{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:b15452df-ade8-4858-b753-8efcc8fba38a",
  "version": 1,
  "metadata": {
    "timestamp": "2026-08-04T08:10:49Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.2",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.2",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.2",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "isomorphic-ws",
      "group": "",
      "version": "5.0.0",
      "description": "Isomorphic implementation of WebSocket",
      "purl": "pkg:npm/isomorphic-ws@5.0.0",
      "bom-ref": "pkg:npm/isomorphic-ws@5.0.0",
      "author": "@heineiuo",
      "properties": [
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "components": [
        {
          "group": "",
          "name": "isomorphic-ws-webpack",
          "version": "1.0.0",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "url": "https://opensource.org/licenses/MIT",
                "properties": [
                  {
                    "name": "cdx:license:category",
                    "value": "Permissive"
                  },
                  {
                    "name": "cdx:license:foss",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:osiApproved",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:fsfLibre",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:deprecated",
                    "value": "false"
                  }
                ]
              }
            }
          ],
          "purl": "pkg:npm/isomorphic-ws-webpack@1.0.0",
          "type": "application",
          "bom-ref": "pkg:npm/isomorphic-ws-webpack@1.0.0",
          "properties": [
            {
              "name": "cdx:license:category",
              "value": "Permissive"
            }
          ]
        },
        {
          "group": "",
          "name": "isomorphic-ws-rollup",
          "version": "1.0.0",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "url": "https://opensource.org/licenses/MIT",
                "properties": [
                  {
                    "name": "cdx:license:category",
                    "value": "Permissive"
                  },
                  {
                    "name": "cdx:license:foss",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:osiApproved",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:fsfLibre",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:deprecated",
                    "value": "false"
                  }
                ]
              }
            }
          ],
          "purl": "pkg:npm/isomorphic-ws-rollup@1.0.0",
          "type": "application",
          "bom-ref": "pkg:npm/isomorphic-ws-rollup@1.0.0",
          "properties": [
            {
              "name": "cdx:license:category",
              "value": "Permissive"
            }
          ]
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/heineiuo/isomorphic-ws#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/heineiuo/isomorphic-ws.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@discoveryjs\\n@rollup\\n@types\\n@webassemblyjs\\n@webpack-cli\\n@xtuc"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "example/rollup/package-lock.json\\nexample/webpack/package-lock.json\\npackage-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "ws",
      "version": "8.7.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "73682c3f43d1c1c2c5cd4880f0c92bdfbfcc23b8a52251d0c5a100b5dd2e34c6d5328cbca6e27269f4659b46d5f4c6c649a6d43de2eb4516aa201705700d8faa"
        }
      ],
      "purl": "pkg:npm/ws@8.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ws/-/ws-8.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ws@8.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ws/-/ws-8.7.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "ws"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "node.js",
            "line": 3
          }
        ]
      }
    },
    {
      "group": "",
      "name": "app",
      "version": "5.0.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/app@5.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/app@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:resolvedPath",
          "value": "../.."
        },
        {
          "name": "cdx:npm:isLink",
          "value": "true"
        },
        {
          "name": "cdx:npm:manifestSourceType",
          "value": "path"
        },
        {
          "name": "cdx:npm:manifestSource",
          "value": "file:../../"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "SrcFile",
          "value": "example/rollup/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/rollup/package-lock.json"
              }
            ],
            "concludedValue": "example/rollup/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ws",
      "version": "4.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "418b25b07e386c7f0eeff5b6f35e6ee43a670a95d6a442b8e0599a1df7cdc20248e0931a49938d80f05339faf1276f665ca6d76a4f8bb09dae0240d362ada9b5"
        }
      ],
      "purl": "pkg:npm/ws@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ws/-/ws-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ws@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ws/-/ws-4.0.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "ws"
        },
        {
          "name": "SrcFile",
          "value": "example/rollup/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/rollup/package-lock.json"
              }
            ],
            "concludedValue": "example/rollup/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "node.js",
            "line": 3
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async-limiter",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8e9fee167a283a23be2f6d757993a84b2ce93884cc5f1d6b0484dab98ca41b705160fbbc87451cc6c3cd074e11479be8e13cb3dfe6b2d7bb51e8955ff6acd85a"
        }
      ],
      "purl": "pkg:npm/async-limiter@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async-limiter/-/async-limiter-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async-limiter@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async-limiter/-/async-limiter-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "example/rollup/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/rollup/package-lock.json"
              }
            ],
            "concludedValue": "example/rollup/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-buffer",
      "version": "5.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "90abcd267e8c9bdde001ccd654983bc07fb019858dac31dd5afa54987c84b200ad230c28ddba8fb55e2d479b6e3da5214cea3f92f855c1df17c303a59466246e"
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "example/rollup/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/rollup/package-lock.json"
              }
            ],
            "concludedValue": "example/rollup/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ultron",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "50811704d79898aa6d587eb3f199ea4de4bc7d5ef8cc6d3f79153d546929cf3f8b20936cf16ff333f2feedcb42911ae06cd9e7474c71c386ca3abd1c5b43743a"
        }
      ],
      "purl": "pkg:npm/ultron@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ultron/-/ultron-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ultron@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ultron/-/ultron-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "example/rollup/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/rollup/package-lock.json"
              }
            ],
            "concludedValue": "example/rollup/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webpack",
      "version": "5.44.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2354b5c3840ba0a987d7da57e9885837436249769663c3aed34a00f9a31cafd21419e1796b39ecf8828191fa00006f41bb9cce23366dfe6377e4e7df0726bc01"
        }
      ],
      "purl": "pkg:npm/webpack@5.44.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webpack/-/webpack-5.44.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webpack@5.44.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webpack/-/webpack-5.44.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/example/webpack/node_modules/.bin/webpack"
        },
        {
          "name": "cdx:npm:bin",
          "value": "webpack"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "eslint-scope",
      "version": "3.7.1",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "48215ea20aa2a6d9ace05836f56a4e4e4e671c8cdfa4a09e99237ade4b01418293717a0912625a815f8385599b6a9673638ff961a395d67670aec53bf5f166d6"
        }
      ],
      "purl": "pkg:npm/%40types/eslint-scope@3.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/eslint-scope/-/eslint-scope-3.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/eslint-scope@3.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/eslint-scope/-/eslint-scope-3.7.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/eslint-scope"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "eslint",
      "version": "7.2.14",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a444b28526d43ac92aac671a37e6c25c8403c93e734da4567e3e598e34a531ab601a3227dd040f7e8700bb859269b511ec21b22d9d8241a6722123845fbfec6b"
        }
      ],
      "purl": "pkg:npm/%40types/eslint@7.2.14",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/eslint/-/eslint-7.2.14.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/eslint@7.2.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/eslint/-/eslint-7.2.14.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/eslint"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "estree",
      "version": "0.0.50",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0ba379b36645b6e6518f9e24dbfcf24613438c9c3071588033735b9bcce30696ea01d674d26af4085c6f48a78ef18fded3759514ba5031d1d855f51de9207e1f"
        }
      ],
      "purl": "pkg:npm/%40types/estree@0.0.50",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/estree/-/estree-0.0.50.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/estree@0.0.50",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/estree/-/estree-0.0.50.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/estree"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "json-schema",
      "version": "7.0.8",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "61204f4cb4d59b67b63a84080d8c7c1da796279b534e82c7ebb91747bcd8346ba95cc1076b6fbe1bc93e0dccd7d9c15581a972a6ab72648714d7d0057263a99a"
        }
      ],
      "purl": "pkg:npm/%40types/json-schema@7.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/json-schema/-/json-schema-7.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/json-schema@7.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/json-schema/-/json-schema-7.0.8.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/json-schema"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "ast",
      "version": "1.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ba4061d78a852e3c5340d4d7a1c77292c37941d336f12d42c47b76addb241722fec4557b56b7a6b812d56e609e3e3f9445a957044371ffd2e6ee59e18a1b424b"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/ast@1.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/ast/-/ast-1.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/ast@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/ast/-/ast-1.11.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "helper-numbers",
      "version": "1.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bc391bc6207ccdf9cf74d2bd45a8dc7b2e42d30f9026e804825374a1ffa498ef25ee50dbefb02794a61017b69aad9b82aeffa5d14bea2feebc8120ebde4f4b3d"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/helper-numbers@1.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/helper-numbers/-/helper-numbers-1.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/helper-numbers@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/helper-numbers/-/helper-numbers-1.11.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "floating-point-hex-parser",
      "version": "1.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "88645fc9ce41abe36736e5fc6f987006b463cdfd2872b24f23a1961687411739859f2beb43cdd21ca8668a5094ffc26febb8b818964132113396dc7370d6a0b5"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/floating-point-hex-parser@1.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/floating-point-hex-parser/-/floating-point-hex-parser-1.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/floating-point-hex-parser@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/floating-point-hex-parser/-/floating-point-hex-parser-1.11.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "@webassemblyjs",
