
      ],
      "purl": "pkg:npm/strip-ansi@7.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@7.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-literal",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4dc71ca0c84938cdce79b1a1481126a77519d927c331950405d440ffdca77cb8bcc986a3c965f72625c0adc26de149a1e2f212a6ca6440863c659a02aa36ef88"
        }
      ],
      "purl": "pkg:npm/strip-literal@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/strip-literal@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "7.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aa9080bd197db2db8e1ef78ab27ec79dc251befe74d6a21a70acd094effe2f0c5cf7ed2adb02f2bf80dfbedf34fc33e7da9a8e06c25d0e2a205c647df8ebf047"
        }
      ],
      "purl": "pkg:npm/supports-color@7.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@7.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "test-exclude",
      "version": "7.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a4562a993c3af0b5d58de5893124f8f9ba2b8103f603230d6e0d41a5987d2dbca151e36479a3c5f60cdf3c65009d2315dea3d87565300c88e308b8920ce97bbe"
        }
      ],
      "purl": "pkg:npm/test-exclude@7.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/test-exclude@7.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tinybench",
      "version": "2.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d3e0d4bea58c55a94b9a16ba96be240fc88030ad47cd5d3f68a9c2b566fdbfdeb8d539cffcc15becf7366f1a314234d7004aebc9756050e7efd98a8d965a867a"
        }
      ],
      "purl": "pkg:npm/tinybench@2.9.0",
      "type": "library",
      "bom-ref": "pkg:npm/tinybench@2.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tinyexec",
      "version": "0.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "290411f7237b479f8e4b068ad174288f6da9c07a1396062a994b1c3d8a249cea160967e3ff9fc00533118baf45aca5397df3d587941c16292958923f3f5a1c1c"
        }
      ],
      "purl": "pkg:npm/tinyexec@0.3.2",
      "type": "library",
      "bom-ref": "pkg:npm/tinyexec@0.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tinyglobby",
      "version": "0.2.14",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b57e5eece3351e762bdbe6b60bfe15d21b4e71241ca124c7f4a8099d5bcd9b9ce6fdcc8458a27b8fb62eb6c1fd0b131db4e9242c5cb6007acc722f4833c20f65"
        }
      ],
      "purl": "pkg:npm/tinyglobby@0.2.14",
      "type": "library",
      "bom-ref": "pkg:npm/tinyglobby@0.2.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tinypool",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "65b6bcdacf3b205abd03d5e68e25f9b9903f011583ac1d3738796af95c357d276dd08fb8fcabadc32f013f863fcbf68e44ca3ad45434bc86f98f8e2f4a8e4f92"
        }
      ],
      "purl": "pkg:npm/tinypool@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/tinypool@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tinyrainbow",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a29e27b13478ed1ea9d2f314528625fdafa58cb155b657da5e42d09aa7cb475a8799ad61ff2b189388445d9f3cd1b7f6098813b24bd36bf7b5f7a55de5d0d05f"
        }
      ],
      "purl": "pkg:npm/tinyrainbow@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/tinyrainbow@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tinyspy",
      "version": "4.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b764ff58b076591819f44a44e2380f27dc3e8bae9465f0dcf301e1d31af089134df94c07f7c1882644de66a5fdae0d22d29b70cea5beb987881744f817c2d1ec"
        }
      ],
      "purl": "pkg:npm/tinyspy@4.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/tinyspy@4.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typescript",
      "version": "5.8.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a757625ba4ea2fd2f4ee7371bd130cee130cc387395cea3fd626cbe1a0081a6480b7db254c4d57830e4a5aea1fdae4cebc283d058ed9462f86685fbbb1f80f79"
        }
      ],
      "purl": "pkg:npm/typescript@5.8.3",
      "type": "library",
      "bom-ref": "pkg:npm/typescript@5.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "undici-types",
      "version": "6.21.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8b00d9aa0d10006ae0f516afe47e27d0ceb87379a4479f5c27ac10a7eec2e2723482c984c5a79d6982cd3b8e1e4f802d041c236d38863cc96dd8c7744fd1fd25"
        }
      ],
      "purl": "pkg:npm/undici-types@6.21.0",
      "type": "library",
      "bom-ref": "pkg:npm/undici-types@6.21.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vite-node",
      "version": "3.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "11b2922a1f9b875135205c5e3b4a60d67e1dbe8393b7450389731dfea9fefabf7cfa33ced71b498a5bd795d7ae43c822201e489298c280c95e1cc344b061faa6"
        }
      ],
      "purl": "pkg:npm/vite-node@3.2.4",
      "type": "library",
      "bom-ref": "pkg:npm/vite-node@3.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vite",
      "version": "7.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4a469282eb92ee79e657b99f27c97cd49181155ec6bf3a7c233804f00f2ddb7f80c6e357eb54391f54e9cf979f76e48decd1c2f274170f7b0a40a640bb998d10"
        }
      ],
      "purl": "pkg:npm/vite@7.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/vite@7.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vitest",
      "version": "3.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2d408fe5ebf7194443cac4d688fe3bc11454a4b28c39f3e1fb2293c779152048aee4a38c7aace99d836c2b23a856b50b8af47cb4b724b38fa581adf75a19fdd0"
        }
      ],
      "purl": "pkg:npm/vitest@3.2.4",
      "type": "library",
      "bom-ref": "pkg:npm/vitest@3.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "04b2374e5d535b73ef97bd25df2ab763ae22f9ac29c17aac181616924a8cb676d782b303fb28fbae15b492e103c7325a6171a3116e6881aa4a34c10a34c8e26c"
        }
      ],
      "purl": "pkg:npm/which@2.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/which@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "why-is-node-running",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "854ae669605d543731bd8aa7ca1d3dcee9cacd13968db65388dcbc741123912ede8440d089b5c9ed7be59ad6f0b9372552223237e0b25d00f8566928f1f366f3"
        }
      ],
      "purl": "pkg:npm/why-is-node-running@2.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/why-is-node-running@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrap-ansi",
      "version": "7.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6151888f691a98b493c70e8db198e80717d2c2c9f4c9c75eb26738a7e436d5ce733ee675a65f8d7f155dc4fb5d1ef98d54e43a5d2606e0052dcadfc58bb0f5e9"
        }
      ],
      "purl": "pkg:npm/wrap-ansi@7.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/wrap-ansi@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrap-ansi",
      "version": "8.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b22ed0588eb350cab9e9b11216f6a0b66ccc7463ada317d1f927b3d753286df73bb66f9591472493d6d6d9479f7d319551b3a4b31992c34000da0b3c83bd4d09"
        }
      ],
      "purl": "pkg:npm/wrap-ansi@8.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/wrap-ansi@8.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "abstract-socket",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ad9dc6e84aa4762ffd3f362ed375edd50119f5a1d84e7529c4bc95e44b6333fd3a0420f360e45301f9824402fa8c88fdf18a95be228682dd6a5dc154b0ce1ed3"
        }
      ],
      "purl": "pkg:npm/abstract-socket@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/abstract-socket@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ajv",
      "version": "6.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9df7e13a99329831024324749a7b14b68084f11957dfc1b4ad83fec202d617266e532baea23492be2ffe7ae3a2401227eb7c216306152081f54ef137b6ee0e12"
        }
      ],
      "purl": "pkg:npm/ajv@6.10.0",
      "type": "library",
      "bom-ref": "pkg:npm/ajv@6.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-regex",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c3b33ab5ee360d86e0e628f0468ae7ef27d654df"
        }
      ],
      "purl": "pkg:npm/ansi-regex@2.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-find-index",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "df010aa1287e164bbda6f9723b0a96a1ec4187a1"
        }
      ],
      "purl": "pkg:npm/array-find-index@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/array-find-index@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asar",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "301883539703afd516b98d85d33ab67d9967c91ab568e3e624631ab36d906b5e0ad687694572f7c643073cddeec368402b9983f3d43efca89d394b698b85740a"
        }
      ],
      "purl": "pkg:npm/asar@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/asar@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asn1",
      "version": "0.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8f1c334292d08d29965e0c1a09913d373fa09401b4d721754275a06e11b01c8e40e85448118e8856ab478487a91ea23bfe4c84c9011a8010b998110594862f76"
        }
      ],
      "purl": "pkg:npm/asn1@0.2.4",
      "type": "library",
      "bom-ref": "pkg:npm/asn1@0.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "assert-plus",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f12e0f3c5d77b0b1cdd9146942e4e96c1e4dd525"
        }
      ],
      "purl": "pkg:npm/assert-plus@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/assert-plus@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asynckit",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c79ed97f7f34cb8f2ba1bc9790bcc366474b4b79"
        }
      ],
      "purl": "pkg:npm/asynckit@0.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/asynckit@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "author-regex",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d08885be6b9bbf9439fe087c76287245f0a81450"
        }
      ],
      "purl": "pkg:npm/author-regex@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/author-regex@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aws-sign2",
      "version": "0.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b46e890934a9591f2d2f6f86d7e6a9f1b3fe76a8"
        }
      ],
      "purl": "pkg:npm/aws-sign2@0.7.0",
      "type": "library",
      "bom-ref": "pkg:npm/aws-sign2@0.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aws4",
      "version": "1.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "45e671bcd1c83aff3c1654fbaf17172080b47cfb78299a996ce962bf25ad5cbb7c112c7ce3377790c0ba88ae6355e4b6aadfa0edfb52ef27b87e2d3a5f9aed45"
        }
      ],
      "purl": "pkg:npm/aws4@1.8.0",
      "type": "library",
      "bom-ref": "pkg:npm/aws4@1.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "balanced-match",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "89b4d199ab2bee49de164ea02b89ce462d71b767"
        }
      ],
      "purl": "pkg:npm/balanced-match@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/balanced-match@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "base64-js",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a39992d723584811982be5e290bb6a53d86700f1"
        }
      ],
      "purl": "pkg:npm/base64-js@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/base64-js@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "base64-js",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "71c6afff21afa1af340500e58c2c6c9a64375efc7ad3f5290488a3e50376d56df0062fe18480bd3a83be28ba6ef482534bd8f80d1549dda0c317d70c4a86b697"
        }
      ],
      "purl": "pkg:npm/base64-js@1.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/base64-js@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bcrypt-pbkdf",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a4301d389b6a43f9b67ff3ca11a3f6637e360e9e"
        }
      ],
      "purl": "pkg:npm/bcrypt-pbkdf@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/bcrypt-pbkdf@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bignumber.js",
      "version": "2.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "838a992da9f9d737e0f4b2db0be62bb09dd0c5e8"
        }
      ],
      "purl": "pkg:npm/bignumber.js@2.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/bignumber.js@2.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bindings",
      "version": "1.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a76abfb7f9a1bee3a3fd478b955eb9eba183fe0ba8c25af4847c42948d16f66ecc59890bd45d212e8fb401ec6cf4748f0ad4754974344c3dcc30aad765a8db89"
        }
      ],
      "purl": "pkg:npm/bindings@1.5.0",
      "type": "library",
      "bom-ref": "pkg:npm/bindings@1.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bluebird",
      "version": "3.5.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e5a9ba1e79df37ebabcede327e0ec88136e8b438c84ffbbc009a44b74b0853d16d5df55e7b35c03cab30ac6fb129408e60020da527606550d4e90161f9cb87df"
        }
      ],
      "purl": "pkg:npm/bluebird@3.5.5",
      "type": "library",
      "bom-ref": "pkg:npm/bluebird@3.5.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bmp-js",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "64113e9c7cf1202b376ed607bf30626ebe57b18a"
        }
      ],
      "purl": "pkg:npm/bmp-js@0.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/bmp-js@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brace-expansion",
      "version": "1.1.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688"
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.11",
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@1.1.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-alloc-unsafe",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4c433688c20441d276ca33c9a1222c95d9e5795680935a16dc305553293238bb04b0598473d927f921453f3fa0979e0a40dc650e7030097a2c392f4e931db102"
        }
      ],
      "purl": "pkg:npm/buffer-alloc-unsafe@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/buffer-alloc-unsafe@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-alloc",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "085b074208ed5b550285d5e06f2246b679be3bfb8b41e65db5b0e8f267d48185c21d2335c20ad5c579ba6d2cab52e12b11bfb8b185460b3012051a2def3caba3"
        }
      ],
      "purl": "pkg:npm/buffer-alloc@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/buffer-alloc@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-equal",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "91bc74b11ea405bc916bc6aa908faafa5b4aac4b"
        }
      ],
      "purl": "pkg:npm/buffer-equal@0.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/buffer-equal@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-fill",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f8f78b76789888ef39f205cd637f68e702122b2c"
        }
      ],
      "purl": "pkg:npm/buffer-fill@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/buffer-fill@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-from",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3107171146c22ad128edb86a12ceb9eb41f27785daa2f6653bf93d57786355417fcf05bb28155d48ae2022dfdbcf04bd31b479aa86fe1798eeb19b1bd1840ad8"
        }
      ],
      "purl": "pkg:npm/buffer-from@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/buffer-from@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase-keys",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "308beeaffdf28119051efa1d932213c91b8f92e7"
        }
      ],
      "purl": "pkg:npm/camelcase-keys@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/camelcase-keys@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7c1d16d679a1bbe59ca02cacecfb011e201f5a1f"
        }
      ],
      "purl": "pkg:npm/camelcase@2.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "5.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f6f124c1d7bd27c164badd48ed944384ddd95d400a5a257664388d6e3057f37f7ad1b8f7a01da1deb3279ef98c50f96e92bd10d057a52b74e751891d79df026"
        }
      ],
      "purl": "pkg:npm/camelcase@5.3.1",
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@5.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caseless",
      "version": "0.12.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1b681c21ff84033c826543090689420d187151dc"
        }
      ],
      "purl": "pkg:npm/caseless@0.12.0",
      "type": "library",
      "bom-ref": "pkg:npm/caseless@0.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chromium-pickle-js",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "04a106672c18b085ab774d983dfa3ea138f22205"
        }
      ],
      "purl": "pkg:npm/chromium-pickle-js@0.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/chromium-pickle-js@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "code-point-at",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0d070b4d043a5bea33a2f1a40e2edb3d9a4ccf77"
        }
      ],
      "purl": "pkg:npm/code-point-at@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/code-point-at@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "combined-stream",
      "version": "1.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1503783117ee25e1dfedc05b04c2455e12920eafb690002b06599106f72f144e410751d9297b5214048385d973f73398c3187c943767be630e7bffb971da0476"
        }
      ],
      "purl": "pkg:npm/combined-stream@1.0.8",
      "type": "library",
      "bom-ref": "pkg:npm/combined-stream@1.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "2.20.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ee3db2fb8d30eb5cf2e980b689136951efcdc21372a17ad8a4732b4ae9da306eb89d19da7fdeb33bf28c411e0ec8dfd49c4e4a2f21019ca1dde1a1b7aec923a5"
        }
      ],
      "purl": "pkg:npm/commander@2.20.0",
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.20.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "compare-version",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0162ec2d9351f5ddd59a9202cba935366a725080"
        }
      ],
      "purl": "pkg:npm/compare-version@0.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/compare-version@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concat-map",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d8a96bd77fd68df7793a73036a3ba0d5405d477b"
        }
      ],
      "purl": "pkg:npm/concat-map@0.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/concat-map@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concat-stream",
      "version": "1.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dbb1c18212718e266d224dd872f9ffe246c993fd6e66e2457ee3c49ece8b684be9bc6d5fd214de6bc96296ba2eca8f6655cd8659d70467c38ba0699200396b0b"
        }
      ],
      "purl": "pkg:npm/concat-stream@1.6.2",
      "type": "library",
      "bom-ref": "pkg:npm/concat-stream@1.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "core-util-is",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b5fd54220aa2bc5ab57aab7140c940754503c1a7"
        }
      ],
      "purl": "pkg:npm/core-util-is@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/core-util-is@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cuint",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "408086d409550c2631155619e9fa7bcadc3b991b"
        }
      ],
      "purl": "pkg:npm/cuint@0.2.2",
      "type": "library",
      "bom-ref": "pkg:npm/cuint@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "currently-unhandled",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "988df33feab191ef799a61369dd76c17adf957ea"
        }
      ],
      "purl": "pkg:npm/currently-unhandled@0.4.1",
      "type": "library",
      "bom-ref": "pkg:npm/currently-unhandled@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dashdash",
      "version": "1.14.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "853cfa0f7cbe2fed5de20326b8dd581035f6e2f0"
        }
      ],
      "purl": "pkg:npm/dashdash@1.14.1",
      "type": "library",
      "bom-ref": "pkg:npm/dashdash@1.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dbus-next",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e21baeaa612b080b69ef1efb2a60578358c3ff45e3fb3537af9dcc5697e43b5ed0202c1bbda642ac400e8eaa39b4c3f8b726ce944a6c822bad63241d8ee85e63"
        }
      ],
      "purl": "pkg:npm/dbus-next@0.6.1",
      "type": "library",
      "bom-ref": "pkg:npm/dbus-next@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dbus-next",
      "version": "0.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3f3b2e7535f91cc2e8712bb01de7c8a21b68f0be069e1e524f6f95340a1ac7d5eeae1fa54e8b265c87e08bf32b73ddefa945370f5bfb8c4f7fbe38967772886c"
        }
      ],
      "purl": "pkg:npm/dbus-next@0.5.1",
      "type": "library",
