{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:495701c6-3171-46f7-9b22-b3ec9402c6c3",
  "version": 1,
  "metadata": {
    "timestamp": "2026-07-25T12:14:23Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "howler",
      "group": "",
      "version": "2.2.4",
      "description": "Javascript audio library for the modern web.",
      "purl": "pkg:npm/howler@2.2.4",
      "bom-ref": "pkg:npm/howler@2.2.4",
      "author": "James Simpson <james@goldfirestudios.com> (http://goldfirestudios.com)",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "build, release"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "externalReferences": [
        {
          "type": "website",
          "url": "https://howlerjs.com"
        },
        {
          "type": "vcs",
          "url": "git://github.com/goldfire/howler.js.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "bower.json\\ndist/howler.core.min.js\\ndist/howler.min.js\\ndist/howler.spatial.min.js\\npackage-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "howler.js",
      "version": "2.2.4",
      "purl": "pkg:npm/howler.js@2.2.4",
      "type": "library",
      "bom-ref": "pkg:npm/howler.js@2.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "dist/howler.spatial.min.js"
        },
        {
          "name": "SrcFile",
          "value": "dist/howler.min.js"
        },
        {
          "name": "SrcFile",
          "value": "dist/howler.core.min.js"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.25,
            "methods": [
              {
                "technique": "filename",
                "confidence": 0.25,
                "value": "dist/howler.core.min.js"
              }
            ],
            "concludedValue": "dist/howler.core.min.js"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spatial",
      "version": "Plugin",
      "purl": "pkg:npm/spatial@Plugin",
      "type": "library",
      "bom-ref": "pkg:npm/spatial@Plugin",
      "properties": [
        {
          "name": "SrcFile",
          "value": "dist/howler.min.js"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.25,
            "methods": [
              {
                "technique": "filename",
                "confidence": 0.25,
                "value": "dist/howler.min.js"
              }
            ],
            "concludedValue": "dist/howler.min.js"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "howler.js",
      "version": "",
      "description": "Javascript audio library for the modern web.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/howler.js",
      "type": "library",
      "bom-ref": "pkg:npm/howler.js",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bower.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bower.json"
              }
            ],
            "concludedValue": "bower.json"
          }
        ]
      },
      "tags": [
        "web"
      ]
    },
    {
      "group": "",
      "name": "uglify-js",
      "version": "2.8.29",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a8babfe32da98dc537be1961b1e5c6189ed56c53b8a4100dbb493097c5426bd28423457c55f648c76172df0d358924c0fe91b02994a6bbff88e1eb4b34376de7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:npm/uglify-js@2.8.29",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/uglify-js/-/uglify-js-2.8.29.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uglify-js@2.8.29",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/uglify-js/-/uglify-js-2.8.29.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/uglify-js"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.5.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2dbae624e31449d115c482af75c273402fa74217bc1546504d7432ebe23be6c90d827dcea10d03640f189c56bb829f2daad2f728f7f5926a344790e802979219"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:npm/source-map@0.5.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/source-map/-/source-map-0.5.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.5.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/source-map/-/source-map-0.5.7.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/source-map"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs",
      "version": "3.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "405cd46a1f3c1801b2f65c8328606a65d918029b7adeb0976011989c43f8c4324f5cda975e70430029dbad79d5895ea3452a8078fc2b0138b68bc99f626e0bd4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/yargs@3.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/yargs/-/yargs-3.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs@3.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/yargs/-/yargs-3.10.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/yargs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c332e40dae0afe6cc8d4e4884c2f835328e0225fc44cd1c4f50bd8832e89e89beacb2cf80b45df77e95085bd7db17da3329655e08b2c527d150d59a0955face2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/camelcase@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/camelcase/-/camelcase-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/camelcase/-/camelcase-1.2.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/camelcase"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cliui",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "188398462cc6f931a873b5a07352e23932daadef794779b32a0a259fe43f944e1c7a2607d7d814a65d25d057eae2524311fdc5c6e8cc7ba2017ce0acee97ea34"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/cliui@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/cliui/-/cliui-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cliui@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/cliui/-/cliui-2.1.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/cliui"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "center-align",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "05acf768d7b681dd8b3f6aa4e54fac0e4fe6e284aec120dc05f6b24c24c1a16a5f2063b95c5c4f9a320b4082383468998c3e83a0323a91fee029ac647fbb3755"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/center-align@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/center-align/-/center-align-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/center-align@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/center-align/-/center-align-0.1.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/center-align"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "align-text",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1ab4d92d1a66a7ac080b6cedad65bd3238d381229c71f7e015a81b343397f79fdd72311c61989b61379a3a7b724902dc770d73b41a0592f8a252f4cc6dbf4c62"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/align-text@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/align-text/-/align-text-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/align-text@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/align-text/-/align-text-0.1.4.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/align-text"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "kind-of",
      "version": "3.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "34e5bd4105cca191a0fe8aa754da0d4d320510889dd7adbb5827df50124474cc58029abb98d13b0a9cee7083dcf99420db93e17a3ec8252997de13bea1b94eb5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/kind-of@3.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/kind-of/-/kind-of-3.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kind-of@3.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/kind-of/-/kind-of-3.2.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/kind-of"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-buffer",
