{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:4c8cd0d6-131f-4fd1-a63c-961d9545015e",
  "version": 1,
  "metadata": {
    "timestamp": "2026-07-24T01:16:04Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "graphmatch",
      "group": "",
      "version": "1.1.1",
      "description": "A low-level utility for matching a string against a directed acyclic graph of regexes.",
      "purl": "pkg:npm/graphmatch@1.1.1",
      "bom-ref": "pkg:npm/graphmatch@1.1.1",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "benchmark, benchmark:watch, clean, compile, compile:watch, test, test:watch, prepublishOnly"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "benchloop",
      "version": "2.1.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "62223548d295ccfd02bcf1107333565bf9cc78c746151d0f169fcb1cf706bdee3326c0938884c53ffb7f7f96b8f16fe92c0bd73d6f6adea794b3c9eabae87075"
        }
      ],
      "purl": "pkg:npm/benchloop@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/benchloop/-/benchloop-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/benchloop@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/benchloop/-/benchloop-2.1.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "benchloop"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "tasks/benchmark.js#4"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tiny-colors",
      "version": "2.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1259afec92fe757d1cefc71a2847a51f59c71c1b241f32646aa051815bd0bb1b2f540fd9f456b6477659b5f9a491a8dc775f1ef7a44b33026fb45a82f23b1958"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/tiny-colors@2.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/tiny-colors/-/tiny-colors-2.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tiny-colors@2.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/tiny-colors/-/tiny-colors-2.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fava",
      "version": "0.3.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e8b01be98641d4d6c8f86964ac0e563e4a9f1ecb4d2f2e80509fecf8711968d44237e25f2ae51a924687da800d63e6169f339de88490502fce0629cfdf064fec"
        }
      ],
      "purl": "pkg:npm/fava@0.3.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/fava/-/fava-0.3.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fava@0.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/fava/-/fava-0.3.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "are-deeply-equal",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "19ab4070f2d0eb353a904e382762bca5163cb1053352a98946fcd17de65bcd5df3048ebd4a93f3c7afe837525bf045316a629fc7e7f20ce762a7192092b70207"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/are-deeply-equal@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/are-deeply-equal/-/are-deeply-equal-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/are-deeply-equal@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/are-deeply-equal/-/are-deeply-equal-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "call-chainer",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "170f72e4033e9c6fbbb3c234543a64547b640123cd5bf4a0dd9e0e46a27f3f38503277e5675a9df5537b4df5ab71a4f8d4509c3b0cc76b3f0da0db1e02cfa225"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/call-chainer@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/call-chainer/-/call-chainer-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/call-chainer@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/call-chainer/-/call-chainer-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "promise-make-naked",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cbbb3c66e1c81b9e8962ca41db86def461645c0d735cbf3952bf6ed432ab5bfb6fc94a0fc568018e76a52ba35cea5ef01c17005b47373ced3bf973ac59346e86"
        }
      ],
      "purl": "pkg:npm/promise-make-naked@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/promise-make-naked/-/promise-make-naked-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/promise-make-naked@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/promise-make-naked/-/promise-make-naked-2.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "promise-resolve-timeout",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f74433ceee52991fa4b264cfb1cefdd76d4d646b4488fbca00240b0a5eb2a1f927471e71248f64363de80d5497e9d5539de17c26eebec695457434b36fb70d72"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/promise-resolve-timeout@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/promise-resolve-timeout/-/promise-resolve-timeout-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/promise-resolve-timeout@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/promise-resolve-timeout/-/promise-resolve-timeout-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "specialist",
      "version": "1.4.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e263d01111330545b68739575ff75615b41d516ce992abcc155a5401d465a3595496128c39b0c7880a34f6867de31e1c4b7b9630979b3ce4e7f8669060b7efdd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/specialist@1.4.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/specialist/-/specialist-1.4.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/specialist@1.4.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/specialist/-/specialist-1.4.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tiny-bin",