      "bom-ref": "pkg:npm/dbus-next@0.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "2.6.9",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6c2ec496b7496899cf6c03fed44a2d62fa99b1bdde725e708ba05f8ba0494d470da30a7a72fb298348d7ce74532838e6fc4ec076014155e00f54c35c286b0730"
        }
      ],
      "purl": "pkg:npm/debug@2.6.9",
      "type": "library",
      "bom-ref": "pkg:npm/debug@2.6.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "debug"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "dist/Walker.js",
            "line": 4
          },
          {
            "location": "dist/Walker.js",
            "line": 7
          },
          {
            "location": "src/Walker.ts",
            "line": 5
          },
          {
            "location": "src/Walker.ts",
            "line": 24
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "3.2.6",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "99e97e8dfee7aed125e4f9f5431e3acc0457283a416efcdecec7bba7b2ea20d99da0893c3d83f94b249ac44998bfa4d9d09c84280d61b0221de832218084ed59"
        }
      ],
      "purl": "pkg:npm/debug@3.2.6",
      "type": "library",
      "bom-ref": "pkg:npm/debug@3.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "debug"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "dist/Walker.js",
            "line": 4
          },
          {
            "location": "dist/Walker.js",
            "line": 7
          },
          {
            "location": "src/Walker.ts",
            "line": 5
          },
          {
            "location": "src/Walker.ts",
            "line": 24
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "4.1.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a58008cde468f09e8a3c4689d1558e8793f391bc3f45eb6ecde84633b411457e617b87cf1f1dab74a301db9e9e8490a45fe5d1426d7a7992ea2cd4bc45265767"
        }
      ],
      "purl": "pkg:npm/debug@4.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/debug@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "debug"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "dist/Walker.js",
            "line": 4
          },
          {
            "location": "dist/Walker.js",
            "line": 7
          },
          {
            "location": "src/Walker.ts",
            "line": 5
          },
          {
            "location": "src/Walker.ts",
            "line": 24
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decamelize",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f6534d15148269b20352e7bee26f501f9a191290"
        }
      ],
      "purl": "pkg:npm/decamelize@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/decamelize@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-equal",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f5d260292b660e084eff4cdbc9f08ad3247448b5"
        }
      ],
      "purl": "pkg:npm/deep-equal@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/deep-equal@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-extend",
      "version": "0.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2ce1f120e68f61d1e5251b4241f0c8559b5fc3fb9f33cfab563eb8f51207cdc9bfbc6c1045716de8e3ea2055ac9b65c432b34812d591eb8b18d4b10a0f6bc038"
        }
      ],
      "purl": "pkg:npm/deep-extend@0.6.0",
      "type": "library",
      "bom-ref": "pkg:npm/deep-extend@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "define-properties",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dcca9f60a8f694bcdd3127fc648644fd5f99bb2f81803e9fd7ae1ef0adb0edd827a4a02b0437ab198a4ce3a21861c8e791d3cd3233e4f40e95141f3edd22a55d"
        }
      ],
      "purl": "pkg:npm/define-properties@1.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/define-properties@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "delayed-stream",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "df3ae199acadfb7d440aaae0b29e2272b24ec619"
        }
      ],
      "purl": "pkg:npm/delayed-stream@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/delayed-stream@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dom-walk",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "672226dc74c8f799ad35307df936aba11acd6018"
        }
      ],
      "purl": "pkg:npm/dom-walk@0.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/dom-walk@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "duplexer",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ace6ff808c1ce66b57d1ebf97977acb02334cfc1"
        }
      ],
      "purl": "pkg:npm/duplexer@0.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/duplexer@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ecc-jsbn",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3a83a904e54353287874c564b7549386849a98c9"
        }
      ],
      "purl": "pkg:npm/ecc-jsbn@0.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/ecc-jsbn@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "electron-download",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1631161bd25bfe9a4aff6cd3a0ff94e5d76cd75e1f33564e26a3004786975cbe42bf23c4f5f8aa04affd61cc02f69a081504c4264fc433fcf2470ce2ce2459ae"
        }
      ],
      "purl": "pkg:npm/electron-download@4.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/electron-download@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "electron-notarize",
      "version": "0.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "633aea67a44343b5add915a5c73468414bb19d3797adfa7b95a1fb5ca72642aad9e86680af9d0330fbc5329a8329dad948749b72066007b92d2106e3bc84e609"
        }
      ],
      "purl": "pkg:npm/electron-notarize@0.0.5",
      "type": "library",
      "bom-ref": "pkg:npm/electron-notarize@0.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "electron-osx-sign",
      "version": "0.4.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "555778d27ae756aca6bc5ad8f5990e6201c93af7b11c7613477762fd237e9a3274396851d48f014558f753e61a9b0ea19e465934a669e76aea2f91050003c591"
        }
      ],
      "purl": "pkg:npm/electron-osx-sign@0.4.11",
      "type": "library",
      "bom-ref": "pkg:npm/electron-osx-sign@0.4.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "electron-packager",
      "version": "13.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dc3ae0730f0e10e3f73ecc3f3e9ae5a001494a449449082352adc09967df2460772a3e565e6665e80dc6394b3c693edb3fff065a0e2862a4a20929c0e4f42475"
        }
      ],
      "purl": "pkg:npm/electron-packager@13.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/electron-packager@13.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "env-paths",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4168133b42bb05c38a35b1ae4397c8298ab369e0"
        }
      ],
      "purl": "pkg:npm/env-paths@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/env-paths@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "error-ex",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "edd147366a9e15212dd9906c0ab8a8aca9e7dd9da98fe7ddf64988e90a16c38fff0cbfa270405f73453ba890a2b2aad3b0a4e3c387cd172da95bd3aa4ad0fce2"
        }
      ],
      "purl": "pkg:npm/error-ex@1.3.2",
      "type": "library",
      "bom-ref": "pkg:npm/error-ex@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-abstract",
      "version": "1.13.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bc365f83fca4371415c2ea7ff04d4166157315f071b3d36a33319cbc826baa0e64dbfe596b66d6a38d1d2b6275a602e7819edcf92861f25c18b4b1b2af03eeb6"
        }
      ],
      "purl": "pkg:npm/es-abstract@1.13.0",
      "type": "library",
      "bom-ref": "pkg:npm/es-abstract@1.13.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-to-primitive",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a99af204e26357ffcb6b12d357a502fff59ec27781dcb71738bf4d3fefa8cca557b08208a66ff6735dd40e20fd269d9e4e1b1e730f66de33ea0f04f2a1b71d6e"
        }
      ],
      "purl": "pkg:npm/es-to-primitive@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/es-to-primitive@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-promise",
      "version": "3.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a08cdde84ccdbf34d027a1451bc91d4bcd28a613"
        }
      ],
      "purl": "pkg:npm/es6-promise@3.3.1",
      "type": "library",
      "bom-ref": "pkg:npm/es6-promise@3.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "event-stream",
      "version": "3.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4ab4c9a0f5a54db9338b4c34d86bfce8f4b35571"
        }
      ],
      "purl": "pkg:npm/event-stream@3.3.4",
      "type": "library",
      "bom-ref": "pkg:npm/event-stream@3.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "exif-parser",
      "version": "0.1.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "58a9d2d72c02c1f6f02a0ef4a9166272b7760922"
        }
      ],
      "purl": "pkg:npm/exif-parser@0.1.12",
      "type": "library",
      "bom-ref": "pkg:npm/exif-parser@0.1.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "extend",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e3aae0b9f5c0fb0b25babab3572b4141b9f9197288861bcd304ee3ee8d7e7dd1c0794ed967db4136501e12fd601156a8577df665d8b3604be81074f2088a6fe"
        }
      ],
      "purl": "pkg:npm/extend@3.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/extend@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extract-zip",
      "version": "1.6.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a840b4b8af6403264c8db57f4f1a74333ef81fe9"
        }
      ],
      "purl": "pkg:npm/extract-zip@1.6.7",
      "type": "library",
      "bom-ref": "pkg:npm/extract-zip@1.6.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extsprintf",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "96918440e3041a7a414f8c52e3c574eb3c3e1e05"
        }
      ],
      "purl": "pkg:npm/extsprintf@1.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/extsprintf@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extsprintf",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e2689f8f356fad62cca65a3a91c5df5f9551692f"
        }
      ],
      "purl": "pkg:npm/extsprintf@1.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/extsprintf@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-deep-equal",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7b05218ddf9667bf7f370bf7fdb2cb15fdd0aa49"
        }
      ],
      "purl": "pkg:npm/fast-deep-equal@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/fast-deep-equal@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-json-stable-stringify",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d5142c0caee6b1189f87d3a76111064f86c8bbf2"
        }
      ],
      "purl": "pkg:npm/fast-json-stable-stringify@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/fast-json-stable-stringify@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fd-slicer",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8b5bcbd9ec327c5041bf9ab023fd6750f1177e65"
        }
      ],
      "purl": "pkg:npm/fd-slicer@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/fd-slicer@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "file-type",
      "version": "3.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "257a078384d1db8087bc449d107d52a52672b9e9"
        }
      ],
      "purl": "pkg:npm/file-type@3.9.0",
      "type": "library",
      "bom-ref": "pkg:npm/file-type@3.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "file-uri-to-path",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d19b7eb372fb55fd5b8b0599dbd6804625582f1ee23069c4525f71df77db07f8f78d1f35bbf3b62dba8af819b508348d0ca56d27f623c18ed351de5291e2d02f"
        }
      ],
      "purl": "pkg:npm/file-uri-to-path@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/file-uri-to-path@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-up",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6b2e9822b1a2ce0a60ab64d610eccad53cb24d0f"
        }
      ],
      "purl": "pkg:npm/find-up@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/find-up@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-up",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "45d1b7e506c717ddd482775a2b77920a3c0c57a7"
        }
      ],
      "purl": "pkg:npm/find-up@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/find-up@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "flora-colossus",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "54729c361edecee014dd441679e1a37c1d773a45"
        }
      ],
      "purl": "pkg:npm/flora-colossus@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/flora-colossus@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "for-each",
      "version": "0.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8ea61f2e9ee6a3dbc8c907fcca45b6bfb03ed8de108de09e239f83cfd5eb6a23b58a09fcd708e21fb15bf6f48e5af41f36d9926b81f6468413aeb5e2bdd5199b"
        }
      ],
      "purl": "pkg:npm/for-each@0.3.3",
      "type": "library",
      "bom-ref": "pkg:npm/for-each@0.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "forever-agent",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fbc71f0c41adeb37f96c577ad1ed42d8fdacca91"
        }
      ],
      "purl": "pkg:npm/forever-agent@0.6.1",
      "type": "library",
      "bom-ref": "pkg:npm/forever-agent@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "form-data",
      "version": "2.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d652ca07632edda18fd50ff67823b1d1f35b44c7bb5ddc24b703abba17eaa9dd2b2095b03780e1f84de1acf4a50c25e7491ed4b59d4ddfcad55e6fbaf8c12125"
        }
      ],
      "purl": "pkg:npm/form-data@2.3.3",
      "type": "library",
      "bom-ref": "pkg:npm/form-data@2.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "from",
      "version": "0.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "83c60afc58b9c56997007ed1a768b3ab303a44fe"
        }
      ],
      "purl": "pkg:npm/from@0.1.7",
      "type": "library",
      "bom-ref": "pkg:npm/from@0.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-extra",
      "version": "4.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "abaadb743775a369809d0ade3bb6000c8c5ffd6871e001c18917fa77efdc553f21e38b2cfa51e0c5fd457a672a0e742df57ddcb7831c1ebf893069584ac2bb0a"
        }
      ],
      "purl": "pkg:npm/fs-extra@4.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/fs-extra@4.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-extra",
      "version": "7.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6090da0896449c199c6f0d777ef74033d03034e2703b3ac4e29a8ca81ab99c5884a9752a1f094ae01fb7a54c3a24dbdf48fb57d39c451ed632ff59e2d357860b"
        }
      ],
      "purl": "pkg:npm/fs-extra@7.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/fs-extra@7.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs.realpath",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1504ad2523158caa40db4a2787cb01411994ea4f"
        }
      ],
      "purl": "pkg:npm/fs.realpath@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/fs.realpath@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "function-bind",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c88a2f033317e3db05f18979f1f482589e6cbd22ee6a26cfc5740914b98139b4ee0abd0c7f52a23e8a4633d3621638980426df69ad8587a6eb790e803554c8d0"
        }
      ],
      "purl": "pkg:npm/function-bind@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/function-bind@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "galactus",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cbed2d20a40c1f5679a35908e2b9415733e78db9"
        }
      ],
      "purl": "pkg:npm/galactus@0.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/galactus@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-package-info",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6432796563e28113cd9474dbbd00052985a4999c"
        }
      ],
      "purl": "pkg:npm/get-package-info@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/get-package-info@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-stdin",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b968c6b0a04384324902e8bf1a5df32579a450fe"
        }
      ],
      "purl": "pkg:npm/get-stdin@4.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/get-stdin@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "getpass",
      "version": "0.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5eff8e3e684d569ae4cb2b1282604e8ba62149fa"
        }
      ],
      "purl": "pkg:npm/getpass@0.1.7",
      "type": "library",
      "bom-ref": "pkg:npm/getpass@0.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "7.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8642cf7a97a19a72a4e35a541a6dec631a05b3fba6bab61f60909eadb5c4c85216700cefa62a40815901aaa4fd44128c1a39eaea432ec98c216ba72cc5b88cd4"
        }
      ],
      "purl": "pkg:npm/glob@7.1.4",
      "type": "library",
      "bom-ref": "pkg:npm/glob@7.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "global",
      "version": "4.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e76989268a6c74c38908b1305b10fc0e394e9d0f"
        }
      ],
      "purl": "pkg:npm/global@4.3.2",
      "type": "library",
      "bom-ref": "pkg:npm/global@4.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "4.1.15",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eae1d484e3c4060436e0733eafa6ff43059f66afb2885722a4a16b38588112759dcb9b1dcd8a22fa925e41a3c8e6a38b445a969805d43d036c89e97374ba1e70"
        }
      ],
      "purl": "pkg:npm/graceful-fs@4.1.15",
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@4.1.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "har-schema",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a94c2224ebcac04782a0d9035521f24735b7ec92"
        }
      ],
      "purl": "pkg:npm/har-schema@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/har-schema@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "har-validator",
      "version": "5.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b0dbce0b311036bfeaaef260737506fe40f842d947c9caf3c12fba99f4ebad2abdec1bda61c3d9648d594aa1923d1ef70b19f82ca4c3e0fb6d4707d4ee35aae6"
        }
      ],
      "purl": "pkg:npm/har-validator@5.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/har-validator@5.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-symbols",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ba1a8f1af2a0fc39650f5c850367704122063b44"
        }
      ],
      "purl": "pkg:npm/has-symbols@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/has-symbols@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f676f3b4554e8e7a3ed1916246ade8636f33008c5a79fd528fa79b53a56215e091c764ad7f0716c546d7ffb220364964ded3d71a0e656d618cd61086c14b8cf"
        }
      ],
      "purl": "pkg:npm/has@1.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/has@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hexy",
      "version": "0.2.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "722aba845b121bf069b760e6ad926dbfee7ace93dd9eaf8d4388a3105aef78a374646d66865fcb753d4d419f6c7bab72d5f002708e1de2f62a0bdbfc118a47d8"
        }
      ],
      "purl": "pkg:npm/hexy@0.2.11",
      "type": "library",
      "bom-ref": "pkg:npm/hexy@0.2.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hosted-git-info",
      "version": "2.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ed3fc1c47d7dcdb7024daf1790c95b2b9953a355ad824162dc6bdd584c8db9ce157b1efff43a9b9e9b1fe0933275c7e3f470a0e335161532f765aea56a9839ff"
        }
      ],
      "purl": "pkg:npm/hosted-git-info@2.7.1",
      "type": "library",
      "bom-ref": "pkg:npm/hosted-git-info@2.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-signature",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9aecd925114772f3d95b65a60abb8f7c18fbace1"
        }
      ],
      "purl": "pkg:npm/http-signature@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/http-signature@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "indent-string",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8e2d48348742121b4a8218b7a137e9a52049dc80"
        }
      ],
      "purl": "pkg:npm/indent-string@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/indent-string@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inflight",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "49bd6331d7d02d0c09bc910a1075ba8165b56df9"
        }
      ],
      "purl": "pkg:npm/inflight@1.0.6",
      "type": "library",
