{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:4f7e771c-f192-40d6-a6e4-0518bd088e62",
  "version": 1,
  "metadata": {
    "timestamp": "2026-09-01T19:38:24Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "jinja",
      "group": "@huggingface",
      "version": "0.3.0",
      "description": "A minimalistic JavaScript implementation of the Jinja templating engine, specifically designed for parsing and rendering ML chat templates.",
      "purl": "pkg:npm/%40huggingface/jinja@0.3.0",
      "bom-ref": "pkg:npm/@huggingface/jinja@0.3.0",
      "author": "Hugging Face",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "lint, lint:check, format, format:check, prepublishOnly, prepare, build, test, test:browser, check"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:risky_scripts",
          "value": "prepare"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@protobufjs\\n@types\\n@xenova"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "pnpm-lock.yaml"
      }
    ]
  },
  "components": [
    {
      "authors": [
        {
          "name": "Daniel Wirtz <dcode+protobufjs@dcode.io>"
        }
      ],
      "group": "@protobufjs",
      "name": "aspromise",
      "version": "1.1.2",
      "description": "Returns a promise from a node-style callback function.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8fe80a13112e2e62b0bf3dce811397b6b276506db1f028766195316a187eb351761d9fb001c79434b92fcbacca08f551914fbe65642b771b147905e6720e2ea1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40protobufjs/aspromise@1.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/dcodeIO/protobuf.js.git"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/@protobufjs/aspromise@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, coverage"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "authors": [
        {
          "name": "Daniel Wirtz <dcode+protobufjs@dcode.io>"
        }
      ],
      "group": "@protobufjs",
      "name": "base64",
      "version": "1.1.2",
      "description": "A minimal base64 implementation for number arrays.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "01991c000e6f9cdfefe0f0ea2b2311e65c7b859b6d3c380296ff3713ffc530d851d9331c2d485f4540470a64a5d288bdccc8030ea4542644b13b7c26f39f972e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40protobufjs/base64@1.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/dcodeIO/protobuf.js.git"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/@protobufjs/base64@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, coverage"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "authors": [
        {
          "name": "Daniel Wirtz <dcode+protobufjs@dcode.io>"
        }
      ],
      "group": "@protobufjs",
      "name": "codegen",
      "version": "2.0.4",
      "description": "A minimalistic code generation utility.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "63215a8a4a8ce6c1f4ce215908ddf10c2ef3786681fddd0851bf42013ba01d66ddd45445c16c2de2577839830f5aee5add77b4d6618050b09daa13253e5dbd26"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40protobufjs/codegen@2.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/dcodeIO/protobuf.js.git"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/@protobufjs/codegen@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "authors": [
        {
          "name": "Daniel Wirtz <dcode+protobufjs@dcode.io>"
        }
      ],
      "group": "@protobufjs",
      "name": "eventemitter",
      "version": "1.1.0",
      "description": "A minimal event emitter.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8fd79d9d14fcd6f609f4e7d5b971ba1114937442f5c55b0d82aa64c4cb1b21a6f34a8de0a028c322f79e1afe5dd37a26dfd30bef545d9ab18d8c6e5245e04ffd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40protobufjs/eventemitter@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/dcodeIO/protobuf.js.git"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/@protobufjs/eventemitter@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, coverage"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      },
      "tags": [
        "event",
        "framework"
      ]
    },
    {
      "authors": [
        {
          "name": "Daniel Wirtz <dcode+protobufjs@dcode.io>"
        }
      ],
      "group": "@protobufjs",
      "name": "fetch",
      "version": "1.1.0",
      "description": "Fetches the contents of a file accross node and browsers.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9658d55e9a9779ba6c8a35bbd4f65a098788704e689f5c390e5432e561fa18b6c5af22d4ac10f8f77d96fc4d814a97d1256b1e20be2ffca3e0045c4338874aa5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40protobufjs/fetch@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/dcodeIO/protobuf.js.git"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/@protobufjs/fetch@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, coverage"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "authors": [
        {
          "name": "Daniel Wirtz <dcode+protobufjs@dcode.io>"
        }
      ],
      "group": "@protobufjs",
      "name": "float",
      "version": "1.0.2",
      "description": "Reads / writes floats / doubles from / to buffers in both modern and ancient browsers.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0dd6fe9155e55ecb7d77e47d3df4c8c61d4474d920a117b9b4e5fab74d5fd656163af26748f0c1946db8d502f37323dda0d4ec6e52d476e8c6484e11ceb4d919"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40protobufjs/float@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/dcodeIO/protobuf.js.git"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/@protobufjs/float@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, coverage, bench"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "authors": [
        {
          "name": "Daniel Wirtz <dcode+protobufjs@dcode.io>"
        }
      ],
      "group": "@protobufjs",
      "name": "inquire",
      "version": "1.1.0",
      "description": "Requires a module only if available and hides the require call from bundlers.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "91d49e7dc3ddaee26214c5526e7f34d6de2f14aeca07fe607767d8bebc61b89620f082eb9a7f522925f6b59755e95fa4b2e956a92eda5e305c457977c07a03f5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40protobufjs/inquire@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/dcodeIO/protobuf.js.git"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/@protobufjs/inquire@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, coverage"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "authors": [
        {
          "name": "Daniel Wirtz <dcode+protobufjs@dcode.io>"
        }
      ],
      "group": "@protobufjs",
      "name": "path",
      "version": "1.1.2",
      "description": "A minimal path module to resolve Unix, Windows and URL paths alike.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e8939c2794e6d3c74e1c06dd4771abbcffb25147e48c6e5e3ec1d87333052eadd998c9000fdf1c0e0713da2035949f4d57015de2d1ff8924a87b8e185a496d10"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40protobufjs/path@1.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/dcodeIO/protobuf.js.git"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/@protobufjs/path@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, coverage"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "authors": [
        {
          "name": "Daniel Wirtz <dcode+protobufjs@dcode.io>"
        }
      ],
      "group": "@protobufjs",
      "name": "pool",
      "version": "1.1.0",
      "description": "A general purpose buffer pool.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d2410b6864880c12af7204b8ce48f3d4f79d75ab6b8d87263163a502e00fc0079c714acf1dd52aa3f27a2e2ca61c7122253e4dac5d54570c58d787fe7f2e1643"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40protobufjs/pool@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/dcodeIO/protobuf.js.git"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/@protobufjs/pool@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, coverage"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      },
      "tags": [
        "framework",
        "pool"
      ]
    },
    {
      "authors": [
        {
          "name": "Daniel Wirtz <dcode+protobufjs@dcode.io>"
        }
      ],
      "group": "@protobufjs",
      "name": "utf8",
      "version": "1.1.0",
      "description": "A minimal UTF8 implementation for number arrays.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "56f9f7cd9ae1419924044f0b4ae5b77a6f7c73417080ee27c73bfa39d4b13ca24810a6366c66c79fe9a11883deaf3238b7077168ff3fd3ed3a1c1a707f7e392f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40protobufjs/utf8@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/dcodeIO/protobuf.js.git"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/@protobufjs/utf8@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, coverage"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "@types",