      "name": "helper-api-error",
      "version": "1.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "465852f020425df45447f730a36868f5b9217925c6d3e370a285dc7373c020b00b7f640b745ca3eca1ac2916d573de61667867111a27e245bf0f7499a69e9372"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/helper-api-error@1.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/helper-api-error/-/helper-api-error-1.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/helper-api-error@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/helper-api-error/-/helper-api-error-1.11.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@xtuc",
      "name": "long",
      "version": "4.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "36e1ea058d4f07f0fcc54eacfed84180e02200fec73980d0df6f8115920b27c8af9149001d09d67e7e9684befd3b08f5aa6527a0dfd83e192d748a2e722a6401"
        }
      ],
      "purl": "pkg:npm/%40xtuc/long@4.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@xtuc/long/-/long-4.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@xtuc/long@4.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@xtuc/long/-/long-4.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "helper-wasm-bytecode",
      "version": "1.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3efa68386889c17793ad27ffa9fb9d261c25bc34311607a56ccaadab9d965a25c2e97820d484447678263cdddbb384683bcdcf9cbfe716bc6e7178f5f815fad9"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/helper-wasm-bytecode@1.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/helper-wasm-bytecode/-/helper-wasm-bytecode-1.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/helper-wasm-bytecode@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/helper-wasm-bytecode/-/helper-wasm-bytecode-1.11.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "wasm-edit",
      "version": "1.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83e46cba9502d5a4c77d1f020e09ec551559149a9d9051e9b0731f26e590cd6537b6f9cb0b4ed4a872027cffb85f22f6b67af56a6be5d52769d3a4e760299590"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/wasm-edit@1.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/wasm-edit/-/wasm-edit-1.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/wasm-edit@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/wasm-edit/-/wasm-edit-1.11.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "helper-buffer",
      "version": "1.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8308a417ae5a0cd79e5daf09c576b604093e4448d2ca1acd0bd670753d1ff2373875041e0d0ec6e26d1fd9008b3c988c4d33bac1f0e64668ffa56d0fb14bc870"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/helper-buffer@1.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/helper-buffer/-/helper-buffer-1.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/helper-buffer@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/helper-buffer/-/helper-buffer-1.11.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "helper-wasm-section",
      "version": "1.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d743fd368dbdad85f58fb1771153d7dc9bc63d03da7be0289ae4933e217d78141e0a11c8ea2aa3308c11f4998e257c299e7fe85460e4ec8e4896c92e33053fa6"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/helper-wasm-section@1.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/helper-wasm-section/-/helper-wasm-section-1.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/helper-wasm-section@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/helper-wasm-section/-/helper-wasm-section-1.11.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "wasm-gen",
      "version": "1.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "17b42a297c30365326b2e963ebe3bbaf89a6b4094259f3bfd077603b14a49597d0703bb44e92e20f5991b7fcc5db9064e7d1488c4b86008ca7e5e8b8c8c7cb84"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/wasm-gen@1.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/wasm-gen/-/wasm-gen-1.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/wasm-gen@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/wasm-gen/-/wasm-gen-1.11.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "ieee754",
      "version": "1.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "849f3b4083ed00c29b16ae821939196098af1306436d052061ddea29269d4cd3a1558ee9fa07cfe92af494b4554da1b5263163fabdd8721a2a458c4d1f733419"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/ieee754@1.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/ieee754/-/ieee754-1.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/ieee754@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/ieee754/-/ieee754-1.11.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@xtuc",
      "name": "ieee754",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0d7f272a0a9c1b0b1cd1e252a98b799703f80c7e459479e6b96581472ed7d0d71a191d19b6ec9e11280cc1361512dc66b0d198faa8ade10613fcc2184ce4cf78"
        }
      ],
      "purl": "pkg:npm/%40xtuc/ieee754@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@xtuc/ieee754/-/ieee754-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@xtuc/ieee754@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@xtuc/ieee754/-/ieee754-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "leb128",
      "version": "1.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "049d8fd21359d2ef938756195c9a735ba9a2c2a41419c2074f51bfb1fef680b543f4367901d613a8f35b1d987a2b53395662af157c064966400f3faa056c5e47"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/leb128@1.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/leb128/-/leb128-1.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/leb128@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/leb128/-/leb128-1.11.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "utf8",
      "version": "1.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f64a9cc4011d3218b04241e990d8a8ad9ceaa46ae8750436206ac71f10b2f8ece7834a1fc8c034953aa22e456cd6ecd345e8d7fbf3b410e4fb2b1a953ee5e8b1"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/utf8@1.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/utf8/-/utf8-1.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/utf8@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/utf8/-/utf8-1.11.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "wasm-opt",
      "version": "1.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "56a9e436a9d9954e4407ae29a7597b85d9b7866430ed582a6b4285fca08d3bdb08a48e8593a6eb0c4897fa208e62bbccb81583c2cd0d9133b16046fce574071f"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/wasm-opt@1.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/wasm-opt/-/wasm-opt-1.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/wasm-opt@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/wasm-opt/-/wasm-opt-1.11.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "wasm-parser",
      "version": "1.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aeb06e8f0f9d26edf681807bfcbba9e9485d90fc7d4bd4a7a1b6734552fb55c047f41b7d6c204b12e5ff61738eb41b0e678350ad1ca42a17df4561ef8a042f38"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/wasm-parser@1.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/wasm-parser/-/wasm-parser-1.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/wasm-parser@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/wasm-parser/-/wasm-parser-1.11.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "@webassemblyjs",
      "name": "wast-printer",
      "version": "1.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2106e851633878acd65be37f8e28f6b116ad28c87df5011e968dc46f6ab4a9792f3d1212023f10c6d9b0e62b70a8af934e406e508138e40c583d3a2a3ed2f982"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/wast-printer@1.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/wast-printer/-/wast-printer-1.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/wast-printer@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/wast-printer/-/wast-printer-1.11.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn",
      "version": "8.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ac69b6814a410aa2c60a3084ee9f35f5efb097c50e10f01492ccc4ca0fe15e7d4862a500bbd207d6e528940e1610def93c1bef351ea424ec5bfd397c309fd28"
        }
      ],
      "purl": "pkg:npm/acorn@8.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn/-/acorn-8.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn@8.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn/-/acorn-8.4.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/example/webpack/node_modules/.bin/acorn"
        },
        {
          "name": "cdx:npm:bin",
          "value": "acorn"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browserslist",
      "version": "4.16.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5aca64fcfa8efb85bdaa9e6251326c6b507f42b627d6478d09c10fe4ebcfed60704f829a0e5cb4b8e358982e976b767922a9d4812d0a7202d8bb597be31d195d"
        }
      ],
      "purl": "pkg:npm/browserslist@4.16.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browserslist/-/browserslist-4.16.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserslist@4.16.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browserslist/-/browserslist-4.16.6.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/example/webpack/node_modules/.bin/browserslist"
        },
        {
          "name": "cdx:npm:bin",
          "value": "browserslist"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caniuse-lite",
      "version": "1.0.30001243",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bcdc70f6691306d9262c59c946fff6ae1b35cae7e90df0a40597b11b7634c5d387d99fde13ff391380e5e63d5850ddf89d956c4a9eaf55115046b7b3f7024c44"
        }
      ],
      "purl": "pkg:npm/caniuse-lite@1.0.30001243",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001243.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/caniuse-lite@1.0.30001243",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001243.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "colorette",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "30a18ccf27debaeb42fd927571b6bd36a70da5f7aa3147189b217564563afc29fb08d4802b1e9aface3cb2a2eac80899b9a3f64dca8c868a3e765c059d5c53f7"
        }
      ],
      "purl": "pkg:npm/colorette@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/colorette/-/colorette-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/colorette@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/colorette/-/colorette-1.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "electron-to-chromium",
      "version": "1.3.771",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cc7328993aa4a67003f56e6b8571356a2537a20185aea5b376f3380badb6d924448aab1641bdb0d12ecfd888b8e2a09a1a29a600fd73f8ec9d965338dfcb89c8"
        }
      ],
      "purl": "pkg:npm/electron-to-chromium@1.3.771",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.3.771.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/electron-to-chromium@1.3.771",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.3.771.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escalade",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9347abda05242dff0ed332898808669139c9953bc8346bfbca00cd3db788b17fd3263189647ba1f41d94c5bb1a1249a5128f4c7e1ad2ce68489614652361979f"
        }
      ],
      "purl": "pkg:npm/escalade@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escalade/-/escalade-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escalade@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escalade/-/escalade-3.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-releases",
      "version": "1.1.73",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b96edfa1d0faa725b61593599e9fd9de1bd629e116d58f11d7ed429c4ac4f1c5c55f39796e504ea15078d42bcc7abe8fe90d12e455c3c1c1e015dd568f453dce"
        }
      ],
      "purl": "pkg:npm/node-releases@1.1.73",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-releases/-/node-releases-1.1.73.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-releases@1.1.73",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-releases/-/node-releases-1.1.73.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chrome-trace-event",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a772942f2420e12ecd2078b17706c65fe9c51e4a01880e18426c96b636fc5e7812295d76e27266472b2001eba36d455bd79be1f91bc551f08fa94eeb5e4fa166"
