{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:fc438ef9-46aa-483d-b191-e13d106b9036",
  "version": 1,
  "metadata": {
    "timestamp": "2026-07-25T09:32:32Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "from",
      "group": "",
      "version": "0.1.7",
      "description": "Easy way to make a Readable Stream",
      "purl": "pkg:npm/from@0.1.7",
      "bom-ref": "pkg:npm/from@0.1.7",
      "author": "Dominic Tarr <dominic.tarr@gmail.com> (dominictarr.com)",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/dominictarr/from.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "asynct",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1fef0d253c478eaddf8511376f1e542b8c9cf2007bff4681e1f0e737ade6143b054e4e8828213d3e8d69e8f8f08ebd1ecfb0f4fc3fe834bbd314e1a7f5079bd1"
        }
      ],
      "purl": "pkg:npm/asynct@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/asynct/-/asynct-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asynct@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/asynct/-/asynct-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ctrlflow",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f1cbc7faece035ce57ae50dbcb2e954f821884d4742b2e8d69fad64f23d157d8003dd5d8fa2ee47904bb880a90428f560dcc7828e39ce9663c12be62be7e3f14"
        }
      ],
      "purl": "pkg:npm/ctrlflow@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ctrlflow/-/ctrlflow-0.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ctrlflow@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ctrlflow/-/ctrlflow-0.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "curry",
      "version": "0.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "20f6a90a3b8b41f6fdbbb1c453e97b5d7d740a62b9a2376f8edfb4b0dad9992bd2537d4e6713d5efc7260e3d599be657fed121ee379875a0f8bfcf62243383d2"
        }
      ],
      "purl": "pkg:npm/curry@0.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/curry/-/curry-0.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/curry@0.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/curry/-/curry-0.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "test-cmd",
      "version": "1.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d460b4d4b70fb4fa3135fbf36713552ad826251abb81a8509844be83f14143a3aa2dfa2bbfe6008eb33f43c69562b16f8f0159ae102e1dd5cd20e1e3694ab205"
        }
      ],
      "purl": "pkg:npm/test-cmd@1.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/test-cmd/-/test-cmd-1.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/test-cmd@1.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/test-cmd/-/test-cmd-1.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ctrlflow",
      "version": "4.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e18d05d7a06f8ab2de62500459a23b5be2b15e2dc32acc61e81140884e5fb4f9a270452e33668e243b234bd277a1d86e30769b6100378e28e6b6bdf1d9b7872d"
        }
      ],
      "purl": "pkg:npm/ctrlflow@4.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ctrlflow/-/ctrlflow-4.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ctrlflow@4.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ctrlflow/-/ctrlflow-4.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d-utils",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "26c47179cee0042b11873ecc6cd043210d253159455fd2625961e18d7208ddd379f16838d93aa6715dfd6b92d5af7b37cea9514c9529291e7642b3bb56bc40aa"
        }
      ],
      "purl": "pkg:npm/d-utils@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/d-utils/-/d-utils-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d-utils@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/d-utils/-/d-utils-1.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d-utils",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e1c62dcf4645c1d88be75c50ff38469240903f0082bbe960e3427128518a3e98d5def165d84d347e65e4921e296f8a8930d28f2b411cdc646e165b1eb73d6c1"
        }
      ],
      "purl": "pkg:npm/d-utils@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/d-utils/-/d-utils-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d-utils@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/d-utils/-/d-utils-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ls-r",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0ee8005f737c95454ee8d5f8ac9c9e386fc0d6ef962798bc9cff1f78d6f7eafcadc76c60b182ac9a8320876fffff7e510e6a3412bdac2f8f7ab16b0d3abc7ca2"
        }
      ],
      "purl": "pkg:npm/ls-r@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ls-r/-/ls-r-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ls-r@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ls-r/-/ls-r-0.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d-utils",