      "name": "long",
      "version": "4.0.2",
      "description": "TypeScript definitions for long.js",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32a4c6128e5b8f9b75e7b53a7c0fc1883ca73649f46249d5761e3c08c3e44d2a454d59af6a8e544269bbb8417ac41128eea20c02563f25295e61a13a54e76968"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40types/long@4.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/long"
        },
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/long@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "/app/packages/jinja/node_modules/.pnpm/@types+long@4.0.2/node_modules/@types/long"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "node",
      "version": "20.9.4",
      "description": "TypeScript definitions for node",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c26ca0f07521727e800a3b27f282988e437fcd4cd078db4ccb8e3079325233aa7830ccc43ae29b0373a3276ebbb8f08e5bb5dec7d772acd4dfba5f174d06280c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40types/node@20.9.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node"
        },
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/node@20.9.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "/app/packages/jinja/node_modules/.pnpm/@types+node@20.9.4/node_modules/@types/node"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Xenova"
        }
      ],
      "group": "@xenova",
      "name": "transformers",
      "version": "2.9.0",
      "description": "State-of-the-art Machine Learning for the web. Run 🤗 Transformers directly in your browser, with no need for a server!",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c334a320ca6455a0fe6c88085719570de78a6b0af6df7b7ed693dbe4086961e4c03c574e695515753e2f20aaa69accc0a41158614a4eaafe4ba09e253809ba52"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40xenova/transformers@2.9.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/xenova/transformers.js#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/xenova/transformers.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@xenova/transformers@2.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "typegen, dev, build, generate-tests, test, readme, docs-api, docs-preview, docs-build"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build, docs-build"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      },
      "tags": [
        "transform",
        "web"
      ]
    },
    {
      "authors": [
        {
          "name": "Kasper Isager Dalsgarð <kasper@funktionel.co>"
        }
      ],
      "group": "",
      "name": "b4a",
      "version": "1.6.4",
      "description": "Bridging the gap between buffers and typed arrays",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e95abbf254710ac9e12f6ca65354e79917755228a5ad271148c57fe36953dff9c2db1944a2b636f8f691cba8f57605434d6742dca1e1067c4fd80a9c8360723"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/b4a@1.6.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/holepunchto/b4a#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/holepunchto/b4a.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/b4a@1.6.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "T. Jameson Little <t.jameson.little@gmail.com>"
        }
      ],
      "group": "",
      "name": "base64-js",
      "version": "1.5.1",
      "description": "Base64 encoding/decoding in pure JS",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "00aa5a6251e7f2de1255b3870b2f9be7e28a82f478bebb03f2f6efadb890269b3b7ca0d3923903af2ea38b4ad42630b49336cd78f2f0cf1abc8b2a68e35a9e58"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/base64-js@1.5.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/beatgammit/base64-js"
        },
        {
          "type": "vcs",
          "url": "git://github.com/beatgammit/base64-js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/base64-js@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "build, lint, test, unit"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bl",
      "version": "4.1.0",
      "description": "Buffer List: collect buffers and access with a standard readable Buffer interface, streamable too!",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d56d3b70cf604ba0dc2e97ab65f1528fe6d62ed68f1923875a13e21b35e6bd525b44b746f36b07fca9fc12d5b556a595039e0029fda1e64e416e721bc05de1eb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bl@4.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/rvagg/bl"
        },
        {
          "type": "vcs",
          "url": "https://github.com/rvagg/bl.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bl@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "lint, test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Feross Aboukhadijeh <feross@feross.org> (https://feross.org)"
        }
      ],
      "group": "",
      "name": "buffer",
      "version": "5.7.1",
      "description": "Node.js Buffer API, for the browser",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "10773220f050e0148696f8c1d7a9392a0009dbb088b0763fd8906609145ea38f32f6b43731a533597dca56505ae14eccc97d361dd563d0aec2dd6681de3bbb15"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/buffer@5.7.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/feross/buffer"
        },
        {
          "type": "vcs",
          "url": "git://github.com/feross/buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer@5.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "perf, perf-node, size, test, test-browser-es5, test-browser-es5-local, test-browser-es6, test-browser-es6-local, test-node, update-authors"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "chownr",
      "version": "1.1.4",
      "description": "like `chown -R`",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8c9d1bab36b296626d567360cd37923acf033dabe96d8804aff6f460bf3fd863b7c4912122716684a3149c42508d9ba62bb297185854cbcf4faec25695a90156"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/chownr@1.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/chownr.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chownr@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, preversion, postversion, prepublishOnly"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Heather Arthur <fayearthur@gmail.com>"
        }
      ],
      "group": "",
      "name": "color-convert",
      "version": "2.0.1",
      "description": "Plain color conversion functions",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4511023ec8fb8aeff16f9a0a61cb051d2a6914d9ec8ffe763954d129be333f9a275f0545df3566993a0d70e7c60be0910e97cafd4e7ce1f320dfc64709a12529"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/color-convert@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/color-convert@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "pretest, test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "DY <dfcreative@gmail.com>"
        }
      ],
      "group": "",
      "name": "color-name",
      "version": "1.1.4",
      "description": "A list of color names and its values",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "74ecbedc0b96ddadb035b64722e319a537208c6b8b53fb812ffb9b71917d3976c3a3c7dfe0ef32569e417f479f4bcb84a18a39ab8171edd63d3a04065e002c40"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/color-name@1.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/colorjs/color-name"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-name@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Heather Arthur <fayearthur@gmail.com>"
        }
      ],
      "group": "",
      "name": "color-string",
      "version": "1.9.1",
      "description": "Parser and generator for CSS color strings",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b21ad56b0405a239d9bfac4ce346a7c780a4a033fe7d9b30fd97ab10cb16fe9cb3b116c4969b0bfc30555bbab7131c70bac74d5c8de55e9ba1119933b3ca7912"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/color-string@1.9.1",
      "type": "library",
      "bom-ref": "pkg:npm/color-string@1.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "pretest, test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color",
      "version": "4.2.3",
      "description": "Color conversion and manipulation with CSS string support",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d6b5deb94522186af2921f8278176ee487bb389c229c28106346dcec6091c72e71547cbe9a86aa9292ff8ea42ad0cb5039e61caea133e1a6dce5fd0ab54ed6e0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/color@4.2.3",
      "type": "library",
      "bom-ref": "pkg:npm/color@4.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "pretest, test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "decompress-response",
      "version": "6.0.0",