      "version": "1.11.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0ab05b88ab2f24de1b1d20c0d1c3dabb8b7929674651401c4d743c6c1d785cda8d63eebc519178668ed64557472ead23d066198c845b34383ecc96c95c31177a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/tiny-bin@1.11.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/tiny-bin/-/tiny-bin-1.11.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tiny-bin@1.11.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/tiny-bin/-/tiny-bin-1.11.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-purge",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b1ad4a58c00d7d9bab42461e99a54d34987c81117489426f715371be33e560cf693cf4c1d2ff95287fe6151cf8b3a81703ca658a6417a2b252a8982eb7152cf2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ansi-purge@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ansi-purge/-/ansi-purge-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-purge@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ansi-purge/-/ansi-purge-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-string-width",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "817f0baed34423986af035547d140c6ebe65a5a4b89cc21657eed711b5e4d9bf24890222ce09e5af5d81e1d037644c77df4f337b43b843547e707b6cf24c9426"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/fast-string-width@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/fast-string-width/-/fast-string-width-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-string-width@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/fast-string-width/-/fast-string-width-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-string-truncated-width",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d238e32042fafb48da8379765d65a2cceeb8fda655b69886137b74660ab1bf40cfbb188c8ef077336e1f0b285950ee0aa262503e3dcb4d25270cfdc6a5dc02d2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/fast-string-truncated-width@3.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/fast-string-truncated-width/-/fast-string-truncated-width-3.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-string-truncated-width@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/fast-string-truncated-width/-/fast-string-truncated-width-3.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-current-package",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "73f470e41c8343ece0f8b87f7a6056bf46c3a6e80415d9973d1ebfb2b21e995b48be89745db4f4240afc0dbd1c5fe263ff163dc23d707637aadaa341df94daca"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/get-current-package@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/get-current-package/-/get-current-package-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-current-package@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/get-current-package/-/get-current-package-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-up-json",
      "version": "2.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d7365951f0f518e38411dd40ab06d19829020afd4ef6dd2f3a9098826cdf26a2adcbc58a68a943cb159e8fc01ec3ebc8e65bc3893be2690b9a56ebba1b3947cd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/find-up-json@2.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/find-up-json/-/find-up-json-2.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-up-json@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/find-up-json/-/find-up-json-2.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-up-path",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "725e127f1b9fabd58af38f0bf3cedbe2bf8d559a018cc781e10c9d3d9fa95dba7a26dda7515b294e8dacbcd3a6e3cb2d208792c6db82b142daf7e7be2cc4f3c0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/find-up-path@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/find-up-path/-/find-up-path-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-up-path@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/find-up-path/-/find-up-path-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tiny-levenshtein",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b14e3076e36b8dbd9ee75ae03ce4f2ea7c776a0f2940f140f57402410b059840961034b6dcb12862c66fddf855b89348731cc134cbc20c36fb7bf3cf38ffafc7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/tiny-levenshtein@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/tiny-levenshtein/-/tiny-levenshtein-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tiny-levenshtein@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/tiny-levenshtein/-/tiny-levenshtein-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tiny-parse-argv",
      "version": "2.8.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4672031d0fabf7332eb254165684717ca54eba6b5e7a1790a9bc0d609c90c73336bf3c7fbdd379c4078beb8177ad03a97db55dc45921338ccf0f27eaed2c6c05"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/tiny-parse-argv@2.8.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/tiny-parse-argv/-/tiny-parse-argv-2.8.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tiny-parse-argv@2.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/tiny-parse-argv/-/tiny-parse-argv-2.8.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tiny-updater",
      "version": "3.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "775a8d3fe60e6c044c96ed854b75e22662d38fb246216ae9281ed58f55a63e67405070c8eb25d113502623aef56d364ab270b7942acc4a702ee731b50398066a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/tiny-updater@3.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/tiny-updater/-/tiny-updater-3.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tiny-updater@3.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/tiny-updater/-/tiny-updater-3.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "function-once",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6c4dc4f11124e2300d0e8b77974b0b1645e0cb0070cc52ac99bc1d9d51cb2549edff7915e9d346d28249aa8441b92d59f4baf8668420c15d1934b0e05836efed"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/function-once@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/function-once/-/function-once-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/function-once@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/function-once/-/function-once-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ionstore",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83ef7dbf291adc488d1490a76eadcdc5e823576d754731ad90350c6d9181d350a89fc66a526331fc5a5631eaa00d73aa80ced0a1578385ef827d8096ce768354"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ionstore@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ionstore/-/ionstore-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ionstore@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ionstore/-/ionstore-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "when-exit",
