{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:45ba4b91-5f72-4283-88e8-a23bf077a9df",
  "version": 1,
  "metadata": {
    "timestamp": "2026-07-30T12:27:07Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "font-atlas",
      "group": "",
      "version": "2.1.0",
      "description": "Populate a <canvas> element with a font texture atlas",
      "purl": "pkg:npm/font-atlas@2.1.0",
      "bom-ref": "pkg:npm/font-atlas@2.1.0",
      "author": "Hugh Kennedy <hughskennedy@gmail.com> (http://hughsk.io/)",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/hughsk/font-atlas"
        },
        {
          "type": "vcs",
          "url": "git://github.com/hughsk/font-atlas.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "css-font",
      "version": "1.2.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5785385a9b3874f0c0089e16a60a1f276453e58ab07b59441fac2538e688c4c8b48138dd2228ec739166c50959ed9672290924badaaabd42cea74ee5f5ceecb0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/css-font@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/css-font/-/css-font-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-font@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/css-font/-/css-font-1.2.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "css-font/stringify"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "index.js#3"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-font-size-keywords",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "43eb2f3036cc95e96009f1ff4550cab530da7f9d36d4ee3ce994e140f2296a19c88d490c52c942f96b8e4125938064ab3421f4f18eed60d1269b2d2191f308f1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/css-font-size-keywords@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/css-font-size-keywords/-/css-font-size-keywords-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-font-size-keywords@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/css-font-size-keywords/-/css-font-size-keywords-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-font-stretch-keywords",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2a6ba03ced8136aa32a7dce6048506c2de7c51049fca4d57e436ce9646f6a5c9035c54807e3b03e707a76fcf1f36b0fa7ef4bebeef746bfb6c3e96fdbdbd122e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/css-font-stretch-keywords@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/css-font-stretch-keywords/-/css-font-stretch-keywords-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-font-stretch-keywords@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/css-font-stretch-keywords/-/css-font-stretch-keywords-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-font-style-keywords",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d059f4693a5c0e4b67475473681628ac8c508a5cbce4cd8a5d1a739b140f821f29c5437d15c9f4d08f2ef48de0acdaf54175600a5f53e489b1d19c0a53def756"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/css-font-style-keywords@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/css-font-style-keywords/-/css-font-style-keywords-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-font-style-keywords@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/css-font-style-keywords/-/css-font-style-keywords-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-font-weight-keywords",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e52a3cfcd1fea030fe133b2717889a1b86451d0def69589e3e42f565b679882fcaaec098f961eafe5bce82bb66b8e43da41059d400c6a5a7fe038963d59f5e60"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/css-font-weight-keywords@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/css-font-weight-keywords/-/css-font-weight-keywords-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-font-weight-keywords@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/css-font-weight-keywords/-/css-font-weight-keywords-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-global-keywords",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5f5c60421919f67f78583c27b6ab2de43fc52a49a25341a5252159495de42efc89d560b955eca85c33ae95e503f9222e1fd0bb5b4e62b3efb45a88740867ca8d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/css-global-keywords@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/css-global-keywords/-/css-global-keywords-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-global-keywords@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/css-global-keywords/-/css-global-keywords-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-system-font-keywords",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d6e993b5577f7d74b6e5fb5f8c1ef5780482ad886296612cbc3108eb01bf4299679a57e654ce47919fd95f8e834f92b779b9453e02d41ede414426f461791214"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/css-system-font-keywords@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/css-system-font-keywords/-/css-system-font-keywords-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-system-font-keywords@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/css-system-font-keywords/-/css-system-font-keywords-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pick-by-alias",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1128f6f9e071846adc0356b3807b3b940446e7ee622da91cffa9e57dba6370b974d07bae50e22e3918585cde03d477ef3122ae56d1508c0967c22d491c478323"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/pick-by-alias@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/pick-by-alias/-/pick-by-alias-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pick-by-alias@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/pick-by-alias/-/pick-by-alias-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string-split-by",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "29a24a63e85fa733727adfde98ff353c903d8535527f134b4bd4854d6c5d0a79d6d7fcce3b0895db8f3e11fa17ec840570168ea781b9604eb14c9305fa92e0e8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/string-split-by@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/string-split-by/-/string-split-by-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string-split-by@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/string-split-by/-/string-split-by-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parenthesis",
      "version": "3.1.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "285fd4f2d939e018107b09093ef078b3f512dd5418ebc0510e91fadfcfbb3bf9f9f13a67c22c273ad1883ac4f6fe2f8cefcb3ad41069782f3749307cf1df2cab"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/parenthesis@3.1.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/parenthesis/-/parenthesis-3.1.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parenthesis@3.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/parenthesis/-/parenthesis-3.1.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unquote",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bd10aa16fe94857a56c593f218387f17766936ff3faa8ef0ea2b9f2e9420f5a2a743bd6a3380792a223b3226bd08e723121acef4bb9e1e93188d8cec587dce22"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/unquote@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/unquote/-/unquote-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unquote@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/unquote/-/unquote-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/css-font-size-keywords@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/css-font-stretch-keywords@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/css-font-style-keywords@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/css-font-weight-keywords@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/css-global-keywords@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/css-system-font-keywords@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pick-by-alias@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parenthesis@3.1.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string-split-by@1.0.0",
      "dependsOn": [
        "pkg:npm/parenthesis@3.1.8"
      ]
    },
    {
      "ref": "pkg:npm/unquote@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/css-font@1.2.0",
      "dependsOn": [
        "pkg:npm/css-font-size-keywords@1.0.0",
        "pkg:npm/css-font-stretch-keywords@1.0.1",
        "pkg:npm/css-font-style-keywords@1.0.1",
        "pkg:npm/css-font-weight-keywords@1.0.0",
        "pkg:npm/css-global-keywords@1.0.1",
        "pkg:npm/css-system-font-keywords@1.0.0",
        "pkg:npm/pick-by-alias@1.2.0",
        "pkg:npm/string-split-by@1.0.0",
        "pkg:npm/unquote@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/font-atlas@2.1.0",
      "dependsOn": [
        "pkg:npm/css-font@1.2.0"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/font-atlas@2.1.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-07-30T12:27:07Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, July 30, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'font-atlas' with version '2.1.0'."
    }
  ]
}