      "bom-ref": "pkg:npm/inflight@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "633c2c83e3da42a502f52466022480f4208261de"
        }
      ],
      "purl": "pkg:npm/inherits@2.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ini",
      "version": "1.3.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "45963986e20a08c4560d4a999448bbd9ffe599728cbeeb3370c05dba5890de79d66f1f57fd90503bb0e28cc1184bd1211c16f6a9a71150cb42eecbcbc1ed2573"
        }
      ],
      "purl": "pkg:npm/ini@1.3.5",
      "type": "library",
      "bom-ref": "pkg:npm/ini@1.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ip-regex",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dc589076f659f419c222039a33316f1c7387effd"
        }
      ],
      "purl": "pkg:npm/ip-regex@1.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/ip-regex@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-arrayish",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "77c99840527aa8ecb1a8ba697b80645a7a926a9d"
        }
      ],
      "purl": "pkg:npm/is-arrayish@0.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/is-arrayish@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-callable",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "af9a7db3126362702b2e339ba63038c6ee44288dc2b8a1e42573214fb9306e95322050f59f93cc02ca0fbd69efb5988dcfb2e39180d166177b16523478c8a310"
        }
      ],
      "purl": "pkg:npm/is-callable@1.1.4",
      "type": "library",
      "bom-ref": "pkg:npm/is-callable@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-date-object",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9aa20eb6aeebbff77fbd33e74ca01b33581d3a16"
        }
      ],
      "purl": "pkg:npm/is-date-object@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/is-date-object@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-finite",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cc6677695602be550ef11e8b4aa6305342b6d0aa"
        }
      ],
      "purl": "pkg:npm/is-finite@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/is-finite@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-fullwidth-code-point",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ef9e31386f031a7f0d643af82fde50c457ef00cb"
        }
      ],
      "purl": "pkg:npm/is-fullwidth-code-point@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-fullwidth-code-point@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-function",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "12cfb98b65b57dd3d193a3121f5f6e2f437602b5"
        }
      ],
      "purl": "pkg:npm/is-function@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/is-function@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-regex",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5517489b547091b0930e095654ced25ee97e9491"
        }
      ],
      "purl": "pkg:npm/is-regex@1.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/is-regex@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-symbol",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1d2f1b67da31eb4c8224b1fdb27069230bfda5850091cb8b852035a1eae8d54079cbd6a2429440f32d9ec7de3900eb4264bd652437889371b92ed86cc08e3a2f"
        }
      ],
      "purl": "pkg:npm/is-symbol@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/is-symbol@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-typedarray",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e479c80858df0c1b11ddda6940f96011fcda4a9a"
        }
      ],
      "purl": "pkg:npm/is-typedarray@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-typedarray@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-utf8",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4b0da1442104d1b336340e80797e865cf39f7d72"
        }
      ],
      "purl": "pkg:npm/is-utf8@0.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/is-utf8@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isarray",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8a18acfca9a8f4177e09abfc6038939b05d1eedf"
        }
      ],
      "purl": "pkg:npm/isarray@0.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/isarray@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isarray",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bb935d48582cba168c06834957a54a3e07124f11"
        }
      ],
      "purl": "pkg:npm/isarray@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/isarray@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isbinaryfile",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f1c2412f9b53776392d1d3388f3d3bc107798347420aa2215313c81ad65f6b92fa85696f5793074c84f2fc3040b05f8e7b62d2d57de4ac1521370686516a56c7"
        }
      ],
      "purl": "pkg:npm/isbinaryfile@3.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/isbinaryfile@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isstream",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "47e63f7af55afa6f92e1500e690eb8b8529c099a"
        }
      ],
      "purl": "pkg:npm/isstream@0.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/isstream@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jimp",
      "version": "0.2.28",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dd529a937190f42957a7937d1acc3a7762996ea2"
        }
      ],
      "purl": "pkg:npm/jimp@0.2.28",
      "type": "library",
      "bom-ref": "pkg:npm/jimp@0.2.28",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jpeg-js",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "53e448ec9d263e683266467e9442d2c5a2ef5482"
        }
      ],
      "purl": "pkg:npm/jpeg-js@0.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/jpeg-js@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsbi",
      "version": "2.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4f33bfeb61f179bdba40c6f8206948ff95fe40bafd52aa7514f930a76f8a388096f90faf4ae163eb573ca644fac009ece1670ae7a5fb0a64878497831963aac5"
        }
      ],
      "purl": "pkg:npm/jsbi@2.0.5",
      "type": "library",
      "bom-ref": "pkg:npm/jsbi@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsbn",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a5e654c2e5a2deb5f201d96cefbca80c0ef2f513"
        }
      ],
      "purl": "pkg:npm/jsbn@0.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/jsbn@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-schema-traverse",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5b6c21f9742614e53f0b704861ba1ec727cf075ee5b7aac237634cce64529f6441dca5688753f271ce4eb6f41aec69bfe63221d0b62f7030ffbce3944f7b756"
        }
      ],
      "purl": "pkg:npm/json-schema-traverse@0.4.1",
      "type": "library",
      "bom-ref": "pkg:npm/json-schema-traverse@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-schema",
      "version": "0.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b480c892e59a2f05954ce727bd3f2a4e882f9e13"
        }
      ],
      "purl": "pkg:npm/json-schema@0.2.3",
      "type": "library",
      "bom-ref": "pkg:npm/json-schema@0.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-stringify-safe",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1296a2d58fd45f19a0f6ce01d65701e2c735b6eb"
        }
      ],
      "purl": "pkg:npm/json-stringify-safe@5.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/json-stringify-safe@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsonfile",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8771aae0799b64076b76640fca058f9c10e33ecb"
        }
      ],
      "purl": "pkg:npm/jsonfile@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/jsonfile@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsprim",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "313e66bc1e5cc06e438bc1b7499c2e5c56acb6a2"
        }
      ],
      "purl": "pkg:npm/jsprim@1.4.1",
      "type": "library",
      "bom-ref": "pkg:npm/jsprim@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "load-bmfont",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "913eb7693025361640468c1a358718dbd167fd0624739d8cde5e95d627d170f7b083696f5190c08fb47a7578ce2fd0f4b2272defaa29dd3e7ea1dba60d217cd6"
        }
      ],
      "purl": "pkg:npm/load-bmfont@1.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/load-bmfont@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "load-json-file",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "956905708d58b4bab4c2261b04f59f31c99374c0"
        }
      ],
      "purl": "pkg:npm/load-json-file@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/load-json-file@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "load-json-file",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7947e42149af80d696cbf797bcaabcfe1fe29ca8"
        }
      ],
      "purl": "pkg:npm/load-json-file@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/load-json-file@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "locate-path",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2b568b265eec944c6d9c0de9c3dbbbca0354cd8e"
        }
      ],
      "purl": "pkg:npm/locate-path@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/locate-path@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.get",
      "version": "4.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2d177f652fa31e939b4438d5341499dfa3825e99"
        }
      ],
      "purl": "pkg:npm/lodash.get@4.4.2",
      "type": "library",
      "bom-ref": "pkg:npm/lodash.get@4.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "long",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5ec3fe2a14227f86e35f591bb928b248914d01e84dc602dbea13d1189f50b14afc6a31e4b9719dac79855135145e10f0557d91e5b63824d644c1b52232157e30"
        }
      ],
      "purl": "pkg:npm/long@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/long@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "loud-rejection",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5b46f80147edee578870f086d04821cf998e551f"
        }
      ],
      "purl": "pkg:npm/loud-rejection@1.6.0",
      "type": "library",
      "bom-ref": "pkg:npm/loud-rejection@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "map-obj",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d933ceb9205d82bdcf4886f6742bdc2b4dea146d"
        }
      ],
      "purl": "pkg:npm/map-obj@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/map-obj@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "map-stream",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e56aa94c4c8055a16404a0674b78f215f7c8e194"
        }
      ],
      "purl": "pkg:npm/map-stream@0.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/map-stream@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "meow",
      "version": "3.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "72cb668b425228290abbfa856892587308a801fb"
        }
      ],
      "purl": "pkg:npm/meow@3.7.0",
      "type": "library",
      "bom-ref": "pkg:npm/meow@3.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-db",
      "version": "1.40.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d875e38c3f2f6f9f112a151468e99bd367c77da0f6fe935f0f2a860d6147b6b2d54404f3f0b259ffa96cdd6e6688be7859f6fd8ff82b9e70af9fa547ec57698"
        }
      ],
      "purl": "pkg:npm/mime-db@1.40.0",
      "type": "library",
      "bom-ref": "pkg:npm/mime-db@1.40.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-types",
      "version": "2.1.24",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "59a1474b73029797daa66de82f15387980f0efb21033600273143d448c5f682de8a1ce8f16e04c19966c629be85d2e43e504d63e27a8d638cb7409b74c13f771"
        }
      ],
      "purl": "pkg:npm/mime-types@2.1.24",
      "type": "library",
      "bom-ref": "pkg:npm/mime-types@2.1.24",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c74567f2ca48fb0b89d4ee92ee09db69083c3f187834d1dbeca4883661162a23c4e1128ea65be28e7f8d92662699180febc99cef48f611b793151b2bb306907a"
        }
      ],
      "purl": "pkg:npm/mime@1.6.0",
      "type": "library",
      "bom-ref": "pkg:npm/mime@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "min-document",
      "version": "2.19.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7bd282e3f5842ed295bb748cdd9f1ffa2c824685"
        }
      ],
      "purl": "pkg:npm/min-document@2.19.0",
      "type": "library",
      "bom-ref": "pkg:npm/min-document@2.19.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c891d5404872a8f2d44e0b7d07cdcf5eee96debc7832fbc7bd252f4e8a20a70a060ce510fb20eb4741d1a2dfb23827423bbbb8857de959fb7a91604172a87450"
        }
      ],
      "purl": "pkg:npm/minimatch@3.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "0.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "857fcabfc3397d2625b8228262e86aa7a011b05d"
        }
      ],
      "purl": "pkg:npm/minimist@0.0.8",
      "type": "library",
      "bom-ref": "pkg:npm/minimist@0.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a35008b20f41383eec1fb914f4cd5df79a264284"
        }
      ],
      "purl": "pkg:npm/minimist@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/minimist@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mkdirp",
      "version": "0.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "30057438eac6cf7f8c4767f38648d6697d75c903"
        }
      ],
      "purl": "pkg:npm/mkdirp@0.5.1",
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@0.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mpris-service",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1d61629ad598adf9bb88ccfc5634eb63af1cdafc0131be640d7a8043d1a680832fe5ec5f833fb0dbbec5d5714173bd8dbba14cdd01fa8ea3064fcf66d8c30306"
        }
      ],
      "purl": "pkg:npm/mpris-service@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/mpris-service@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5608aeadfc00be6c2901df5f9861788de0d597c8"
        }
      ],
      "purl": "pkg:npm/ms@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b0690fc7e56332d980e8c5f6ee80381411442c50996784b85ea7863970afebcb53fa36f7be4fd1c9a2963f43d32b25ad98b48cd1bf9a7544c4bdbb353c4687db"
        }
      ],
      "purl": "pkg:npm/ms@2.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nan",
      "version": "2.14.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "20d3858f7ec2ee4dc07da353b57f1186c4f0eea472ede2c44f5e1c44e8bdfb91c055b6c7b885941c46ae06fe6a4f802fdad59ab224d8d49c3aa6e50da9125742"
        }
      ],
      "purl": "pkg:npm/nan@2.14.0",
      "type": "library",
      "bom-ref": "pkg:npm/nan@2.14.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "normalize-package-data",
      "version": "2.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ff908c3774f44785d38f80dc19a7b1a3eae8652752156ff400e39344eae3c73086d70ad65c4b066d129ebe39482fe643138b19949af9103e185b4caa9a42be78"
        }
      ],
      "purl": "pkg:npm/normalize-package-data@2.5.0",
      "type": "library",
      "bom-ref": "pkg:npm/normalize-package-data@2.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nugget",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "201095a487e1ad36081b3432fa3cada4f8d071b0"
        }
      ],
      "purl": "pkg:npm/nugget@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/nugget@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "number-is-nan",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "097b602b53422a522c1afb8790318336941a011d"
        }
      ],
      "purl": "pkg:npm/number-is-nan@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/number-is-nan@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "oauth-sign",
      "version": "0.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7dec6150514f4c657cc9b02d48819b57a80e912bfc52d45b0c19c0c8b430e103ca920365b07d81c8f1ad314a9d5a4a2ce98091980a958b0819ac973f9910f365"
        }
      ],
      "purl": "pkg:npm/oauth-sign@0.9.0",
      "type": "library",
      "bom-ref": "pkg:npm/oauth-sign@0.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-assign",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2109adc7965887cfc05cbbd442cac8bfbb360863"
        }
      ],
      "purl": "pkg:npm/object-assign@4.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/object-assign@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-keys",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "36e00449439432b9485ce7c72b30fa6e93eeded62ddf1be335d44843e15e4f494d6f82bc591ef409a0f186e360b92d971be1a39323303b3b0de5992d2267e12c"
        }
      ],
      "purl": "pkg:npm/object-keys@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/object-keys@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-keys",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "28a6aae7428dd2c3a92f3d95f21335dd204e0336"
        }
      ],
      "purl": "pkg:npm/object-keys@0.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/object-keys@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "once",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "583b1aa775961d4b113ac17d9c50baef9dd76bd1"
        }
      ],
      "purl": "pkg:npm/once@1.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/once@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-limit",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bef717b0b009f43af9ad038f93bb68650649029065d8ae09e9d00d4ac12e87a408e3525872c4bfaa14c66bd12b2145202b758d428258bf2971be3aa68aa100f5"
        }
      ],
      "purl": "pkg:npm/p-limit@1.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/p-limit@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-locate",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "20a0103b222a70c8fd39cc2e580680f3dde5ec43"
        }
      ],
      "purl": "pkg:npm/p-locate@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/p-locate@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-try",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cbc79cdbaf8fd4228e13f621f2b1a237c1b207b3"
        }
      ],
      "purl": "pkg:npm/p-try@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/p-try@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-author",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d3460bf1ddd0dfaeed42da754242e65fb684a81f"
        }
      ],
      "purl": "pkg:npm/parse-author@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/parse-author@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-bmfont-ascii",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "11ac3c3ff58f7c2020ab22769079108d4dfa0285"
        }
      ],
      "purl": "pkg:npm/parse-bmfont-ascii@1.0.6",
      "type": "library",
      "bom-ref": "pkg:npm/parse-bmfont-ascii@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-bmfont-binary",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d038b476d3e9dd9db1e11a0b0e53a22792b69006"
        }
      ],
      "purl": "pkg:npm/parse-bmfont-binary@1.0.6",
      "type": "library",
      "bom-ref": "pkg:npm/parse-bmfont-binary@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-bmfont-xml",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6e39e58843a61afdf2d5a3047d110c049f6d7cbdd64748b408a3e3eb50e748b6a8c564779cbaec42b11b08877ff2b178372445d1c0aa8ac4955f241858cfa609"
        }
      ],
      "purl": "pkg:npm/parse-bmfont-xml@1.1.4",
      "type": "library",
      "bom-ref": "pkg:npm/parse-bmfont-xml@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-headers",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fcbca9261cc59b20480d83fd6835607b211be6c41f6df6399a70eae21561950ebd8ecf3bc177e6108e55df123abef5dab2a79ba74a02cad6052f1b0155f0b34a"
        }
      ],
      "purl": "pkg:npm/parse-headers@2.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/parse-headers@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-json",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f480f40434ef80741f8469099f8dea18f55a4dc9"
        }
      ],
      "purl": "pkg:npm/parse-json@2.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/parse-json@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-exists",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0feb6c64f0fc518d9a754dd5efb62c7022761f4b"
        }
      ],
      "purl": "pkg:npm/path-exists@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/path-exists@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-exists",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ce0ebeaa5f78cb18925ea7d810d7b59b010fd515"
        }
      ],
      "purl": "pkg:npm/path-exists@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/path-exists@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-is-absolute",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "174b9268735534ffbc7ace6bf53a5a9e1b5c5f5f"
