{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:03be08e3-39b1-4836-915a-d6b26d086570",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-15T04:54:59Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.6",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.6",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.6",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "azure-devops-node-api",
      "group": "",
      "version": "12.5.0",
      "description": "Node client for Azure DevOps and TFS REST APIs",
      "purl": "pkg:npm/azure-devops-node-api@12.5.0",
      "bom-ref": "pkg:npm/azure-devops-node-api@12.5.0",
      "author": "Microsoft Corporation",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "build, samples, test, units"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "components": [
        {
          "authors": [
            {
              "name": "Microsoft Corporation"
            }
          ],
          "group": "",
          "name": "azure-devops-node-api-tests",
          "version": "1.0.0",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "url": "https://opensource.org/licenses/MIT",
                "properties": [
                  {
                    "name": "cdx:license:category",
                    "value": "Permissive"
                  },
                  {
                    "name": "cdx:license:foss",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:osiApproved",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:fsfLibre",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:deprecated",
                    "value": "false"
                  }
                ]
              }
            }
          ],
          "purl": "pkg:npm/azure-devops-node-api-tests@1.0.0",
          "type": "application",
          "bom-ref": "pkg:npm/azure-devops-node-api-tests@1.0.0",
          "properties": [
            {
              "name": "cdx:license:category",
              "value": "Permissive"
            }
          ]
        },
        {
          "group": "",
          "name": "vsts-node-api-samples",
          "version": "1.0.0",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "url": "https://opensource.org/licenses/MIT",
                "properties": [
                  {
                    "name": "cdx:license:category",
                    "value": "Permissive"
                  },
                  {
                    "name": "cdx:license:foss",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:osiApproved",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:fsfLibre",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:deprecated",
                    "value": "false"
                  }
                ]
              }
            }
          ],
          "purl": "pkg:npm/vsts-node-api-samples@1.0.0",
          "type": "application",
          "bom-ref": "pkg:npm/vsts-node-api-samples@1.0.0",
          "properties": [
            {
              "name": "cdx:license:category",
              "value": "Permissive"
            }
          ]
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/Microsoft/azure-devops-node-api"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@types"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "_build/package-lock.json\\npackage-lock.json\\nsamples/package-lock.json\\ntest/package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "tunnel",
      "version": "0.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d61fcb9eaf726a3298d8f11b05a74f5e3dd5c6c0c3bbce383a7680a39d9456623322fc30b413c8b8dbe48eecc19535a97c9c946c6ddecf42920626d0923e288e"
        }
      ],
      "purl": "pkg:npm/tunnel@0.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tunnel/-/tunnel-0.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tunnel@0.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tunnel/-/tunnel-0.0.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typed-rest-client",
      "version": "1.8.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3327ca298ce4dc8ebf410a7a7b54f9d29cb8aa0f9cfbd073384976ac19902294adc0d528a90ef7027f9391fcbd62e57b3bea369a95552697be7c7fff3ce6646e"
        }
      ],
      "purl": "pkg:npm/typed-rest-client@1.8.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typed-rest-client/-/typed-rest-client-1.8.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typed-rest-client@1.8.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typed-rest-client/-/typed-rest-client-1.8.4.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "typed-rest-client/RestClient,typed-rest-client/HttpClient,typed-rest-client/Handlers"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "_build/ClientApiBases.js",
            "line": 7
          },
          {
            "location": "_build/WebApi.js",
            "line": 45
          },
          {
            "location": "api/AlertApi.ts",
            "line": 13
          },
          {
            "location": "api/BuildApi.ts",
            "line": 13
          },
          {
            "location": "api/CoreApi.ts",
            "line": 13
          },
          {
            "location": "api/DashboardApi.ts",
            "line": 13
          },
          {
            "location": "api/ExtensionManagementApi.ts",
            "line": 13
          },
          {
            "location": "api/FeatureManagementApi.ts",
            "line": 13
          },
          {
            "location": "api/FileContainerApiBase.ts",
            "line": 13
          },
          {
            "location": "api/GalleryApi.ts",
            "line": 13
          },
          {
            "location": "api/GalleryCompatHttpClientBase.ts",
            "line": 13
          },
          {
            "location": "api/GitApi.ts",
            "line": 13
          },
          {
            "location": "api/LocationsApi.ts",
            "line": 13
          },
          {
            "location": "api/ManagementApi.ts",
            "line": 13
          },
          {
            "location": "api/NotificationApi.ts",
            "line": 13
          },
          {
            "location": "api/PolicyApi.ts",
            "line": 13
          },
          {
            "location": "api/ProfileApi.ts",
            "line": 13
          },
          {
            "location": "api/ProjectAnalysisApi.ts",
            "line": 13
          },
          {
            "location": "api/ReleaseApi.ts",
            "line": 13
          },
          {
            "location": "api/SecurityRolesApi.ts",
            "line": 13
          },
          {
            "location": "api/TaskAgentApiBase.ts",
            "line": 13
          },
          {
            "location": "api/TaskApi.ts",
            "line": 13
          },
          {
            "location": "api/TestApi.ts",
            "line": 13
          },
          {
            "location": "api/TestPlanApi.ts",
            "line": 13
          },
          {
            "location": "api/TestResultsApi.ts",
            "line": 13
          },
          {
            "location": "api/TfvcApi.ts",
            "line": 13
          },
          {
            "location": "api/VsoClient.ts",
            "line": 9
          },
          {
            "location": "api/WebApi.ts",
            "line": 39
          },
          {
            "location": "api/WikiApi.ts",
            "line": 13
          },
          {
            "location": "api/WorkApi.ts",
            "line": 13
          },
          {
            "location": "api/WorkItemTrackingApi.ts",
            "line": 13
          },
          {
            "location": "api/WorkItemTrackingProcessApi.ts",
            "line": 13
          },
          {
            "location": "api/WorkItemTrackingProcessDefinitionsApi.ts",
            "line": 13
          },
          {
            "location": "_build/ClientApiBases.js",
            "line": 8
          },
          {
            "location": "_build/FileContainerApi.js",
            "line": 23
          },
          {
            "location": "_build/handlers/basiccreds.js",
            "line": 5
          },
          {
            "location": "_build/handlers/bearertoken.js",
            "line": 5
          },
          {
            "location": "_build/handlers/ntlm.js",
            "line": 5
          },
          {
            "location": "_build/handlers/personalaccesstoken.js",
            "line": 5
          },
          {
            "location": "api/GalleryCompatHttpClientBase.ts",
            "line": 14
          },
          {
            "location": "api/ProfileApi.ts",
            "line": 14
          },
          {
            "location": "api/SecurityRolesApi.ts",
            "line": 14
          },
          {
            "location": "api/handlers/basiccreds.ts",
            "line": 5
          },