        }
      ],
      "purl": "pkg:npm/chrome-trace-event@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chrome-trace-event/-/chrome-trace-event-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chrome-trace-event@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chrome-trace-event/-/chrome-trace-event-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "enhanced-resolve",
      "version": "5.8.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "176ee80775ae1c3cef4760ce18d4da632d03e68d1c9ebbfc4de238f3654ce2462041dfc54fd954430b8db09d28387b4152aede896e72b6ace9ee70459272fe18"
        }
      ],
      "purl": "pkg:npm/enhanced-resolve@5.8.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/enhanced-resolve/-/enhanced-resolve-5.8.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/enhanced-resolve@5.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/enhanced-resolve/-/enhanced-resolve-5.8.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "4.2.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9d39c9e76f296eac586a78690d8b22e1177c30079a040ebbf91675d023359b76d30151440dc77902e0386ba5b9624199d623571f3673f13e9304a2de06e36b89"
        }
      ],
      "purl": "pkg:npm/graceful-fs@4.2.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@4.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tapable",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "14193821eb0c575ac1c57dad7e22bc4409a882d5a7e77a6e2ce425bcef17bb0960c5c61b3f89953d2f4f87869e6a64b2c958ce976e1a61602e73c53990257033"
        }
      ],
      "purl": "pkg:npm/tapable@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tapable/-/tapable-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tapable@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tapable/-/tapable-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-module-lexer",
      "version": "0.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "320b56165e4da3ee12dd39a10e60b3d8e6c51a6ea51294e7cdb422f8377ea70e269532194e6336880b39811966c79cd2f65bb3a1b09205223dd0933fd7f2603b"
        }
      ],
      "purl": "pkg:npm/es-module-lexer@0.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-0.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-module-lexer@0.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-0.7.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-scope",
      "version": "5.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d8dc706c5fe16742a97a960dd1c35ba3e14de97a0aec6687950860c7f848665e956b46c5e3945038ec212c8cbc9500dbb8289a7522c20671f608562aba2b796f"
        }
      ],
      "purl": "pkg:npm/eslint-scope@5.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-scope/-/eslint-scope-5.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-scope@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-scope/-/eslint-scope-5.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esrecurse",
      "version": "4.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2a67ca2f76fa1be457bcff0dd6faf74ead642ffa021609f63585c4b6a3fcfcbde929aa540381bc70555aa05dd2537db7083e17ca947f7df8a81e692d8bafd36a"
        }
      ],
      "purl": "pkg:npm/esrecurse@4.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esrecurse/-/esrecurse-4.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esrecurse@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esrecurse/-/esrecurse-4.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "estraverse",
      "version": "5.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0716cd186366d11c9162f51d1e9230bfd216cde33d5c295b3b1c28013b8574e13b644eb01cbf874394fc8683ccfb31ef98acf3b04aa1832d06ad0e57d7769f89"
        }
      ],
      "purl": "pkg:npm/estraverse@5.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/estraverse/-/estraverse-5.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/estraverse@5.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/estraverse/-/estraverse-5.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "estraverse",
      "version": "4.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dfd9e729f7d6cfcc4dd4153fd9cefd9fd9c1f470f3a349e2614ab1eb1caa527ca8027432c96a4e4dd6447a209c87c041bb9d79b78c29f599a055f5619fd101a7"
        }
      ],
      "purl": "pkg:npm/estraverse@4.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/estraverse/-/estraverse-4.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/estraverse@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/estraverse/-/estraverse-4.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "events",
      "version": "3.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "990c3ed9f9106c02f343b574318d08a9d9d734e793b4fe2bd2537dcfb0006b009782a79aedb0e28b6d0062b201ac577f1f1d0cd8e733e92d75d4268591471bd1"
        }
      ],
      "purl": "pkg:npm/events@3.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/events/-/events-3.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/events@3.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/events/-/events-3.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-to-regexp",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9645f51c95f0c8c729af0ff961465cdacec3ae90221c1db5fd5f84d6b1d4ad5368924bc1e9ba8ccd3d157d5ebff3a64d69bb75935e18388693ee70ef397dc88b"
        }
      ],
      "purl": "pkg:npm/glob-to-regexp@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-to-regexp/-/glob-to-regexp-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-to-regexp@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-to-regexp/-/glob-to-regexp-0.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-parse-better-errors",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9abab264a7d7e4484bee1bea715e961b5c988e78deb980f30e185c00052babc3e8f3934140124ff990d44fbe6a650f7c22452806a76413192e90e53b4ecdb0af"
        }
      ],
      "purl": "pkg:npm/json-parse-better-errors@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-parse-better-errors/-/json-parse-better-errors-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-parse-better-errors@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-parse-better-errors/-/json-parse-better-errors-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "loader-runner",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f76fa1bafc4cbd894ccccb748883ae91cc18045a64609769976c6c67b2eb95ac8eec4f123aff8925410ad7b07f74920700e2cc7e1d9d659fd8d7c5a0986b5837"
        }
      ],
      "purl": "pkg:npm/loader-runner@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/loader-runner/-/loader-runner-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/loader-runner@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/loader-runner/-/loader-runner-4.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-types",
      "version": "2.1.31",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5c66673739b742f80ac5af1da73ca11531e6a4fde5e5836eb269ded3b554397c68bbd0aa52a61afc7072d76e11aad561fceda91026acfcc39cb038298a53ce3e"
        }
      ],
      "purl": "pkg:npm/mime-types@2.1.31",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.31.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-types@2.1.31",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.31.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-db",
      "version": "1.48.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "14cdd0c3157e4e7658436691aa194a04c1f1935d254db32dddb064300a79e1d76b35e5527dc41838e2ae1aecb70ddae6dfc234e087fcdf87ce512ab5cb3b2525"
        }
      ],
      "purl": "pkg:npm/mime-db@1.48.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime-db/-/mime-db-1.48.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-db@1.48.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-db/-/mime-db-1.48.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "neo-async",
      "version": "2.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "61ddd4112e665824aa47ea8d4fddd2dd4a18524a8067d94b83c6bb83dae29ac5a66062bc7154e8038fec17746bb21772577b0018c5d5526a4c60ec3e74ba4ebb"
        }
      ],
      "purl": "pkg:npm/neo-async@2.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/neo-async/-/neo-async-2.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/neo-async@2.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/neo-async/-/neo-async-2.6.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "schema-utils",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b5311a798932221119f6e5a00230dead6a2fdd3f4c817f1d861cb6af420679e5f85bc9e0b46975fbe754bdefd152acee68049287bb21c020c98c4ced871922f3"
        }
      ],
      "purl": "pkg:npm/schema-utils@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/schema-utils/-/schema-utils-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/schema-utils@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/schema-utils/-/schema-utils-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ajv",
      "version": "6.12.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8f77d52e0bd3a39dbb6a7c98c893864d825b1bebe79d062f1349b99a691cd532be9f1029a6408b3082f4699e1d6e55423681928619be933138654ca4068320e2"
        }
      ],
      "purl": "pkg:npm/ajv@6.12.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ajv@6.12.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-deep-equal",
      "version": "3.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f7a90f68432f63d808417bf1fd542f75c0b98a042094fe00ce9ca340606e61b303bb04b2a3d3d1dce4760dcfd70623efb19690c22200da8ad56cd3701347ce1"
        }
      ],
      "purl": "pkg:npm/fast-deep-equal@3.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-deep-equal@3.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-json-stable-stringify",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "96177fc05f8b93df076684c2b6556b687b5f8795d88a32236a55dc93bb1a52db9a9d20f22ccc671e149710326a1f10fb9ac47c0f4b829aa964c23095f31bf01f"
        }
      ],
      "purl": "pkg:npm/fast-json-stable-stringify@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-json-stable-stringify/-/fast-json-stable-stringify-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-json-stable-stringify@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-json-stable-stringify/-/fast-json-stable-stringify-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-schema-traverse",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5b6c21f9742614e53f0b704861ba1ec727cf075ee5b7aac237634cce64529f6441dca5688753f271ce4eb6f41aec69bfe63221d0b62f7030ffbce3944f7b756"
        }
      ],
      "purl": "pkg:npm/json-schema-traverse@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-schema-traverse@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uri-js",
      "version": "4.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eeb294cb2df7435c9cf7ca50d430262edc17d74f45ed321f5a55b561da3c5a5d628b549e1e279e8741c77cf78bd9f3172bacf4b3c79c2acf5fac2b8b26f9dd06"
        }
      ],
      "purl": "pkg:npm/uri-js@4.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uri-js@4.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "punycode",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5d1b118dd7fe8f99a5fb2ffa18a1cf65bac5ffca766206b424fb5da93218d977b9a2124f0fdb1a0c924b3efa7df8d481a6b56f7af7576726e78f672ff0e11dd0"
        }
      ],
      "purl": "pkg:npm/punycode@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/punycode/-/punycode-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/punycode@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/punycode/-/punycode-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ajv-keywords",
      "version": "3.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e69e964cdd03753195424e958dc123bb5f4881a1ee75a95c7da6c3ef284319e03a6dc42798bf82a6f78b26aff786f7f07756a87fa2f7f3a3ae824c7a45fc8c21"
        }
      ],
      "purl": "pkg:npm/ajv-keywords@3.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ajv-keywords/-/ajv-keywords-3.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ajv-keywords@3.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ajv-keywords/-/ajv-keywords-3.5.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "terser-webpack-plugin",
      "version": "5.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0b65a4170b2d1c3855126b26942c6b5d4b559254be22bd40eedc2b633ac3ad040e20c39a54063291aa28fc0ab52b441190ca18da186f0d0635726e239c8305c0"
        }
      ],