        }
      ],
      "purl": "pkg:npm/path-is-absolute@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/path-is-absolute@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-parse",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "19298e4f611b1eb20d05ff5247b08310bc2527c004364dd09fb3a290ae2715802edceb5edbe258355be4a401109b7fd32cd109143ff16498f3cb183728158ecf"
        }
      ],
      "purl": "pkg:npm/path-parse@1.0.6",
      "type": "library",
      "bom-ref": "pkg:npm/path-parse@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-type",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "59c44f7ee491da704da415da5a4070ba4f8fe441"
        }
      ],
      "purl": "pkg:npm/path-type@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/path-type@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-type",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f012ccb8415b7096fc2daa1054c3d72389594c73"
        }
      ],
      "purl": "pkg:npm/path-type@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/path-type@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pause-stream",
      "version": "0.0.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fe5a34b0cbce12b5aa6a2b403ee2e73b602f1445"
        }
      ],
      "purl": "pkg:npm/pause-stream@0.0.11",
      "type": "library",
      "bom-ref": "pkg:npm/pause-stream@0.0.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pend",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7a57eb550a6783f9115331fcf4663d5c8e007a50"
        }
      ],
      "purl": "pkg:npm/pend@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/pend@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "performance-now",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6309f4e0e5fa913ec1c69307ae364b4b377c9e7b"
        }
      ],
      "purl": "pkg:npm/performance-now@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/performance-now@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "phin",
      "version": "2.9.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0b316bf74a8cdb88eee5ff3caae142ffaaa88630b5e38ade85ee67e831fdd349605e651ef3afb108a735d1ebf9ea044a0b8fc19075281b8b928908018885f00c"
        }
      ],
      "purl": "pkg:npm/phin@2.9.3",
      "type": "library",
      "bom-ref": "pkg:npm/phin@2.9.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pify",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ed141a6ac043a849ea588498e7dca8b15330e90c"
        }
      ],
      "purl": "pkg:npm/pify@2.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/pify@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pify",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b81f3490115bfed7ddebc6d595e1bd4f9186b063e326b2c05294793d922b8419c86914d0463a9d252b082a438fe8e00815b8fb18eadcb9d739a4d8d9fa0795da"
        }
      ],
      "purl": "pkg:npm/pify@4.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/pify@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pinkie-promise",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2135d6dfa7a358c069ac9b178776288228450ffa"
        }
      ],
      "purl": "pkg:npm/pinkie-promise@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/pinkie-promise@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pinkie",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "72556b80cfa0d48a974e80e77248e80ed4f7f870"
        }
      ],
      "purl": "pkg:npm/pinkie@2.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/pinkie@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pixelmatch",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8f47dcec5011b477b67db03c243bc1f3085e8854"
        }
      ],
      "purl": "pkg:npm/pixelmatch@4.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/pixelmatch@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "plist",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "57ccdb7a0821df21831217a3cad54e3e146a1025"
        }
      ],
      "purl": "pkg:npm/plist@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/plist@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "plist",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1a982f1c7a1c191c909bbe1be85584659551ae81ca135234fc14e3026c926a884af9c527fa16696ea5e4737296816de041892a7107a3df916885c4f415196445"
        }
      ],
      "purl": "pkg:npm/plist@3.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/plist@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pngjs",
      "version": "3.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "342ac21e15a69d09257c7e0cb493118d9d9af1cf34a9778c95032fdae569f48489313b79eb649b19dea7da8ab43da3e02a6ed9ea92fd1365252c8842f921cbdf"
        }
      ],
      "purl": "pkg:npm/pngjs@3.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/pngjs@3.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pretty-bytes",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0a22e8210609ad35542f8c8d5d2159aff0751c84"
        }
      ],
      "purl": "pkg:npm/pretty-bytes@1.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/pretty-bytes@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "process-nextick-args",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32d102d53a8dd045399dea61689e2b02d4e11ed0bce9d34df6a0ae121b6c86fa55064016e593bb04048df5112717d7a85c6711b9bfa916e284a4e1c4f876c433"
        }
      ],
      "purl": "pkg:npm/process-nextick-args@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/process-nextick-args@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "process",
      "version": "0.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1638d8a8e34c2f440a91db95ab9aeb677fc185cf"
        }
      ],
      "purl": "pkg:npm/process@0.5.2",
      "type": "library",
      "bom-ref": "pkg:npm/process@0.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "progress-stream",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2cd3cfea33ba3a89c9c121ec3347abe9ab125f77"
        }
      ],
      "purl": "pkg:npm/progress-stream@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/progress-stream@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "psl",
      "version": "1.1.32",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3070020241e98a153f4441863cb8f8b047dcfd7296d9b85e8a0bc73b5754aa368a8a0329d42f3e58b41844681e28532cc393cc7de81971a37c2035cafdc0f4fa"
        }
      ],
      "purl": "pkg:npm/psl@1.1.32",
      "type": "library",
      "bom-ref": "pkg:npm/psl@1.1.32",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "punycode",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c0d5a63b2718800ad8e1eb0fa5269c84dd41845e"
        }
      ],
      "purl": "pkg:npm/punycode@1.4.1",
      "type": "library",
      "bom-ref": "pkg:npm/punycode@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "punycode",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5d1b118dd7fe8f99a5fb2ffa18a1cf65bac5ffca766206b424fb5da93218d977b9a2124f0fdb1a0c924b3efa7df8d481a6b56f7af7576726e78f672ff0e11dd0"
        }
      ],
      "purl": "pkg:npm/punycode@2.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/punycode@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "put",
      "version": "0.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "30f5f60bd6e4389bd329e16a25386cbb2e4a00a3"
        }
      ],
      "purl": "pkg:npm/put@0.0.6",
      "type": "library",
      "bom-ref": "pkg:npm/put@0.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "6.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3796405f8fcbc49985fbbc0def8a540faa8087dff09ef750723abd4d98debef5f3494a3b6df9b0f75b1aa8c8f3192db1abdd7fa1d376756fd63a5eea40734318"
        }
      ],
      "purl": "pkg:npm/qs@6.5.2",
      "type": "library",
      "bom-ref": "pkg:npm/qs@6.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rc",
      "version": "1.2.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cb76c682a2a3dd005dc4b6cb9289a5a2192fb00f207408944254812670617e7f813f18386dceb677c4dc056d79c1abc37e07b10a071c72485c66fcb0c9060f3b"
        }
      ],
      "purl": "pkg:npm/rc@1.2.8",
      "type": "library",
      "bom-ref": "pkg:npm/rc@1.2.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rcedit",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf6ca907881b20d848eb055ed0924c99da663a998d73883dd2c13affa252b9c8799189e37f3f42c6f54faaa85286047a188926b56dd6d9495f89785696303417"
        }
      ],
      "purl": "pkg:npm/rcedit@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/rcedit@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-chunk",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5f68cab307e663f19993527d9b589cace4661194"
        }
      ],
      "purl": "pkg:npm/read-chunk@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/read-chunk@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-pkg-up",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9d63c13276c065918d57f002a57f40a1b643fb02"
        }
      ],
      "purl": "pkg:npm/read-pkg-up@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/read-pkg-up@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-pkg-up",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6b72a8048984e0c41e79510fd5e9fa99b3b549be"
        }
      ],
      "purl": "pkg:npm/read-pkg-up@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/read-pkg-up@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-pkg",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f5ffaa5ecd29cb31c0474bca7d756b6bb29e3f28"
        }
      ],
      "purl": "pkg:npm/read-pkg@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/read-pkg@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-pkg",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8ef1c0623c6a6db0dc6713c4bfac46332b2368f8"
        }
      ],
      "purl": "pkg:npm/read-pkg@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/read-pkg@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "2.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b50b4a03d588021045dfe54b02c7b232a65e0635b4007268c4eb58a92519349c5ab84ae62db566d855b5cbe27f600f5d52b002dfd2137a39595a1548c1ac242b"
        }
      ],
      "purl": "pkg:npm/readable-stream@2.3.6",
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@2.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "1.1.14",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7cf4c54ef648e3813084c636dd2079e166c081d9"
        }
      ],
      "purl": "pkg:npm/readable-stream@1.1.14",
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@1.1.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "redent",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cf916ab1fd5f1f16dfb20822dd6ec7f730c2afde"
        }
      ],
      "purl": "pkg:npm/redent@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/redent@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "repeating",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5214c53a926d3552707527fbab415dbc08d06dda"
        }
      ],
      "purl": "pkg:npm/repeating@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/repeating@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "request",
      "version": "2.88.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "340a814ab8a318b65d33459936c2272c9a6426890bef65d88d4a670748b0b1183187b741e823ab1e74c137037413e9470c0273bbb90b0240de634f33dbf03486"
        }
      ],
      "purl": "pkg:npm/request@2.88.0",
      "type": "library",
      "bom-ref": "pkg:npm/request@2.88.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve",
      "version": "1.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bc8a6017ac1fb8939923b28a2923fe1e688a82069d3d001db29e47882d66bea9dfa74805d6f77080159921dad57edf6982aa0c15037e47b052599881c71f8107"
        }
      ],
      "purl": "pkg:npm/resolve@1.11.1",
      "type": "library",
      "bom-ref": "pkg:npm/resolve@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rimraf",
      "version": "2.6.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9b0a9e5b95ec036a807a31b8ea061d10d6b15e3c7da2744d09f9fb2f476eb8fe210ae4c88bf40eecf0cad3b2897e9d5dfa2cd63ebcc4243712a816b439942b88"
        }
      ],
      "purl": "pkg:npm/rimraf@2.6.3",
      "type": "library",
      "bom-ref": "pkg:npm/rimraf@2.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-buffer",
      "version": "5.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "19dd94641243917958ec66c9c5fb04f3f9ef2a45045351b7f1cd6c88de903fa6bd3d3f4c98707c1a7a6c71298c252a05f0b388aedf2e77fc0fb688f2b381bafa"
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safer-buffer",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "619a372bcd920fb462ca2d04d4440fa232f3ee4a5ea6749023d2323db1c78355d75debdbe5d248eeda72376003c467106c71bbbdcc911e4d1c6f0a9c42b894b6"
        }
      ],
      "purl": "pkg:npm/safer-buffer@2.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/safer-buffer@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sanitize-filename",
      "version": "1.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "612da1c96473fa02dccda92dcd5b4ab164a6772a"
        }
      ],
      "purl": "pkg:npm/sanitize-filename@1.6.1",
      "type": "library",
      "bom-ref": "pkg:npm/sanitize-filename@1.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sax",
      "version": "1.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "36a543bfd4e900d523166d0df2e3391b12f7e9480a8bdfdab59c3ec7b6059d0f1c9301462ab978c57e325adadecb75099b99cfd6451b9d880ba29a963524615b"
        }
      ],
      "purl": "pkg:npm/sax@1.2.4",
      "type": "framework",
      "bom-ref": "pkg:npm/sax@1.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "semver",
      "version": "5.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "61ae768d25f6bbb40a821c5ea051a92f00ad1a5b7b8f4a18f4361be5aa6df673e5278d880feba54d71129edfea010728484472679b25dcb0c83b0d27027ff90c"
        }
      ],
      "purl": "pkg:npm/semver@5.7.0",
      "type": "library",
      "bom-ref": "pkg:npm/semver@5.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "signal-exit",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b5fdc08f1287ea1178628e415e25132b73646c6d"
        }
      ],
      "purl": "pkg:npm/signal-exit@3.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/signal-exit@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "single-line-log",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c2f83f273a3e1a16edb0995661da0ed5ef033364"
        }
      ],
      "purl": "pkg:npm/single-line-log@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/single-line-log@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map-support",
      "version": "0.5.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e21d8f6efcb2d79104d361be24e6695029aa589baaaecfac124cdec139bef813e2ec7be7fc7c1ca8b01c371600c88d31d770a93cf9fe90c8e5fa1a655cc1c84d"
        }
      ],
      "purl": "pkg:npm/source-map-support@0.5.12",
      "type": "library",
      "bom-ref": "pkg:npm/source-map-support@0.5.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "52381aa6e99695b3219018334fb624739617513e3a17488abbc4865ead1b7303f9773fe1d0f963e9e9c9aa3cf565bab697959aa989eb55bc16396332177178ee"
        }
      ],
      "purl": "pkg:npm/source-map@0.6.1",
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-correct",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "96bd8464272d0b604d47b8fb5b32761690f39f1932d6c8dfc6fbd8132cf13726fa9595c7383984a09785bb826ea589647e16b5299a49ca8aa227ba60035aaaf1"
        }
      ],
      "purl": "pkg:npm/spdx-correct@3.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/spdx-correct@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-exceptions",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d9740009f1252a2f529556f509869d2835efa1a8cf80154f9ff80e40bad3bc774495a561afb6446ea25a46724b54d79a23870c10081509e04c285e8c5910c244"
        }
      ],
      "purl": "pkg:npm/spdx-exceptions@2.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/spdx-exceptions@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-expression-parse",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "620e83dd7a510f89243a64e97606d48842452a08491f4ddf882d4e3e597987fd2c3ba9de8768ea443547390e28fcb31e6b4b600a46cc81e6b98a9fdef8c916ca"
        }
      ],
      "purl": "pkg:npm/spdx-expression-parse@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/spdx-expression-parse@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-license-ids",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ee3f0b6092de63f61be8009b43b17beaacb98c7929d14ea38017c9b24f7b6f05a55549d45ac020a72682be8d7b874fd14069d0d37ead543a268b0a08e290e440"
        }
      ],
      "purl": "pkg:npm/spdx-license-ids@3.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/spdx-license-ids@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "speedometer",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9876dbd2a169d3115402d48e6ea6329c8816a50d"
        }
      ],
      "purl": "pkg:npm/speedometer@0.1.4",
      "type": "library",
      "bom-ref": "pkg:npm/speedometer@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "split",
      "version": "0.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cd0eea5e63a211dfff7eb0f091c4133e2d0dd28f"
        }
      ],
      "purl": "pkg:npm/split@0.3.3",
      "type": "library",
      "bom-ref": "pkg:npm/split@0.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sshpk",
      "version": "1.16.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1d75ea554abbfa970a78baaa663ea61c550cbd7b4e26dd6ea14c74f69156eb4d758a74ccc6a23c040f0f33de66cab232c8ac1d9f38dd1632e213a2813d5b4922"
        }
      ],
      "purl": "pkg:npm/sshpk@1.16.1",
      "type": "library",
      "bom-ref": "pkg:npm/sshpk@1.16.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-combiner",
      "version": "0.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4d5e433c185261dde623ca3f44c586bcf5c4ad14"
        }
      ],
      "purl": "pkg:npm/stream-combiner@0.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/stream-combiner@0.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-to-buffer",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "26799d903ab2025c9bd550ac47171b00f8dd80a9"
        }
      ],
      "purl": "pkg:npm/stream-to-buffer@0.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/stream-to-buffer@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-to",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "84306098d85fdb990b9fa300b1b3ccf55e8ef01d"
        }
      ],
      "purl": "pkg:npm/stream-to@0.2.2",
      "type": "library",
      "bom-ref": "pkg:npm/stream-to@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string-width",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "118bdf5b8cdc51a2a7e70d211e07e2b0b9b107d3"
        }
      ],
      "purl": "pkg:npm/string-width@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/string-width@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string.prototype.trim",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d04de2c89e137f4d7d206f086b5ed2fae6be8cea"
        }
      ],
      "purl": "pkg:npm/string.prototype.trim@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/string.prototype.trim@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "0.10.31",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "62e203bc41766c6c28c9fc84301dab1c5310fa94"
        }
      ],
      "purl": "pkg:npm/string_decoder@0.10.31",
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@0.10.31",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9ff4a19ef0e2e851db6d57ef8aba3e5a88e2173bfeb3c30f30705ccd578f7d4a4324bc282d3d21b759786300426e2f29240bde104767907c8fc933ff9b345fc2"
        }
      ],
      "purl": "pkg:npm/string_decoder@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-ansi",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6a385fb8853d952d5ff05d0e8aaf94278dc63dcf"
        }
      ],
      "purl": "pkg:npm/strip-ansi@3.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-bom",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6219a85616520491f35788bdbf1447a99c7e6b0e"
        }
      ],
      "purl": "pkg:npm/strip-bom@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/strip-bom@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-bom",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2334c18e9c759f7bdd56fdef7e9ae3d588e68ed3"
