{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:df8cba6c-8993-40fe-a974-03e9b602bb49",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-18T04:13:12Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.6",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.6",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.6",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "generator",
      "group": "@babel",
      "version": "7.10.0",
      "description": "Turns an AST into code.",
      "purl": "pkg:npm/%40babel/generator@7.10.0",
      "bom-ref": "pkg:npm/@babel/generator@7.10.0",
      "author": "Sebastian McKenzie <sebmck@gmail.com>",
      "properties": [
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babeljs.io/"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@babel\\n@jridgewell"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "@babel",
      "name": "types",
      "version": "7.29.8",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "563d6317770f7f183b3807e823b42754a2e820b966d8917da67547ad7f2ac7b0073226164fe343000ee30a194d8114b85932dcfdf0f59572e63e2c65ba3fb71a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/types@7.29.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/types/-/types-7.29.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/types@7.29.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/types/-/types-7.29.8.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "@babel/types"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/generators/classes.js",
            "line": 14
          },
          {
            "location": "lib/generators/expressions.js",
            "line": 31
          },
          {
            "location": "lib/generators/flow.js",
            "line": 79
          },
          {
            "location": "lib/generators/methods.js",
            "line": 15
          },
          {
            "location": "lib/generators/modules.js",
            "line": 17
          },
          {
            "location": "lib/generators/statements.js",
            "line": 21
          },
          {
            "location": "lib/generators/types.js",
            "line": 25
          },
          {
            "location": "lib/node/index.js",
            "line": 15
          },
          {
            "location": "lib/node/parentheses.js",
            "line": 29
          },
          {
            "location": "lib/node/whitespace.js",
            "line": 8
          },
          {
            "location": "lib/printer.js",
            "line": 16
          },
          {
            "location": "src/generators/classes.js",
            "line": 1
          },
          {
            "location": "src/generators/classes.js",
            "line": 6
          },
          {
            "location": "src/generators/classes.js",
            "line": 7
          },
          {
            "location": "src/generators/expressions.js",
            "line": 1
          },
          {
            "location": "src/generators/expressions.js",
            "line": 65
          },
          {
            "location": "src/generators/expressions.js",
            "line": 66
          },
          {
            "location": "src/generators/expressions.js",
            "line": 67
          },
          {
            "location": "src/generators/expressions.js",
            "line": 104
          },
          {
            "location": "src/generators/expressions.js",
            "line": 109
          },
          {
            "location": "src/generators/expressions.js",
            "line": 238
          },
          {
            "location": "src/generators/expressions.js",
            "line": 243
          },
          {
            "location": "src/generators/flow.js",
            "line": 1
          },
          {
            "location": "src/generators/flow.js",
            "line": 27
          },
          {
            "location": "src/generators/flow.js",
            "line": 37
          },
          {
            "location": "src/generators/flow.js",
            "line": 99
          },
          {
            "location": "src/generators/flow.js",
            "line": 107
          },
          {
            "location": "src/generators/flow.js",
            "line": 227
          },
          {
            "location": "src/generators/methods.js",
            "line": 1
          },
          {
            "location": "src/generators/methods.js",
            "line": 111
          },
          {
            "location": "src/generators/modules.js",
            "line": 1
          },
          {
            "location": "src/generators/modules.js",
            "line": 62
          },
          {
            "location": "src/generators/modules.js",
            "line": 75
          },
          {
            "location": "src/generators/modules.js",
            "line": 91
          },
          {
            "location": "src/generators/modules.js",
            "line": 105
          },
          {
            "location": "src/generators/modules.js",
            "line": 106
          },
          {
            "location": "src/generators/modules.js",
            "line": 155
          },
          {
            "location": "src/generators/modules.js",
            "line": 156
          },
          {
            "location": "src/generators/statements.js",
            "line": 1