      "version": "2.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f6970f91fb36cd203391680743c4a213fea71801e4decb8b2ce0970a09318ef0fd74b49e1065f637b083014b1046ee6c2476bc8129c071933d8dbf657879278b"
        }
      ],
      "purl": "pkg:npm/d-utils@2.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/d-utils/-/d-utils-2.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d-utils@2.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/d-utils/-/d-utils-2.3.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "optimist",
      "version": "0.2.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5b2ec4ddc403a6ab13205c96ee6db68527afc932f1c3ce746a162fec55acc381ba3082954d9f0d480f79281ad0f796b848cb0caf55065149f01052a155a4b322"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "MIT/X11"
          }
        }
      ],
      "purl": "pkg:npm/optimist@0.2.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/optimist/-/optimist-0.2.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/optimist@0.2.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/optimist/-/optimist-0.2.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wordwrap",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d6d300f74efe578426c55edd6d1bdbe3ff0c69100b2baabd01b89dde774c6276f2a3ca628ac0a678e355a95497a9003729a3f848bb796fbb9de84daca8ff1317"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/wordwrap@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/wordwrap/-/wordwrap-0.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wordwrap@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/wordwrap/-/wordwrap-0.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "test-report",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3e3d9884b766d3456bda1752e10bb63661277cd06c551a0dda4de6e35498f9859840239690d3116949fd2f537f87b9e0b1a4f6a9bc49a1fcdaf1846308da91e1"
        }
      ],
      "purl": "pkg:npm/test-report@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/test-report/-/test-report-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/test-report@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/test-report/-/test-report-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "test-report-view",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8ecba67c22d7f823be8b230ecdcb2390470c52e6cc14ffae62d37e1f668331b82a04d59582d28b3e71bd07bcd9908c89d7830ce9e2ae42ae6fc1005687a86475"
        }
      ],
      "purl": "pkg:npm/test-report-view@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/test-report-view/-/test-report-view-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/test-report-view@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/test-report-view/-/test-report-view-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-spec",
      "version": "0.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "67fb0c6ff737b6fa967f05b4f8d33ce8cbdeb2788eca06cdd09eabd90cee7c8535dcc7a67120cd792dd4632d8b7b7b7ca235d5057f4dc890fd675e0b140e2878"
        }
      ],
      "licenses": [
        {
          "expression": "(MIT OR Apache-2.0)"
        }
      ],
      "purl": "pkg:npm/stream-spec@0.3.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/stream-spec/-/stream-spec-0.3.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-spec@0.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/stream-spec/-/stream-spec-0.3.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "macgyver",
      "version": "1.10.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "82b4d8e8931977c383c482f144eef9b61e606a32f4200363088ec07a4e6ad944c55a56f59bcc2af20c6b2072f9e56bb19e2bc2d70534a0555ce48166e37e4445"
        }
      ],
      "purl": "pkg:npm/macgyver@1.10.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/macgyver/-/macgyver-1.10.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/macgyver@1.10.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/macgyver/-/macgyver-1.10.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "assertions",
      "version": "2.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "af1f1b748ccb572040f2f68da7eb9f52908622e16e19ee55a1cc0080c23b84bbcd1b3f970f5899821970eab378382787674c9a130851ff254baf8e598606fe6b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/assertions@2.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/assertions/-/assertions-2.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/assertions@2.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/assertions/-/assertions-2.3.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fomatto",
      "version": "0.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "82cb8230ef70acbf57e901761c9baeea566ac92accd1053c71948d3dbf9b11dca2e781e39e83191709fbed0937411682e8ae8ccb5b4fd6dd01bcd4dc85028c9e"
        }
      ],