        }
      ],
      "purl": "pkg:npm/strip-bom@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/strip-bom@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-indent",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0c7962a6adefa7bbd4ac366460a638552ae1a0a2"
        }
      ],
      "purl": "pkg:npm/strip-indent@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/strip-indent@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-json-comments",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3c531942e908c2697c0ec344858c286c7ca0a60a"
        }
      ],
      "purl": "pkg:npm/strip-json-comments@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/strip-json-comments@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sumchecker",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0f42c10e5d05da5d42eea3e56c3399a37d6c5b3e"
        }
      ],
      "purl": "pkg:npm/sumchecker@2.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/sumchecker@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "throttleit",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cfedf88e60c00dd9697b61fdd2a8343a9b680eaf"
        }
      ],
      "purl": "pkg:npm/throttleit@0.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/throttleit@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "through2",
      "version": "0.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "eb3284da4ea311b6cc8ace3653748a52abf25a3f"
        }
      ],
      "purl": "pkg:npm/through2@0.2.3",
      "type": "library",
      "bom-ref": "pkg:npm/through2@0.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "through",
      "version": "2.3.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0dd4c9ffaabc357960b1b724115d7e0e86a2e1f5"
        }
      ],
      "purl": "pkg:npm/through@2.3.8",
      "type": "library",
      "bom-ref": "pkg:npm/through@2.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tinycolor2",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f4fad333447bc0b07d4dc8e9209d8f39a8ac77e8"
        }
      ],
      "purl": "pkg:npm/tinycolor2@1.4.1",
      "type": "library",
      "bom-ref": "pkg:npm/tinycolor2@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tmp-promise",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f3e021f5a0752115c29c83b15d9d2e168cd5d67314e718aeee18455544b16776d8bbea6c0f84f36a00b355b7b150280d346267b263434254b89c6de64f2a0d93"
        }
      ],
      "purl": "pkg:npm/tmp-promise@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/tmp-promise@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tmp",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "27b6762b4f236c671d035924429252a8b17a4f4b5d42aa51da99d2517b087216cf75323dbf77bce5c2d6d1de960e1c2e02578e57bd63db15acf2a30f7caee72b"
        }
      ],
      "purl": "pkg:npm/tmp@0.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/tmp@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tough-cookie",
      "version": "2.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "439b2b93fe2f0cce78589b098a8dd7367e8adac086f8243c1b95b3e9b661459a007bff93c63581fc69450276046e461594e37d14c93f7c4de1d912e93d7a3895"
        }
      ],
      "purl": "pkg:npm/tough-cookie@2.4.3",
      "type": "library",
      "bom-ref": "pkg:npm/tough-cookie@2.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "trim-newlines",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5887966bb582a4503a41eb524f7d35011815a613"
        }
      ],
      "purl": "pkg:npm/trim-newlines@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/trim-newlines@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "truncate-utf8-bytes",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "405923909592d56f78a5818434b0b78489ca5f2b"
        }
      ],
      "purl": "pkg:npm/truncate-utf8-bytes@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/truncate-utf8-bytes@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tunnel-agent",
      "version": "0.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "27a5dea06b36b04a0a9966774b290868f0fc40fd"
        }
      ],
      "purl": "pkg:npm/tunnel-agent@0.6.0",
      "type": "library",
      "bom-ref": "pkg:npm/tunnel-agent@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tweetnacl",
      "version": "0.14.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5ae68177f192d4456269d108afa93ff8743f4f64"
        }
      ],
      "purl": "pkg:npm/tweetnacl@0.14.5",
      "type": "library",
      "bom-ref": "pkg:npm/tweetnacl@0.14.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typedarray",
      "version": "0.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "867ac74e3864187b1d3d47d996a78ec5c8830777"
        }
      ],
      "purl": "pkg:npm/typedarray@0.0.6",
      "type": "library",
      "bom-ref": "pkg:npm/typedarray@0.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "universalify",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ac125e2390970259b2d6957eeb5ed607d27add4e9771acc71c5d9fd9d6c98b1e17ce9505d114b765b8f414620e080bdae4ffddfc604e61a002435c3ed1acd492"
        }
      ],
      "purl": "pkg:npm/universalify@0.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/universalify@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uri-js",
      "version": "4.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "298f45ae68abaa5f755f64208ebcb459de18f984ddadd661792f13170be46cb59ffc6e4a3490c287aa4a2f939972d116e3ed0169ae6274ad9942e10b4703f39d"
        }
      ],
      "purl": "pkg:npm/uri-js@4.2.2",
      "type": "library",
      "bom-ref": "pkg:npm/uri-js@4.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "url-regex",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dbad1e0c9e29e105dd0b1f09f6862f7fdb482724"
        }
      ],
      "purl": "pkg:npm/url-regex@3.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/url-regex@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "utf8-byte-length",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f45f150c4c66eee968186505ab93fcbb8ad6bf61"
        }
      ],
      "purl": "pkg:npm/utf8-byte-length@1.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/utf8-byte-length@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "util-deprecate",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "450d4dc9fa70de732762fbd2d4a28981419a0ccf"
        }
      ],
      "purl": "pkg:npm/util-deprecate@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/util-deprecate@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uuid",
      "version": "3.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c9726678d6b0dc39e728038a244e75b0bfd96987d6251975a4af5daf5f58142bb439b4b6df5001d7f2dba93291010e64c3c03dd2b03a7ebe2b88e5294d9bd064"
        }
      ],
      "purl": "pkg:npm/uuid@3.3.2",
      "type": "library",
      "bom-ref": "pkg:npm/uuid@3.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "validate-npm-package-license",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0e92a6d948bfc4deff1d0282b69671a11581859f59d24aadca01bc5c280d43c6650e7c6e4265a18f9eba8fc7cde02bb7fc999b86c0e8edf70026ae2cf61dbb13"
        }
      ],
      "purl": "pkg:npm/validate-npm-package-license@3.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/validate-npm-package-license@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "verror",
      "version": "1.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3a105ca17053af55d6e270c1f8288682e18da400"
        }
      ],
      "purl": "pkg:npm/verror@1.10.0",
      "type": "library",
      "bom-ref": "pkg:npm/verror@1.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrappy",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b5243d8f3ec1aa35f1364605bc0d1036e30ab69f"
        }
      ],
      "purl": "pkg:npm/wrappy@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/wrappy@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xhr",
      "version": "2.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e2794eff5e2ddc13546515c85df5defb737ac37b352a8c5c25451445cb5deb804b45eebb138811c29e0f8f2c2d0d8ef67d7a59d72e8287455941163f80c3f3cd"
        }
      ],
      "purl": "pkg:npm/xhr@2.5.0",
      "type": "library",
      "bom-ref": "pkg:npm/xhr@2.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xml-parse-from-string",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a9029e929d3dbcded169f3c6e28238d95a5d5a28"
        }
      ],
      "purl": "pkg:npm/xml-parse-from-string@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/xml-parse-from-string@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xml2js",
      "version": "0.4.19",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7ac66725924e88947dc1628ccaebd2135cba0eae4b0ae25a9ea871b251f66f133a76e6a1359f8732908b8414066646d7eb145ff31d58d9e26582ddaadeaa38f5"
        }
      ],
      "purl": "pkg:npm/xml2js@0.4.19",
      "type": "library",
      "bom-ref": "pkg:npm/xml2js@0.4.19",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xmlbuilder",
      "version": "8.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "69248673410b4ba42e1a6136551d2922335aa773"
        }
      ],
      "purl": "pkg:npm/xmlbuilder@8.2.2",
      "type": "library",
      "bom-ref": "pkg:npm/xmlbuilder@8.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xmlbuilder",
      "version": "9.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "132ee63d2ec5565c557e20f4c22df9aca686b10d"
        }
      ],
      "purl": "pkg:npm/xmlbuilder@9.0.7",
      "type": "library",
      "bom-ref": "pkg:npm/xmlbuilder@9.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xmldom",
      "version": "0.1.27",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d501f97b3bdb403af8ef9ecc20573187aadac0e9"
        }
      ],
      "purl": "pkg:npm/xmldom@0.1.27",
      "type": "library",
      "bom-ref": "pkg:npm/xmldom@0.1.27",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xtend",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a5c6d532be656e23db820efb943a1f04998d63af"
        }
      ],
      "purl": "pkg:npm/xtend@4.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/xtend@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xtend",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6efecc2a4dad8e6962c4901b337ce7ba87b5d28b"
        }
      ],
      "purl": "pkg:npm/xtend@2.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/xtend@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs-parser",
      "version": "13.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a15015b07cfab85ae0dd7421785208f0448edacb007fd96e5ae01de967b1b2ee05dceb485b4a3c22b89b3d762b0f8582db82d6b4fac9946cbcef2e6e74af9dc5"
        }
      ],
      "purl": "pkg:npm/yargs-parser@13.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/yargs-parser@13.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "yauzl",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9528f442dab1b2284e58b4379bb194e22e0c4005"
        }
      ],
      "purl": "pkg:npm/yauzl@2.4.1",
      "type": "library",
      "bom-ref": "pkg:npm/yauzl@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/xml2js/yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/xml2js/yarn.lock"
              }
            ],
            "concludedValue": "test/fixtures/xml2js/yarn.lock"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/@ampproject/remapping@2.3.0",
      "dependsOn": [
        "pkg:npm/@jridgewell/gen-mapping@0.3.12",
        "pkg:npm/@jridgewell/trace-mapping@0.3.29"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-string-parser@7.27.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/helper-validator-identifier@7.27.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/parser@7.28.0",
      "dependsOn": [
        "pkg:npm/@babel/types@7.28.1"
      ]
    },
    {
      "ref": "pkg:npm/@babel/types@7.28.1",
      "dependsOn": [
        "pkg:npm/@babel/helper-string-parser@7.27.1",
        "pkg:npm/@babel/helper-validator-identifier@7.27.1"
      ]
    },
    {
      "ref": "pkg:npm/@bcoe/v8-coverage@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/aix-ppc64@0.25.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/android-arm64@0.25.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/android-arm@0.25.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/android-x64@0.25.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/darwin-arm64@0.25.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/darwin-x64@0.25.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/freebsd-arm64@0.25.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/freebsd-x64@0.25.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-arm64@0.25.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-arm@0.25.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-ia32@0.25.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-loong64@0.25.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-mips64el@0.25.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-ppc64@0.25.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-riscv64@0.25.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-s390x@0.25.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-x64@0.25.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/netbsd-arm64@0.25.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/netbsd-x64@0.25.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/openbsd-arm64@0.25.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/openbsd-x64@0.25.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/openharmony-arm64@0.25.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/sunos-x64@0.25.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/win32-arm64@0.25.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/win32-ia32@0.25.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/win32-x64@0.25.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@isaacs/cliui@8.0.2",
      "dependsOn": [
        "pkg:npm/string-width@4.2.3",
        "pkg:npm/string-width@5.1.2",
        "pkg:npm/strip-ansi@6.0.1",
        "pkg:npm/strip-ansi@7.1.0",
        "pkg:npm/wrap-ansi@7.0.0",
        "pkg:npm/wrap-ansi@8.1.0"
      ]
    },
    {
      "ref": "pkg:npm/@istanbuljs/schema@0.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/gen-mapping@0.3.12",
      "dependsOn": [
        "pkg:npm/@jridgewell/sourcemap-codec@1.5.4",
        "pkg:npm/@jridgewell/trace-mapping@0.3.29"
      ]
    },
    {
      "ref": "pkg:npm/@jridgewell/resolve-uri@3.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/sourcemap-codec@1.5.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/trace-mapping@0.3.29",
      "dependsOn": [
        "pkg:npm/@jridgewell/resolve-uri@3.1.2",
        "pkg:npm/@jridgewell/sourcemap-codec@1.5.4"
      ]
    },
    {
      "ref": "pkg:npm/@pkgjs/parseargs@0.11.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@rollup/rollup-android-arm-eabi@4.45.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@rollup/rollup-android-arm64@4.45.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@rollup/rollup-darwin-arm64@4.45.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@rollup/rollup-darwin-x64@4.45.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@rollup/rollup-freebsd-arm64@4.45.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@rollup/rollup-freebsd-x64@4.45.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@rollup/rollup-linux-arm-gnueabihf@4.45.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@rollup/rollup-linux-arm-musleabihf@4.45.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@rollup/rollup-linux-arm64-gnu@4.45.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@rollup/rollup-linux-arm64-musl@4.45.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@rollup/rollup-linux-loongarch64-gnu@4.45.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@rollup/rollup-linux-powerpc64le-gnu@4.45.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@rollup/rollup-linux-riscv64-gnu@4.45.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@rollup/rollup-linux-riscv64-musl@4.45.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@rollup/rollup-linux-s390x-gnu@4.45.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@rollup/rollup-linux-x64-gnu@4.45.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@rollup/rollup-linux-x64-musl@4.45.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@rollup/rollup-win32-arm64-msvc@4.45.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@rollup/rollup-win32-ia32-msvc@4.45.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@rollup/rollup-win32-x64-msvc@4.45.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@tsconfig/node22@22.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/chai@5.2.2",
      "dependsOn": [
        "pkg:npm/@types/deep-eql@4.0.2"
      ]
    },
    {
      "ref": "pkg:npm/@types/debug@4.1.12",
      "dependsOn": [
        "pkg:npm/@types/ms@0.7.31"
      ]
    },
    {
      "ref": "pkg:npm/@types/deep-eql@4.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/estree@1.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/ms@0.7.31",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/node@22.16.3",
      "dependsOn": [
        "pkg:npm/undici-types@6.21.0"
      ]
    },
    {
      "ref": "pkg:npm/@vitest/coverage-v8@3.2.4",
      "dependsOn": [
        "pkg:npm/@ampproject/remapping@2.3.0",
        "pkg:npm/@bcoe/v8-coverage@1.0.2",
        "pkg:npm/ast-v8-to-istanbul@0.3.3",
        "pkg:npm/debug@4.4.1",
        "pkg:npm/istanbul-lib-coverage@3.2.2",
        "pkg:npm/istanbul-lib-report@3.0.1",
        "pkg:npm/istanbul-lib-source-maps@5.0.6",
        "pkg:npm/istanbul-reports@3.1.7",
        "pkg:npm/magic-string@0.30.17",
        "pkg:npm/magicast@0.3.5",
        "pkg:npm/std-env@3.9.0",
        "pkg:npm/test-exclude@7.0.1",
        "pkg:npm/tinyrainbow@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@vitest/expect@3.2.4",
      "dependsOn": [
        "pkg:npm/@types/chai@5.2.2",
        "pkg:npm/@vitest/spy@3.2.4",
        "pkg:npm/@vitest/utils@3.2.4",
        "pkg:npm/chai@5.2.1",
        "pkg:npm/tinyrainbow@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@vitest/mocker@3.2.4",
      "dependsOn": [
        "pkg:npm/@vitest/spy@3.2.4",
        "pkg:npm/estree-walker@3.0.3",
        "pkg:npm/magic-string@0.30.17"
      ]
    },
    {
      "ref": "pkg:npm/@vitest/pretty-format@3.2.4",
      "dependsOn": [
        "pkg:npm/tinyrainbow@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@vitest/runner@3.2.4",
      "dependsOn": [
        "pkg:npm/@vitest/utils@3.2.4",
        "pkg:npm/pathe@2.0.3",
        "pkg:npm/strip-literal@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@vitest/snapshot@3.2.4",
      "dependsOn": [
        "pkg:npm/@vitest/pretty-format@3.2.4",
        "pkg:npm/magic-string@0.30.17",
        "pkg:npm/pathe@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/@vitest/spy@3.2.4",
      "dependsOn": [
        "pkg:npm/tinyspy@4.0.3"
      ]
    },
    {
      "ref": "pkg:npm/@vitest/utils@3.2.4",
      "dependsOn": [
        "pkg:npm/@vitest/pretty-format@3.2.4",
        "pkg:npm/loupe@3.1.4",
        "pkg:npm/tinyrainbow@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/ansi-regex@5.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-regex@6.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-styles@4.3.0",
      "dependsOn": [
        "pkg:npm/color-convert@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/ansi-styles@6.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/assertion-error@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ast-v8-to-istanbul@0.3.3",
      "dependsOn": [
        "pkg:npm/@jridgewell/trace-mapping@0.3.29",
        "pkg:npm/estree-walker@3.0.3",
        "pkg:npm/js-tokens@9.0.1"
      ]
    },
    {
      "ref": "pkg:npm/balanced-match@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/brace-expansion@2.0.2",
      "dependsOn": [
        "pkg:npm/balanced-match@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/cac@6.7.14",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/chai@5.2.1",
      "dependsOn": [
        "pkg:npm/assertion-error@2.0.1",
        "pkg:npm/check-error@2.1.1",
        "pkg:npm/deep-eql@5.0.2",
        "pkg:npm/loupe@3.1.4",