          {
            "location": "api/handlers/bearertoken.ts",
            "line": 5
          },
          {
            "location": "api/handlers/ntlm.ts",
            "line": 5
          },
          {
            "location": "api/handlers/personalaccesstoken.ts",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "6.10.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "339dbc1e987ac2c49538189852719ff8affbc3484db21b3f76e1ac3573d408b1f95c0aa312d88f1b034e34b574b411fc36819bd26bc3e49b9b9d44ebba32834e"
        }
      ],
      "purl": "pkg:npm/qs@6.10.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-6.10.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@6.10.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-6.10.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "side-channel",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ab95cfcada85108287906762308ad8d749af2d1be7421e36ffe1a8065156ddbd8b5cb136c71269645766f78c1ed016a85774702721aa839c12edea714efd19bf"
        }
      ],
      "purl": "pkg:npm/side-channel@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/side-channel/-/side-channel-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/side-channel@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/side-channel/-/side-channel-1.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "call-bind",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ecef856c28a1ac1e5619b1587ac72dc264ca69eeab3a22339b3d6272b79627ed1a03b2c97eeaa112ca364fd9dca5c16dccc42dcd77f64061ae7962464d8b2aac"
        }
      ],
      "purl": "pkg:npm/call-bind@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/call-bind@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "function-bind",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c88a2f033317e3db05f18979f1f482589e6cbd22ee6a26cfc5740914b98139b4ee0abd0c7f52a23e8a4633d3621638980426df69ad8587a6eb790e803554c8d0"
        }
      ],
      "purl": "pkg:npm/function-bind@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/function-bind@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-intrinsic",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "91666b9d5338d900a2100d888356c6f338e820c3a0c56c1808478d77063a4effdc392786a5ca17e295c77ca53134a56802b9eb12bd9ef6cae7031c4622b692f5"
        }
      ],
      "purl": "pkg:npm/get-intrinsic@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-intrinsic@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f676f3b4554e8e7a3ed1916246ade8636f33008c5a79fd528fa79b53a56215e091c764ad7f0716c546d7ffb220364964ded3d71a0e656d618cd61086c14b8cf"
        }
      ],
      "purl": "pkg:npm/has@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has/-/has-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has/-/has-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-symbols",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7215daefdacbfd40b62a55f5ee3a37bd11b3d1acda584c79b46a99839a4edcd532109541d7b74caee425cc208e7d4bc496084a726e75f78f81091be2d91bff1b"
        }
      ],
      "purl": "pkg:npm/has-symbols@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-symbols@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-inspect",
      "version": "1.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8b7069f624eac2168b641c469117e8e596c4d3b050453ecc1aef3e9cd8305bd22d1a9d53cc24f0d832c4a16c230a5c418ce148fe15a58d3026606084c26b673b"
        }
      ],
      "purl": "pkg:npm/object-inspect@1.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-inspect@1.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.9.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "underscore",
      "version": "1.12.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "84442dd3e64b0d550c85e6cac4be31d414ed0d8edb6af5687e167d299e1a236e97f5245a13e6379bcdd750bd543f68e7f329e39ddc020a91077541bef693f54f"
        }
      ],
      "purl": "pkg:npm/underscore@1.12.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/underscore/-/underscore-1.12.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/underscore@1.12.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/underscore/-/underscore-1.12.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "glob",
      "version": "5.0.35",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c1cf95bdeb3330bc8c585bd72e49688b14f89f485aad42156639e9cf3b5a6749ca2eeba5ed9df688cb767d414601a678cb55d68c544cb422397b0bf28786887a"
        }
      ],
      "purl": "pkg:npm/%40types/glob@5.0.35",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/glob/-/glob-5.0.35.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/glob@5.0.35",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/glob/-/glob-5.0.35.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/glob"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "events",
      "version": "1.1.0",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cb76d1f7c9b360ea34a4066e88b6ab8be710ca22a4dd45d1b93e3987546385f782cea923695b1f64935ac5d82d93bff7b733a6d68ccb4ea12a30fdd56c8e3c8f"
        }
      ],
      "purl": "pkg:npm/%40types/events@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/events/-/events-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/events@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/events/-/events-1.1.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/events"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "minimatch",
      "version": "3.0.3",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b47abaa9d6d3f54d4845219fd7808bd2952550b92cbd8f4e67ee5e12097537bb7e380ded1af369c490b3b8a425b0d8025706c0b3aef42f5bdc5508bc8fd1e39c"
        }
      ],
      "purl": "pkg:npm/%40types/minimatch@3.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/minimatch/-/minimatch-3.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/minimatch@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/minimatch/-/minimatch-3.0.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/minimatch"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "node",
      "version": "8.9.2",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f8820e51f1a418852edf5d1d8d7a4e64d4758c77edcebfd6ec3c2850f8917f38595852d7751b7cd1e3d852348461512ce212542b88a45d65a8ede1ddd7445094"
        }
      ],
      "purl": "pkg:npm/%40types/node@8.9.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/node/-/node-8.9.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/node@8.9.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/node/-/node-8.9.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/node"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "mocha",
      "version": "2.2.48",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9e52bf8b211381a7c6962f1987dcc95424e272f53789a8d2911c0e8771e18af6b9f7c08ca8d27835c54218c4c62a91a94d88fff51f112f34bd340ca44920aa1b"
        }
      ],
      "purl": "pkg:npm/%40types/mocha@2.2.48",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/mocha/-/mocha-2.2.48.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/mocha@2.2.48",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/mocha/-/mocha-2.2.48.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/mocha"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "@types",
      "name": "shelljs",
      "version": "0.7.8",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "336822470f773f1292ed88d4e86663b5d57d1c049d07b4d6aa2cc15dee09bbb02a6ca956bd3af480d3bdd971f9e83fe0331a83fe33472cd7c2e61037e321aaad"
        }
      ],
      "purl": "pkg:npm/%40types/shelljs@0.7.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/shelljs/-/shelljs-0.7.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/shelljs@0.7.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/shelljs/-/shelljs-0.7.8.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/shelljs"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mocha",
      "version": "3.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ffa9dad34d4c25612d6311ce57558b7ec991e182329e4504841c33b1bf9f936aa64378aab22db9f25fd0d8c58724c22601c36967c0c475800aef6347a0843d12"
        }
      ],
      "purl": "pkg:npm/mocha@3.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mocha/-/mocha-3.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mocha@3.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mocha/-/mocha-3.5.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "browser-stdout",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f351d32969d32fa5d7a5567154263d928ae3bd1f"
        }
      ],
      "purl": "pkg:npm/browser-stdout@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browser-stdout/-/browser-stdout-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browser-stdout@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browser-stdout/-/browser-stdout-1.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "2.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9c99094176e12240cb22d6c5146098400fe0f7d4"