      "version": "2.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "54690a279eb8933b7a32cd5d6e03cfff2b88a100abb0502745ba6da42e70384b0368db1b081d9b9df9da03c8bfbd1b39b6351210eb48baf97dfccc95b2f4190a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/when-exit@2.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/when-exit/-/when-exit-2.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/when-exit@2.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/when-exit/-/when-exit-2.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tiny-readdir",
      "version": "2.7.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ef6d54fb3b18c038ab8ebf0833a8eaa5eb03fcc729668a1e162dd973a99c8f2d69b1ed82fafd7d7873c546acf8721197645c3b0b72884c38c0b47113736c23ed"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/tiny-readdir@2.7.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/tiny-readdir/-/tiny-readdir-2.7.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tiny-readdir@2.7.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/tiny-readdir/-/tiny-readdir-2.7.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "promise-make-counter",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1490314c1590b90a00b3864e62e297d451d7c4480a2c4cc1c54bf0af84683a09644e93a35ae33e457b0adccf6ae6531af248ea72d52b87061e6454f8ca0b276a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/promise-make-counter@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/promise-make-counter/-/promise-make-counter-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/promise-make-counter@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/promise-make-counter/-/promise-make-counter-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "promise-make-naked",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "07e6fe910d58ad84bbcceecfedb41ca2aa8c522ccfd3a04ec8d481127079549283496a3c7ec56e0e47d29b076317426c46d68d87cdeca3930c149f79b281f98e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/promise-make-naked@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/promise-make-naked/-/promise-make-naked-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/promise-make-naked@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/promise-make-naked/-/promise-make-naked-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "watcher",
      "version": "2.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "777ca5f9ecb7e61d39af91053f44da7c4da3b2641427d71cd9a7ab9d1572024662bb4277fb74db36e80d72a754243a1639f2f6a7e6cdb0de36eecb6c042fc79c"
        }
      ],
      "purl": "pkg:npm/watcher@2.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/watcher/-/watcher-2.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/watcher@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/watcher/-/watcher-2.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dettle",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "655ca384027bb027b53cd5c41af78e6ce1fd002f10bcc81adc72488211dac2d1bb984e0ae695bd9f3fef0c602bfd4edadcb5a074ecc413b69cf4c5119f27da4c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/dettle@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/dettle/-/dettle-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dettle@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/dettle/-/dettle-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stubborn-fs",
      "version": "1.2.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1f637d736e9e5e3ccbfd2fcafa2fd11c77056a713be1da6dbef8ccf22c33c1b55c598ff38c16e046a1772b40d8e3e383fae4d30124c1bc3a313c368f374d83ee"
        }
      ],
      "purl": "pkg:npm/stubborn-fs@1.2.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/stubborn-fs/-/stubborn-fs-1.2.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stubborn-fs@1.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/stubborn-fs/-/stubborn-fs-1.2.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "zeptomatch",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d044ddcc43b485d6264fc6971c77f968c8e95fe147144eb5b06e2a285028243d949addd359d0a61fb003c67da852259396a0460be486afcb1831fafedfb27ca5"
        }
      ],
      "purl": "pkg:npm/zeptomatch@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/zeptomatch/-/zeptomatch-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/zeptomatch@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/zeptomatch/-/zeptomatch-1.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "grammex",
      "version": "3.1.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eae7c93ac480ecb7107a12093423bb1c807291f33b0d742e6a5d0dcbbf34fc311c248a4194746f72a1015863d877b86b5cbd86277a0923530885a5e35a62d039"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/grammex@3.1.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/grammex/-/grammex-3.1.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/grammex@3.1.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/grammex/-/grammex-3.1.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tsex",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "be9fee469dea292f0d26e65f936c82ce988bb31282774716e45ad2d09ac24abc341527bf6cd5e01f57953076a04da5aa5868e3eb3a4c425777ee658d5b4976a9"
        }
      ],
      "purl": "pkg:npm/tsex@4.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/tsex/-/tsex-4.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tsex@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/tsex/-/tsex-4.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "atomically",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3f8c3da3676a0118e2e8fecc1e9ae495b7e202b6405afa34ef25bbaacde97658dbdc15abd7614807b5bea74cc98ae895b14a513b48999f590515ca4f7a0834b5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/atomically@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/atomically/-/atomically-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/atomically@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/atomically/-/atomically-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stubborn-fs",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "63402f4b00f0f32fa79523455cc9b683a2f9d6b046740413db42776123aac42e772e8ddb8d646daf604a71f62801fdf9d96629b19493511ac0d2daa17e0b9d3c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/stubborn-fs@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/stubborn-fs/-/stubborn-fs-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stubborn-fs@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/stubborn-fs/-/stubborn-fs-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stubborn-utils",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cce87d8cf608fb1acd3b28ac49e960ca6e2da2529324241de460612b4fb4c49bdc60373094ea3117fae714a4362916649d7486f63580a7ae9fc0fe80c4df524e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/stubborn-utils@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/stubborn-utils/-/stubborn-utils-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stubborn-utils@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/stubborn-utils/-/stubborn-utils-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typescript",