        "pkg:npm/pathval@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/check-error@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-convert@2.0.1",
      "dependsOn": [
        "pkg:npm/color-name@1.1.4"
      ]
    },
    {
      "ref": "pkg:npm/color-name@1.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cross-spawn@7.0.6",
      "dependsOn": [
        "pkg:npm/path-key@3.1.1",
        "pkg:npm/shebang-command@2.0.0",
        "pkg:npm/which@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/debug@4.4.1",
      "dependsOn": [
        "pkg:npm/ms@2.1.3"
      ]
    },
    {
      "ref": "pkg:npm/deep-eql@5.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eastasianwidth@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/emoji-regex@8.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/emoji-regex@9.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/es-module-lexer@1.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esbuild@0.25.6",
      "dependsOn": [
        "pkg:npm/@esbuild/aix-ppc64@0.25.6",
        "pkg:npm/@esbuild/android-arm64@0.25.6",
        "pkg:npm/@esbuild/android-arm@0.25.6",
        "pkg:npm/@esbuild/android-x64@0.25.6",
        "pkg:npm/@esbuild/darwin-arm64@0.25.6",
        "pkg:npm/@esbuild/darwin-x64@0.25.6",
        "pkg:npm/@esbuild/freebsd-arm64@0.25.6",
        "pkg:npm/@esbuild/freebsd-x64@0.25.6",
        "pkg:npm/@esbuild/linux-arm64@0.25.6",
        "pkg:npm/@esbuild/linux-arm@0.25.6",
        "pkg:npm/@esbuild/linux-ia32@0.25.6",
        "pkg:npm/@esbuild/linux-loong64@0.25.6",
        "pkg:npm/@esbuild/linux-mips64el@0.25.6",
        "pkg:npm/@esbuild/linux-ppc64@0.25.6",
        "pkg:npm/@esbuild/linux-riscv64@0.25.6",
        "pkg:npm/@esbuild/linux-s390x@0.25.6",
        "pkg:npm/@esbuild/linux-x64@0.25.6",
        "pkg:npm/@esbuild/netbsd-arm64@0.25.6",
        "pkg:npm/@esbuild/netbsd-x64@0.25.6",
        "pkg:npm/@esbuild/openbsd-arm64@0.25.6",
        "pkg:npm/@esbuild/openbsd-x64@0.25.6",
        "pkg:npm/@esbuild/openharmony-arm64@0.25.6",
        "pkg:npm/@esbuild/sunos-x64@0.25.6",
        "pkg:npm/@esbuild/win32-arm64@0.25.6",
        "pkg:npm/@esbuild/win32-ia32@0.25.6",
        "pkg:npm/@esbuild/win32-x64@0.25.6"
      ]
    },
    {
      "ref": "pkg:npm/estree-walker@3.0.3",
      "dependsOn": [
        "pkg:npm/@types/estree@1.0.8"
      ]
    },
    {
      "ref": "pkg:npm/expect-type@1.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fdir@6.4.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/foreground-child@3.3.1",
      "dependsOn": [
        "pkg:npm/cross-spawn@7.0.6",
        "pkg:npm/signal-exit@4.1.0"
      ]
    },
    {
      "ref": "pkg:npm/fsevents@2.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob@10.4.5",
      "dependsOn": [
        "pkg:npm/foreground-child@3.3.1",
        "pkg:npm/jackspeak@3.4.3",
        "pkg:npm/minimatch@9.0.5",
        "pkg:npm/minipass@7.1.2",
        "pkg:npm/package-json-from-dist@1.0.1",
        "pkg:npm/path-scurry@1.11.1"
      ]
    },
    {
      "ref": "pkg:npm/has-flag@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/html-escaper@2.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-fullwidth-code-point@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isexe@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/istanbul-lib-coverage@3.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/istanbul-lib-report@3.0.1",
      "dependsOn": [
        "pkg:npm/istanbul-lib-coverage@3.2.2",
        "pkg:npm/make-dir@4.0.0",
        "pkg:npm/supports-color@7.2.0"
      ]
    },
    {
      "ref": "pkg:npm/istanbul-lib-source-maps@5.0.6",
      "dependsOn": [
        "pkg:npm/@jridgewell/trace-mapping@0.3.29",
        "pkg:npm/debug@4.4.1",
        "pkg:npm/istanbul-lib-coverage@3.2.2"
      ]
    },
    {
      "ref": "pkg:npm/istanbul-reports@3.1.7",
      "dependsOn": [
        "pkg:npm/html-escaper@2.0.2",
        "pkg:npm/istanbul-lib-report@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/jackspeak@3.4.3",
      "dependsOn": [
        "pkg:npm/@isaacs/cliui@8.0.2",
        "pkg:npm/@pkgjs/parseargs@0.11.0"
      ]
    },
    {
      "ref": "pkg:npm/js-tokens@9.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/loupe@3.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lru-cache@10.4.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/magic-string@0.30.17",
      "dependsOn": [
        "pkg:npm/@jridgewell/sourcemap-codec@1.5.4"
      ]
    },
    {
      "ref": "pkg:npm/magicast@0.3.5",
      "dependsOn": [
        "pkg:npm/@babel/parser@7.28.0",
        "pkg:npm/@babel/types@7.28.1",
        "pkg:npm/source-map-js@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/make-dir@4.0.0",
      "dependsOn": [
        "pkg:npm/semver@7.7.2"
      ]
    },
    {
      "ref": "pkg:npm/minimatch@9.0.5",
      "dependsOn": [
        "pkg:npm/brace-expansion@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/minipass@7.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ms@2.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/nanoid@3.3.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/package-json-from-dist@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-key@3.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-scurry@1.11.1",
      "dependsOn": [
        "pkg:npm/lru-cache@10.4.3",
        "pkg:npm/minipass@7.1.2"
      ]
    },
    {
      "ref": "pkg:npm/pathe@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pathval@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/picocolors@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/picomatch@4.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/postcss@8.5.6",
      "dependsOn": [
        "pkg:npm/nanoid@3.3.11",
        "pkg:npm/picocolors@1.1.1",
        "pkg:npm/source-map-js@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/prettier@3.6.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rollup@4.45.0",
      "dependsOn": [
        "pkg:npm/@rollup/rollup-android-arm-eabi@4.45.0",
        "pkg:npm/@rollup/rollup-android-arm64@4.45.0",
        "pkg:npm/@rollup/rollup-darwin-arm64@4.45.0",
        "pkg:npm/@rollup/rollup-darwin-x64@4.45.0",
        "pkg:npm/@rollup/rollup-freebsd-arm64@4.45.0",
        "pkg:npm/@rollup/rollup-freebsd-x64@4.45.0",
        "pkg:npm/@rollup/rollup-linux-arm-gnueabihf@4.45.0",
        "pkg:npm/@rollup/rollup-linux-arm-musleabihf@4.45.0",
        "pkg:npm/@rollup/rollup-linux-arm64-gnu@4.45.0",
        "pkg:npm/@rollup/rollup-linux-arm64-musl@4.45.0",
        "pkg:npm/@rollup/rollup-linux-loongarch64-gnu@4.45.0",
        "pkg:npm/@rollup/rollup-linux-powerpc64le-gnu@4.45.0",
        "pkg:npm/@rollup/rollup-linux-riscv64-gnu@4.45.0",
        "pkg:npm/@rollup/rollup-linux-riscv64-musl@4.45.0",
        "pkg:npm/@rollup/rollup-linux-s390x-gnu@4.45.0",
        "pkg:npm/@rollup/rollup-linux-x64-gnu@4.45.0",
        "pkg:npm/@rollup/rollup-linux-x64-musl@4.45.0",
        "pkg:npm/@rollup/rollup-win32-arm64-msvc@4.45.0",
        "pkg:npm/@rollup/rollup-win32-ia32-msvc@4.45.0",
        "pkg:npm/@rollup/rollup-win32-x64-msvc@4.45.0",
        "pkg:npm/@types/estree@1.0.8",
        "pkg:npm/fsevents@2.3.3"
      ]
    },
    {
      "ref": "pkg:npm/semver@7.7.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shebang-command@2.0.0",
      "dependsOn": [
        "pkg:npm/shebang-regex@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/shebang-regex@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/siginfo@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/signal-exit@4.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map-js@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stackback@0.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/std-env@3.9.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string-width@4.2.3",
      "dependsOn": [
        "pkg:npm/emoji-regex@8.0.0",
        "pkg:npm/is-fullwidth-code-point@3.0.0",
        "pkg:npm/strip-ansi@6.0.1"
      ]
    },
    {
      "ref": "pkg:npm/string-width@5.1.2",
      "dependsOn": [
        "pkg:npm/eastasianwidth@0.2.0",
        "pkg:npm/emoji-regex@8.0.0",
        "pkg:npm/emoji-regex@9.2.2",
        "pkg:npm/is-fullwidth-code-point@3.0.0",
        "pkg:npm/strip-ansi@6.0.1",
        "pkg:npm/strip-ansi@7.1.0"
      ]
    },
    {
      "ref": "pkg:npm/strip-ansi@6.0.1",
      "dependsOn": [
        "pkg:npm/ansi-regex@5.0.1"
      ]
    },
    {
      "ref": "pkg:npm/strip-ansi@7.1.0",
      "dependsOn": [
        "pkg:npm/ansi-regex@5.0.1",
        "pkg:npm/ansi-regex@6.1.0"
      ]
    },
    {
      "ref": "pkg:npm/strip-literal@3.0.0",
      "dependsOn": [
        "pkg:npm/js-tokens@9.0.1"
      ]
    },
    {
      "ref": "pkg:npm/supports-color@7.2.0",
      "dependsOn": [
        "pkg:npm/has-flag@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/test-exclude@7.0.1",
      "dependsOn": [
        "pkg:npm/@istanbuljs/schema@0.1.3",
        "pkg:npm/glob@10.4.5",
        "pkg:npm/minimatch@9.0.5"
      ]
    },
    {
      "ref": "pkg:npm/tinybench@2.9.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tinyexec@0.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tinyglobby@0.2.14",
      "dependsOn": [
        "pkg:npm/fdir@6.4.6",
        "pkg:npm/picomatch@4.0.2"
      ]
    },
    {
      "ref": "pkg:npm/tinypool@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tinyrainbow@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tinyspy@4.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/typescript@5.8.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/undici-types@6.21.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vite-node@3.2.4",
      "dependsOn": [
        "pkg:npm/cac@6.7.14",
        "pkg:npm/debug@4.4.1",
        "pkg:npm/es-module-lexer@1.7.0",
        "pkg:npm/pathe@2.0.3",
        "pkg:npm/vite@7.0.4"
      ]
    },
    {
      "ref": "pkg:npm/vite@7.0.4",
      "dependsOn": [
        "pkg:npm/esbuild@0.25.6",
        "pkg:npm/fdir@6.4.6",
        "pkg:npm/fsevents@2.3.3",
        "pkg:npm/picomatch@4.0.2",
        "pkg:npm/postcss@8.5.6",
        "pkg:npm/rollup@4.45.0",
        "pkg:npm/tinyglobby@0.2.14"
      ]
    },
    {
      "ref": "pkg:npm/vitest@3.2.4",
      "dependsOn": [
        "pkg:npm/@types/chai@5.2.2",
        "pkg:npm/@vitest/expect@3.2.4",
        "pkg:npm/@vitest/mocker@3.2.4",
        "pkg:npm/@vitest/pretty-format@3.2.4",
        "pkg:npm/@vitest/runner@3.2.4",
        "pkg:npm/@vitest/snapshot@3.2.4",
        "pkg:npm/@vitest/spy@3.2.4",
        "pkg:npm/@vitest/utils@3.2.4",
        "pkg:npm/chai@5.2.1",
        "pkg:npm/debug@4.4.1",
        "pkg:npm/expect-type@1.2.2",
        "pkg:npm/magic-string@0.30.17",
        "pkg:npm/pathe@2.0.3",
        "pkg:npm/picomatch@4.0.2",
        "pkg:npm/std-env@3.9.0",
        "pkg:npm/tinybench@2.9.0",
        "pkg:npm/tinyexec@0.3.2",
        "pkg:npm/tinyglobby@0.2.14",
        "pkg:npm/tinypool@1.1.1",
        "pkg:npm/tinyrainbow@2.0.0",
        "pkg:npm/vite-node@3.2.4",
        "pkg:npm/vite@7.0.4",
        "pkg:npm/why-is-node-running@2.3.0"
      ]
    },
    {
      "ref": "pkg:npm/which@2.0.2",
      "dependsOn": [
        "pkg:npm/isexe@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/why-is-node-running@2.3.0",
      "dependsOn": [
        "pkg:npm/siginfo@2.0.0",
        "pkg:npm/stackback@0.0.2"
      ]
    },
    {
      "ref": "pkg:npm/wrap-ansi@7.0.0",
      "dependsOn": [
        "pkg:npm/ansi-styles@4.3.0",
        "pkg:npm/string-width@4.2.3",
        "pkg:npm/strip-ansi@6.0.1"
      ]
    },
    {
      "ref": "pkg:npm/wrap-ansi@8.1.0",
      "dependsOn": [
        "pkg:npm/ansi-styles@6.2.1",
        "pkg:npm/string-width@5.1.2",
        "pkg:npm/strip-ansi@7.1.0"
      ]
    },
    {
      "ref": "pkg:npm/flora-colossus@3.0.2",
      "dependsOn": [
        "pkg:npm/@ampproject/remapping@2.3.0",
        "pkg:npm/@babel/helper-string-parser@7.27.1",
        "pkg:npm/@babel/helper-validator-identifier@7.27.1",
        "pkg:npm/@babel/parser@7.28.0",
        "pkg:npm/@babel/types@7.28.1",
        "pkg:npm/@bcoe/v8-coverage@1.0.2",
        "pkg:npm/@esbuild/aix-ppc64@0.25.6",
        "pkg:npm/@esbuild/android-arm64@0.25.6",
        "pkg:npm/@esbuild/android-arm@0.25.6",
        "pkg:npm/@esbuild/android-x64@0.25.6",
        "pkg:npm/@esbuild/darwin-arm64@0.25.6",
        "pkg:npm/@esbuild/darwin-x64@0.25.6",
        "pkg:npm/@esbuild/freebsd-arm64@0.25.6",
        "pkg:npm/@esbuild/freebsd-x64@0.25.6",
        "pkg:npm/@esbuild/linux-arm64@0.25.6",
        "pkg:npm/@esbuild/linux-arm@0.25.6",
        "pkg:npm/@esbuild/linux-ia32@0.25.6",
        "pkg:npm/@esbuild/linux-loong64@0.25.6",
        "pkg:npm/@esbuild/linux-mips64el@0.25.6",
        "pkg:npm/@esbuild/linux-ppc64@0.25.6",
        "pkg:npm/@esbuild/linux-riscv64@0.25.6",
        "pkg:npm/@esbuild/linux-s390x@0.25.6",
        "pkg:npm/@esbuild/linux-x64@0.25.6",
        "pkg:npm/@esbuild/netbsd-arm64@0.25.6",
        "pkg:npm/@esbuild/netbsd-x64@0.25.6",
        "pkg:npm/@esbuild/openbsd-arm64@0.25.6",
        "pkg:npm/@esbuild/openbsd-x64@0.25.6",
        "pkg:npm/@esbuild/openharmony-arm64@0.25.6",
        "pkg:npm/@esbuild/sunos-x64@0.25.6",
        "pkg:npm/@esbuild/win32-arm64@0.25.6",
        "pkg:npm/@esbuild/win32-ia32@0.25.6",
        "pkg:npm/@esbuild/win32-x64@0.25.6",
        "pkg:npm/@isaacs/cliui@8.0.2",
        "pkg:npm/@istanbuljs/schema@0.1.3",
        "pkg:npm/@jridgewell/gen-mapping@0.3.12",
        "pkg:npm/@jridgewell/resolve-uri@3.1.2",
        "pkg:npm/@jridgewell/sourcemap-codec@1.5.4",
        "pkg:npm/@jridgewell/trace-mapping@0.3.29",
        "pkg:npm/@pkgjs/parseargs@0.11.0",
        "pkg:npm/@rollup/rollup-android-arm-eabi@4.45.0",
        "pkg:npm/@rollup/rollup-android-arm64@4.45.0",
        "pkg:npm/@rollup/rollup-darwin-arm64@4.45.0",
        "pkg:npm/@rollup/rollup-darwin-x64@4.45.0",
        "pkg:npm/@rollup/rollup-freebsd-arm64@4.45.0",
        "pkg:npm/@rollup/rollup-freebsd-x64@4.45.0",
        "pkg:npm/@rollup/rollup-linux-arm-gnueabihf@4.45.0",
        "pkg:npm/@rollup/rollup-linux-arm-musleabihf@4.45.0",
        "pkg:npm/@rollup/rollup-linux-arm64-gnu@4.45.0",
        "pkg:npm/@rollup/rollup-linux-arm64-musl@4.45.0",
        "pkg:npm/@rollup/rollup-linux-loongarch64-gnu@4.45.0",
        "pkg:npm/@rollup/rollup-linux-powerpc64le-gnu@4.45.0",
        "pkg:npm/@rollup/rollup-linux-riscv64-gnu@4.45.0",
        "pkg:npm/@rollup/rollup-linux-riscv64-musl@4.45.0",
        "pkg:npm/@rollup/rollup-linux-s390x-gnu@4.45.0",
        "pkg:npm/@rollup/rollup-linux-x64-gnu@4.45.0",
        "pkg:npm/@rollup/rollup-linux-x64-musl@4.45.0",
        "pkg:npm/@rollup/rollup-win32-arm64-msvc@4.45.0",
        "pkg:npm/@rollup/rollup-win32-ia32-msvc@4.45.0",
        "pkg:npm/@rollup/rollup-win32-x64-msvc@4.45.0",
        "pkg:npm/@tsconfig/node22@22.0.2",
        "pkg:npm/@types/chai@5.2.2",
        "pkg:npm/@types/debug@4.1.12",
        "pkg:npm/@types/deep-eql@4.0.2",
        "pkg:npm/@types/estree@1.0.8",
        "pkg:npm/@types/ms@0.7.31",
        "pkg:npm/@types/node@22.16.3",
        "pkg:npm/@vitest/coverage-v8@3.2.4",
        "pkg:npm/@vitest/expect@3.2.4",
        "pkg:npm/@vitest/mocker@3.2.4",
        "pkg:npm/@vitest/pretty-format@3.2.4",
        "pkg:npm/@vitest/runner@3.2.4",
        "pkg:npm/@vitest/snapshot@3.2.4",
        "pkg:npm/@vitest/spy@3.2.4",
        "pkg:npm/@vitest/utils@3.2.4",
        "pkg:npm/abstract-socket@2.1.0",
        "pkg:npm/ajv@6.10.0",
        "pkg:npm/ansi-regex@2.1.1",
        "pkg:npm/ansi-regex@5.0.1",
        "pkg:npm/ansi-regex@6.1.0",
        "pkg:npm/ansi-styles@4.3.0",
        "pkg:npm/ansi-styles@6.2.1",
        "pkg:npm/array-find-index@1.0.2",
        "pkg:npm/asar@1.0.0",
        "pkg:npm/asn1@0.2.4",
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/assertion-error@2.0.1",
        "pkg:npm/ast-v8-to-istanbul@0.3.3",
        "pkg:npm/asynckit@0.4.0",
        "pkg:npm/author-regex@1.0.0",
        "pkg:npm/aws-sign2@0.7.0",
        "pkg:npm/aws4@1.8.0",
        "pkg:npm/balanced-match@1.0.0",
        "pkg:npm/balanced-match@1.0.2",
        "pkg:npm/base64-js@1.2.0",
        "pkg:npm/base64-js@1.3.0",
        "pkg:npm/bcrypt-pbkdf@1.0.2",
        "pkg:npm/bignumber.js@2.4.0",
        "pkg:npm/bindings@1.5.0",
        "pkg:npm/bluebird@3.5.5",
        "pkg:npm/bmp-js@0.0.3",
        "pkg:npm/brace-expansion@1.1.11",
        "pkg:npm/brace-expansion@2.0.2",
        "pkg:npm/buffer-alloc-unsafe@1.1.0",
        "pkg:npm/buffer-alloc@1.2.0",
        "pkg:npm/buffer-equal@0.0.1",
        "pkg:npm/buffer-fill@1.0.0",
        "pkg:npm/buffer-from@1.1.1",
        "pkg:npm/cac@6.7.14",
        "pkg:npm/camelcase-keys@2.1.0",
        "pkg:npm/camelcase@2.1.1",
        "pkg:npm/camelcase@5.3.1",
        "pkg:npm/caseless@0.12.0",
        "pkg:npm/chai@5.2.1",
        "pkg:npm/check-error@2.1.1",
        "pkg:npm/chromium-pickle-js@0.2.0",
        "pkg:npm/code-point-at@1.1.0",
        "pkg:npm/color-convert@2.0.1",
        "pkg:npm/color-name@1.1.4",
        "pkg:npm/combined-stream@1.0.8",
        "pkg:npm/commander@2.20.0",
        "pkg:npm/compare-version@0.1.2",
        "pkg:npm/concat-map@0.0.1",
        "pkg:npm/concat-stream@1.6.2",
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/cross-spawn@7.0.6",
        "pkg:npm/cuint@0.2.2",
        "pkg:npm/currently-unhandled@0.4.1",
        "pkg:npm/dashdash@1.14.1",
        "pkg:npm/dbus-next@0.5.1",
        "pkg:npm/dbus-next@0.6.1",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/debug@3.2.6",
        "pkg:npm/debug@4.1.1",
        "pkg:npm/debug@4.4.1",
        "pkg:npm/decamelize@1.2.0",
        "pkg:npm/deep-eql@5.0.2",
        "pkg:npm/deep-equal@1.0.1",
        "pkg:npm/deep-extend@0.6.0",
        "pkg:npm/define-properties@1.1.3",
        "pkg:npm/delayed-stream@1.0.0",
        "pkg:npm/dom-walk@0.1.1",
        "pkg:npm/duplexer@0.1.1",
        "pkg:npm/eastasianwidth@0.2.0",
        "pkg:npm/ecc-jsbn@0.1.2",
        "pkg:npm/electron-download@4.1.1",
        "pkg:npm/electron-notarize@0.0.5",
        "pkg:npm/electron-osx-sign@0.4.11",
        "pkg:npm/electron-packager@13.1.1",
        "pkg:npm/emoji-regex@8.0.0",
        "pkg:npm/emoji-regex@9.2.2",
        "pkg:npm/env-paths@1.0.0",
        "pkg:npm/error-ex@1.3.2",
        "pkg:npm/es-abstract@1.13.0",
        "pkg:npm/es-module-lexer@1.7.0",
        "pkg:npm/es-to-primitive@1.2.0",
        "pkg:npm/es6-promise@3.3.1",
        "pkg:npm/esbuild@0.25.6",
        "pkg:npm/estree-walker@3.0.3",
        "pkg:npm/event-stream@3.3.4",
        "pkg:npm/exif-parser@0.1.12",
        "pkg:npm/expect-type@1.2.2",
        "pkg:npm/extend@3.0.2",
        "pkg:npm/extract-zip@1.6.7",
        "pkg:npm/extsprintf@1.3.0",
        "pkg:npm/extsprintf@1.4.0",
        "pkg:npm/fast-deep-equal@2.0.1",
        "pkg:npm/fast-json-stable-stringify@2.0.0",
        "pkg:npm/fd-slicer@1.0.1",
        "pkg:npm/fdir@6.4.6",
        "pkg:npm/file-type@3.9.0",
        "pkg:npm/file-uri-to-path@1.0.0",
        "pkg:npm/find-up@1.1.2",
        "pkg:npm/find-up@2.1.0",
        "pkg:npm/flora-colossus@1.0.0",
        "pkg:npm/for-each@0.3.3",
        "pkg:npm/foreground-child@3.3.1",
        "pkg:npm/forever-agent@0.6.1",
        "pkg:npm/form-data@2.3.3",
        "pkg:npm/from@0.1.7",
        "pkg:npm/fs-extra@4.0.3",
        "pkg:npm/fs-extra@7.0.1",
        "pkg:npm/fs.realpath@1.0.0",
        "pkg:npm/fsevents@2.3.3",
        "pkg:npm/function-bind@1.1.1",
        "pkg:npm/galactus@0.2.1",
        "pkg:npm/get-package-info@1.0.0",
        "pkg:npm/get-stdin@4.0.1",
        "pkg:npm/getpass@0.1.7",
        "pkg:npm/glob@10.4.5",
        "pkg:npm/glob@7.1.4",
        "pkg:npm/global@4.3.2",
        "pkg:npm/graceful-fs@4.1.15",
        "pkg:npm/har-schema@2.0.0",
        "pkg:npm/har-validator@5.1.3",
        "pkg:npm/has-flag@4.0.0",
        "pkg:npm/has-symbols@1.0.0",
        "pkg:npm/has@1.0.3",
        "pkg:npm/hexy@0.2.11",
        "pkg:npm/hosted-git-info@2.7.1",
        "pkg:npm/html-escaper@2.0.2",
        "pkg:npm/http-signature@1.2.0",
        "pkg:npm/indent-string@2.1.0",
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/ini@1.3.5",
        "pkg:npm/ip-regex@1.0.3",
        "pkg:npm/is-arrayish@0.2.1",