      "description": "Decompress a HTTP response if needed",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "696df9c9933a05bff8a099599dc307d8b0a866d2574d1c444b5eef137868462a305369161da24a1644810e70d1f9c9bd27ef5085799113221fbf4a638bd7a309"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/decompress-response@6.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/decompress-response@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Viacheslav Lotsmanov <lotsmanov89@gmail.com>"
        }
      ],
      "group": "",
      "name": "deep-extend",
      "version": "0.6.0",
      "description": "Recursive object extending",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2ce1f120e68f61d1e5251b4241f0c8559b5fc3fb9f33cfab563eb8f51207cdc9bfbc6c1045716de8e3ea2055ac9b65c432b34812d591eb8b18d4b10a0f6bc038"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/deep-extend@0.6.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/unclechu/node-deep-extend"
        },
        {
          "type": "vcs",
          "url": "git://github.com/unclechu/node-deep-extend.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deep-extend@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Lovell Fuller <npm@lovell.info>"
        }
      ],
      "group": "",
      "name": "detect-libc",
      "version": "2.0.2",
      "description": "Node.js module to detect the C standard library (libc) implementation family and version",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "517eac1ae9afbea49a5e074a194b20656a9c53221767fbd94eb9514ff8a86e22a118bd332f8777a2c1e3deeaa595624afa2fac8b10d2ff708e5443856eea45cb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/detect-libc@2.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/lovell/detect-libc"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/detect-libc@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, bench, bench:calls"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Buus <mathiasbuus@gmail.com>"
        }
      ],
      "group": "",
      "name": "end-of-stream",
      "version": "1.4.4",
      "description": "Call a callback when a readable/writable/duplex stream has completed or failed.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "faec358a720754f428695b87cd1c97776d6270cf9c9ede02cc3e6b5be342d708ce5124ceb3e4deec53afec084deef4bdc7fa08ca12cfe4f4751fea614001eee5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/end-of-stream@1.4.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/end-of-stream"
        },
        {
          "type": "vcs",
          "url": "git://github.com/mafintosh/end-of-stream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/end-of-stream@1.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "LM <ralphtheninja@riseup.net>"
        }
      ],
      "group": "",
      "name": "expand-template",
      "version": "2.0.3",
      "description": "Expand placeholders in a template string",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5d87ee28cbe3e0edf97ffa4e5cb39b9dd211bf243effee8084e0e1f8e2968fd4bde3df291c79ff20cb331fe82dd1f04245630d7e4d594a9e71dc089f9a7236be"
        }
      ],
      "licenses": [
        {
          "expression": "MIT OR WTFPL"
        }
      ],
      "purl": "pkg:npm/expand-template@2.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ralphtheninja/expand-template"
        },
        {
          "type": "vcs",
          "url": "https://github.com/ralphtheninja/expand-template.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/expand-template@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      },
      "tags": [
        "template"
      ]
    },
    {
      "authors": [
        {
          "name": "Mathias Buus (@mafintosh)"
        }
      ],
      "group": "",
      "name": "fast-fifo",
      "version": "1.3.2",
      "description": "A fast fifo implementation similar to the one powering nextTick in Node.js core",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fddf6c7e8b38cb1ce9c240e4b8dee4d92a852ad60d9824f381f129cfcdb1df820cf7fcdcf0a1b14285e0d6588d0bf8b3a5133f30176de38366c78d595aa93e15"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fast-fifo@1.3.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/fast-fifo"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/fast-fifo.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-fifo@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The FlatBuffers project"
        }
      ],
      "group": "",
      "name": "flatbuffers",
      "version": "1.12.0",
      "description": "Memory Efficient Serialization Library",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "73b0990038d1725ea3d0f96f172d19a9743aeea48465fad53f29e69cbfb6ccf73e36d32fac5f18d1071e328ed0aa748f73bfae5a350801bbc24395882a531575"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "SEE LICENSE IN LICENSE.txt",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/flatbuffers@1.12.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://google.github.io/flatbuffers/"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/google/flatbuffers.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/flatbuffers@1.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, append-esm-export, prepublishOnly"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      },
      "tags": [
        "serialization"
      ]
    },
    {
      "authors": [
        {
          "name": "Mathias Buus (@mafintosh)"
        }
      ],
      "group": "",
      "name": "fs-constants",
      "version": "1.0.0",
      "description": "Require constants across node and the browser",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cba380c284887fb1728cc22ff78bbe6f9add85e6448f347adc64f26499b9aa1e018bed988302c2708fdf3c56642f93d28b13ade9934a9bec3e1dfa7f05c8b0a3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fs-constants@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/fs-constants"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/fs-constants.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs-constants@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "github-from-package",
      "version": "0.0.0",
      "description": "return the github url from a package.json file",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4b21f2dd3d6fd8d5179f6f4eb1677198ae91c070febe48f7bfc7a7f00381675c0143f842010e5b0104c3d36916e16f6d529ff7421e89f2bf44be7b62c8298e3b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/github-from-package@0.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/github-from-package"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/github-from-package.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/github-from-package@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "nicolas"
        }
      ],
      "group": "",
      "name": "guid-typescript",
      "version": "1.0.9",
      "description": "Guid generator to typescript",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "63c4f8bd88447f024e4dba2e444bc6fb75c3b23afc137908afbb9ff8967405896816cb6d88753459fbc0355b11ed3c4d5096bf5a90a7c3f227a3fa7e0de06105"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/guid-typescript@1.0.9",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/NicolasDeveloper/guid-typescript"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/guid-typescript@1.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "verify, test, build"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Feross Aboukhadijeh <feross@feross.org> (https://feross.org)"
        }
      ],
      "group": "",
      "name": "ieee754",
      "version": "1.2.1",
      "description": "Read/write IEEE754 floating point numbers from/to a Buffer or array-like object",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "75ccaa843bd7d42e3a95765c56a0a92be16d31141574830debf0dfe63b36ce8b94b2a1bb23ab05c62b480beeca60adbd29d5ce2c776ef732f8b059e85509ea68"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ieee754@1.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/feross/ieee754.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ieee754@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, test-browser, test-browser-local, test-node"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.4",
      "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/inherits@2.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "ini",
      "version": "1.3.8",
      "description": "An ini encoder/decoder for node",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "255ff2ba0576bb35b988c4528990320ed41dfa7c6d5278de2edd1a70d770f7c90a2ebbee455c81f34b6c444384ef2bc65606a5859e913570a61079142812b17b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ini@1.3.8",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/ini.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ini@1.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "eslint, lint, lintfix, test, posttest, preversion, postversion, prepublishOnly"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Qix (http://github.com/qix-)"