      "version": "5.9.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8e5d6f6733c38a72ebf5e52ddc9feded5e8580d130f508ef04f772b33f4a7d00c3e357d0ac2d98e2f290762694a454f86d795bd511e12e9a7cc2d9ba3394e04b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/typescript@5.9.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/typescript/-/typescript-5.9.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typescript@5.9.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/typescript/-/typescript-5.9.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/tiny-colors@2.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/benchloop@2.1.1",
      "dependsOn": [
        "pkg:npm/tiny-colors@2.2.2"
      ]
    },
    {
      "ref": "pkg:npm/are-deeply-equal@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/call-chainer@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/promise-make-naked@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/promise-resolve-timeout@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-purge@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-string-truncated-width@3.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-string-width@3.0.2",
      "dependsOn": [
        "pkg:npm/fast-string-truncated-width@3.0.3"
      ]
    },
    {
      "ref": "pkg:npm/find-up-path@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/find-up-json@2.0.5",
      "dependsOn": [
        "pkg:npm/find-up-path@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/get-current-package@1.0.1",
      "dependsOn": [
        "pkg:npm/find-up-json@2.0.5"
      ]
    },
    {
      "ref": "pkg:npm/tiny-levenshtein@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tiny-parse-argv@2.8.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/function-once@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ionstore@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/when-exit@2.1.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tiny-updater@3.7.0",
      "dependsOn": [
        "pkg:npm/function-once@3.0.1",
        "pkg:npm/ionstore@1.0.1",
        "pkg:npm/tiny-colors@2.2.2",
        "pkg:npm/when-exit@2.1.5"
      ]
    },
    {
      "ref": "pkg:npm/tiny-bin@1.11.3",
      "dependsOn": [
        "pkg:npm/ansi-purge@1.1.0",
        "pkg:npm/fast-string-width@3.0.2",
        "pkg:npm/get-current-package@1.0.1",
        "pkg:npm/tiny-colors@2.2.2",
        "pkg:npm/tiny-levenshtein@1.1.0",
        "pkg:npm/tiny-parse-argv@2.8.2",
        "pkg:npm/tiny-updater@3.7.0"
      ]
    },
    {
      "ref": "pkg:npm/specialist@1.4.5",
      "dependsOn": [
        "pkg:npm/tiny-bin@1.11.3",
        "pkg:npm/tiny-colors@2.2.2",
        "pkg:npm/tiny-parse-argv@2.8.2",
        "pkg:npm/tiny-updater@3.7.0"
      ]
    },
    {
      "ref": "pkg:npm/promise-make-naked@3.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/promise-make-counter@1.0.2",
      "dependsOn": [
        "pkg:npm/promise-make-naked@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/tiny-readdir@2.7.4",
      "dependsOn": [
        "pkg:npm/promise-make-counter@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/dettle@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stubborn-fs@1.2.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/watcher@2.3.1",
      "dependsOn": [
        "pkg:npm/dettle@1.0.5",
        "pkg:npm/stubborn-fs@1.2.5",
        "pkg:npm/tiny-readdir@2.7.4"
      ]
    },
    {
      "ref": "pkg:npm/grammex@3.1.12",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/zeptomatch@1.2.2",
      "dependsOn": [
        "pkg:npm/grammex@3.1.12"
      ]
    },
    {
      "ref": "pkg:npm/fava@0.3.5",
      "dependsOn": [
        "pkg:npm/are-deeply-equal@1.1.2",
        "pkg:npm/call-chainer@3.0.1",
        "pkg:npm/promise-make-naked@2.1.2",
        "pkg:npm/promise-resolve-timeout@2.0.1",
        "pkg:npm/specialist@1.4.5",
        "pkg:npm/tiny-colors@2.2.2",
        "pkg:npm/tiny-readdir@2.7.4",
        "pkg:npm/watcher@2.3.1",
        "pkg:npm/zeptomatch@1.2.2"
      ]
    },
    {
      "ref": "pkg:npm/stubborn-utils@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stubborn-fs@2.0.0",
      "dependsOn": [
        "pkg:npm/stubborn-utils@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/atomically@2.1.1",
      "dependsOn": [
        "pkg:npm/stubborn-fs@2.0.0",
        "pkg:npm/when-exit@2.1.5"
      ]
    },
    {
      "ref": "pkg:npm/tsex@4.0.2",
      "dependsOn": [
        "pkg:npm/atomically@2.1.1",
        "pkg:npm/dettle@1.0.5",
        "pkg:npm/specialist@1.4.5",
        "pkg:npm/tiny-readdir@2.7.4",
        "pkg:npm/watcher@2.3.1"
      ]
    },
    {
      "ref": "pkg:npm/typescript@5.9.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/graphmatch@1.1.1",
      "dependsOn": [
        "pkg:npm/benchloop@2.1.1",
        "pkg:npm/fava@0.3.5",
        "pkg:npm/tsex@4.0.2",
        "pkg:npm/typescript@5.9.3"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/graphmatch@1.1.1"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-07-24T01:16:04Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Friday, July 24, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'graphmatch' with version '1.1.1'."
    }
  ]
}