        "pkg:npm/is-callable@1.1.4",
        "pkg:npm/is-date-object@1.0.1",
        "pkg:npm/is-finite@1.0.2",
        "pkg:npm/is-fullwidth-code-point@1.0.0",
        "pkg:npm/is-fullwidth-code-point@3.0.0",
        "pkg:npm/is-function@1.0.1",
        "pkg:npm/is-regex@1.0.4",
        "pkg:npm/is-symbol@1.0.2",
        "pkg:npm/is-typedarray@1.0.0",
        "pkg:npm/is-utf8@0.2.1",
        "pkg:npm/isarray@0.0.1",
        "pkg:npm/isarray@1.0.0",
        "pkg:npm/isbinaryfile@3.0.3",
        "pkg:npm/isexe@2.0.0",
        "pkg:npm/isstream@0.1.2",
        "pkg:npm/istanbul-lib-coverage@3.2.2",
        "pkg:npm/istanbul-lib-report@3.0.1",
        "pkg:npm/istanbul-lib-source-maps@5.0.6",
        "pkg:npm/istanbul-reports@3.1.7",
        "pkg:npm/jackspeak@3.4.3",
        "pkg:npm/jimp@0.2.28",
        "pkg:npm/jpeg-js@0.2.0",
        "pkg:npm/js-tokens@9.0.1",
        "pkg:npm/jsbi@2.0.5",
        "pkg:npm/jsbn@0.1.1",
        "pkg:npm/json-schema-traverse@0.4.1",
        "pkg:npm/json-schema@0.2.3",
        "pkg:npm/json-stringify-safe@5.0.1",
        "pkg:npm/jsonfile@4.0.0",
        "pkg:npm/jsprim@1.4.1",
        "pkg:npm/load-bmfont@1.4.0",
        "pkg:npm/load-json-file@1.1.0",
        "pkg:npm/load-json-file@2.0.0",
        "pkg:npm/locate-path@2.0.0",
        "pkg:npm/lodash.get@4.4.2",
        "pkg:npm/long@4.0.0",
        "pkg:npm/loud-rejection@1.6.0",
        "pkg:npm/loupe@3.1.4",
        "pkg:npm/lru-cache@10.4.3",
        "pkg:npm/magic-string@0.30.17",
        "pkg:npm/magicast@0.3.5",
        "pkg:npm/make-dir@4.0.0",
        "pkg:npm/map-obj@1.0.1",
        "pkg:npm/map-stream@0.1.0",
        "pkg:npm/meow@3.7.0",
        "pkg:npm/mime-db@1.40.0",
        "pkg:npm/mime-types@2.1.24",
        "pkg:npm/mime@1.6.0",
        "pkg:npm/min-document@2.19.0",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/minimatch@9.0.5",
        "pkg:npm/minimist@0.0.8",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/minipass@7.1.2",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/mpris-service@2.1.0",
        "pkg:npm/ms@2.0.0",
        "pkg:npm/ms@2.1.2",
        "pkg:npm/ms@2.1.3",
        "pkg:npm/nan@2.14.0",
        "pkg:npm/nanoid@3.3.11",
        "pkg:npm/normalize-package-data@2.5.0",
        "pkg:npm/nugget@2.0.1",
        "pkg:npm/number-is-nan@1.0.1",
        "pkg:npm/oauth-sign@0.9.0",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/object-keys@0.4.0",
        "pkg:npm/object-keys@1.1.1",
        "pkg:npm/once@1.4.0",
        "pkg:npm/p-limit@1.3.0",
        "pkg:npm/p-locate@2.0.0",
        "pkg:npm/p-try@1.0.0",
        "pkg:npm/package-json-from-dist@1.0.1",
        "pkg:npm/parse-author@2.0.0",
        "pkg:npm/parse-bmfont-ascii@1.0.6",
        "pkg:npm/parse-bmfont-binary@1.0.6",
        "pkg:npm/parse-bmfont-xml@1.1.4",
        "pkg:npm/parse-headers@2.0.2",
        "pkg:npm/parse-json@2.2.0",
        "pkg:npm/path-exists@2.1.0",
        "pkg:npm/path-exists@3.0.0",
        "pkg:npm/path-is-absolute@1.0.1",
        "pkg:npm/path-key@3.1.1",
        "pkg:npm/path-parse@1.0.6",
        "pkg:npm/path-scurry@1.11.1",
        "pkg:npm/path-type@1.1.0",
        "pkg:npm/path-type@2.0.0",
        "pkg:npm/pathe@2.0.3",
        "pkg:npm/pathval@2.0.1",
        "pkg:npm/pause-stream@0.0.11",
        "pkg:npm/pend@1.2.0",
        "pkg:npm/performance-now@2.1.0",
        "pkg:npm/phin@2.9.3",
        "pkg:npm/picocolors@1.1.1",
        "pkg:npm/picomatch@4.0.2",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/pify@4.0.1",
        "pkg:npm/pinkie-promise@2.0.1",
        "pkg:npm/pinkie@2.0.4",
        "pkg:npm/pixelmatch@4.0.2",
        "pkg:npm/plist@2.1.0",
        "pkg:npm/plist@3.0.1",
        "pkg:npm/pngjs@3.4.0",
        "pkg:npm/postcss@8.5.6",
        "pkg:npm/prettier@3.6.2",
        "pkg:npm/pretty-bytes@1.0.4",
        "pkg:npm/process-nextick-args@2.0.0",
        "pkg:npm/process@0.5.2",
        "pkg:npm/progress-stream@1.2.0",
        "pkg:npm/psl@1.1.32",
        "pkg:npm/punycode@1.4.1",
        "pkg:npm/punycode@2.1.1",
        "pkg:npm/put@0.0.6",
        "pkg:npm/qs@6.5.2",
        "pkg:npm/rc@1.2.8",
        "pkg:npm/rcedit@1.1.2",
        "pkg:npm/read-chunk@1.0.1",
        "pkg:npm/read-pkg-up@1.0.1",
        "pkg:npm/read-pkg-up@2.0.0",
        "pkg:npm/read-pkg@1.1.0",
        "pkg:npm/read-pkg@2.0.0",
        "pkg:npm/readable-stream@1.1.14",
        "pkg:npm/readable-stream@2.3.6",
        "pkg:npm/redent@1.0.0",
        "pkg:npm/repeating@2.0.1",
        "pkg:npm/request@2.88.0",
        "pkg:npm/resolve@1.11.1",
        "pkg:npm/rimraf@2.6.3",
        "pkg:npm/rollup@4.45.0",
        "pkg:npm/safe-buffer@5.1.2",
        "pkg:npm/safer-buffer@2.1.2",
        "pkg:npm/sanitize-filename@1.6.1",
        "pkg:npm/sax@1.2.4",
        "pkg:npm/semver@5.7.0",
        "pkg:npm/semver@7.7.2",
        "pkg:npm/shebang-command@2.0.0",
        "pkg:npm/shebang-regex@3.0.0",
        "pkg:npm/siginfo@2.0.0",
        "pkg:npm/signal-exit@3.0.2",
        "pkg:npm/signal-exit@4.1.0",
        "pkg:npm/single-line-log@1.1.2",
        "pkg:npm/source-map-js@1.2.1",
        "pkg:npm/source-map-support@0.5.12",
        "pkg:npm/source-map@0.6.1",
        "pkg:npm/spdx-correct@3.1.0",
        "pkg:npm/spdx-exceptions@2.2.0",
        "pkg:npm/spdx-expression-parse@3.0.0",
        "pkg:npm/spdx-license-ids@3.0.4",
        "pkg:npm/speedometer@0.1.4",
        "pkg:npm/split@0.3.3",
        "pkg:npm/sshpk@1.16.1",
        "pkg:npm/stackback@0.0.2",
        "pkg:npm/std-env@3.9.0",
        "pkg:npm/stream-combiner@0.0.4",
        "pkg:npm/stream-to-buffer@0.1.0",
        "pkg:npm/stream-to@0.2.2",
        "pkg:npm/string-width@1.0.2",
        "pkg:npm/string-width@4.2.3",
        "pkg:npm/string-width@5.1.2",
        "pkg:npm/string.prototype.trim@1.1.2",
        "pkg:npm/string_decoder@0.10.31",
        "pkg:npm/string_decoder@1.1.1",
        "pkg:npm/strip-ansi@3.0.1",
        "pkg:npm/strip-ansi@6.0.1",
        "pkg:npm/strip-ansi@7.1.0",
        "pkg:npm/strip-bom@2.0.0",
        "pkg:npm/strip-bom@3.0.0",
        "pkg:npm/strip-indent@1.0.1",
        "pkg:npm/strip-json-comments@2.0.1",
        "pkg:npm/strip-literal@3.0.0",
        "pkg:npm/sumchecker@2.0.2",
        "pkg:npm/supports-color@7.2.0",
        "pkg:npm/test-exclude@7.0.1",
        "pkg:npm/throttleit@0.0.2",
        "pkg:npm/through2@0.2.3",
        "pkg:npm/through@2.3.8",
        "pkg:npm/tinybench@2.9.0",
        "pkg:npm/tinycolor2@1.4.1",
        "pkg:npm/tinyexec@0.3.2",
        "pkg:npm/tinyglobby@0.2.14",
        "pkg:npm/tinypool@1.1.1",
        "pkg:npm/tinyrainbow@2.0.0",
        "pkg:npm/tinyspy@4.0.3",
        "pkg:npm/tmp-promise@1.1.0",
        "pkg:npm/tmp@0.1.0",
        "pkg:npm/tough-cookie@2.4.3",
        "pkg:npm/trim-newlines@1.0.0",
        "pkg:npm/truncate-utf8-bytes@1.0.2",
        "pkg:npm/tunnel-agent@0.6.0",
        "pkg:npm/tweetnacl@0.14.5",
        "pkg:npm/typedarray@0.0.6",
        "pkg:npm/typescript@5.8.3",
        "pkg:npm/undici-types@6.21.0",
        "pkg:npm/universalify@0.1.2",
        "pkg:npm/uri-js@4.2.2",
        "pkg:npm/url-regex@3.2.0",
        "pkg:npm/utf8-byte-length@1.0.4",
        "pkg:npm/util-deprecate@1.0.2",
        "pkg:npm/uuid@3.3.2",
        "pkg:npm/validate-npm-package-license@3.0.4",
        "pkg:npm/verror@1.10.0",
        "pkg:npm/vite-node@3.2.4",
        "pkg:npm/vite@7.0.4",
        "pkg:npm/vitest@3.2.4",
        "pkg:npm/which@2.0.2",
        "pkg:npm/why-is-node-running@2.3.0",
        "pkg:npm/wrap-ansi@7.0.0",
        "pkg:npm/wrap-ansi@8.1.0",
        "pkg:npm/wrappy@1.0.2",
        "pkg:npm/xhr@2.5.0",
        "pkg:npm/xml-parse-from-string@1.0.1",
        "pkg:npm/xml2js@0.4.19",
        "pkg:npm/xmlbuilder@8.2.2",
        "pkg:npm/xmlbuilder@9.0.7",
        "pkg:npm/xmldom@0.1.27",
        "pkg:npm/xtend@2.1.2",
        "pkg:npm/xtend@4.0.1",
        "pkg:npm/yargs-parser@13.1.1",
        "pkg:npm/yauzl@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/abstract-socket@2.1.0",
      "dependsOn": [
        "pkg:npm/bindings@1.5.0",
        "pkg:npm/nan@2.14.0"
      ]
    },
    {
      "ref": "pkg:npm/ajv@6.10.0",
      "dependsOn": [
        "pkg:npm/fast-deep-equal@2.0.1",
        "pkg:npm/fast-json-stable-stringify@2.0.0",
        "pkg:npm/json-schema-traverse@0.4.1",
        "pkg:npm/uri-js@4.2.2"
      ]
    },
    {
      "ref": "pkg:npm/ansi-regex@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-find-index@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/asar@1.0.0",
      "dependsOn": [
        "pkg:npm/chromium-pickle-js@0.2.0",
        "pkg:npm/commander@2.20.0",
        "pkg:npm/cuint@0.2.2",
        "pkg:npm/glob@7.1.4",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/pify@4.0.1",
        "pkg:npm/tmp-promise@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/asn1@0.2.4",
      "dependsOn": [
        "pkg:npm/safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/assert-plus@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/asynckit@0.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/author-regex@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aws-sign2@0.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aws4@1.8.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/balanced-match@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/base64-js@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/base64-js@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bcrypt-pbkdf@1.0.2",
      "dependsOn": [
        "pkg:npm/tweetnacl@0.14.5"
      ]
    },
    {
      "ref": "pkg:npm/bignumber.js@2.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bindings@1.5.0",
      "dependsOn": [
        "pkg:npm/file-uri-to-path@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/bluebird@3.5.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bmp-js@0.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/brace-expansion@1.1.11",
      "dependsOn": [
        "pkg:npm/balanced-match@1.0.0",
        "pkg:npm/concat-map@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/buffer-alloc-unsafe@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffer-alloc@1.2.0",
      "dependsOn": [
        "pkg:npm/buffer-alloc-unsafe@1.1.0",
        "pkg:npm/buffer-fill@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/buffer-equal@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffer-fill@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffer-from@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/camelcase-keys@2.1.0",
      "dependsOn": [
        "pkg:npm/camelcase@2.1.1",
        "pkg:npm/map-obj@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/camelcase@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/camelcase@5.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/caseless@0.12.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/chromium-pickle-js@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/code-point-at@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/combined-stream@1.0.8",
      "dependsOn": [
        "pkg:npm/delayed-stream@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/commander@2.20.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/compare-version@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/concat-map@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/concat-stream@1.6.2",
      "dependsOn": [
        "pkg:npm/buffer-from@1.1.1",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/readable-stream@2.3.6",
        "pkg:npm/typedarray@0.0.6"
      ]
    },
    {
      "ref": "pkg:npm/core-util-is@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cuint@0.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/currently-unhandled@0.4.1",
      "dependsOn": [
        "pkg:npm/array-find-index@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/dashdash@1.14.1",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/dbus-next@0.6.1",
      "dependsOn": [
        "pkg:npm/abstract-socket@2.1.0",
        "pkg:npm/event-stream@3.3.4",
        "pkg:npm/hexy@0.2.11",
        "pkg:npm/jsbi@2.0.5",
        "pkg:npm/long@4.0.0",
        "pkg:npm/put@0.0.6",
        "pkg:npm/safe-buffer@5.1.2",
        "pkg:npm/xml2js@0.4.19"
      ]
    },
    {
      "ref": "pkg:npm/dbus-next@0.5.1",
      "dependsOn": [
        "pkg:npm/abstract-socket@2.1.0",
        "pkg:npm/event-stream@3.3.4",
        "pkg:npm/hexy@0.2.11",
        "pkg:npm/jsbi@2.0.5",
        "pkg:npm/long@4.0.0",
        "pkg:npm/put@0.0.6",
        "pkg:npm/safe-buffer@5.1.2",
        "pkg:npm/xml2js@0.4.19"
      ]
    },
    {
      "ref": "pkg:npm/debug@2.6.9",
      "dependsOn": [
        "pkg:npm/ms@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/debug@3.2.6",
      "dependsOn": [
        "pkg:npm/ms@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/debug@4.1.1",
      "dependsOn": [
        "pkg:npm/ms@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/decamelize@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/deep-equal@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/deep-extend@0.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/define-properties@1.1.3",
      "dependsOn": [
        "pkg:npm/object-keys@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/delayed-stream@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dom-walk@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/duplexer@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ecc-jsbn@0.1.2",
      "dependsOn": [
        "pkg:npm/jsbn@0.1.1",
        "pkg:npm/safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/electron-download@4.1.1",
      "dependsOn": [
        "pkg:npm/debug@3.2.6",
        "pkg:npm/env-paths@1.0.0",
        "pkg:npm/fs-extra@4.0.3",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/nugget@2.0.1",
        "pkg:npm/path-exists@3.0.0",
        "pkg:npm/rc@1.2.8",
        "pkg:npm/semver@5.7.0",
        "pkg:npm/sumchecker@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/electron-notarize@0.0.5",
      "dependsOn": [
        "pkg:npm/debug@4.1.1",
        "pkg:npm/fs-extra@7.0.1"
      ]
    },
    {
      "ref": "pkg:npm/electron-osx-sign@0.4.11",
      "dependsOn": [
        "pkg:npm/bluebird@3.5.5",
        "pkg:npm/compare-version@0.1.2",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/isbinaryfile@3.0.3",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/plist@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/electron-packager@13.1.1",
      "dependsOn": [
        "pkg:npm/asar@1.0.0",
        "pkg:npm/debug@4.1.1",
        "pkg:npm/electron-download@4.1.1",
        "pkg:npm/electron-notarize@0.0.5",
        "pkg:npm/electron-osx-sign@0.4.11",
        "pkg:npm/extract-zip@1.6.7",
        "pkg:npm/fs-extra@7.0.1",
        "pkg:npm/galactus@0.2.1",
        "pkg:npm/get-package-info@1.0.0",
        "pkg:npm/parse-author@2.0.0",
        "pkg:npm/pify@4.0.1",
        "pkg:npm/plist@3.0.1",
        "pkg:npm/rcedit@1.1.2",
        "pkg:npm/resolve@1.11.1",
        "pkg:npm/sanitize-filename@1.6.1",
        "pkg:npm/semver@5.7.0",
        "pkg:npm/yargs-parser@13.1.1"
      ]
    },
    {
      "ref": "pkg:npm/env-paths@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/error-ex@1.3.2",
      "dependsOn": [
        "pkg:npm/is-arrayish@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/es-abstract@1.13.0",
      "dependsOn": [
        "pkg:npm/es-to-primitive@1.2.0",
        "pkg:npm/function-bind@1.1.1",
        "pkg:npm/has@1.0.3",
        "pkg:npm/is-callable@1.1.4",
        "pkg:npm/is-regex@1.0.4",
        "pkg:npm/object-keys@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/es-to-primitive@1.2.0",
      "dependsOn": [
        "pkg:npm/is-callable@1.1.4",
        "pkg:npm/is-date-object@1.0.1",
        "pkg:npm/is-symbol@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/es6-promise@3.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/event-stream@3.3.4",
      "dependsOn": [
        "pkg:npm/duplexer@0.1.1",
        "pkg:npm/from@0.1.7",
        "pkg:npm/map-stream@0.1.0",
        "pkg:npm/pause-stream@0.0.11",
        "pkg:npm/split@0.3.3",
        "pkg:npm/stream-combiner@0.0.4",
        "pkg:npm/through@2.3.8"
      ]
    },
    {
      "ref": "pkg:npm/exif-parser@0.1.12",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/extend@3.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/extract-zip@1.6.7",
      "dependsOn": [
        "pkg:npm/concat-stream@1.6.2",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/yauzl@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/extsprintf@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/extsprintf@1.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-deep-equal@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-json-stable-stringify@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fd-slicer@1.0.1",
      "dependsOn": [
        "pkg:npm/pend@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/file-type@3.9.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/file-uri-to-path@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/find-up@1.1.2",
      "dependsOn": [
        "pkg:npm/path-exists@2.1.0",
        "pkg:npm/pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/find-up@2.1.0",
      "dependsOn": [
        "pkg:npm/locate-path@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/flora-colossus@1.0.0",
      "dependsOn": [
        "pkg:npm/debug@3.2.6",
        "pkg:npm/fs-extra@4.0.3"
      ]
    },
    {
      "ref": "pkg:npm/for-each@0.3.3",
      "dependsOn": [
        "pkg:npm/is-callable@1.1.4"
      ]
    },
    {
      "ref": "pkg:npm/forever-agent@0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/form-data@2.3.3",
      "dependsOn": [
        "pkg:npm/asynckit@0.4.0",
        "pkg:npm/combined-stream@1.0.8",
        "pkg:npm/mime-types@2.1.24"
      ]
    },
    {
      "ref": "pkg:npm/from@0.1.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fs-extra@4.0.3",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.15",
        "pkg:npm/jsonfile@4.0.0",
        "pkg:npm/universalify@0.1.2"
      ]
    },
    {
      "ref": "pkg:npm/fs-extra@7.0.1",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.15",
        "pkg:npm/jsonfile@4.0.0",
        "pkg:npm/universalify@0.1.2"
      ]
    },
    {
      "ref": "pkg:npm/fs.realpath@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/function-bind@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/galactus@0.2.1",
      "dependsOn": [
        "pkg:npm/debug@3.2.6",
        "pkg:npm/flora-colossus@1.0.0",
        "pkg:npm/fs-extra@4.0.3"
      ]
    },
    {
      "ref": "pkg:npm/get-package-info@1.0.0",
      "dependsOn": [
        "pkg:npm/bluebird@3.5.5",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/lodash.get@4.4.2",
        "pkg:npm/read-pkg-up@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/get-stdin@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/getpass@0.1.7",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/glob@7.1.4",
      "dependsOn": [
        "pkg:npm/fs.realpath@1.0.0",
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/once@1.4.0",
        "pkg:npm/path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/global@4.3.2",
      "dependsOn": [
        "pkg:npm/min-document@2.19.0",
        "pkg:npm/process@0.5.2"
      ]
    },
    {
      "ref": "pkg:npm/graceful-fs@4.1.15",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/har-schema@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/har-validator@5.1.3",
      "dependsOn": [
        "pkg:npm/ajv@6.10.0",
        "pkg:npm/har-schema@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/has-symbols@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has@1.0.3",
      "dependsOn": [
        "pkg:npm/function-bind@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/hexy@0.2.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/hosted-git-info@2.7.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-signature@1.2.0",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/jsprim@1.4.1",
        "pkg:npm/sshpk@1.16.1"
      ]
    },
    {
      "ref": "pkg:npm/indent-string@2.1.0",
      "dependsOn": [
        "pkg:npm/repeating@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/inflight@1.0.6",