        }
      ],
      "purl": "pkg:npm/commander@2.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "http://registry.npmjs.org/commander/-/commander-2.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "http://registry.npmjs.org/commander/-/commander-2.9.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-readlink",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4cafad76bc62f02fa039b2f94e9a3dd3a391a725"
        }
      ],
      "purl": "pkg:npm/graceful-readlink@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graceful-readlink/-/graceful-readlink-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-readlink@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graceful-readlink/-/graceful-readlink-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "2.6.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e731531ca2ede27d188222427da17821d68ff4fc"
        }
      ],
      "purl": "pkg:npm/debug@2.6.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-2.6.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@2.6.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-2.6.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5608aeadfc00be6c2901df5f9861788de0d597c8"
        }
      ],
      "purl": "pkg:npm/ms@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diff",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c9ce393a4b7cbd0b058a725c93df299027868ff9"
        }
      ],
      "purl": "pkg:npm/diff@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/diff/-/diff-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/diff/-/diff-3.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-string-regexp",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1b61c0562190a8dff6ae3bb2cf0200ca130b86d4"
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "7.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "805211df04faaf1c63a3600306cdf5ade50b2ec8"
        }
      ],
      "purl": "pkg:npm/glob@7.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-7.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@7.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-7.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs.realpath",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1504ad2523158caa40db4a2787cb01411994ea4f"
        }
      ],
      "purl": "pkg:npm/fs.realpath@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs.realpath@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inflight",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "49bd6331d7d02d0c09bc910a1075ba8165b56df9"
        }
      ],
      "purl": "pkg:npm/inflight@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inflight@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "once",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "583b1aa775961d4b113ac17d9c50baef9dd76bd1"
        }
      ],
      "purl": "pkg:npm/once@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/once@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/once/-/once-1.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrappy",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b5243d8f3ec1aa35f1364605bc0d1036e30ab69f"
        }
      ],
      "purl": "pkg:npm/wrappy@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrappy@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "633c2c83e3da42a502f52466022480f4208261de"
        }
      ],
      "purl": "pkg:npm/inherits@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c891d5404872a8f2d44e0b7d07cdcf5eee96debc7832fbc7bd252f4e8a20a70a060ce510fb20eb4741d1a2dfb23827423bbbb8857de959fb7a91604172a87450"
        }
      ],
      "purl": "pkg:npm/minimatch@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brace-expansion",
      "version": "1.1.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688"
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@1.1.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "balanced-match",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "89b4d199ab2bee49de164ea02b89ce462d71b767"
        }
      ],
      "purl": "pkg:npm/balanced-match@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/balanced-match@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concat-map",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d8a96bd77fd68df7793a73036a3ba0d5405d477b"
        }
      ],
      "purl": "pkg:npm/concat-map@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-map@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-is-absolute",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "174b9268735534ffbc7ace6bf53a5a9e1b5c5f5f"
        }
      ],
      "purl": "pkg:npm/path-is-absolute@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-is-absolute@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "growl",
      "version": "1.9.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0ea7743715db8d8de2c5ede1775e1b45ac85c02f"
        }
      ],
      "purl": "pkg:npm/growl@1.9.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/growl/-/growl-1.9.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/growl@1.9.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/growl/-/growl-1.9.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "he",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "93410fd21b009735151f8868c2f271f3427e23fd"
        }
      ],
      "purl": "pkg:npm/he@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/he/-/he-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/he@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/he/-/he-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json3",
      "version": "3.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3c0434743df93e2f5c42aee7b19bcb483575f4e1"
        }
      ],
      "purl": "pkg:npm/json3@3.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json3/-/json3-3.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json3@3.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json3/-/json3-3.3.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.create",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d7f2849f0dbda7e04682bb8cd72ab022461debe7"
        }
      ],
      "purl": "pkg:npm/lodash.create@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.create/-/lodash.create-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.create@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.create/-/lodash.create-3.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._baseassign",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8c38a099500f215ad09e59f1722fd0c52bfe0a4e"
        }
      ],
      "purl": "pkg:npm/lodash._baseassign@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._baseassign/-/lodash._baseassign-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._baseassign@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._baseassign/-/lodash._baseassign-3.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._basecopy",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8da0e6a876cf344c0ad8a54882111dd3c5c7ca36"
        }
      ],
      "purl": "pkg:npm/lodash._basecopy@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._basecopy/-/lodash._basecopy-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._basecopy@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._basecopy/-/lodash._basecopy-3.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.keys",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4dbc0472b156be50a0b286855d1bd0b0c656098a"
        }
      ],
      "purl": "pkg:npm/lodash.keys@3.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.keys/-/lodash.keys-3.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.keys@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.keys/-/lodash.keys-3.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._getnative",
      "version": "3.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "570bc7dede46d61cdcde687d65d3eecbaa3aaff5"
        }
      ],
      "purl": "pkg:npm/lodash._getnative@3.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._getnative/-/lodash._getnative-3.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._getnative@3.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._getnative/-/lodash._getnative-3.9.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      },
      "tags": [
        "native"
      ]
    },
    {
      "group": "",
      "name": "lodash.isarguments",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2f573d85c6a24289ff00663b491c1d338ff3458a"
        }
      ],
      "purl": "pkg:npm/lodash.isarguments@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.isarguments/-/lodash.isarguments-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.isarguments@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.isarguments/-/lodash.isarguments-3.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.isarray",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "79e4eb88c36a8122af86f844aa9bcd851b5fbb55"