      "purl": "pkg:npm/terser-webpack-plugin@5.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/terser-webpack-plugin/-/terser-webpack-plugin-5.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/terser-webpack-plugin@5.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/terser-webpack-plugin/-/terser-webpack-plugin-5.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest-worker",
      "version": "27.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aaea71723fdd46e037c473cc51de3482bd84680bab15b930cce87bc1f3da784f6277b8728d4451428a8d7c789f1cadd78c953a60925440a20b1949f018f10e08"
        }
      ],
      "purl": "pkg:npm/jest-worker@27.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-worker/-/jest-worker-27.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-worker@27.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-worker/-/jest-worker-27.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "@types",
      "name": "node",
      "version": "16.3.0",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3b274c0a8706306ab0ff506759b86d2be02dc325933a282dad09517b9ece4264cd708dc72a5548e451a587e738992a889cc3cbca716b4e56237da8cfbbd3bf79"
        }
      ],
      "purl": "pkg:npm/%40types/node@16.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/node/-/node-16.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/node@16.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/node/-/node-16.3.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/node"
        },
        {
          "name": "SrcFile",
          "value": "example/rollup/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/rollup/package-lock.json"
              }
            ],
            "concludedValue": "example/rollup/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "merge-stream",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "69bbffa8e72e3df9375113df0f39995352ca9aec3c913fb49c81ef2ab2a016bc227e897f76859c740e19aac590f0436b14a91debb31fa68fcba2f6c852c6eddf"
        }
      ],
      "purl": "pkg:npm/merge-stream@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/merge-stream/-/merge-stream-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/merge-stream@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/merge-stream/-/merge-stream-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "8.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3295043763a876d533c6f29097bd9c505ed14391221ec1af4ac546d226bd73945b5862f6088e02ec4a4f4bc513048a659e5cd988db95e7ac3e16e371cb7b72d9"
        }
      ],
      "purl": "pkg:npm/supports-color@8.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-8.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@8.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-8.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-flag",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1329094ff4352a34d672da698080207d23b4b4a56e6548e180caf5ee4a93ba6325e807efdc421295e53ba99533a170c54c01d30c2e0d3a81bf67153712f94c3d"
        }
      ],
      "purl": "pkg:npm/has-flag@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-flag@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-limit",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4d839a9ccdf01b0346b193767154d83c0af0e39e319d78f9aa6585d5b12801ce3e714fe897b19587ba1d7af8e9d4534776e1dcdca64c70576ec54e5773ab8945"
        }
      ],
      "purl": "pkg:npm/p-limit@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-limit/-/p-limit-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-limit@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-limit/-/p-limit-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yocto-queue",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ad592cbec9cd09d27fa2119ceb180fc3237c7a1782c6c88b33c9b1b84fedfe6395a897b03ee3b59a22e94c74224604ca08b7b12f831e00555a82db3b1e6359d9"
        }
      ],
      "purl": "pkg:npm/yocto-queue@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yocto-queue/-/yocto-queue-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yocto-queue@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yocto-queue/-/yocto-queue-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serialize-javascript",
      "version": "6.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "42bdd3a2cbe0b85b7c78f5aab2f45facac905c8896fa719b629cbc5cadb83501c4f3771ac56b7e988ca64d3d7d0c615b35634b7c4c2cae44a637ae2555607d6a"
        }
      ],
      "purl": "pkg:npm/serialize-javascript@6.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-6.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serialize-javascript@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-6.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "randombytes",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bd897788e5fee022945aec468bd5248627ba7eca97a92f4513665a89ce2d3450f637641069738c15bb8a2b84260c70b424ee81d59a78d49d0ba53d2847af1a99"
        }
      ],
      "purl": "pkg:npm/randombytes@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/randombytes/-/randombytes-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/randombytes@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/randombytes/-/randombytes-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "52381aa6e99695b3219018334fb624739617513e3a17488abbc4865ead1b7303f9773fe1d0f963e9e9c9aa3cf565bab697959aa989eb55bc16396332177178ee"
        }
      ],
      "purl": "pkg:npm/source-map@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "terser",
      "version": "5.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6f77be77925b1c07bf2528f0b02dd99f9e70b0120cec0b072e32b14f7d6418295d81ba4578f685a3e3e275db4eeaec11656470eec3d798037c7535bad719a74a"
        }
      ],
      "purl": "pkg:npm/terser@5.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/terser/-/terser-5.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/terser@5.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/terser/-/terser-5.7.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/example/webpack/node_modules/.bin/terser"
        },
        {
          "name": "cdx:npm:bin",
          "value": "terser"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "2.20.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1a956498cf2f176bd05248f62ef6660f7e49c5e24e2c2c09f5c524ba0ca4da7ba16efdfe989be92d862dfb4f9448cc44fa88fe7b2fe52449e1670ef9c7f38c71"
        }
      ],
      "purl": "pkg:npm/commander@2.20.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.20.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.7.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0a40a3ea088ddd2fa7f6aad88814d7e60cacb6510d9d15b98d978d2c7a5ee9ab9ef92ac7706e55630ba3856f6ce1d637d66106b31043ac747aa08ebd7d35ec69"
        }
      ],
      "purl": "pkg:npm/source-map@0.7.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.7.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.7.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map-support",
      "version": "0.5.19",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5a89e6ef3382209cc1190741fad86c3daaf4918b8223362fc59c2505af3bca2fcc763bfb4e2a7673255b2e3e68d1c14f37811592e4f06f71830f2531d831a71b"
        }
      ],
      "purl": "pkg:npm/source-map-support@0.5.19",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.5.19.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map-support@0.5.19",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.5.19.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-from",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3107171146c22ad128edb86a12ceb9eb41f27785daa2f6653bf93d57786355417fcf05bb28155d48ae2022dfdbcf04bd31b479aa86fe1798eeb19b1bd1840ad8"
        }
      ],
      "purl": "pkg:npm/buffer-from@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer-from@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "watchpack",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ba9e18027fd71e06472311415427653225838fa59a2caa7055e190936239b61758c45fca985d1a6b3e937c967f85f97587f5e5703afb935287ed38436a0a4568"
        }
      ],
      "purl": "pkg:npm/watchpack@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/watchpack/-/watchpack-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/watchpack@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/watchpack/-/watchpack-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webpack-sources",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5b239db704af38c2f591b82d5db4c39c45b48e427b859aff6c3072230b3385677fe175f50375cc92b6c532cb87e3efcc7cb959094ce501d838afb8da18a10881"
        }
      ],
      "purl": "pkg:npm/webpack-sources@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webpack-sources/-/webpack-sources-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webpack-sources@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webpack-sources/-/webpack-sources-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-list-map",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aa743b81533118dc6c88be2512e2707bf4e8f149caedf02799b184107f11a4ba2eb8a6de126d2585b415148acd4ae07e1bbb55ac0955b198044d3e679637fe23"
        }
      ],
      "purl": "pkg:npm/source-list-map@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-list-map/-/source-list-map-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-list-map@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-list-map/-/source-list-map-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webpack-cli",
      "version": "4.7.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "984a0b9a798e21940d89197479b9e3cd0ef81e4d22292e52884127a6addd45ece8c91df23da7906423027be75be39db8a63d4f7798216578d3e3528bcc88522f"
        }
      ],
      "purl": "pkg:npm/webpack-cli@4.7.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webpack-cli/-/webpack-cli-4.7.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webpack-cli@4.7.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webpack-cli/-/webpack-cli-4.7.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/example/webpack/node_modules/.bin/webpack-cli"
        },
        {
          "name": "cdx:npm:bin",
          "value": "webpack-cli"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@discoveryjs",
      "name": "json-ext",
      "version": "0.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "171b7e01f5e08cca229f699a3c86331599d08c05e300bd0f1ec70ce69453b5ab45a81faf67100cf6d2e9d8ea6d9eec3740e402e348d335e19814e32fc9feeff6"
        }
      ],
      "purl": "pkg:npm/%40discoveryjs/json-ext@0.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@discoveryjs/json-ext/-/json-ext-0.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@discoveryjs/json-ext@0.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@discoveryjs/json-ext/-/json-ext-0.5.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webpack-cli",
      "name": "configtest",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "72cdd72f2f9473188fe9b8f403abbb30b2eec1d5c9d5cdc3b5cd1190a83ec2223583f4e2d689bcfbfda173603607ad0d6c13406cc83204c1efcb29969bf8f8c1"
        }
      ],
      "purl": "pkg:npm/%40webpack-cli/configtest@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webpack-cli/configtest/-/configtest-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webpack-cli/configtest@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webpack-cli/configtest/-/configtest-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webpack-cli",
      "name": "info",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "012895077b7d2ce287b390f2554731a6b6815c338ab9b62efe2847854fadd543e9c6c8af83a39dd84daa53880909e91f11d773441cc787303f01ccb0fe694aff"
        }
      ],
      "purl": "pkg:npm/%40webpack-cli/info@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webpack-cli/info/-/info-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webpack-cli/info@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webpack-cli/info/-/info-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "envinfo",
      "version": "7.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fe8f815c7981ee871b1c402ce85d849c6d288326d555476446e9d34f6825654f5701a1a686ab24aef2b0a97b837cd8c43b42d929675e8c41299eaf1a334b4e6b"
        }
      ],
      "purl": "pkg:npm/envinfo@7.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/envinfo/-/envinfo-7.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/envinfo@7.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/envinfo/-/envinfo-7.8.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/example/webpack/node_modules/.bin/envinfo"
        },
        {
          "name": "cdx:npm:bin",
          "value": "envinfo"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webpack-cli",