      "purl": "pkg:npm/fomatto@0.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "git+ssh://git@github.com/BonsaiDen/Fomatto.git#468666f600b46f9067e3da7200fd9df428923ea6"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fomatto@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "git+ssh://git@github.com/BonsaiDen/Fomatto.git#468666f600b46f9067e3da7200fd9df428923ea6"
        },
        {
          "name": "cdx:npm:manifestSourceType",
          "value": "git"
        },
        {
          "name": "cdx:npm:manifestSource",
          "value": "git://github.com/BonsaiDen/Fomatto.git#468666f600b46f9067e3da7200fd9df428923ea6"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "render",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9933424d65f2ba526130572c0991b03231371a31f8d1e138af6dceafb4b0e179c40473bc812e590478310c68c5175bf4a5ef465f1f9cfbc9e36e9af2fb5d5edc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/render@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/render/-/render-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/render@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/render/-/render-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "traverser",
      "version": "0.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f30ab51ff80daf53f01a199f9649414ef66563768e8149aead2603f0fb9e2a7d41b6ad35444b6ea50f2763b569706e2fd983ca04e0f160a21d4eddfa5be49cc2"
        }
      ],
      "purl": "pkg:npm/traverser@0.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/traverser/-/traverser-0.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/traverser@0.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/traverser/-/traverser-0.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "traverser",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4887f8162339cb8974dcee5528dfd56e7b308082bd80724a98b2bfc225a381dc4fb23d9519c4bb84e8a78ca305bf8afc40850afb9317b325f32617346e6681d0"
        }
      ],
      "purl": "pkg:npm/traverser@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/traverser/-/traverser-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/traverser@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/traverser/-/traverser-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/curry@0.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ctrlflow@0.0.3",
      "dependsOn": [
        "pkg:npm/curry@0.0.4"
      ]
    },
    {
      "ref": "pkg:npm/d-utils@1.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ctrlflow@4.1.3",
      "dependsOn": [
        "pkg:npm/curry@0.0.4",
        "pkg:npm/d-utils@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/d-utils@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/d-utils@2.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wordwrap@0.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/optimist@0.2.8",
      "dependsOn": [
        "pkg:npm/wordwrap@0.0.3"
      ]
    },
    {
      "ref": "pkg:npm/ls-r@0.2.1",
      "dependsOn": [
        "pkg:npm/ctrlflow@4.1.3",
        "pkg:npm/d-utils@2.3.3",
        "pkg:npm/optimist@0.2.8"
      ]
    },
    {
      "ref": "pkg:npm/test-report@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/test-report-view@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/test-cmd@1.7.0",
      "dependsOn": [
        "pkg:npm/ctrlflow@4.1.3",
        "pkg:npm/d-utils@2.1.1",
        "pkg:npm/ls-r@0.2.1",
        "pkg:npm/optimist@0.2.8",
        "pkg:npm/test-report-view@1.0.0",
        "pkg:npm/test-report@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/asynct@1.1.0",
      "dependsOn": [
        "pkg:npm/ctrlflow@0.0.3",
        "pkg:npm/test-cmd@1.7.0"
      ]
    },
    {
      "ref": "pkg:npm/macgyver@1.10.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stream-spec@0.3.6",
      "dependsOn": [
        "pkg:npm/macgyver@1.10.1"
      ]
    },
    {
      "ref": "pkg:npm/fomatto@0.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/traverser@0.0.5",
      "dependsOn": [
        "pkg:npm/curry@0.0.4"
      ]
    },
    {
      "ref": "pkg:npm/render@0.1.4",
      "dependsOn": [
        "pkg:npm/traverser@0.0.5"
      ]
    },
    {
      "ref": "pkg:npm/traverser@1.0.0",
      "dependsOn": [
        "pkg:npm/curry@0.0.4"
      ]
    },
    {
      "ref": "pkg:npm/assertions@2.3.4",
      "dependsOn": [
        "pkg:npm/fomatto@0.6.0",
        "pkg:npm/render@0.1.4",
        "pkg:npm/traverser@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/from@0.1.7",
      "dependsOn": [
        "pkg:npm/assertions@2.3.4",
        "pkg:npm/asynct@1.1.0",
        "pkg:npm/stream-spec@0.3.6"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/from@0.1.7"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-07-25T09:32:32Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Saturday, July 25, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'from' with version '0.1.7'."
    }
  ]
}