        }
      ],
      "purl": "pkg:npm/lodash.isarray@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.isarray/-/lodash.isarray-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.isarray@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.isarray/-/lodash.isarray-3.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._basecreate",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1bc661614daa7fc311b7d03bf16806a0213cf821"
        }
      ],
      "purl": "pkg:npm/lodash._basecreate@3.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._basecreate/-/lodash._basecreate-3.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._basecreate@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._basecreate/-/lodash._basecreate-3.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._isiterateecall",
      "version": "3.0.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5203ad7ba425fae842460e696db9cf3e6aac057c"
        }
      ],
      "purl": "pkg:npm/lodash._isiterateecall@3.0.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._isiterateecall/-/lodash._isiterateecall-3.0.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._isiterateecall@3.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._isiterateecall/-/lodash._isiterateecall-3.0.9.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mkdirp",
      "version": "0.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "30057438eac6cf7f8c4767f38648d6697d75c903"
        }
      ],
      "purl": "pkg:npm/mkdirp@0.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@0.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "0.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "857fcabfc3397d2625b8228262e86aa7a011b05d"
        }
      ],
      "purl": "pkg:npm/minimist@0.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "http://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@0.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "http://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "72a262894d9d408b956ca05ff37b2ed8a6e2a2d5"
        }
      ],
      "purl": "pkg:npm/supports-color@3.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-3.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-3.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-flag",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9d9e793165ce017a00f00418c43f942a7b1d11fa"
        }
      ],
      "purl": "pkg:npm/has-flag@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-flag/-/has-flag-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-flag@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-flag/-/has-flag-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nock",
      "version": "9.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "103825fd680d4340b5059665012390910744ead0165c98bc41096e82accdeb824992f67b20b8a366e1b6e2be2f082ef239f9e6e872a99dee40184c4b1827815a"
        }
      ],
      "purl": "pkg:npm/nock@9.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nock/-/nock-9.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nock@9.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nock/-/nock-9.6.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chai",
      "version": "4.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0f64584ba642f0f2ace2806279f4f06ca23ad73c"
        }
      ],
      "purl": "pkg:npm/chai@4.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chai/-/chai-4.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chai@4.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chai/-/chai-4.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "assertion-error",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8e0b1a35dbb3fa776f1b216ddee4ae5aabf2e250a72098a8beda2e40de4964738a092d90ba111d6dc407161564b33d8dd94f615c9a3ca1d1bb113c969447ae0f"
        }
      ],
      "purl": "pkg:npm/assertion-error@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/assertion-error/-/assertion-error-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/assertion-error@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/assertion-error/-/assertion-error-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "check-error",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "574d312edd88bb5dd8912e9286dd6c0aed4aac82"
        }
      ],
      "purl": "pkg:npm/check-error@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/check-error/-/check-error-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/check-error@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/check-error/-/check-error-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-eql",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f9078843237966e3bedd49390d887aff578a3b49b462624518d9851c6002a5fd4294bd679a557fa7880d81b976a491b18176f87daaa8e9413e33900210cc9573"
        }
      ],
      "purl": "pkg:npm/deep-eql@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deep-eql/-/deep-eql-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deep-eql@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deep-eql/-/deep-eql-3.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-detect",
      "version": "4.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d1faff9881f57653bec7b4e570ccbe6c80ea28fb30ffbd2d5727875bbf3b828423866a9a65ed74bb02ee8ee6caf6af4b83a162868d4a50a0d8cf467b93b839fe"
        }
      ],
      "purl": "pkg:npm/type-detect@4.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-detect/-/type-detect-4.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-detect@4.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-detect/-/type-detect-4.0.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-func-name",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ead774abee72e20409433a066366023dd6887a41"
        }
      ],
      "purl": "pkg:npm/get-func-name@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-func-name/-/get-func-name-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-func-name@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-func-name/-/get-func-name-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pathval",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b942e6d4bde653005ef6b71361def8727d0645e0"
        }
      ],
      "purl": "pkg:npm/pathval@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pathval/-/pathval-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pathval@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pathval/-/pathval-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "3.2.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0fad4b68340f424c49e4050cda66d22516cf90db3f4e676639e2c08b58600e4a437c87deb52ae399685c730b6e45eb12c0c6c00a3c7fc574287ef33d084fda7a"
        }
      ],
      "purl": "pkg:npm/debug@3.2.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-3.2.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@3.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-3.2.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b60a7e765e5c1a4dbcbad624b41b2b16a03b1ca82b8603ec83a67f11f856238825d47c2af01fc6998ff4a1767a9c5f210d57ac4bf1699d8683fe439685842fca"
        }
      ],
      "purl": "pkg:npm/ms@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-2.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-equal",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f5d260292b660e084eff4cdbc9f08ad3247448b5"
        }
      ],
      "purl": "pkg:npm/deep-equal@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deep-equal/-/deep-equal-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deep-equal@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deep-equal/-/deep-equal-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-stringify-safe",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1296a2d58fd45f19a0f6ce01d65701e2c735b6eb"
        }
      ],
      "purl": "pkg:npm/json-stringify-safe@5.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-stringify-safe@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash",
      "version": "4.17.21",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bf690311ee7b95e713ba568322e3533f2dd1cb880b189e99d4edef13592b81764daec43e2c54c61d5c558dc5cfb35ecb85b65519e74026ff17675b6f8f916f4a"
        }
      ],
      "purl": "pkg:npm/lodash@4.17.21",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@4.17.21",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mkdirp",
      "version": "0.5.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "34a98094449fea3306ca6d7ef91d116bbc2f855fb0156eb715a48e14fc116a1bde6b480c51c19485578083fd010b4c22bfd8a1e4d60f0755a7d54108d7f2fec5"
        }
      ],