      "name": "serve",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e2f49552238f24b9abe394bcacc1b2ed60efa56c5f1717cffd0c7f73164509fbe8ca94d8a4f3cbd57f1521931ed164c0f89afb6e5531c1448464d923a0c4e04b"
        }
      ],
      "purl": "pkg:npm/%40webpack-cli/serve@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webpack-cli/serve/-/serve-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webpack-cli/serve@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webpack-cli/serve/-/serve-1.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "7.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "42b59707e6504953e6216221b443bd1fe8301da3066221790a1be827e2bd6461c6fec56c6baca27ac003d460bfc78eac113d345e5c28d6ee3d455555cef71293"
        }
      ],
      "purl": "pkg:npm/commander@7.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-7.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@7.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-7.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "execa",
      "version": "5.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f2e4a9659a1c01944100f20420d263dcba3d1f21a2b6595ccdcdbb121e586288e3305327f321cc0cc6941c4d89a9fab4e43ff0b9cc08e091944725edd6f721ca"
        }
      ],
      "purl": "pkg:npm/execa@5.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/execa/-/execa-5.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/execa@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/execa/-/execa-5.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cross-spawn",
      "version": "7.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8910cf24a50f544343edd1cf3bcae46ce9cfa720f281c0c5b568e9796342832f163f6ad77315cbf13b2445e425e8eac1d86efe509ada82cd6ad7916e75cec6eb"
        }
      ],
      "purl": "pkg:npm/cross-spawn@7.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cross-spawn@7.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-key",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a2399e374a9dfb2d23b3312da18e3caf43deab97703049089423aee90e5fe3595f92cc17b8ab58ae18284e92e7c887079b6e1486ac7ee53aa6d889d2c0b844e9"
        }
      ],
      "purl": "pkg:npm/path-key@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-key@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shebang-command",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "907c6bdb366962d766acdd6a0e3aeb5ff675ad1d641bc0f1fa09292b51b87979af5ecc26704d614d6056614ce5ada630d7fc99a7a62e0d8efb62dbdb3747660c"
        }
      ],
      "purl": "pkg:npm/shebang-command@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shebang-command@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shebang-regex",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "efef9d161b5cc77df9dee05aabc0c347836ec417ad0730bb6503a19934089c711de9b4ab5dd884cb30af1b4ed9e3851874b4a1594c97b7933fca1cfc7a471bd4"
        }
      ],
      "purl": "pkg:npm/shebang-regex@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shebang-regex@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "04b2374e5d535b73ef97bd25df2ab763ae22f9ac29c17aac181616924a8cb676d782b303fb28fbae15b492e103c7325a6171a3116e6881aa4a34c10a34c8e26c"
        }
      ],
      "purl": "pkg:npm/which@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which/-/which-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which/-/which-2.0.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/example/webpack/node_modules/.bin/node-which"
        },
        {
          "name": "cdx:npm:bin",
          "value": "node-which"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isexe",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e8fbf374dc556ff8947a10dcb0572d633f2cfa10"
        }
      ],
      "purl": "pkg:npm/isexe@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isexe@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-stream",
      "version": "6.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b6ce968beda3de3423aa2ef4c3902537c0c59e44b00be32a9b113374400b076a976585775ff6f50937e03cb18934c7805b174f7d4f053b59acdcd51f68708f62"
        }
      ],
      "purl": "pkg:npm/get-stream@6.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-stream/-/get-stream-6.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-stream@6.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-stream/-/get-stream-6.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "human-signals",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "07814567aabf4f68e1864b2091b116dc706f5887c35bce6c9e44206b0b74ed2ec9e505d393a064355fb4c80799acce50a4c01d625a1c1a89639f4b09fd642417"
        }
      ],
      "purl": "pkg:npm/human-signals@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/human-signals/-/human-signals-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/human-signals@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/human-signals/-/human-signals-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-stream",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5c2a32f96954afb775f99f06812b979a9b94142f5f3a145782524cc7e7702ca4e42f8e028dde16d59e4ff81419a6bf9c47ddda18fe12fecec5b70e8d77f92213"
        }
      ],
      "purl": "pkg:npm/is-stream@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-stream/-/is-stream-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-stream@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-stream/-/is-stream-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "npm-run-path",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4b8f16cd95bbefbce1348ae7ee0c4e94848d02a8bd642fee4059d175b7881e1661080e94aa990e4fc4f51bb06f7dd80fe04afc805e2c51b692d22ed0bc87c25b"
        }
      ],
      "purl": "pkg:npm/npm-run-path@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/npm-run-path/-/npm-run-path-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/npm-run-path@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/npm-run-path/-/npm-run-path-4.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "onetime",
      "version": "5.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "91ba5a4921894d674063928f55e30e2974ab3edafc0bc0bbc287496dcb1de758d19e60fe199bbc63456853a0e6e59e2f5abd0883fd4d2ae59129fee3e5a6984a"
        }
      ],
      "purl": "pkg:npm/onetime@5.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/onetime/-/onetime-5.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/onetime@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/onetime/-/onetime-5.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mimic-fn",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3aa6ce939a0441e019f165d6c9d96ef47263cfd59574422f6a63027179aea946234e49c7fecaac5af850def830285451d47a63bcd04a437ee76c9818cc6a8672"
        }
      ],
      "purl": "pkg:npm/mimic-fn@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mimic-fn/-/mimic-fn-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mimic-fn@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mimic-fn/-/mimic-fn-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "signal-exit",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "554278f450bc5353b1c192f121b4d3ac3bcb9dfffa4c383165c2bcc3147ccecd77c69c7bc5b1bad2774196136b162d8432e151a1e0e824eef0b6148bab8d848c"
        }
      ],
      "purl": "pkg:npm/signal-exit@3.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/signal-exit@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-final-newline",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "06ba6f7cd004ddd72fabb965df156e9b38ca8d9439b48d6c11420aaf752892cd17525e394addc595ab55a9e7fda6b9388d10f3856e96660fb76e4f77cbaa4b8c"
        }
      ],
      "purl": "pkg:npm/strip-final-newline@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-final-newline/-/strip-final-newline-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-final-newline@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-final-newline/-/strip-final-newline-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fastest-levenshtein",
      "version": "1.0.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3a7d8df81a58275e71202f7be10355b9818c3a5115b78b3410e237c3032a3a62b57dd0d8f8537fce5b4f57cbe8b2ae1a77873f809d4a1d27149ffe80588822a3"
        }
      ],
      "purl": "pkg:npm/fastest-levenshtein@1.0.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fastest-levenshtein/-/fastest-levenshtein-1.0.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fastest-levenshtein@1.0.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fastest-levenshtein/-/fastest-levenshtein-1.0.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "import-local",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "be32f7fb0d28ba50156748411e7c5afcd9b94c0bab7fd60b4090e1a91672a9bf95286381e8b53cb7d1f536be42228d7abe1f577c94cea07c14d01ef54b9e7b80"
        }
      ],
      "purl": "pkg:npm/import-local@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/import-local/-/import-local-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/import-local@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/import-local/-/import-local-3.0.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/example/webpack/node_modules/.bin/import-local-fixture"
        },
        {
          "name": "cdx:npm:bin",
          "value": "import-local-fixture"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pkg-dir",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1d10f36da2a30be00e5955f1014ff1e7808e19e22ff5e6fee82903490a0d4ede17c96a0826fb8fb178b3c6efc5af6dc489e91bb59c2687521c206fe5fdad7419"
        }
      ],
      "purl": "pkg:npm/pkg-dir@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pkg-dir/-/pkg-dir-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pkg-dir@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pkg-dir/-/pkg-dir-4.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-up",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3e93b001d43f6255d0daf8fc6b787c222a43b98462df071e550406616c4d20d71cab8d009f0ec196c11708c6edd59b7e38b03a16af6cb88a48583d0eb2721297"
        }
      ],
      "purl": "pkg:npm/find-up@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-up/-/find-up-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-up@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-up/-/find-up-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "locate-path",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b7b870f6923e5afbb03495f0939cd51e9ca122ace0daa4e592524e7f4995c4649b7b7169d9589e65c76e3588da2c3a32ea9f6e1a94041961bced6a4c2a536af2"
        }
      ],
      "purl": "pkg:npm/locate-path@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/locate-path/-/locate-path-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/locate-path@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/locate-path/-/locate-path-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-locate",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "47bf5967fd30031286bb7a18325cfc8f2fe46e1b0dad2ed2299ecfc441c1809e7e1769ad156d9f2b670eb4187570762442c6f3155ec8f84a1129ee98b74a0aec"
        }
      ],
      "purl": "pkg:npm/p-locate@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-locate/-/p-locate-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-locate@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-locate/-/p-locate-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-limit",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ffff3c985592271f25c42cf07400014c92f6332581d76f9e218ecc0cbd92a8b98091e294f6ac51bd6b92c938e6dc5526a4110cb857dc90022a11a546503c5beb"
        }
      ],
      "purl": "pkg:npm/p-limit@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-limit/-/p-limit-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-limit@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-limit/-/p-limit-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-try",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4789cf0154c053407d0f7e7f1a4dee25fffb5d86d0732a2148a76f03121148d821165e1eef5855a069c1350cfd716697c4ed88d742930bede331dbefa0ac3a75"
        }
      ],
      "purl": "pkg:npm/p-try@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-try/-/p-try-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-try@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-try/-/p-try-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-exists",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6a4f50cb943b8d86f65b071ecb9169be0d8aa0073f64884b48b392066466ca03ec1b091556dd1f65ad2aaed333fa6ead2530077d943c167981e0c1b82d6cbbff"
