{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:34ceb3b9-ee78-49f5-bcba-f17e901fe420",
  "version": 1,
  "metadata": {
    "timestamp": "2026-07-29T03:01:42Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "is-npm",
      "group": "",
      "version": "1.0.0",
      "description": "Check if your code is running as an npm script",
      "purl": "pkg:npm/is-npm@1.0.0",
      "bom-ref": "pkg:npm/is-npm@1.0.0",
      "author": "Sindre Sorhus <sindresorhus@gmail.com> (http://sindresorhus.com)",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "ava",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "82de4bf5885ac26df8a4e84391d85ce007a277d793281a9def348c74757088cbd4dfbeaf3200971426dd936953ffc28ce2f18287bdc7b14a3dcef018841d6824"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ava@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ava/-/ava-0.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ava@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ava/-/ava-0.0.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/ava"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "0.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6c8280e7884ff22661c834fcd533ac26242f475816f996125c5699500be80f8c021dd6c763669cb66a53138c77e3866516a1dbbe8c4a39a11250b4d937682cb6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/chalk@0.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/chalk/-/chalk-0.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chalk@0.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/chalk/-/chalk-0.5.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/chalk"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f63ca52437942782249e9a8c1ae8cae4f4c3c276d1623929a26e367e8f5aa12c61c762ca99c2604c445dc844c557a3cb326c3ab1d9f265d9dffc3a9841a1690"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ansi-styles@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ansi-styles/-/ansi-styles-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ansi-styles/-/ansi-styles-1.1.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/ansi-styles"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-string-regexp",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bdb468ac1e455105af95ad7a53c47faa06852326b6a86cf00eb366099b982ab6dd494306e88d5908641179f911561b8e9081959deec1437e4349fa35aaf26a16"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/escape-string-regexp"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-ansi",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d58b138357e4dbfe894e8421b59900acc92eaeaf14a1653541ed1a4775541e38228f89ceca54962d602d057a19e3f7573a6ba07cb1a6d5cf9086e0f427279d14"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/has-ansi@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/has-ansi/-/has-ansi-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-ansi@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/has-ansi/-/has-ansi-0.1.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/has-ansi"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-regex",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b06c0818c8e161d5b6ebf221c0ada0916588f0344254eeae8f78588074fecc3f902f5a5adfbb4cdee8e1c9f70921849bb31a7b1b1872ef3ad15bfd401e6e0198"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ansi-regex@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ansi-regex/-/ansi-regex-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ansi-regex/-/ansi-regex-0.2.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/ansi-regex"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-ansi",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0deae164bee3ea2ebf9c49d51b4a9588a5c8d0e2a8bafbe9b0089a8fb73e2dfa99659c5dc19b6ff3e52203fc385542694fc5335f4a51d5d7073a28b519b9abb9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/strip-ansi@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/strip-ansi/-/strip-ansi-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/strip-ansi/-/strip-ansi-0.3.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/strip-ansi"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b5d099dbc32733b93b7090c973b12af3403d0ac445000399532e359e93990acfbea928df232ee8e51878e82064f8393915b289df75f74ea83862b574ecde5168"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/supports-color@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/supports-color/-/supports-color-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/supports-color/-/supports-color-0.2.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/supports-color"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "each-async",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d0b0fe4ebb5121dad7ec36fee08874f391f51aa3b7e4a1370d87d34b80b709c86353832dbc4905aa8b7d50bd62c2befbfa34e287a1a009fe4698c437d135109"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/each-async@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/each-async/-/each-async-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/each-async@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/each-async/-/each-async-0.1.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/each-async"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/ansi-styles@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/escape-string-regexp@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-regex@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-ansi@0.1.0",
      "dependsOn": [
        "pkg:npm/ansi-regex@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/strip-ansi@0.3.0",
      "dependsOn": [
        "pkg:npm/ansi-regex@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/supports-color@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/chalk@0.5.1",
      "dependsOn": [
        "pkg:npm/ansi-styles@1.1.0",
        "pkg:npm/escape-string-regexp@1.0.5",
        "pkg:npm/has-ansi@0.1.0",
        "pkg:npm/strip-ansi@0.3.0",
        "pkg:npm/supports-color@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/each-async@0.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ava@0.0.3",
      "dependsOn": [
        "pkg:npm/chalk@0.5.1",
        "pkg:npm/each-async@0.1.3"
      ]
    },
    {
      "ref": "pkg:npm/is-npm@1.0.0",
      "dependsOn": [
        "pkg:npm/ava@0.0.3"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/is-npm@1.0.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-07-29T03:01:42Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Wednesday, July 29, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'is-npm' with version '1.0.0'."
    }
  ]
}