      "purl": "pkg:npm/mkdirp@0.5.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@0.5.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "1.2.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "14cf6735462b4410042d9413df179943b7e630e060ea758d989293720b0979a2ecb4ffd43835691acaf93a15e185783a7feaad27cba267e3d4c640d67202172f"
        }
      ],
      "purl": "pkg:npm/minimist@1.2.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimist/-/minimist-1.2.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@1.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimist/-/minimist-1.2.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "propagate",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "00c2daeedda20e87e3782b344adba1cddd6ad709"
        }
      ],
      "purl": "pkg:npm/propagate@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/propagate/-/propagate-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/propagate@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/propagate/-/propagate-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "6.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3796405f8fcbc49985fbbc0def8a540faa8087dff09ef750723abd4d98debef5f3494a3b6df9b0f75b1aa8c8f3192db1abdd7fa1d376756fd63a5eea40734318"
        }
      ],
      "purl": "pkg:npm/qs@6.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-6.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@6.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-6.5.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "5.5.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3eaa40c5fac48654945a07bc770229e2d667436e4320eb61a62687348b61b23105403e84bea50a50333b2fc3b6ad286415c718a35563251d1ca167cd902b9b47"
        }
      ],
      "purl": "pkg:npm/semver@5.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-5.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@5.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-5.5.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "semver"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "make.js",
            "line": 4
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shelljs",
      "version": "0.7.8",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "decbcf874b0d1e5fb72e14b164a9683048e9acb3"
        }
      ],
      "purl": "pkg:npm/shelljs@0.7.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shelljs/-/shelljs-0.7.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shelljs@0.7.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shelljs/-/shelljs-0.7.8.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "shelljs/make,shelljs"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "make.js",
            "line": 1
          },
          {
            "location": "samples/task.ts",
            "line": 4
          },
          {
            "location": "samples/task.ts",
            "line": 60
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "7.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3094d4835923b8b790089f9c704e15a5aea42955e43d827698e090c94b8a2dc2d0b1dacc0a904f522f2a544ebe62e689928cde03d36eb13030de12ebf177b911"
        }
      ],
      "purl": "pkg:npm/glob@7.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-7.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@7.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-7.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "interpret",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7ed1b1410c6a0e0f78cf95d3b8440c63f78b8614"
        }
      ],
      "purl": "pkg:npm/interpret@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/interpret/-/interpret-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/interpret@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/interpret/-/interpret-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rechoir",
      "version": "0.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "85204b54dba82d5742e28c96756ef43af50e3384"
        }
      ],
      "purl": "pkg:npm/rechoir@0.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rechoir/-/rechoir-0.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rechoir@0.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rechoir/-/rechoir-0.6.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve",
      "version": "1.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "860a121ab737a63cc03c734183e2a715c2b61f09474ecfd8ac0194afaaa04d5519997bf55045d79746d934128c03d7ee77a95160574f1b3d315f1c9c3f39a68b"
        }
      ],
      "purl": "pkg:npm/resolve@1.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve/-/resolve-1.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve@1.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve/-/resolve-1.5.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-parse",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3c1adf871ea9cd6c9431b6ea2bd74a0ff055c4c1"
        }
      ],
      "purl": "pkg:npm/path-parse@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-parse@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typescript",
      "version": "3.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9ae60d595f63e7ede65e8283ea83ce34ab86526622157d7881fa3d9569bd6574473aa543422078ab50b314f6c5e102d5d84f536571faa0ae79a10f78ae7dcfa4"
        }
      ],
      "purl": "pkg:npm/typescript@3.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typescript/-/typescript-3.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typescript@3.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typescript/-/typescript-3.1.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "_build/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "_build/package-lock.json"
              }
            ],
            "concludedValue": "_build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "_build",
      "version": "12.5.0",
      "scope": "optional",
      "purl": "pkg:npm/_build@12.5.0",
      "type": "library",
      "bom-ref": "pkg:npm/_build@12.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:npm:resolvedPath",
          "value": "../_build"
        },
        {
          "name": "cdx:npm:isLink",
          "value": "true"
        },
        {
          "name": "cdx:npm:manifestSourceType",
          "value": "path"
        },
        {
          "name": "cdx:npm:manifestSource",
          "value": "file:../_build"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "ImportedModules",
          "value": "./ClientApiBases,./interfaces/AlertInterfaces,./interfaces/BuildInterfaces,./VsoClient,./Serialization,./interfaces/CoreInterfaces,../interfaces/CoreInterfaces,./interfaces/common/OperationsInterfaces,./interfaces/DashboardInterfaces,./interfaces/ExtensionManagementInterfaces,./interfaces/GalleryInterfaces,../interfaces/GalleryInterfaces,./interfaces/FeatureManagementInterfaces,./FileContainerApiBase,./interfaces/FileContainerInterfaces,././GalleryCompatHttpClientBase,./interfaces/GitInterfaces,../interfaces/GitInterfaces,./interfaces/LocationsInterfaces,./interfaces/ManagementInterfaces,./interfaces/NotificationInterfaces,./interfaces/common/VSSInterfaces,../interfaces/common/VSSInterfaces,./interfaces/PolicyInterfaces,../interfaces/PolicyInterfaces,./interfaces/ProfileInterfaces,./interfaces/ProjectAnalysisInterfaces,./interfaces/ReleaseInterfaces,./interfaces/SecurityRolesInterfaces,./TaskAgentApiBase,./interfaces/TaskAgentInterfaces,./interfaces/TestInterfaces,../interfaces/TestInterfaces,./interfaces/TestPlanInterfaces,./interfaces/TfvcInterfaces,./AlertApi,./BuildApi,./CoreApi,./DashboardApi,./ExtensionManagementApi,./FeatureManagementApi,./FileContainerApi,./GalleryApi,./GitApi,./LocationsApi,./ManagementApi,./NotificationApi,./PolicyApi,./ProfileApi,./ProjectAnalysisApi,./ReleaseApi,./SecurityRolesApi,./TaskAgentApi,./TaskApi,./TestApi,./TestPlanApi,./TestResultsApi,./TfvcApi,./WikiApi,./WorkApi,./WorkItemTrackingApi,./WorkItemTrackingProcessApi,./WorkItemTrackingProcessDefinitionsApi,./handlers/basiccreds,./handlers/bearertoken,./handlers/ntlm,./handlers/personalaccesstoken,./interfaces/CommentsInterfaces,./interfaces/WikiInterfaces,./interfaces/WorkInterfaces,./interfaces/WorkItemTrackingInterfaces,./interfaces/WorkItemTrackingProcessInterfaces,./interfaces/WorkItemTrackingProcessDefinitionsInterfaces,../interfaces/IdentitiesInterfaces,../interfaces/common/FormInputInterfaces,../interfaces/common/SystemDataInterfaces,../interfaces/common/System"
        },
        {
          "name": "SrcFile",
          "value": "samples/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "samples/package-lock.json"
              }
            ],
            "concludedValue": "samples/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "_build/AlertApi.js",
            "line": 20
          },
          {
            "location": "_build/BuildApi.js",
            "line": 20
          },
          {
            "location": "_build/CoreApi.js",
            "line": 20
          },