        }
      ],
      "purl": "pkg:npm/path-exists@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-exists/-/path-exists-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-exists@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-exists/-/path-exists-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve-cwd",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3ab65a5f631bfab242a47ffa0a94aab7dc4556937efb1d355e737689ef60e8fe7fdf17a52c0917595003a5dcf52070ff2857c45f213a574534d4e43750edab12"
        }
      ],
      "purl": "pkg:npm/resolve-cwd@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve-cwd/-/resolve-cwd-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve-cwd@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve-cwd/-/resolve-cwd-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve-from",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a9883d28fdb8743e6a91af49e3b774695932d0df9be1f4d4f3d2cdf620e78c1e706a4b220b8f6bbcc0743eb509406a13987e745cf8aa3af0230df6a28c6c5867"
        }
      ],
      "purl": "pkg:npm/resolve-from@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve-from/-/resolve-from-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve-from@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve-from/-/resolve-from-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "interpret",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "26ed01cff70489ae79c43c145846bcfa8945a42890a32a639d0c92b1e2ad9a336b9e9b373fec5fa54986afdd13ef28e554998eb726d1bcf5e128c6c7afe7d69f"
        }
      ],
      "purl": "pkg:npm/interpret@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/interpret/-/interpret-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/interpret@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/interpret/-/interpret-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rechoir",
      "version": "0.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "003b03107d9bbdb8e5b5710ffa14c80267857a44c52b4576053c4c92893aa882f20091175740057e859c02ae327e597955d20c77f4555ead2547ec108b9654dd"
        }
      ],
      "purl": "pkg:npm/rechoir@0.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rechoir/-/rechoir-0.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rechoir@0.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rechoir/-/rechoir-0.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve",
      "version": "1.20.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c043413ede324b3838c9b1505b64d3d73310b9c3caf791d287f9ead82153655386baddbea50bd2b20b5d6b8776e98ad872bd3aef08db9b3386f1bc833c15fadc"
        }
      ],
      "purl": "pkg:npm/resolve@1.20.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve/-/resolve-1.20.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve@1.20.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve/-/resolve-1.20.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "example/rollup/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/rollup/package-lock.json"
              }
            ],
            "concludedValue": "example/rollup/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-core-module",
      "version": "2.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e80d9f91fab5adf790663c6b64919eae92c24c744d101892827bb4fa86de26910f651528a0782c8b3bf3bf46632703b3de25881dd26d55627fb663ebdc3db5fc"
        }
      ],
      "purl": "pkg:npm/is-core-module@2.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-core-module/-/is-core-module-2.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-core-module@2.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-core-module/-/is-core-module-2.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "example/rollup/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/rollup/package-lock.json"
              }
            ],
            "concludedValue": "example/rollup/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f676f3b4554e8e7a3ed1916246ade8636f33008c5a79fd528fa79b53a56215e091c764ad7f0716c546d7ffb220364964ded3d71a0e656d618cd61086c14b8cf"
        }
      ],
      "purl": "pkg:npm/has@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has/-/has-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has/-/has-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "example/rollup/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/rollup/package-lock.json"
              }
            ],
            "concludedValue": "example/rollup/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "function-bind",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c88a2f033317e3db05f18979f1f482589e6cbd22ee6a26cfc5740914b98139b4ee0abd0c7f52a23e8a4633d3621638980426df69ad8587a6eb790e803554c8d0"
        }
      ],
      "purl": "pkg:npm/function-bind@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/function-bind@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "example/rollup/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/rollup/package-lock.json"
              }
            ],
            "concludedValue": "example/rollup/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-parse",
      "version": "1.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2c32733d510410f47ecb8f33f7703411dd325dbf29001c865a8fe4e5861d620a58dbfd84b0eb24b09aeaee5387c6bcab54e9f57a31baa00a7c6a1bce2100fcb3"
        }
      ],
      "purl": "pkg:npm/path-parse@1.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-parse@1.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "example/rollup/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/rollup/package-lock.json"
              }
            ],
            "concludedValue": "example/rollup/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "v8-compile-cache",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "97c9421262dc2d8661e276ee9cd66f40225ce69bfbf910b06bcabf2dd531f2eee5b16bcf0ca9a9a1d24024dc24021242fff745638f0ab881268ed778455883ac"
        }
      ],
      "purl": "pkg:npm/v8-compile-cache@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/v8-compile-cache/-/v8-compile-cache-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/v8-compile-cache@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/v8-compile-cache/-/v8-compile-cache-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webpack-merge",
      "version": "5.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fd2688ef1634f37d57c0fea4ceec2129654a0cff6dd5063587ae650052db66a30f22e61c0fd4005b8bbd49321b53d91a25b3c107f81e53f80baf5c038ce850f9"
        }
      ],
      "purl": "pkg:npm/webpack-merge@5.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webpack-merge/-/webpack-merge-5.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webpack-merge@5.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webpack-merge/-/webpack-merge-5.8.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clone-deep",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9de1c1f71bb387fc24d1d207c1ec805efd9a3c6648564de92cc7befd137320d7f5edf7b4386f7a42ba24b580149bb48cd4f067cd369b68b6e8aaac43c8c53e49"
        }
      ],
      "purl": "pkg:npm/clone-deep@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clone-deep/-/clone-deep-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clone-deep@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clone-deep/-/clone-deep-4.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-plain-object",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8793e98179168ad737f0104c61ac1360c5891c564956706ab85139ef11698c1f29245885ea067e6d4f96c88ff2a9788547999d2ec81835a3def2e6a8e94bfd3a"
        }
      ],
      "purl": "pkg:npm/is-plain-object@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-plain-object/-/is-plain-object-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-plain-object@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-plain-object/-/is-plain-object-2.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isobject",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4e431e92b11a9731636aa1f9c8d1ccbcfdab78df"
        }
      ],
      "purl": "pkg:npm/isobject@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isobject/-/isobject-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isobject@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isobject/-/isobject-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "kind-of",
      "version": "6.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "75c4b5ba5fbdb66783f794fec76f3f7a12e077d98435adcbb2f0d3b739b7bf20443bb44fa6dbc00feb78e165576948d305172ba45785942f160abb94478e7a87"
        }
      ],
      "purl": "pkg:npm/kind-of@6.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/kind-of/-/kind-of-6.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kind-of@6.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/kind-of/-/kind-of-6.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shallow-clone",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ffa2aa5fe19551da8fb8f3ddd8bc430f1cd7e8201b8c97a100038a94da6aa94a40a8f33a1de2fc7fea376be26cc868e7da5bf4598f14b1381426353d3a4e7934"
        }
      ],
      "purl": "pkg:npm/shallow-clone@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shallow-clone/-/shallow-clone-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shallow-clone@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shallow-clone/-/shallow-clone-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wildcard",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "25c2aa0072cfc5c75bf4a338f5db9f1979f6c77b2c9df8db71a41d2e57d9b0bf6b1fdc200d08d4b43c5ba3c344d05e9216fc9d7aed558597bb859b87b01dbfa7"
        }
      ],
      "purl": "pkg:npm/wildcard@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wildcard/-/wildcard-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wildcard@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/webpack/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wildcard/-/wildcard-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/webpack/package-lock.json"
              }
            ],
            "concludedValue": "example/webpack/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@rollup",
      "name": "plugin-node-resolve",
      "version": "13.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e355f8d751c9de88a42038af4f938a7bd119eae77a0d7b9db5f36b19b0b89e789ac71d9eb225a390b3b382766c5aad4833c60878bdabcd118b64b0639619d9b5"
        }
      ],
      "purl": "pkg:npm/%40rollup/plugin-node-resolve@13.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@rollup/plugin-node-resolve/-/plugin-node-resolve-13.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@rollup/plugin-node-resolve@13.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/rollup/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@rollup/plugin-node-resolve/-/plugin-node-resolve-13.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/rollup/package-lock.json"
              }
            ],
            "concludedValue": "example/rollup/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rollup",
      "version": "2.53.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b2982b63bf13a21fa6d3ecda3a879a6b224abb316e5b2ea8d4f745201315c1172ec53d3108e5fd039ac287229efb6aee2f895e3ca594308992e26316d5002499"
        }
      ],
      "purl": "pkg:npm/rollup@2.53.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rollup/-/rollup-2.53.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rollup@2.53.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/rollup/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rollup/-/rollup-2.53.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/example/rollup/node_modules/.bin/rollup"
        },
        {
          "name": "cdx:npm:bin",
          "value": "rollup"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/rollup/package-lock.json"
              }
            ],
            "concludedValue": "example/rollup/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fsevents",
      "version": "2.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c62a8c411e3101e1d3b81f6e5a6f9f1517083a02813223813fe7978b24fb8ec8150aad5b915ca0b74d28012a3007b11db6938769a3e02adf35d8ff5a6fe0c328"
        }
      ],
      "purl": "pkg:npm/fsevents@2.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fsevents@2.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/rollup/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.2.tgz"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/rollup/package-lock.json"
              }