        }
      ],
      "group": "",
      "name": "is-arrayish",
      "version": "0.3.2",
      "description": "Determines if an object can be used as an array",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "79546a0af56565bbb0dc6acceb7a2f352340780d4ad7a91a47f2d163ff76c34cf1439ff5633c1b9545fae768b85ecf51c001a35bd77dcba5fcf2df0e68025f59"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-arrayish@0.3.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/qix-/node-is-arrayish.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-arrayish@0.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, lint, lint-staged"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Daniel Wirtz <dcode@dcode.io>"
        }
      ],
      "group": "",
      "name": "long",
      "version": "4.0.0",
      "description": "A Long class for representing a 64-bit two's-complement integer value.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5ec3fe2a14227f86e35f591bb928b248914d01e84dc602dbea13d1189f50b14afc6a31e4b9719dac79855135145e10f0557d91e5b63824d644c1b52232157e30"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/long@4.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/dcodeIO/long.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/long@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "build, test"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me>"
        }
      ],
      "group": "",
      "name": "lru-cache",
      "version": "6.0.0",
      "description": "A cache object that deletes the least-recently-used items.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "268e9d274e029928eece7c09492de951e5a677f1f47df4e59175e0c198be7aad540a6a90c0287e78bb183980b063df758b615a878875044302c78a938466ec88"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lru-cache@6.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, snap, preversion, postversion, prepublishOnly"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "mimic-response",
      "version": "3.1.0",
      "description": "Mimic a Node.js HTTP response stream",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf4c9623ee050ebaf0792f199ade048f91dd266932d79f8bd9ee96827dfe88ae5f5b36fa4f77e1345ab6f8c79345bd3ae1ce96af837fc2fd03cd04e33731cd19"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mimic-response@3.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/mimic-response@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "minimist",
      "version": "1.2.8",
      "description": "parse argument options",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "db2c8047ca8190ddd8ba17896a7529582e54ddb6f9a2c0f2c0d07c4730d5943c031dba1c009bdeaaa8f5bbcf92543ee39164f8cafb070a95aaa96a80c5bd3308"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimist@1.2.8",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/minimistjs/minimist"
        },
        {
          "type": "vcs",
          "url": "git://github.com/minimistjs/minimist.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@1.2.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "prepack, prepublishOnly, prepublish, lint, pretest, tests-only, test, posttest, version, postversion"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:risky_scripts",
          "value": "prepublish"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Buus (@mafintosh)"
        }
      ],
      "group": "",
      "name": "mkdirp-classic",
      "version": "0.5.3",
      "description": "Mirror of mkdirp 0.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "80a2dc444321b6e651c1101fa8fdd1156f932b826a029541b4e21fb55823b8006902da7184f19a0dc7ef6e136f0f407c883d6852bfedc57df936371a63a36cfc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mkdirp-classic@0.5.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/mkdirp-classic"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/mkdirp-classic.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp-classic@0.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jim Schlight"
        }
      ],
      "group": "",
      "name": "napi-build-utils",
      "version": "1.0.2",
      "description": "A set of utilities to assist developers of tools that build N-API native add-ons",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "38d99152a2bbce3ec3597d03f400ded37c1bc0e059c4d01f176d0f9467c2590703dfefcc6a44a1207accab1f58c0f4dfc43745d732de2fe44666247d90630b76"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/napi-build-utils@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspiredware/napi-build-utils#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspiredware/napi-build-utils.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/napi-build-utils@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "doc, test, lint, prepublishOnly"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      },
      "tags": [
        "tools"
      ]
    },
    {
      "authors": [
        {
          "name": "Lukas Geiger"
        }
      ],
      "group": "",
      "name": "node-abi",
      "version": "3.51.0",
      "description": "Get the Node ABI for a given target and runtime, and vice versa.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4909043f88663568e59e24b9cdd9df2174e4d71ece99ef39443cc79536c1b7313dec67f0cff229c38bff472936d03588cb7c823552d5946280a429e6bd8a096c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/node-abi@3.51.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/electron/node-abi#readme"
        },
        {
          "type": "vcs",
          "url": "https://github.com/electron/node-abi.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-abi@3.51.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, update-abi-registry"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-addon-api",
      "version": "6.1.0",
      "description": "Node.js API (Node-API)",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f9e6b03a5220cbaf34174901ccf50d1613191ad275626a8cea5e3e0ab7f82242268d8acefe6a8fc11321df9da0db7b8869028522d710eb823b28c689c4780054"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/node-addon-api@6.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/nodejs/node-addon-api"
        },
        {
          "type": "vcs",
          "url": "git://github.com/nodejs/node-addon-api.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-addon-api@6.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "prebenchmark, benchmark, pretest, test, test:debug, predev, dev, predev:incremental, dev:incremental, doc, lint, lint:fix"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      },
      "tags": [
        "api"
      ]
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "once",
      "version": "1.4.0",
      "description": "Run a function exactly one time",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "94d689808fb643951140191c7042874d038f697754c67659125413658d0c15402e684a9ed44f8dcaf81dcff688c8d8ba67d3333b976fd47f27e7cfc610ba77fb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/once@1.4.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/once"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/once@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Christoph Koerner"
        }
      ],
      "group": "",
      "name": "onnx-proto",
      "version": "4.0.4",
      "description": "Onnx Protobuf definition for JavaScript",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6a574c381dc7468a3aabfa61c81e90450c52b7cf791cd370f3604dc99d82321e1b8de2afee0fdcf95a4016d26e10c55f60b31b471eb585bbaa9ca71e2de0dc0c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/onnx-proto@4.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/chaosmail/onnx-proto.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/onnx-proto@4.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "build, publish-npm"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "fs-eire"
        }
      ],
      "group": "",
      "name": "onnxruntime-common",
      "version": "1.14.0",
      "description": "ONNXRuntime JavaScript API library",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dcb2697a033688c3515f6c149ad61f797ff2b5f3b3370016292ab51db46b29cf7ebaa1bf16c100d1b6ca665d5bb50799697842dba978e0d5a93547973c823b13"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/onnxruntime-common@1.14.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/Microsoft/onnxruntime.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/onnxruntime-common@1.14.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "prepare"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:risky_scripts",
          "value": "prepare"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      },
      "tags": [
        "api"
      ]
    },
    {
      "authors": [
        {
          "name": "fs-eire"
        }
      ],
      "group": "",
      "name": "onnxruntime-node",
      "version": "1.14.0",