          {
            "location": "_build/DashboardApi.js",
            "line": 20
          },
          {
            "location": "_build/ExtensionManagementApi.js",
            "line": 20
          },
          {
            "location": "_build/FeatureManagementApi.js",
            "line": 20
          },
          {
            "location": "_build/FileContainerApiBase.js",
            "line": 20
          },
          {
            "location": "_build/GalleryCompatHttpClientBase.js",
            "line": 20
          },
          {
            "location": "_build/GitApi.js",
            "line": 20
          },
          {
            "location": "_build/LocationsApi.js",
            "line": 20
          },
          {
            "location": "_build/ManagementApi.js",
            "line": 20
          },
          {
            "location": "_build/NotificationApi.js",
            "line": 20
          },
          {
            "location": "_build/PolicyApi.js",
            "line": 20
          },
          {
            "location": "_build/ProfileApi.js",
            "line": 20
          },
          {
            "location": "_build/ProjectAnalysisApi.js",
            "line": 20
          },
          {
            "location": "_build/ReleaseApi.js",
            "line": 20
          },
          {
            "location": "_build/SecurityRolesApi.js",
            "line": 20
          },
          {
            "location": "_build/TaskAgentApiBase.js",
            "line": 20
          },
          {
            "location": "_build/TaskApi.js",
            "line": 20
          },
          {
            "location": "_build/TestApi.js",
            "line": 20
          },
          {
            "location": "_build/TestPlanApi.js",
            "line": 20
          },
          {
            "location": "_build/TestResultsApi.js",
            "line": 20
          },
          {
            "location": "_build/TfvcApi.js",
            "line": 20
          },
          {
            "location": "_build/WikiApi.js",
            "line": 20
          },
          {
            "location": "_build/WorkApi.js",
            "line": 20
          },
          {
            "location": "_build/WorkItemTrackingApi.js",
            "line": 20
          },
          {
            "location": "_build/WorkItemTrackingProcessApi.js",
            "line": 20
          },
          {
            "location": "_build/WorkItemTrackingProcessDefinitionsApi.js",
            "line": 20
          },
          {
            "location": "_build/AlertApi.js",
            "line": 21
          },
          {
            "location": "_build/BuildApi.js",
            "line": 21
          },
          {
            "location": "_build/ClientApiBases.js",
            "line": 5
          },
          {
            "location": "_build/WebApi.js",
            "line": 46
          },
          {
            "location": "_build/ClientApiBases.js",
            "line": 6
          },
          {
            "location": "_build/CoreApi.js",
            "line": 21
          },
          {
            "location": "_build/interfaces/BuildInterfaces.js",
            "line": 13
          },
          {
            "location": "_build/interfaces/GitInterfaces.js",
            "line": 13
          },
          {
            "location": "_build/interfaces/TestInterfaces.js",
            "line": 13
          },
          {
            "location": "_build/interfaces/TestPlanInterfaces.js",
            "line": 13
          },
          {
            "location": "_build/interfaces/TfvcInterfaces.js",
            "line": 12
          },
          {
            "location": "_build/CoreApi.js",
            "line": 22
          },
          {
            "location": "_build/DashboardApi.js",
            "line": 21
          },
          {
            "location": "_build/ExtensionManagementApi.js",
            "line": 21
          },
          {
            "location": "_build/ExtensionManagementApi.js",
            "line": 22
          },
          {
            "location": "_build/GalleryApi.js",
            "line": 21
          },
          {
            "location": "_build/GalleryCompatHttpClientBase.js",
            "line": 21
          },
          {
            "location": "_build/interfaces/ExtensionManagementInterfaces.js",
            "line": 12
          },
          {
            "location": "_build/FeatureManagementApi.js",
            "line": 21
          },
          {
            "location": "_build/FileContainerApi.js",
            "line": 24
          },
          {
            "location": "_build/FileContainerApi.js",
            "line": 25
          },
          {
            "location": "_build/FileContainerApiBase.js",
            "line": 21
          },
          {
            "location": "_build/GalleryApi.js",
            "line": 20
          },
          {
            "location": "_build/GitApi.js",
            "line": 21
          },
          {
            "location": "_build/interfaces/WikiInterfaces.js",
            "line": 12
          },
          {
            "location": "_build/LocationsApi.js",
            "line": 21
          },
          {
            "location": "_build/ManagementApi.js",
            "line": 21
          },
          {
            "location": "_build/NotificationApi.js",
            "line": 21
          },
          {
            "location": "_build/NotificationApi.js",
            "line": 22
          },
          {
            "location": "_build/interfaces/LocationsInterfaces.js",
            "line": 12
          },
          {
            "location": "_build/PolicyApi.js",
            "line": 21
          },
          {
            "location": "_build/interfaces/GitInterfaces.js",
            "line": 12
          },
          {
            "location": "_build/ProfileApi.js",
            "line": 21
          },
          {
            "location": "_build/ProjectAnalysisApi.js",
            "line": 21
          },
          {
            "location": "_build/ReleaseApi.js",
            "line": 21
          },
          {
            "location": "_build/SecurityRolesApi.js",
            "line": 21
          },
          {
            "location": "_build/TaskAgentApi.js",
            "line": 11
          },
          {
            "location": "_build/TaskAgentApiBase.js",
            "line": 21
          },
          {
            "location": "_build/TaskApi.js",
            "line": 21
          },
          {
            "location": "_build/TestApi.js",
            "line": 21
          },
          {
            "location": "_build/TestResultsApi.js",
            "line": 21
          },
          {
            "location": "_build/interfaces/BuildInterfaces.js",
            "line": 12
          },
          {
            "location": "_build/interfaces/TestPlanInterfaces.js",
            "line": 12
          },
          {
            "location": "_build/TestPlanApi.js",
            "line": 21
          },
          {
            "location": "_build/TfvcApi.js",
            "line": 21
          },
          {
            "location": "_build/WebApi.js",
            "line": 13
          },
          {
            "location": "_build/WebApi.js",
            "line": 14
          },
          {
            "location": "_build/WebApi.js",
            "line": 15
          },
          {
            "location": "_build/WebApi.js",
            "line": 16
          },
          {
            "location": "_build/WebApi.js",
            "line": 17
          },
          {
            "location": "_build/WebApi.js",
            "line": 18
          },
          {
            "location": "_build/WebApi.js",
            "line": 19
          },
          {
            "location": "_build/WebApi.js",
            "line": 20
          },
          {
            "location": "_build/WebApi.js",
            "line": 21
          },
          {
            "location": "_build/WebApi.js",
            "line": 22
          },
          {
            "location": "_build/WebApi.js",
            "line": 23
          },
          {
            "location": "_build/WebApi.js",
            "line": 24
          },
          {
            "location": "_build/WebApi.js",
            "line": 25
          },
          {
            "location": "_build/WebApi.js",
            "line": 26
          },
          {
            "location": "_build/WebApi.js",
            "line": 27
          },
          {
            "location": "_build/WebApi.js",
            "line": 28
          },
          {
            "location": "_build/WebApi.js",
            "line": 29
          },
          {
            "location": "_build/WebApi.js",
            "line": 30
          },
          {
            "location": "_build/WebApi.js",