            ],
            "concludedValue": "example/rollup/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@rollup",
      "name": "pluginutils",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1a4b19ea9afa4e92231e6f21f65490f298bc044f557ae6cd4f438c277079b9927ca73ef734f8aa3ad0a883fc76fd0cccd4434284f2b130386242e447b2a73e96"
        }
      ],
      "purl": "pkg:npm/%40rollup/pluginutils@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@rollup/pluginutils/-/pluginutils-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@rollup/pluginutils@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/rollup/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@rollup/pluginutils/-/pluginutils-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/rollup/package-lock.json"
              }
            ],
            "concludedValue": "example/rollup/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "estree",
      "version": "0.0.39",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "118370a776d4fbdf1ca54e250166182fb673fb682bc961f5a9b7434e275577a864891eb07a4b1d6cc69dc9729734f12440585733e8553bd6728289875e9f8023"
        }
      ],
      "purl": "pkg:npm/%40types/estree@0.0.39",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/estree/-/estree-0.0.39.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/estree@0.0.39",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/rollup/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/estree/-/estree-0.0.39.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/estree"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/rollup/package-lock.json"
              }
            ],
            "concludedValue": "example/rollup/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "estree-walker",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d5f31717760fe29659568cc5f23fd92dfbe747c3522258ede7a5216d9e4f79e0e69861e982977042dec84e51af61a42e902bee05130b1222a2602fa878883872"
        }
      ],
      "purl": "pkg:npm/estree-walker@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/estree-walker/-/estree-walker-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/estree-walker@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/rollup/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/estree-walker/-/estree-walker-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/rollup/package-lock.json"
              }
            ],
            "concludedValue": "example/rollup/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "picomatch",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "958d50fcf889182db33afff3dfdd563930fe674d9b0a0b057efc685d77fa87b92ff68f969ac9b362aac0c18eb7b0d80ec44e3111dab45b25275df29e06b4af63"
        }
      ],
      "purl": "pkg:npm/picomatch@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/picomatch@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/rollup/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/rollup/package-lock.json"
              }
            ],
            "concludedValue": "example/rollup/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "resolve",
      "version": "1.17.1",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cb2ec7bb34218f47611a90fc44b5d26561242ec57d89bbf1be2e84889ddb92a2c03b5446a3459b916422c29465485ca64c9473d1dde4e4b337924c7c02b0db2f"
        }
      ],
      "purl": "pkg:npm/%40types/resolve@1.17.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/resolve/-/resolve-1.17.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/resolve@1.17.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/rollup/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/resolve/-/resolve-1.17.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/resolve"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/rollup/package-lock.json"
              }
            ],
            "concludedValue": "example/rollup/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "builtin-modules",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "946ccb29c8a82fdd02ef031cce9918d27fe80114f731b05af11f4e146135ac9c68548f3abb858019f124f168efd7478a4b24c7546912a376ef07294212d93b2c"
        }
      ],
      "purl": "pkg:npm/builtin-modules@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/builtin-modules/-/builtin-modules-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/builtin-modules@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/rollup/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/builtin-modules/-/builtin-modules-3.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/rollup/package-lock.json"
              }
            ],
            "concludedValue": "example/rollup/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deepmerge",
      "version": "4.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "149dd4808e20225f8f1d99b9de49ecb9216913e9c448cafb338bfd41c801ed2eb72a3ffa5aa322150269041633d4fb7eeba6d9a4fdd0ecbc9ed0ea3d30f28476"
        }
      ],
      "purl": "pkg:npm/deepmerge@4.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deepmerge/-/deepmerge-4.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deepmerge@4.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/rollup/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deepmerge/-/deepmerge-4.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/rollup/package-lock.json"
              }
            ],
            "concludedValue": "example/rollup/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-module",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3258fb69f78c14d5b815d664336b4cffb6441591"
        }
      ],
      "purl": "pkg:npm/is-module@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-module/-/is-module-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-module@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "example/rollup/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-module/-/is-module-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "example/rollup/package-lock.json"
              }
            ],
            "concludedValue": "example/rollup/package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/ws@8.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isomorphic-ws@5.0.0",
      "dependsOn": [
        "pkg:npm/ws@8.7.0"
      ]
    },
    {
      "ref": "pkg:npm/app@5.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/async-limiter@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/safe-buffer@5.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ultron@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ws@4.0.0",
      "dependsOn": [
        "pkg:npm/async-limiter@1.0.0",
        "pkg:npm/safe-buffer@5.1.1",
        "pkg:npm/ultron@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/@types/estree@0.0.50",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/json-schema@7.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/eslint@7.2.14",
      "dependsOn": [
        "pkg:npm/@types/estree@0.0.50",
        "pkg:npm/@types/json-schema@7.0.8"
      ]
    },
    {
      "ref": "pkg:npm/@types/eslint-scope@3.7.1",
      "dependsOn": [
        "pkg:npm/@types/eslint@7.2.14",
        "pkg:npm/@types/estree@0.0.50"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/floating-point-hex-parser@1.11.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@webassemblyjs/helper-api-error@1.11.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@xtuc/long@4.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@webassemblyjs/helper-numbers@1.11.1",
      "dependsOn": [
        "pkg:npm/@webassemblyjs/floating-point-hex-parser@1.11.1",
        "pkg:npm/@webassemblyjs/helper-api-error@1.11.1",
        "pkg:npm/@xtuc/long@4.2.2"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/helper-wasm-bytecode@1.11.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@webassemblyjs/ast@1.11.1",
      "dependsOn": [
        "pkg:npm/@webassemblyjs/helper-numbers@1.11.1",
        "pkg:npm/@webassemblyjs/helper-wasm-bytecode@1.11.1"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/helper-buffer@1.11.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@xtuc/ieee754@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@webassemblyjs/ieee754@1.11.1",
      "dependsOn": [
        "pkg:npm/@xtuc/ieee754@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/leb128@1.11.1",
      "dependsOn": [
        "pkg:npm/@xtuc/long@4.2.2"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/utf8@1.11.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@webassemblyjs/wasm-gen@1.11.1",
      "dependsOn": [
        "pkg:npm/@webassemblyjs/ast@1.11.1",
        "pkg:npm/@webassemblyjs/helper-wasm-bytecode@1.11.1",
        "pkg:npm/@webassemblyjs/ieee754@1.11.1",
        "pkg:npm/@webassemblyjs/leb128@1.11.1",
        "pkg:npm/@webassemblyjs/utf8@1.11.1"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/helper-wasm-section@1.11.1",
      "dependsOn": [
        "pkg:npm/@webassemblyjs/ast@1.11.1",
        "pkg:npm/@webassemblyjs/helper-buffer@1.11.1",
        "pkg:npm/@webassemblyjs/helper-wasm-bytecode@1.11.1",
        "pkg:npm/@webassemblyjs/wasm-gen@1.11.1"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/wasm-parser@1.11.1",
      "dependsOn": [
        "pkg:npm/@webassemblyjs/ast@1.11.1",
        "pkg:npm/@webassemblyjs/helper-api-error@1.11.1",
        "pkg:npm/@webassemblyjs/helper-wasm-bytecode@1.11.1",
        "pkg:npm/@webassemblyjs/ieee754@1.11.1",
        "pkg:npm/@webassemblyjs/leb128@1.11.1",
        "pkg:npm/@webassemblyjs/utf8@1.11.1"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/wasm-opt@1.11.1",
      "dependsOn": [
        "pkg:npm/@webassemblyjs/ast@1.11.1",
        "pkg:npm/@webassemblyjs/helper-buffer@1.11.1",
        "pkg:npm/@webassemblyjs/wasm-gen@1.11.1",
        "pkg:npm/@webassemblyjs/wasm-parser@1.11.1"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/wast-printer@1.11.1",
      "dependsOn": [
        "pkg:npm/@webassemblyjs/ast@1.11.1",
        "pkg:npm/@xtuc/long@4.2.2"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/wasm-edit@1.11.1",
      "dependsOn": [
        "pkg:npm/@webassemblyjs/ast@1.11.1",
        "pkg:npm/@webassemblyjs/helper-buffer@1.11.1",
        "pkg:npm/@webassemblyjs/helper-wasm-bytecode@1.11.1",
        "pkg:npm/@webassemblyjs/helper-wasm-section@1.11.1",
        "pkg:npm/@webassemblyjs/wasm-gen@1.11.1",
        "pkg:npm/@webassemblyjs/wasm-opt@1.11.1",
        "pkg:npm/@webassemblyjs/wasm-parser@1.11.1",
        "pkg:npm/@webassemblyjs/wast-printer@1.11.1"
      ]
    },
    {
      "ref": "pkg:npm/acorn@8.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/caniuse-lite@1.0.30001243",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/colorette@1.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/electron-to-chromium@1.3.771",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/escalade@3.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/node-releases@1.1.73",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/browserslist@4.16.6",
      "dependsOn": [
        "pkg:npm/caniuse-lite@1.0.30001243",
        "pkg:npm/colorette@1.2.2",
        "pkg:npm/electron-to-chromium@1.3.771",
        "pkg:npm/escalade@3.1.1",
        "pkg:npm/node-releases@1.1.73"
      ]
    },
    {
      "ref": "pkg:npm/chrome-trace-event@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/graceful-fs@4.2.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tapable@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/enhanced-resolve@5.8.2",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.6",
        "pkg:npm/tapable@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/es-module-lexer@0.7.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/estraverse@5.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esrecurse@4.3.0",
      "dependsOn": [
        "pkg:npm/estraverse@5.2.0"
      ]
    },
    {
      "ref": "pkg:npm/estraverse@4.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eslint-scope@5.1.1",
      "dependsOn": [
        "pkg:npm/esrecurse@4.3.0",
        "pkg:npm/estraverse@4.3.0"
      ]
    },
    {
      "ref": "pkg:npm/events@3.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob-to-regexp@0.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-parse-better-errors@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/loader-runner@4.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-db@1.48.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-types@2.1.31",
      "dependsOn": [