      "description": "ONNXRuntime Node.js binding",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e5b6bb4d6a26215ffd6fa347ff5c7ff1011ea30b1bfa3044bc5cd4eb3d13e2636c17074fa9778550ceeec42e9079246411b5aedea101d15323aefccdff44bdfb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/onnxruntime-node@1.14.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/Microsoft/onnxruntime.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/onnxruntime-node@1.14.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:os",
          "value": "win32, darwin, linux"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "buildr, prepare, rebuild, rebuildd, buildd, build, test, prepack, rebuildr"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:risky_scripts",
          "value": "prepare"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "fs-eire"
        }
      ],
      "group": "",
      "name": "onnxruntime-web",
      "version": "1.14.0",
      "description": "A Javascript library for running ONNX models on browsers",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "29ca9fe3750c7d6f260b275519c5fd38c5c8d95375edcd29e97bd1ec83d267305fffa96d781cd71ef7045560cf9822ae1a899b97df7b1e02ea8fdd45d750f35f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/onnxruntime-web@1.14.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/Microsoft/onnxruntime.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/onnxruntime-web@1.14.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "prepare, build:doc, pull:wasm, test:e2e, build, test, prepack"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build:doc, build"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:risky_scripts",
          "value": "prepare"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Benjamin Tan <demoneaux@gmail.com>"
        }
      ],
      "group": "",
      "name": "platform",
      "version": "1.3.6",
      "description": "A platform detection library that works on nearly all JavaScript platforms.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e759596351c853ae8e9188216f09705b36125cd8d8a337ba084316f0b322f46ee5893c6f39bfcd5e8651c8f5f5eb26c30d813a1f12858841e0a52a983114bae"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/platform@1.3.6",
      "type": "library",
      "bom-ref": "pkg:npm/platform@1.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "doc, prepublishOnly, test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Buus (@mafintosh)"
        }
      ],
      "group": "",
      "name": "prebuild-install",
      "version": "7.1.1",
      "description": "A command line tool to easily install prebuilt binaries for multiple version of node/iojs on a specific platform",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8c05ec71758c7022bc1a00a81ce7c8af43838796a2f268fadcbda75ab8ee0205c4ead0f26069f1e3ff28feb0a053e078252c9904a6de66ace1b70b42de8bf18f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/prebuild-install@7.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/prebuild/prebuild-install"
        },
        {
          "type": "vcs",
          "url": "https://github.com/prebuild/prebuild-install.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prebuild-install@7.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:bin",
          "value": "./bin.js"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, hallmark"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Daniel Wirtz <dcode+protobufjs@dcode.io>"
        }
      ],
      "group": "",
      "name": "protobufjs",
      "version": "6.11.4",
      "description": "Protocol Buffers for JavaScript (& TypeScript).",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e644163da2478b55a80a98d31accf3437d8f1b6178fb0458e819804f855fc39e90d85678619ccadb4c546101f86247de858d5ee904880ab26ab8ceb15d935caf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/protobufjs@6.11.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://protobufjs.github.io/protobuf.js/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/protobufjs@6.11.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:bin",
          "value": "pbjs, pbts"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "bench, build, build:bundle, build:types, changelog, coverage, docs, lint, lint:sources, lint:types, pages, prepublish, postinstall, prof, test, test:sources, test:types, make"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build, build:bundle, build:types"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:risky_scripts",
          "value": "postinstall, prepublish"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Buus Madsen <mathiasbuus@gmail.com>"
        }
      ],
      "group": "",
      "name": "pump",
      "version": "3.0.0",
      "description": "pipe streams together and close all of them if one of them closes",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f0672fa9dd216cd4fcad77f8d872de30a6fe3d1e2602a9df5195ce5955d93457ef18cefea34790659374d198f2f57edebd4f13f420c64627e58f154d81161c3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pump@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/pump@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Buus (@mafintosh)"
        }
      ],
      "group": "",
      "name": "queue-tick",
      "version": "1.0.1",
      "description": "Next tick shim that prefers process.nextTick over queueMicrotask for compat",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "909b79aa1331a2cce053feb63cb3f5089cadcddd8d29eb634919f2ba3df57c3777465733ddfce515d14b0f5488b6e9cfc32a843a471ae866d5eb5d8159f6816a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/queue-tick@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/queue-tick"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/queue-tick.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/queue-tick@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Dominic Tarr <dominic.tarr@gmail.com> (dominictarr.com)"
        }
      ],
      "group": "",
      "name": "rc",
      "version": "1.2.8",
      "description": "hardwired configuration loader",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cb76c682a2a3dd005dc4b6cb9289a5a2192fb00f207408944254812670617e7f813f18386dceb677c4dc056d79c1abc37e07b10a071c72485c66fcb0c9060f3b"
        }
      ],
      "licenses": [
        {
          "expression": "BSD-2-Clause OR MIT OR Apache-2.0"
        }
      ],
      "purl": "pkg:npm/rc@1.2.8",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/dominictarr/rc.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rc@1.2.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:bin",
          "value": "./cli.js"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "3.6.2",
      "description": "Streams3, a user-land copy of the stream library from Node.js",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f6efec9e20ab6370f959db04447cc71381b66025eaa06e454c7522082e1221bafa5dc2d9058d39c9af442a361e93d3b9c4e0308c6abed497460404bb43d49ca0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/readable-stream@3.6.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/nodejs/readable-stream"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@3.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, ci, test-browsers, test-browser-local, cover, report, update-browser-errors"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "Feross Aboukhadijeh <feross@feross.org> (https://feross.org)"
        }
      ],
      "group": "",
      "name": "safe-buffer",
      "version": "5.2.1",
      "description": "Safer Node.js Buffer API",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/feross/safe-buffer"
        },
        {
          "type": "vcs",
          "url": "git://github.com/feross/safe-buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "semver",
      "version": "7.5.4",
      "description": "The semantic version parser used by npm.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d5b09211257a3effa2db51efa71a770f1fa9483f2520fb7cb958d1af1014b7f9dbb3061cfad2ba6366ed8942e3778f9f9ead793d7fa7a900c2ece7eded693070"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/semver@7.5.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/node-semver.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@7.5.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:bin",
          "value": "semver"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, snap, lint, postlint, lintfix, posttest, template-oss-apply"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Lovell Fuller <npm@lovell.info>"
        }
      ],
      "group": "",
      "name": "sharp",
      "version": "0.32.6",
      "description": "High performance Node.js image processing, the fastest module to resize JPEG, PNG, WebP, GIF, AVIF and TIFF images",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2b22d35b081c47d39ee1df47c02c0d33697bf89d1d510c27ff27fb4b41274ed6f47954b84713b47944afc4fb734f8177498f82e0ae9fa9dbff0cedbbb09fefff"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/sharp@0.32.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/lovell/sharp"