      "dependsOn": [
        "pkg:npm/once@1.4.0",
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/inherits@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ini@1.3.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ip-regex@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-arrayish@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-callable@1.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-date-object@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-finite@1.0.2",
      "dependsOn": [
        "pkg:npm/number-is-nan@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-fullwidth-code-point@1.0.0",
      "dependsOn": [
        "pkg:npm/number-is-nan@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-function@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-regex@1.0.4",
      "dependsOn": [
        "pkg:npm/has@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/is-symbol@1.0.2",
      "dependsOn": [
        "pkg:npm/has-symbols@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-typedarray@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-utf8@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isarray@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isarray@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isbinaryfile@3.0.3",
      "dependsOn": [
        "pkg:npm/buffer-alloc@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/isstream@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jimp@0.2.28",
      "dependsOn": [
        "pkg:npm/bignumber.js@2.4.0",
        "pkg:npm/bmp-js@0.0.3",
        "pkg:npm/es6-promise@3.3.1",
        "pkg:npm/exif-parser@0.1.12",
        "pkg:npm/file-type@3.9.0",
        "pkg:npm/jpeg-js@0.2.0",
        "pkg:npm/load-bmfont@1.4.0",
        "pkg:npm/mime@1.6.0",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/pixelmatch@4.0.2",
        "pkg:npm/pngjs@3.4.0",
        "pkg:npm/read-chunk@1.0.1",
        "pkg:npm/request@2.88.0",
        "pkg:npm/stream-to-buffer@0.1.0",
        "pkg:npm/tinycolor2@1.4.1",
        "pkg:npm/url-regex@3.2.0"
      ]
    },
    {
      "ref": "pkg:npm/jpeg-js@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsbi@2.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsbn@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-schema-traverse@0.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-schema@0.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-stringify-safe@5.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsonfile@4.0.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.15"
      ]
    },
    {
      "ref": "pkg:npm/jsprim@1.4.1",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/extsprintf@1.3.0",
        "pkg:npm/json-schema@0.2.3",
        "pkg:npm/verror@1.10.0"
      ]
    },
    {
      "ref": "pkg:npm/load-bmfont@1.4.0",
      "dependsOn": [
        "pkg:npm/buffer-equal@0.0.1",
        "pkg:npm/mime@1.6.0",
        "pkg:npm/parse-bmfont-ascii@1.0.6",
        "pkg:npm/parse-bmfont-binary@1.0.6",
        "pkg:npm/parse-bmfont-xml@1.1.4",
        "pkg:npm/phin@2.9.3",
        "pkg:npm/xhr@2.5.0",
        "pkg:npm/xtend@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/load-json-file@1.1.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.15",
        "pkg:npm/parse-json@2.2.0",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/pinkie-promise@2.0.1",
        "pkg:npm/strip-bom@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/load-json-file@2.0.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.15",
        "pkg:npm/parse-json@2.2.0",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/strip-bom@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/locate-path@2.0.0",
      "dependsOn": [
        "pkg:npm/p-locate@2.0.0",
        "pkg:npm/path-exists@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/lodash.get@4.4.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/long@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/loud-rejection@1.6.0",
      "dependsOn": [
        "pkg:npm/currently-unhandled@0.4.1",
        "pkg:npm/signal-exit@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/map-obj@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/map-stream@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/meow@3.7.0",
      "dependsOn": [
        "pkg:npm/camelcase-keys@2.1.0",
        "pkg:npm/decamelize@1.2.0",
        "pkg:npm/loud-rejection@1.6.0",
        "pkg:npm/map-obj@1.0.1",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/normalize-package-data@2.5.0",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/read-pkg-up@1.0.1",
        "pkg:npm/redent@1.0.0",
        "pkg:npm/trim-newlines@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/mime-db@1.40.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-types@2.1.24",
      "dependsOn": [
        "pkg:npm/mime-db@1.40.0"
      ]
    },
    {
      "ref": "pkg:npm/mime@1.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/min-document@2.19.0",
      "dependsOn": [
        "pkg:npm/dom-walk@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/minimatch@3.0.4",
      "dependsOn": [
        "pkg:npm/brace-expansion@1.1.11"
      ]
    },
    {
      "ref": "pkg:npm/minimist@0.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimist@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mkdirp@0.5.1",
      "dependsOn": [
        "pkg:npm/minimist@0.0.8"
      ]
    },
    {
      "ref": "pkg:npm/mpris-service@2.1.0",
      "dependsOn": [
        "pkg:npm/dbus-next@0.5.1",
        "pkg:npm/deep-equal@1.0.1",
        "pkg:npm/source-map-support@0.5.12"
      ]
    },
    {
      "ref": "pkg:npm/ms@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ms@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/nan@2.14.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/normalize-package-data@2.5.0",
      "dependsOn": [
        "pkg:npm/hosted-git-info@2.7.1",
        "pkg:npm/resolve@1.11.1",
        "pkg:npm/semver@5.7.0",
        "pkg:npm/validate-npm-package-license@3.0.4"
      ]
    },
    {
      "ref": "pkg:npm/nugget@2.0.1",
      "dependsOn": [
        "pkg:npm/debug@2.6.9",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/pretty-bytes@1.0.4",
        "pkg:npm/progress-stream@1.2.0",
        "pkg:npm/request@2.88.0",
        "pkg:npm/single-line-log@1.1.2",
        "pkg:npm/throttleit@0.0.2"
      ]
    },
    {
      "ref": "pkg:npm/number-is-nan@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/oauth-sign@0.9.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object-assign@4.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object-keys@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object-keys@0.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/once@1.4.0",
      "dependsOn": [
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/p-limit@1.3.0",
      "dependsOn": [
        "pkg:npm/p-try@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/p-locate@2.0.0",
      "dependsOn": [
        "pkg:npm/p-limit@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/p-try@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parse-author@2.0.0",
      "dependsOn": [
        "pkg:npm/author-regex@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/parse-bmfont-ascii@1.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parse-bmfont-binary@1.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parse-bmfont-xml@1.1.4",
      "dependsOn": [
        "pkg:npm/xml-parse-from-string@1.0.1",
        "pkg:npm/xml2js@0.4.19"
      ]
    },
    {
      "ref": "pkg:npm/parse-headers@2.0.2",
      "dependsOn": [
        "pkg:npm/for-each@0.3.3",
        "pkg:npm/string.prototype.trim@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/parse-json@2.2.0",
      "dependsOn": [
        "pkg:npm/error-ex@1.3.2"
      ]
    },
    {
      "ref": "pkg:npm/path-exists@2.1.0",
      "dependsOn": [
        "pkg:npm/pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/path-exists@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-is-absolute@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-parse@1.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-type@1.1.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.15",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/path-type@2.0.0",
      "dependsOn": [
        "pkg:npm/pify@2.3.0"
      ]
    },
    {
      "ref": "pkg:npm/pause-stream@0.0.11",
      "dependsOn": [
        "pkg:npm/through@2.3.8"
      ]
    },
    {
      "ref": "pkg:npm/pend@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/performance-now@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/phin@2.9.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pify@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pify@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pinkie-promise@2.0.1",
      "dependsOn": [
        "pkg:npm/pinkie@2.0.4"
      ]
    },
    {
      "ref": "pkg:npm/pinkie@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pixelmatch@4.0.2",
      "dependsOn": [
        "pkg:npm/pngjs@3.4.0"
      ]
    },
    {
      "ref": "pkg:npm/plist@2.1.0",
      "dependsOn": [
        "pkg:npm/base64-js@1.2.0",
        "pkg:npm/xmlbuilder@8.2.2",
        "pkg:npm/xmldom@0.1.27"
      ]
    },
    {
      "ref": "pkg:npm/plist@3.0.1",
      "dependsOn": [
        "pkg:npm/base64-js@1.3.0",
        "pkg:npm/xmlbuilder@9.0.7",
        "pkg:npm/xmldom@0.1.27"
      ]
    },
    {
      "ref": "pkg:npm/pngjs@3.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pretty-bytes@1.0.4",
      "dependsOn": [
        "pkg:npm/get-stdin@4.0.1",
        "pkg:npm/meow@3.7.0"
      ]
    },
    {
      "ref": "pkg:npm/process-nextick-args@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/process@0.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/progress-stream@1.2.0",
      "dependsOn": [
        "pkg:npm/speedometer@0.1.4",
        "pkg:npm/through2@0.2.3"
      ]
    },
    {
      "ref": "pkg:npm/psl@1.1.32",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/punycode@1.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/punycode@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/put@0.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qs@6.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rc@1.2.8",
      "dependsOn": [
        "pkg:npm/deep-extend@0.6.0",
        "pkg:npm/ini@1.3.5",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/strip-json-comments@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/rcedit@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/read-chunk@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/read-pkg-up@1.0.1",
      "dependsOn": [
        "pkg:npm/find-up@1.1.2",
        "pkg:npm/read-pkg@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/read-pkg-up@2.0.0",
      "dependsOn": [
        "pkg:npm/find-up@2.1.0",
        "pkg:npm/read-pkg@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/read-pkg@1.1.0",
      "dependsOn": [
        "pkg:npm/load-json-file@1.1.0",
        "pkg:npm/normalize-package-data@2.5.0",
        "pkg:npm/path-type@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/read-pkg@2.0.0",
      "dependsOn": [
        "pkg:npm/load-json-file@2.0.0",
        "pkg:npm/normalize-package-data@2.5.0",
        "pkg:npm/path-type@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/readable-stream@2.3.6",
      "dependsOn": [
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/isarray@1.0.0",
        "pkg:npm/process-nextick-args@2.0.0",
        "pkg:npm/safe-buffer@5.1.2",
        "pkg:npm/string_decoder@1.1.1",
        "pkg:npm/util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/readable-stream@1.1.14",
      "dependsOn": [
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/isarray@0.0.1",
        "pkg:npm/string_decoder@0.10.31"
      ]
    },
    {
      "ref": "pkg:npm/redent@1.0.0",
      "dependsOn": [
        "pkg:npm/indent-string@2.1.0",
        "pkg:npm/strip-indent@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/repeating@2.0.1",
      "dependsOn": [
        "pkg:npm/is-finite@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/request@2.88.0",
      "dependsOn": [
        "pkg:npm/aws-sign2@0.7.0",
        "pkg:npm/aws4@1.8.0",
        "pkg:npm/caseless@0.12.0",
        "pkg:npm/combined-stream@1.0.8",
        "pkg:npm/extend@3.0.2",
        "pkg:npm/forever-agent@0.6.1",
        "pkg:npm/form-data@2.3.3",
        "pkg:npm/har-validator@5.1.3",
        "pkg:npm/http-signature@1.2.0",
        "pkg:npm/is-typedarray@1.0.0",
        "pkg:npm/isstream@0.1.2",
        "pkg:npm/json-stringify-safe@5.0.1",
        "pkg:npm/mime-types@2.1.24",
        "pkg:npm/oauth-sign@0.9.0",
        "pkg:npm/performance-now@2.1.0",
        "pkg:npm/qs@6.5.2",
        "pkg:npm/safe-buffer@5.1.2",
        "pkg:npm/tough-cookie@2.4.3",
        "pkg:npm/tunnel-agent@0.6.0",
        "pkg:npm/uuid@3.3.2"
      ]
    },
    {
      "ref": "pkg:npm/resolve@1.11.1",
      "dependsOn": [
        "pkg:npm/path-parse@1.0.6"
      ]
    },
    {
      "ref": "pkg:npm/rimraf@2.6.3",
      "dependsOn": [
        "pkg:npm/glob@7.1.4"
      ]
    },
    {
      "ref": "pkg:npm/safe-buffer@5.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/safer-buffer@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sanitize-filename@1.6.1",
      "dependsOn": [
        "pkg:npm/truncate-utf8-bytes@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/sax@1.2.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/semver@5.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/signal-exit@3.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/single-line-log@1.1.2",
      "dependsOn": [
        "pkg:npm/string-width@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/source-map-support@0.5.12",
      "dependsOn": [
        "pkg:npm/buffer-from@1.1.1",
        "pkg:npm/source-map@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/source-map@0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/spdx-correct@3.1.0",
      "dependsOn": [
        "pkg:npm/spdx-expression-parse@3.0.0",
        "pkg:npm/spdx-license-ids@3.0.4"
      ]
    },
    {
      "ref": "pkg:npm/spdx-exceptions@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/spdx-expression-parse@3.0.0",
      "dependsOn": [
        "pkg:npm/spdx-exceptions@2.2.0",
        "pkg:npm/spdx-license-ids@3.0.4"
      ]
    },
    {
      "ref": "pkg:npm/spdx-license-ids@3.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/speedometer@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/split@0.3.3",
      "dependsOn": [
        "pkg:npm/through@2.3.8"
      ]
    },
    {
      "ref": "pkg:npm/sshpk@1.16.1",
      "dependsOn": [
        "pkg:npm/asn1@0.2.4",
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/bcrypt-pbkdf@1.0.2",
        "pkg:npm/dashdash@1.14.1",
        "pkg:npm/ecc-jsbn@0.1.2",
        "pkg:npm/getpass@0.1.7",
        "pkg:npm/jsbn@0.1.1",
        "pkg:npm/safer-buffer@2.1.2",
        "pkg:npm/tweetnacl@0.14.5"
      ]
    },
    {
      "ref": "pkg:npm/stream-combiner@0.0.4",
      "dependsOn": [
        "pkg:npm/duplexer@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/stream-to-buffer@0.1.0",
      "dependsOn": [
        "pkg:npm/stream-to@0.2.2"
      ]
    },
    {
      "ref": "pkg:npm/stream-to@0.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string-width@1.0.2",
      "dependsOn": [
        "pkg:npm/code-point-at@1.1.0",
        "pkg:npm/is-fullwidth-code-point@1.0.0",
        "pkg:npm/strip-ansi@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/string.prototype.trim@1.1.2",
      "dependsOn": [
        "pkg:npm/define-properties@1.1.3",
        "pkg:npm/es-abstract@1.13.0",
        "pkg:npm/function-bind@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/string_decoder@0.10.31",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string_decoder@1.1.1",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "pkg:npm/strip-ansi@3.0.1",
      "dependsOn": [
        "pkg:npm/ansi-regex@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/strip-bom@2.0.0",
      "dependsOn": [
        "pkg:npm/is-utf8@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/strip-bom@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-indent@1.0.1",
      "dependsOn": [
        "pkg:npm/get-stdin@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/strip-json-comments@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sumchecker@2.0.2",
      "dependsOn": [
        "pkg:npm/debug@2.6.9"
      ]
    },
    {
      "ref": "pkg:npm/throttleit@0.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/through2@0.2.3",
      "dependsOn": [
        "pkg:npm/readable-stream@1.1.14",
        "pkg:npm/xtend@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/through@2.3.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tinycolor2@1.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tmp-promise@1.1.0",
      "dependsOn": [
        "pkg:npm/bluebird@3.5.5",
        "pkg:npm/tmp@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/tmp@0.1.0",
      "dependsOn": [
        "pkg:npm/rimraf@2.6.3"
      ]
    },
    {
      "ref": "pkg:npm/tough-cookie@2.4.3",
      "dependsOn": [
        "pkg:npm/psl@1.1.32",
        "pkg:npm/punycode@1.4.1"
      ]
    },
    {
      "ref": "pkg:npm/trim-newlines@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/truncate-utf8-bytes@1.0.2",
      "dependsOn": [
        "pkg:npm/utf8-byte-length@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/tunnel-agent@0.6.0",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "pkg:npm/tweetnacl@0.14.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/typedarray@0.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/universalify@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uri-js@4.2.2",
      "dependsOn": [
        "pkg:npm/punycode@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/url-regex@3.2.0",
      "dependsOn": [
        "pkg:npm/ip-regex@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/utf8-byte-length@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/util-deprecate@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uuid@3.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/validate-npm-package-license@3.0.4",
      "dependsOn": [
        "pkg:npm/spdx-correct@3.1.0",
        "pkg:npm/spdx-expression-parse@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/verror@1.10.0",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/extsprintf@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/wrappy@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xhr@2.5.0",
      "dependsOn": [
        "pkg:npm/global@4.3.2",
        "pkg:npm/is-function@1.0.1",
        "pkg:npm/parse-headers@2.0.2",
        "pkg:npm/xtend@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/xml-parse-from-string@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xml2js@0.4.19",
      "dependsOn": [
        "pkg:npm/sax@1.2.4",
        "pkg:npm/xmlbuilder@9.0.7"
      ]
    },
    {
      "ref": "pkg:npm/xmlbuilder@8.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xmlbuilder@9.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xmldom@0.1.27",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xtend@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xtend@2.1.2",
      "dependsOn": [
        "pkg:npm/object-keys@0.4.0"
      ]
    },
    {
      "ref": "pkg:npm/yargs-parser@13.1.1",
      "dependsOn": [
        "pkg:npm/camelcase@5.3.1",
        "pkg:npm/decamelize@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/yauzl@2.4.1",
      "dependsOn": [
        "pkg:npm/fd-slicer@1.0.1"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/flora-colossus@3.0.2"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-08-12T12:58:55Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Wednesday, August 12, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'flora-colossus' with version '3.0.2'. The application also has 1 child modules/components. The package type in this SBOM is npm with 12 purl namespaces described under components. The components were identified from the source files: test/fixtures/xml2js/yarn.lock, yarn.lock."
    }
  ]
}