            "line": 31
          },
          {
            "location": "_build/WebApi.js",
            "line": 32
          },
          {
            "location": "_build/WebApi.js",
            "line": 33
          },
          {
            "location": "_build/WebApi.js",
            "line": 34
          },
          {
            "location": "_build/WebApi.js",
            "line": 35
          },
          {
            "location": "_build/WebApi.js",
            "line": 36
          },
          {
            "location": "_build/WebApi.js",
            "line": 37
          },
          {
            "location": "_build/WebApi.js",
            "line": 38
          },
          {
            "location": "_build/WebApi.js",
            "line": 39
          },
          {
            "location": "_build/WebApi.js",
            "line": 40
          },
          {
            "location": "_build/WebApi.js",
            "line": 41
          },
          {
            "location": "_build/WebApi.js",
            "line": 42
          },
          {
            "location": "_build/WebApi.js",
            "line": 43
          },
          {
            "location": "_build/WebApi.js",
            "line": 44
          },
          {
            "location": "_build/WikiApi.js",
            "line": 21
          },
          {
            "location": "_build/WikiApi.js",
            "line": 22
          },
          {
            "location": "_build/WorkApi.js",
            "line": 21
          },
          {
            "location": "_build/WorkItemTrackingApi.js",
            "line": 21
          },
          {
            "location": "_build/WorkItemTrackingProcessApi.js",
            "line": 21
          },
          {
            "location": "_build/WorkItemTrackingProcessDefinitionsApi.js",
            "line": 21
          },
          {
            "location": "_build/interfaces/GraphInterfaces.js",
            "line": 12
          },
          {
            "location": "_build/interfaces/ReleaseInterfaces.js",
            "line": 12
          },
          {
            "location": "_build/interfaces/TaskAgentInterfaces.js",
            "line": 12
          },
          {
            "location": "_build/interfaces/TestInterfaces.js",
            "line": 12
          },
          {
            "location": "_build/interfaces/WorkInterfaces.js",
            "line": 12
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typed-rest-client",
      "version": "1.8.9",
      "scope": "required",
      "purl": "pkg:npm/typed-rest-client@1.8.9",
      "type": "library",
      "bom-ref": "pkg:npm/typed-rest-client@1.8.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:npm:resolvedPath",
          "value": "../_build/node_modules/typed-rest-client"
        },
        {
          "name": "cdx:npm:isLink",
          "value": "true"
        },
        {
          "name": "cdx:npm:manifestSourceType",
          "value": "path"
        },
        {
          "name": "cdx:npm:manifestSource",
          "value": "file:../_build/node_modules/typed-rest-client"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "typed-rest-client/RestClient,typed-rest-client/HttpClient,typed-rest-client/Handlers"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "_build/ClientApiBases.js",
            "line": 7
          },
          {
            "location": "_build/WebApi.js",
            "line": 45
          },
          {
            "location": "api/AlertApi.ts",
            "line": 13
          },
          {
            "location": "api/BuildApi.ts",
            "line": 13
          },
          {
            "location": "api/CoreApi.ts",
            "line": 13
          },
          {
            "location": "api/DashboardApi.ts",
            "line": 13
          },
          {
            "location": "api/ExtensionManagementApi.ts",
            "line": 13
          },
          {
            "location": "api/FeatureManagementApi.ts",
            "line": 13
          },
          {
            "location": "api/FileContainerApiBase.ts",
            "line": 13
          },
          {
            "location": "api/GalleryApi.ts",
            "line": 13
          },
          {
            "location": "api/GalleryCompatHttpClientBase.ts",
            "line": 13
          },
          {
            "location": "api/GitApi.ts",
            "line": 13
          },
          {
            "location": "api/LocationsApi.ts",
            "line": 13
          },
          {
            "location": "api/ManagementApi.ts",
            "line": 13
          },
          {
            "location": "api/NotificationApi.ts",
            "line": 13
          },
          {
            "location": "api/PolicyApi.ts",
            "line": 13
          },
          {
            "location": "api/ProfileApi.ts",
            "line": 13
          },
          {
            "location": "api/ProjectAnalysisApi.ts",
            "line": 13
          },
          {
            "location": "api/ReleaseApi.ts",
            "line": 13
          },
          {
            "location": "api/SecurityRolesApi.ts",
            "line": 13
          },
          {
            "location": "api/TaskAgentApiBase.ts",
            "line": 13
          },
          {
            "location": "api/TaskApi.ts",
            "line": 13
          },
          {
            "location": "api/TestApi.ts",
            "line": 13
          },
          {
            "location": "api/TestPlanApi.ts",
            "line": 13
          },
          {
            "location": "api/TestResultsApi.ts",
            "line": 13
          },
          {
            "location": "api/TfvcApi.ts",
            "line": 13
          },
          {
            "location": "api/VsoClient.ts",
            "line": 9
          },
          {
            "location": "api/WebApi.ts",
            "line": 39
          },
          {
            "location": "api/WikiApi.ts",
            "line": 13
          },
          {
            "location": "api/WorkApi.ts",
            "line": 13
          },
          {
            "location": "api/WorkItemTrackingApi.ts",
            "line": 13
          },
          {
            "location": "api/WorkItemTrackingProcessApi.ts",
            "line": 13
          },
          {
            "location": "api/WorkItemTrackingProcessDefinitionsApi.ts",
            "line": 13
          },
          {
            "location": "_build/ClientApiBases.js",
            "line": 8
          },
          {
            "location": "_build/FileContainerApi.js",
            "line": 23
          },
          {
            "location": "_build/handlers/basiccreds.js",
            "line": 5
          },
          {
            "location": "_build/handlers/bearertoken.js",
            "line": 5
          },
          {
            "location": "_build/handlers/ntlm.js",
            "line": 5
          },
          {
            "location": "_build/handlers/personalaccesstoken.js",
            "line": 5
          },
          {
            "location": "api/GalleryCompatHttpClientBase.ts",
            "line": 14
          },
          {
            "location": "api/ProfileApi.ts",
            "line": 14
          },
          {
            "location": "api/SecurityRolesApi.ts",
            "line": 14
          },
          {
            "location": "api/handlers/basiccreds.ts",
            "line": 5
          },
          {
            "location": "api/handlers/bearertoken.ts",
            "line": 5
          },
          {
            "location": "api/handlers/ntlm.ts",
            "line": 5
          },
          {
            "location": "api/handlers/personalaccesstoken.ts",
            "line": 5
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/tunnel@0.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/function-bind@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has@1.0.3",
      "dependsOn": [
        "pkg:npm/function-bind@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/has-symbols@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-intrinsic@1.1.1",
      "dependsOn": [
        "pkg:npm/function-bind@1.1.1",
        "pkg:npm/has-symbols@1.0.2",
        "pkg:npm/has@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/call-bind@1.0.2",
      "dependsOn": [
        "pkg:npm/function-bind@1.1.1",
        "pkg:npm/get-intrinsic@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/object-inspect@1.9.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/side-channel@1.0.4",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.2",
        "pkg:npm/get-intrinsic@1.1.1",
        "pkg:npm/object-inspect@1.9.0"
      ]
    },
    {
      "ref": "pkg:npm/qs@6.10.1",
      "dependsOn": [