        },
        {
          "type": "vcs",
          "url": "git://github.com/lovell/sharp"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sharp@0.32.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "install, clean, test, test-lint, test-unit, test-licensing, test-leak, test-types, docs-build, docs-serve, docs-publish"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "docs-build"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:risky_scripts",
          "value": "install"
        },
        {
          "name": "cdx:npm:gypfile",
          "value": "true"
        },
        {
          "name": "cdx:npm:native_addon",
          "value": "true"
        },
        {
          "name": "cdx:npm:native_deps",
          "value": "node-addon-api"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      },
      "tags": [
        "performance"
      ]
    },
    {
      "authors": [
        {
          "name": "Feross Aboukhadijeh <feross@feross.org> (https://feross.org)"
        }
      ],
      "group": "",
      "name": "simple-concat",
      "version": "1.0.1",
      "description": "Super-minimalist version of `concat-stream`. Less than 15 lines!",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "71216d00fb518658efebd20ad214d5650f8e7c4f6778f8bfaed266c395231de57256ba04a895cfd6c173b4a532d6a53ec6fcf7bbfb1f6092daf78edbee700dd9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/simple-concat@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/feross/simple-concat"
        },
        {
          "type": "vcs",
          "url": "git://github.com/feross/simple-concat.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/simple-concat@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Feross Aboukhadijeh <feross@feross.org> (https://feross.org)"
        }
      ],
      "group": "",
      "name": "simple-get",
      "version": "4.0.1",
      "description": "Simplest way to make http get requests. Supports HTTPS, redirects, gzip/deflate, streams in < 100 lines.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ebbfba795a01f48e6409af56430df2833927965a0f8e572a46f7d03fe6f6063ea27aa7189a1cbcbc9f1b458c103ba0c6b4d5e6c0f607e1d6e30216a3ae5f1bc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/simple-get@4.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/feross/simple-get"
        },
        {
          "type": "vcs",
          "url": "git://github.com/feross/simple-get.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/simple-get@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Qix (http://github.com/qix-)"
        }
      ],
      "group": "",
      "name": "simple-swizzle",
      "version": "0.2.2",
      "description": "Simply swizzle your arguments",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "240fff910819b5bb98f379bec53fad5c9926267706313153f82fa0da1d91f6ec64608ac4db2cbdb2099c2e10a7c39eff5920fe121dc9f7b14f1031676d79c352"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/simple-swizzle@0.2.2",
      "type": "library",
      "bom-ref": "pkg:npm/simple-swizzle@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "pretest, test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Buus (@mafintosh)"
        }
      ],
      "group": "",
      "name": "streamx",
      "version": "2.15.5",
      "description": "An iteration of the Node.js core streams with a series of improvements",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f6d84f18c90a0b619cb42cf20948cc137c91d37c76c4da3418f286911c3650c60dfa0a966bdbaaa72356866b0d0aeb54e731e6914ba6d0bb024504d752050202"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/streamx@2.15.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/streamx"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/streamx.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/streamx@2.15.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "1.3.0",
      "description": "The string_decoder module from Node core",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "864457f14d568c915df0bb03276c90ff0596c5aa2912c0015355df90cf00fa3d3ef392401a9a6dd7a72bd56860e8a21b6f8a2453a32a97a04e8febaea7fc0a78"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/string_decoder@1.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/nodejs/string_decoder"
        },
        {
          "type": "vcs",
          "url": "git://github.com/nodejs/string_decoder.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, ci"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "strip-json-comments",
      "version": "2.0.1",
      "description": "Strip comments from JSON. Lets you use comments in your JSON files!",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e2007c9dad3b7de715564388e91b387bb4fa34e4e48b91262fb4d476e4ece9bbb711d9d2c9c9ed549e2b7bc920640fb0c7d22e788d98d756df6e0c2dcee13429"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strip-json-comments@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/strip-json-comments@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Mathias Buus"
        }
      ],
      "group": "",
      "name": "tar-fs",
      "version": "2.1.1",
      "description": "filesystem bindings for tar-stream",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "574af663db1c99b0d12c235ec7ffa1633be9ff3c988ef15b1cf36055329f42f56b6fa82e884fdfc4ff976e50cd474d75bada296e47b1da7338747355e860ec9e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tar-fs@2.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/tar-fs"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/tar-fs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tar-fs@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Buus"
        }
      ],
      "group": "",
      "name": "tar-fs",
      "version": "3.0.4",
      "description": "filesystem bindings for tar-stream",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e4015053c6fda8b7d9097f73a7676e38d84f999bf484662204f26cc9476a323ceafe6a95a72feb11449e1e4d7e622b66c6e81aa6d801879a03194dd5b0026ae3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tar-fs@3.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/tar-fs"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/tar-fs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tar-fs@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Buus <mathiasbuus@gmail.com>"
        }
      ],
      "group": "",
      "name": "tar-stream",
      "version": "2.2.0",
      "description": "tar-stream is a streaming tar parser and generator and nothing else. It is streams2 and operates purely using streams which means you can easily extract/parse tarballs without ever hitting the file system.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ba37aa6dc780060c0c6711099e4d870d8d83967519fbda0471bd4acd355f6078a8d1413a746ef59fad1df03d88e2a36f95e5abad7a668e9b7bbd9785d4b9cc65"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tar-stream@2.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/tar-stream"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/mafintosh/tar-stream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tar-stream@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, test-all"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Buus <mathiasbuus@gmail.com>"
        }
      ],
      "group": "",
      "name": "tar-stream",
      "version": "3.1.6",
      "description": "tar-stream is a streaming tar parser and generator and nothing else. It operates purely using streams which means you can easily extract/parse tarballs without ever hitting the file system.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "07f5328d8c0fa4c06ff8f685496026b588f076b94469940484c20114d0b9a041bc969896f178dc49d984682963dbc02b7ca49c287b369ec873de4da57ba72bb2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tar-stream@3.1.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/tar-stream"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/mafintosh/tar-stream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tar-stream@3.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mikeal Rogers <mikeal.rogers@gmail.com> (http://www.futurealoof.com)"
        }
      ],
      "group": "",
      "name": "tunnel-agent",
      "version": "0.6.0",
      "description": "HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone module.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "31c9cd895d65f1161e63cb41804a6ea1d082d662d475b48df826012fb909b093489ce3fc5230c3130764e8cc3ad2f74b2ebaf934729984c00e4ab476359b90fb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tunnel-agent@0.6.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mikeal/tunnel-agent"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tunnel-agent@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Microsoft Corp."