      "version": "1.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "35c7402f0a579139b966fbdb93ba303944af56f04a0e028fe7f7b07d71339e64057ece194666a739e2814e34558e46b7405a0de9727ef45dd44aa7c7a93694e7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/is-buffer@1.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/is-buffer/-/is-buffer-1.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-buffer@1.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/is-buffer/-/is-buffer-1.1.6.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/is-buffer"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "longest",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93ecade67de5e3c254e24f1fb67286e95eeedf6c321f635f2b378cb68f45fd0444d1a9b1cbf2dacb1c25be38e4644233a91fb5f48aed14ef29e6407d41a61416"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/longest@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/longest/-/longest-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/longest@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/longest/-/longest-1.0.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/longest"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "repeat-string",
      "version": "1.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3d5d1dcc260335f462d630836c9ce95bb8cd34346e08e1bf8c8e5cb507062adfdc9590fe61c3d2df22255ae4c93261120bc69ebc2166589cb9c2300580da8deb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/repeat-string@1.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/repeat-string/-/repeat-string-1.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/repeat-string@1.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/repeat-string/-/repeat-string-1.6.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/repeat-string"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lazy-cache",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "444da0d1be55199b0e08538280fee899345816ac9d999901c25e68367435943602e7bbb23bd2aa367355c53ec23921d3c6b44259570054e71b8e4fadbe1feb81"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/lazy-cache@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/lazy-cache/-/lazy-cache-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lazy-cache@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/lazy-cache/-/lazy-cache-1.0.4.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/lazy-cache"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "right-align",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "caa20db4bfc6eefb36bfe7452199855036e757215424529dea02b6d8a828e91e237c9185b62b0aca77160c350b8237ea7f801242e210ca327b5d9fb7696a6c02"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/right-align@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/right-align/-/right-align-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/right-align@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/right-align/-/right-align-0.1.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/right-align"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wordwrap",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5206c09e87e83e7629e806fdc600e58ce0b71554eebcc0b5d16a789bb4149d52f906590446784f4fec8c14f449830e2e2303a2f8e25cf5e4218cc1dc3d379f9"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "MIT/X11"
          }
        }
      ],
      "purl": "pkg:npm/wordwrap@0.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/wordwrap/-/wordwrap-0.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wordwrap@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/wordwrap/-/wordwrap-0.0.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/wordwrap"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decamelize",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf64be5bd5fbde10145248be37ef596b694196e9fcf738a03b21abb1ac7e29443ac0a5b86685a91180641a1423c008e30c2916c6163454a12193cc3363b17970"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/decamelize@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/decamelize/-/decamelize-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/decamelize@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/decamelize/-/decamelize-1.2.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/decamelize"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "window-size",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d694cf40329375deb5a3394a18d0a384d45df8a3e680b4866b79994c7a0e962686704483f06d4f5e187b7357e088f8d56cd55f832d856b0e0123cfe6d1c0bc32"
        }
      ],
      "purl": "pkg:npm/window-size@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/window-size/-/window-size-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/window-size@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/window-size/-/window-size-0.1.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/window-size"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uglify-to-browserify",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bdbdacd65631db106d520cbeb5af9bd89fc62d5511fb09a920dc0778f98f4613ac215086db00f3289d27d781ac947d4189fb2a57348ec1085168202c67f9c8e1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/uglify-to-browserify@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/uglify-to-browserify/-/uglify-to-browserify-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uglify-to-browserify@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/uglify-to-browserify/-/uglify-to-browserify-1.0.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/uglify-to-browserify"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/source-map@0.5.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/camelcase@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-buffer@1.1.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/kind-of@3.2.2",
      "dependsOn": [
        "pkg:npm/is-buffer@1.1.6"
      ]
    },
    {
      "ref": "pkg:npm/longest@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/repeat-string@1.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/align-text@0.1.4",
      "dependsOn": [
        "pkg:npm/kind-of@3.2.2",
        "pkg:npm/longest@1.0.1",
        "pkg:npm/repeat-string@1.6.1"
      ]
    },
    {
      "ref": "pkg:npm/lazy-cache@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/center-align@0.1.3",
      "dependsOn": [
        "pkg:npm/align-text@0.1.4",
        "pkg:npm/lazy-cache@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/right-align@0.1.3",
      "dependsOn": [
        "pkg:npm/align-text@0.1.4"
      ]
    },
    {
      "ref": "pkg:npm/wordwrap@0.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cliui@2.1.0",
      "dependsOn": [
        "pkg:npm/center-align@0.1.3",
        "pkg:npm/right-align@0.1.3",
        "pkg:npm/wordwrap@0.0.2"
      ]
    },
    {
      "ref": "pkg:npm/decamelize@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/window-size@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs@3.10.0",
      "dependsOn": [
        "pkg:npm/camelcase@1.2.1",
        "pkg:npm/cliui@2.1.0",
        "pkg:npm/decamelize@1.2.0",
        "pkg:npm/window-size@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/uglify-to-browserify@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uglify-js@2.8.29",
      "dependsOn": [
        "pkg:npm/source-map@0.5.7",
        "pkg:npm/uglify-to-browserify@1.0.2",
        "pkg:npm/yargs@3.10.0"
      ]
    },
    {
      "ref": "pkg:npm/howler@2.2.4",
      "dependsOn": [
        "pkg:npm/uglify-js@2.8.29"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/howler@2.2.4"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-07-25T12:14:23Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Saturday, July 25, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'howler' with version '2.2.4'."
    }
  ]
}