        "pkg:npm/side-channel@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/underscore@1.12.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/typed-rest-client@1.8.4",
      "dependsOn": [
        "pkg:npm/qs@6.10.1",
        "pkg:npm/tunnel@0.0.6",
        "pkg:npm/underscore@1.12.1"
      ]
    },
    {
      "ref": "pkg:npm/@types/events@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/minimatch@3.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/node@8.9.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/glob@5.0.35",
      "dependsOn": [
        "pkg:npm/@types/events@1.1.0",
        "pkg:npm/@types/minimatch@3.0.3",
        "pkg:npm/@types/node@8.9.2"
      ]
    },
    {
      "ref": "pkg:npm/@types/mocha@2.2.48",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/shelljs@0.7.8",
      "dependsOn": [
        "pkg:npm/@types/glob@5.0.35",
        "pkg:npm/@types/node@8.9.2"
      ]
    },
    {
      "ref": "pkg:npm/browser-stdout@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/graceful-readlink@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/commander@2.9.0",
      "dependsOn": [
        "pkg:npm/graceful-readlink@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/ms@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@2.6.8",
      "dependsOn": [
        "pkg:npm/ms@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/diff@3.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/escape-string-regexp@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fs.realpath@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wrappy@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/once@1.4.0",
      "dependsOn": [
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/inflight@1.0.6",
      "dependsOn": [
        "pkg:npm/once@1.4.0",
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/inherits@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/balanced-match@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/concat-map@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/brace-expansion@1.1.11",
      "dependsOn": [
        "pkg:npm/balanced-match@1.0.0",
        "pkg:npm/concat-map@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/minimatch@3.0.4",
      "dependsOn": [
        "pkg:npm/brace-expansion@1.1.11"
      ]
    },
    {
      "ref": "pkg:npm/path-is-absolute@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob@7.1.1",
      "dependsOn": [
        "pkg:npm/fs.realpath@1.0.0",
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/once@1.4.0",
        "pkg:npm/path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/growl@1.9.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/he@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json3@3.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._basecopy@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._getnative@3.9.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.isarguments@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.isarray@3.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.keys@3.1.2",
      "dependsOn": [
        "pkg:npm/lodash._getnative@3.9.1",
        "pkg:npm/lodash.isarguments@3.1.0",
        "pkg:npm/lodash.isarray@3.0.4"
      ]
    },
    {
      "ref": "pkg:npm/lodash._baseassign@3.2.0",
      "dependsOn": [
        "pkg:npm/lodash._basecopy@3.0.1",
        "pkg:npm/lodash.keys@3.1.2"
      ]
    },
    {
      "ref": "pkg:npm/lodash._basecreate@3.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._isiterateecall@3.0.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.create@3.1.1",
      "dependsOn": [
        "pkg:npm/lodash._baseassign@3.2.0",
        "pkg:npm/lodash._basecreate@3.0.3",
        "pkg:npm/lodash._isiterateecall@3.0.9"
      ]
    },
    {
      "ref": "pkg:npm/minimist@0.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mkdirp@0.5.1",
      "dependsOn": [
        "pkg:npm/minimist@0.0.8"
      ]
    },
    {
      "ref": "pkg:npm/has-flag@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/supports-color@3.1.2",
      "dependsOn": [
        "pkg:npm/has-flag@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/mocha@3.5.3",
      "dependsOn": [
        "pkg:npm/browser-stdout@1.3.0",
        "pkg:npm/commander@2.9.0",
        "pkg:npm/debug@2.6.8",
        "pkg:npm/diff@3.2.0",
        "pkg:npm/escape-string-regexp@1.0.5",
        "pkg:npm/glob@7.1.1",
        "pkg:npm/growl@1.9.2",
        "pkg:npm/he@1.1.1",
        "pkg:npm/json3@3.3.2",
        "pkg:npm/lodash.create@3.1.1",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/supports-color@3.1.2"
      ]
    },
    {
      "ref": "pkg:npm/assertion-error@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/check-error@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/type-detect@4.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/deep-eql@3.0.1",
      "dependsOn": [
        "pkg:npm/type-detect@4.0.8"
      ]
    },
    {
      "ref": "pkg:npm/get-func-name@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pathval@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/chai@4.1.2",
      "dependsOn": [
        "pkg:npm/assertion-error@1.1.0",
        "pkg:npm/check-error@1.0.2",
        "pkg:npm/deep-eql@3.0.1",
        "pkg:npm/get-func-name@2.0.0",
        "pkg:npm/pathval@1.1.0",
        "pkg:npm/type-detect@4.0.8"
      ]
    },
    {
      "ref": "pkg:npm/ms@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@3.2.5",
      "dependsOn": [
        "pkg:npm/ms@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/deep-equal@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-stringify-safe@5.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash@4.17.21",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimist@1.2.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mkdirp@0.5.5",
      "dependsOn": [
        "pkg:npm/minimist@1.2.5"
      ]
    },
    {
      "ref": "pkg:npm/propagate@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qs@6.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/semver@5.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/nock@9.6.1",
      "dependsOn": [
        "pkg:npm/chai@4.1.2",
        "pkg:npm/debug@3.2.5",
        "pkg:npm/deep-equal@1.0.1",
        "pkg:npm/json-stringify-safe@5.0.1",
        "pkg:npm/lodash@4.17.21",
        "pkg:npm/mkdirp@0.5.5",
        "pkg:npm/propagate@1.0.0",
        "pkg:npm/qs@6.5.2",
        "pkg:npm/semver@5.5.1"
      ]
    },
    {
      "ref": "pkg:npm/glob@7.1.2",
      "dependsOn": [
        "pkg:npm/fs.realpath@1.0.0",
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/once@1.4.0",
        "pkg:npm/path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/interpret@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-parse@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/resolve@1.5.0",
      "dependsOn": [
        "pkg:npm/path-parse@1.0.5"
      ]
    },
    {
      "ref": "pkg:npm/rechoir@0.6.2",
      "dependsOn": [
        "pkg:npm/resolve@1.5.0"
      ]
    },
    {
      "ref": "pkg:npm/shelljs@0.7.8",
      "dependsOn": [
        "pkg:npm/glob@7.1.2",
        "pkg:npm/interpret@1.1.0",
        "pkg:npm/rechoir@0.6.2"
      ]
    },
    {
      "ref": "pkg:npm/typescript@3.1.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/azure-devops-node-api@12.5.0",
      "dependsOn": [
        "pkg:npm/@types/glob@5.0.35",
        "pkg:npm/@types/minimatch@3.0.3",
        "pkg:npm/@types/mocha@2.2.48",
        "pkg:npm/@types/node@8.9.2",
        "pkg:npm/@types/shelljs@0.7.8",
        "pkg:npm/mocha@3.5.3",
        "pkg:npm/nock@9.6.1",
        "pkg:npm/shelljs@0.7.8",
        "pkg:npm/tunnel@0.0.6",
        "pkg:npm/typed-rest-client@1.8.4",
        "pkg:npm/typescript@3.1.5"
      ]
    },
    {
      "ref": "pkg:npm/_build@12.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/typed-rest-client@1.8.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/azure-devops-node-api-tests@1.0.0",
      "dependsOn": [
        "pkg:npm/_build@12.5.0",
        "pkg:npm/typed-rest-client@1.8.9"
      ]
    },
    {
      "ref": "pkg:npm/vsts-node-api-samples@1.0.0",
      "dependsOn": [
        "pkg:npm/_build@12.5.0"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/azure-devops-node-api@12.5.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.6",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.6",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.6",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-10-15T04:54:59Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, October 15, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'azure-devops-node-api' with version '12.5.0'. The application also has 2 child modules/components. The package type in this SBOM is npm with a single purl namespace '@types' described under components. The components were identified from 4 source files."
    }
  ]
}