        }
      ],
      "group": "",
      "name": "typescript",
      "version": "5.3.2",
      "description": "TypeScript is a language for application scale JavaScript development",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ea5f91c8dcbba001c37f10b8173489733f6f9e34cac6b2e90c6e4cd95bb8487455360eb1cea669e8b61247dce3a904eef0353f7f9c70c547400ce91bac85f681"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/typescript@5.3.2",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.typescriptlang.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/Microsoft/TypeScript.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typescript@5.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:bin",
          "value": "tsc, tsserver"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, test:eslint-rules, build, build:compiler, build:tests, build:tests:notypecheck, start, clean, gulp, lint, format, setup-hooks"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build, build:compiler, build:tests, build:tests:notypecheck"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "undici-types",
      "version": "5.26.5",
      "description": "A stand-alone types package for Undici",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "26508c3be7a174420aaa517193a21f568014566833edc53bcc3fe1f57674ab37a8b121e650954ecd242fbd84985979055c2f887cb29221f7e1bf4b1566ea7aa4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/undici-types@5.26.5",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://undici.nodejs.org"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/nodejs/undici.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/undici-types@5.26.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)"
        }
      ],
      "group": "",
      "name": "util-deprecate",
      "version": "1.0.2",
      "description": "The Node.js `util.deprecate()` function with browser support",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "10f0f9ab5b97c85c49a42acb9c27359c79eade039ae83641a1c008888d93692080ed5089d5424331a802cc891736c5187c3d5d68afff2d3110f318886eb1ed73"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/util-deprecate@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/TooTallNate/util-deprecate"
        },
        {
          "type": "vcs",
          "url": "git://github.com/TooTallNate/util-deprecate.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/util-deprecate@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "wrappy",
      "version": "1.0.2",
      "description": "Callback wrapping utility",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9784a9fc346c7a8afdc0be84bd5dbe4ee427eb774c90f8d9feca7d5e48214c46d5f4a94f4b5c54b19deeeff2103b8c31b5c141e1b82940f45c477402bdeccf71"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/wrappy@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/wrappy"
        },
        {
          "type": "vcs",
          "url": "https://github.com/npm/wrappy"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrappy@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "yallist",
      "version": "4.0.0",
      "description": "Yet Another Linked List",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "df074689d672ab93c1d3ce172c44b94e9392440df08d7025216321ba6da445cbffe354a7d9e990d1dc9c416e2e6572de8f02af83a12cbdb76554bf8560472dec"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yallist@4.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/yallist.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yallist@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, preversion, postversion, postpublish"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/@protobufjs/aspromise@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@protobufjs/base64@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@protobufjs/codegen@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@protobufjs/eventemitter@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@protobufjs/fetch@1.1.0",
      "dependsOn": [
        "pkg:npm/@protobufjs/aspromise@1.1.2",
        "pkg:npm/@protobufjs/inquire@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/@protobufjs/float@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@protobufjs/inquire@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@protobufjs/path@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@protobufjs/pool@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@protobufjs/utf8@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/long@4.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/node@20.9.4",
      "dependsOn": [
        "pkg:npm/undici-types@5.26.5"
      ]
    },
    {
      "ref": "pkg:npm/@xenova/transformers@2.9.0",
      "dependsOn": [
        "pkg:npm/onnxruntime-web@1.14.0",
        "pkg:npm/sharp@0.32.6"
      ]
    },
    {
      "ref": "pkg:npm/b4a@1.6.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/base64-js@1.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bl@4.1.0",
      "dependsOn": [
        "pkg:npm/buffer@5.7.1",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/readable-stream@3.6.2"
      ]
    },
    {
      "ref": "pkg:npm/buffer@5.7.1",
      "dependsOn": [
        "pkg:npm/base64-js@1.5.1",
        "pkg:npm/ieee754@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/chownr@1.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-convert@2.0.1",
      "dependsOn": [
        "pkg:npm/color-name@1.1.4"
      ]
    },
    {
      "ref": "pkg:npm/color-name@1.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-string@1.9.1",
      "dependsOn": [
        "pkg:npm/color-name@1.1.4",
        "pkg:npm/simple-swizzle@0.2.2"
      ]
    },
    {
      "ref": "pkg:npm/color@4.2.3",
      "dependsOn": [
        "pkg:npm/color-convert@2.0.1",
        "pkg:npm/color-string@1.9.1"
      ]
    },
    {
      "ref": "pkg:npm/decompress-response@6.0.0",
      "dependsOn": [
        "pkg:npm/mimic-response@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/deep-extend@0.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/detect-libc@2.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/end-of-stream@1.4.4",
      "dependsOn": [