        "pkg:npm/mime-db@1.48.0"
      ]
    },
    {
      "ref": "pkg:npm/neo-async@2.6.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-deep-equal@3.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-json-stable-stringify@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-schema-traverse@0.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/punycode@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uri-js@4.4.1",
      "dependsOn": [
        "pkg:npm/punycode@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/ajv@6.12.6",
      "dependsOn": [
        "pkg:npm/fast-deep-equal@3.1.3",
        "pkg:npm/fast-json-stable-stringify@2.1.0",
        "pkg:npm/json-schema-traverse@0.4.1",
        "pkg:npm/uri-js@4.4.1"
      ]
    },
    {
      "ref": "pkg:npm/ajv-keywords@3.5.2",
      "dependsOn": [
        "pkg:npm/ajv@6.12.6"
      ]
    },
    {
      "ref": "pkg:npm/schema-utils@3.1.0",
      "dependsOn": [
        "pkg:npm/@types/json-schema@7.0.8",
        "pkg:npm/ajv-keywords@3.5.2",
        "pkg:npm/ajv@6.12.6"
      ]
    },
    {
      "ref": "pkg:npm/@types/node@16.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/merge-stream@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-flag@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/supports-color@8.1.1",
      "dependsOn": [
        "pkg:npm/has-flag@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/jest-worker@27.0.6",
      "dependsOn": [
        "pkg:npm/@types/node@16.3.0",
        "pkg:npm/merge-stream@2.0.0",
        "pkg:npm/supports-color@8.1.1"
      ]
    },
    {
      "ref": "pkg:npm/yocto-queue@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/p-limit@3.1.0",
      "dependsOn": [
        "pkg:npm/yocto-queue@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/randombytes@2.1.0",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.1.1"
      ]
    },
    {
      "ref": "pkg:npm/serialize-javascript@6.0.0",
      "dependsOn": [
        "pkg:npm/randombytes@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/source-map@0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/commander@2.20.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map@0.7.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffer-from@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map-support@0.5.19",
      "dependsOn": [
        "pkg:npm/buffer-from@1.1.1",
        "pkg:npm/source-map@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/terser@5.7.1",
      "dependsOn": [
        "pkg:npm/commander@2.20.3",
        "pkg:npm/source-map-support@0.5.19",
        "pkg:npm/source-map@0.7.3"
      ]
    },
    {
      "ref": "pkg:npm/terser-webpack-plugin@5.1.4",
      "dependsOn": [
        "pkg:npm/jest-worker@27.0.6",
        "pkg:npm/p-limit@3.1.0",
        "pkg:npm/schema-utils@3.1.0",
        "pkg:npm/serialize-javascript@6.0.0",
        "pkg:npm/source-map@0.6.1",
        "pkg:npm/terser@5.7.1",
        "pkg:npm/webpack@5.44.0"
      ]
    },
    {
      "ref": "pkg:npm/watchpack@2.2.0",
      "dependsOn": [
        "pkg:npm/glob-to-regexp@0.4.1",
        "pkg:npm/graceful-fs@4.2.6"
      ]
    },
    {
      "ref": "pkg:npm/source-list-map@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/webpack-sources@2.3.0",
      "dependsOn": [
        "pkg:npm/source-list-map@2.0.1",
        "pkg:npm/source-map@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/webpack@5.44.0",
      "dependsOn": [
        "pkg:npm/@types/eslint-scope@3.7.1",
        "pkg:npm/@types/estree@0.0.50",
        "pkg:npm/@webassemblyjs/ast@1.11.1",
        "pkg:npm/@webassemblyjs/wasm-edit@1.11.1",
        "pkg:npm/@webassemblyjs/wasm-parser@1.11.1",
        "pkg:npm/acorn@8.4.1",
        "pkg:npm/browserslist@4.16.6",
        "pkg:npm/chrome-trace-event@1.0.3",
        "pkg:npm/enhanced-resolve@5.8.2",
        "pkg:npm/es-module-lexer@0.7.1",
        "pkg:npm/eslint-scope@5.1.1",
        "pkg:npm/events@3.3.0",
        "pkg:npm/glob-to-regexp@0.4.1",
        "pkg:npm/graceful-fs@4.2.6",
        "pkg:npm/json-parse-better-errors@1.0.2",
        "pkg:npm/loader-runner@4.2.0",
        "pkg:npm/mime-types@2.1.31",
        "pkg:npm/neo-async@2.6.2",
        "pkg:npm/schema-utils@3.1.0",
        "pkg:npm/tapable@2.2.0",
        "pkg:npm/terser-webpack-plugin@5.1.4",
        "pkg:npm/watchpack@2.2.0",
        "pkg:npm/webpack-sources@2.3.0"
      ]
    },
    {
      "ref": "pkg:npm/@discoveryjs/json-ext@0.5.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@webpack-cli/configtest@1.0.4",
      "dependsOn": [
        "pkg:npm/webpack-cli@4.7.2",
        "pkg:npm/webpack@5.44.0"
      ]
    },
    {
      "ref": "pkg:npm/envinfo@7.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@webpack-cli/info@1.3.0",
      "dependsOn": [
        "pkg:npm/envinfo@7.8.1",
        "pkg:npm/webpack-cli@4.7.2"
      ]
    },
    {
      "ref": "pkg:npm/@webpack-cli/serve@1.5.1",
      "dependsOn": [
        "pkg:npm/webpack-cli@4.7.2"
      ]
    },
    {
      "ref": "pkg:npm/commander@7.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-key@3.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shebang-regex@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shebang-command@2.0.0",
      "dependsOn": [
        "pkg:npm/shebang-regex@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/isexe@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/which@2.0.2",
      "dependsOn": [
        "pkg:npm/isexe@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/cross-spawn@7.0.3",
      "dependsOn": [
        "pkg:npm/path-key@3.1.1",
        "pkg:npm/shebang-command@2.0.0",
        "pkg:npm/which@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/get-stream@6.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/human-signals@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-stream@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/npm-run-path@4.0.1",
      "dependsOn": [
        "pkg:npm/path-key@3.1.1"
      ]
    },
    {
      "ref": "pkg:npm/mimic-fn@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/onetime@5.1.2",
      "dependsOn": [
        "pkg:npm/mimic-fn@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/signal-exit@3.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-final-newline@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/execa@5.1.1",
      "dependsOn": [
        "pkg:npm/cross-spawn@7.0.3",
        "pkg:npm/get-stream@6.0.1",
        "pkg:npm/human-signals@2.1.0",
        "pkg:npm/is-stream@2.0.0",
        "pkg:npm/merge-stream@2.0.0",
        "pkg:npm/npm-run-path@4.0.1",
        "pkg:npm/onetime@5.1.2",
        "pkg:npm/signal-exit@3.0.3",
        "pkg:npm/strip-final-newline@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/fastest-levenshtein@1.0.12",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/p-try@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/p-limit@2.3.0",
      "dependsOn": [
        "pkg:npm/p-try@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/p-locate@4.1.0",
      "dependsOn": [
        "pkg:npm/p-limit@2.3.0"
      ]
    },
    {
      "ref": "pkg:npm/locate-path@5.0.0",
      "dependsOn": [
        "pkg:npm/p-locate@4.1.0"
      ]
    },
    {
      "ref": "pkg:npm/path-exists@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/find-up@4.1.0",
      "dependsOn": [
        "pkg:npm/locate-path@5.0.0",
        "pkg:npm/path-exists@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/pkg-dir@4.2.0",
      "dependsOn": [
        "pkg:npm/find-up@4.1.0"
      ]
    },
    {
      "ref": "pkg:npm/resolve-from@5.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/resolve-cwd@3.0.0",
      "dependsOn": [
        "pkg:npm/resolve-from@5.0.0"
      ]
    },
    {
      "ref": "pkg:npm/import-local@3.0.2",
      "dependsOn": [
        "pkg:npm/pkg-dir@4.2.0",
        "pkg:npm/resolve-cwd@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/interpret@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/function-bind@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has@1.0.3",
      "dependsOn": [
        "pkg:npm/function-bind@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/is-core-module@2.4.0",
      "dependsOn": [
        "pkg:npm/has@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/path-parse@1.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/resolve@1.20.0",
      "dependsOn": [
        "pkg:npm/is-core-module@2.4.0",
        "pkg:npm/path-parse@1.0.7"
      ]
    },
    {
      "ref": "pkg:npm/rechoir@0.7.0",
      "dependsOn": [
        "pkg:npm/resolve@1.20.0"
      ]
    },
    {
      "ref": "pkg:npm/v8-compile-cache@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isobject@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-plain-object@2.0.4",
      "dependsOn": [
        "pkg:npm/isobject@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/kind-of@6.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shallow-clone@3.0.1",
      "dependsOn": [
        "pkg:npm/kind-of@6.0.3"
      ]
    },
    {
      "ref": "pkg:npm/clone-deep@4.0.1",
      "dependsOn": [
        "pkg:npm/is-plain-object@2.0.4",
        "pkg:npm/kind-of@6.0.3",
        "pkg:npm/shallow-clone@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/wildcard@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/webpack-merge@5.8.0",
      "dependsOn": [
        "pkg:npm/clone-deep@4.0.1",
        "pkg:npm/wildcard@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/webpack-cli@4.7.2",
      "dependsOn": [
        "pkg:npm/@discoveryjs/json-ext@0.5.3",
        "pkg:npm/@webpack-cli/configtest@1.0.4",
        "pkg:npm/@webpack-cli/info@1.3.0",
        "pkg:npm/@webpack-cli/serve@1.5.1",
        "pkg:npm/colorette@1.2.2",
        "pkg:npm/commander@7.2.0",
        "pkg:npm/execa@5.1.1",
        "pkg:npm/fastest-levenshtein@1.0.12",
        "pkg:npm/import-local@3.0.2",
        "pkg:npm/interpret@2.2.0",
        "pkg:npm/rechoir@0.7.0",
        "pkg:npm/v8-compile-cache@2.3.0",
        "pkg:npm/webpack-merge@5.8.0",
        "pkg:npm/webpack@5.44.0"
      ]
    },
    {
      "ref": "pkg:npm/isomorphic-ws-webpack@1.0.0",
      "dependsOn": [
        "pkg:npm/app@5.0.0",
        "pkg:npm/webpack-cli@4.7.2",
        "pkg:npm/webpack@5.44.0",
        "pkg:npm/ws@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/fsevents@2.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rollup@2.53.0",
      "dependsOn": [
        "pkg:npm/fsevents@2.3.2"
      ]
    },
    {
      "ref": "pkg:npm/@types/estree@0.0.39",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/estree-walker@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/picomatch@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@rollup/pluginutils@3.1.0",
      "dependsOn": [
        "pkg:npm/@types/estree@0.0.39",
        "pkg:npm/estree-walker@1.0.1",
        "pkg:npm/picomatch@2.3.0",
        "pkg:npm/rollup@2.53.0"
      ]
    },
    {
      "ref": "pkg:npm/@types/resolve@1.17.1",
      "dependsOn": [
        "pkg:npm/@types/node@16.3.0"
      ]
    },
    {
      "ref": "pkg:npm/builtin-modules@3.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/deepmerge@4.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-module@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@rollup/plugin-node-resolve@13.0.0",
      "dependsOn": [
        "pkg:npm/@rollup/pluginutils@3.1.0",
        "pkg:npm/@types/resolve@1.17.1",
        "pkg:npm/builtin-modules@3.2.0",
        "pkg:npm/deepmerge@4.2.2",
        "pkg:npm/is-module@1.0.0",
        "pkg:npm/resolve@1.20.0",
        "pkg:npm/rollup@2.53.0"
      ]
    },
    {
      "ref": "pkg:npm/isomorphic-ws-rollup@1.0.0",
      "dependsOn": [
        "pkg:npm/@rollup/plugin-node-resolve@13.0.0",
        "pkg:npm/app@5.0.0",
        "pkg:npm/rollup@2.53.0",
        "pkg:npm/ws@4.0.0"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/isomorphic-ws@5.0.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.2",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.2",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.2",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-08-04T08:10:49Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Tuesday, August 4, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'isomorphic-ws' with version '5.0.0'. The application also has 2 child modules/components. The package type in this SBOM is npm with 6 purl namespaces described under components. The components were identified from 3 source files."
    }
  ]
}