        "pkg:npm/once@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/expand-template@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-fifo@1.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/flatbuffers@1.12.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fs-constants@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/github-from-package@0.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/guid-typescript@1.0.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ieee754@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/inherits@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ini@1.3.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-arrayish@0.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/long@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lru-cache@6.0.0",
      "dependsOn": [
        "pkg:npm/yallist@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/mimic-response@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimist@1.2.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mkdirp-classic@0.5.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/napi-build-utils@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/node-abi@3.51.0",
      "dependsOn": [
        "pkg:npm/semver@7.5.4"
      ]
    },
    {
      "ref": "pkg:npm/node-addon-api@6.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/once@1.4.0",
      "dependsOn": [
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/onnx-proto@4.0.4",
      "dependsOn": [
        "pkg:npm/protobufjs@6.11.4"
      ]
    },
    {
      "ref": "pkg:npm/onnxruntime-common@1.14.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/onnxruntime-node@1.14.0",
      "dependsOn": [
        "pkg:npm/onnxruntime-common@1.14.0"
      ]
    },
    {
      "ref": "pkg:npm/onnxruntime-web@1.14.0",
      "dependsOn": [
        "pkg:npm/flatbuffers@1.12.0",
        "pkg:npm/guid-typescript@1.0.9",
        "pkg:npm/long@4.0.0",
        "pkg:npm/onnx-proto@4.0.4",
        "pkg:npm/onnxruntime-common@1.14.0",
        "pkg:npm/platform@1.3.6"
      ]
    },
    {
      "ref": "pkg:npm/platform@1.3.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/prebuild-install@7.1.1",
      "dependsOn": [
        "pkg:npm/detect-libc@2.0.2",
        "pkg:npm/expand-template@2.0.3",
        "pkg:npm/github-from-package@0.0.0",
        "pkg:npm/minimist@1.2.8",
        "pkg:npm/mkdirp-classic@0.5.3",
        "pkg:npm/napi-build-utils@1.0.2",
        "pkg:npm/node-abi@3.51.0",
        "pkg:npm/pump@3.0.0",
        "pkg:npm/rc@1.2.8",
        "pkg:npm/simple-get@4.0.1",
        "pkg:npm/tar-fs@2.1.1",
        "pkg:npm/tunnel-agent@0.6.0"
      ]
    },
    {
      "ref": "pkg:npm/protobufjs@6.11.4",
      "dependsOn": [
        "pkg:npm/@protobufjs/aspromise@1.1.2",
        "pkg:npm/@protobufjs/base64@1.1.2",
        "pkg:npm/@protobufjs/codegen@2.0.4",
        "pkg:npm/@protobufjs/eventemitter@1.1.0",
        "pkg:npm/@protobufjs/fetch@1.1.0",
        "pkg:npm/@protobufjs/float@1.0.2",
        "pkg:npm/@protobufjs/inquire@1.1.0",
        "pkg:npm/@protobufjs/path@1.1.2",
        "pkg:npm/@protobufjs/pool@1.1.0",
        "pkg:npm/@protobufjs/utf8@1.1.0",
        "pkg:npm/@types/long@4.0.2",
        "pkg:npm/@types/node@20.9.4",
        "pkg:npm/long@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/pump@3.0.0",
      "dependsOn": [
        "pkg:npm/end-of-stream@1.4.4",
        "pkg:npm/once@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/queue-tick@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rc@1.2.8",
      "dependsOn": [
        "pkg:npm/deep-extend@0.6.0",
        "pkg:npm/ini@1.3.8",
        "pkg:npm/minimist@1.2.8",
        "pkg:npm/strip-json-comments@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/readable-stream@3.6.2",
      "dependsOn": [
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/string_decoder@1.3.0",
        "pkg:npm/util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/safe-buffer@5.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/semver@7.5.4",
      "dependsOn": [
        "pkg:npm/lru-cache@6.0.0"
      ]
    },
    {
      "ref": "pkg:npm/sharp@0.32.6",
      "dependsOn": [
        "pkg:npm/color@4.2.3",
        "pkg:npm/detect-libc@2.0.2",
        "pkg:npm/node-addon-api@6.1.0",
        "pkg:npm/prebuild-install@7.1.1",
        "pkg:npm/semver@7.5.4",
        "pkg:npm/simple-get@4.0.1",
        "pkg:npm/tar-fs@3.0.4",
        "pkg:npm/tunnel-agent@0.6.0"
      ]
    },
    {
      "ref": "pkg:npm/simple-concat@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/simple-get@4.0.1",
      "dependsOn": [
        "pkg:npm/decompress-response@6.0.0",
        "pkg:npm/once@1.4.0",
        "pkg:npm/simple-concat@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/simple-swizzle@0.2.2",
      "dependsOn": [
        "pkg:npm/is-arrayish@0.3.2"
      ]
    },
    {
      "ref": "pkg:npm/streamx@2.15.5",
      "dependsOn": [
        "pkg:npm/fast-fifo@1.3.2",
        "pkg:npm/queue-tick@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/string_decoder@1.3.0",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "pkg:npm/strip-json-comments@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tar-fs@2.1.1",
      "dependsOn": [
        "pkg:npm/chownr@1.1.4",
        "pkg:npm/mkdirp-classic@0.5.3",
        "pkg:npm/pump@3.0.0",
        "pkg:npm/tar-stream@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/tar-fs@3.0.4",
      "dependsOn": [
        "pkg:npm/mkdirp-classic@0.5.3",
        "pkg:npm/pump@3.0.0",
        "pkg:npm/tar-stream@3.1.6"
      ]
    },
    {
      "ref": "pkg:npm/tar-stream@2.2.0",
      "dependsOn": [
        "pkg:npm/bl@4.1.0",
        "pkg:npm/end-of-stream@1.4.4",
        "pkg:npm/fs-constants@1.0.0",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/readable-stream@3.6.2"
      ]
    },
    {
      "ref": "pkg:npm/tar-stream@3.1.6",
      "dependsOn": [
        "pkg:npm/b4a@1.6.4",
        "pkg:npm/fast-fifo@1.3.2",
        "pkg:npm/streamx@2.15.5"
      ]
    },
    {
      "ref": "pkg:npm/tunnel-agent@0.6.0",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "pkg:npm/typescript@5.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/undici-types@5.26.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/util-deprecate@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wrappy@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yallist@4.0.0",
      "dependsOn": []
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/@huggingface/jinja@0.3.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-09-01T19:38:24Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Tuesday, September 1, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'jinja' with version '0.3.0'. The package type in this SBOM is npm with 3 purl namespaces described under components. The components were identified from the source files: pnpm-lock.yaml."
    }
  ]
}