          },
          {
            "location": "src/generators/statements.js",
            "line": 21
          },
          {
            "location": "src/generators/statements.js",
            "line": 46
          },
          {
            "location": "src/generators/statements.js",
            "line": 250
          },
          {
            "location": "src/generators/statements.js",
            "line": 283
          },
          {
            "location": "src/generators/types.js",
            "line": 1
          },
          {
            "location": "src/generators/types.js",
            "line": 55
          },
          {
            "location": "src/generators/types.js",
            "line": 56
          },
          {
            "location": "src/generators/types.js",
            "line": 68
          },
          {
            "location": "src/generators/types.js",
            "line": 69
          },
          {
            "location": "src/node/index.js",
            "line": 3
          },
          {
            "location": "src/node/index.js",
            "line": 45
          },
          {
            "location": "src/node/index.js",
            "line": 49
          },
          {
            "location": "src/node/index.js",
            "line": 55
          },
          {
            "location": "src/node/index.js",
            "line": 89
          },
          {
            "location": "src/node/parentheses.js",
            "line": 1
          },
          {
            "location": "src/node/parentheses.js",
            "line": 32
          },
          {
            "location": "src/node/parentheses.js",
            "line": 36
          },
          {
            "location": "src/node/parentheses.js",
            "line": 38
          },
          {
            "location": "src/node/parentheses.js",
            "line": 39
          },
          {
            "location": "src/node/parentheses.js",
            "line": 40
          },
          {
            "location": "src/node/parentheses.js",
            "line": 42
          },
          {
            "location": "src/node/parentheses.js",
            "line": 43
          },
          {
            "location": "src/node/parentheses.js",
            "line": 46
          },
          {
            "location": "src/node/parentheses.js",
            "line": 56
          },
          {
            "location": "src/node/parentheses.js",
            "line": 58
          },
          {
            "location": "src/node/parentheses.js",
            "line": 60
          },
          {
            "location": "src/node/parentheses.js",
            "line": 62
          },
          {
            "location": "src/node/parentheses.js",
            "line": 64
          },
          {
            "location": "src/node/parentheses.js",
            "line": 91
          },
          {
            "location": "src/node/parentheses.js",
            "line": 102
          },
          {
            "location": "src/node/parentheses.js",
            "line": 103
          },
          {
            "location": "src/node/parentheses.js",
            "line": 108
          },
          {
            "location": "src/node/parentheses.js",
            "line": 119
          },
          {
            "location": "src/node/parentheses.js",
            "line": 129
          },
          {
            "location": "src/node/parentheses.js",
            "line": 130
          },
          {
            "location": "src/node/parentheses.js",
            "line": 131
          },
          {
            "location": "src/node/parentheses.js",
            "line": 132
          },
          {
            "location": "src/node/parentheses.js",
            "line": 148
          },
          {
            "location": "src/node/parentheses.js",
            "line": 149
          },
          {
            "location": "src/node/parentheses.js",
            "line": 150
          },
          {
            "location": "src/node/parentheses.js",
            "line": 151
          },
          {
            "location": "src/node/parentheses.js",
            "line": 152
          },
          {
            "location": "src/node/parentheses.js",
            "line": 159
          },
          {
            "location": "src/node/parentheses.js",
            "line": 167
          },
          {
            "location": "src/node/parentheses.js",
            "line": 177
          },
          {
            "location": "src/node/parentheses.js",
            "line": 178
          },
          {
            "location": "src/node/parentheses.js",
            "line": 179
          },
          {
            "location": "src/node/parentheses.js",
            "line": 180
          },
          {
            "location": "src/node/parentheses.js",
            "line": 181
          },
          {
            "location": "src/node/parentheses.js",
            "line": 182
          },
          {
            "location": "src/node/parentheses.js",
            "line": 183
          },
          {
            "location": "src/node/parentheses.js",
            "line": 184
          },
          {
            "location": "src/node/parentheses.js",
            "line": 196
          },
          {
            "location": "src/node/parentheses.js",
            "line": 197
          },
          {
            "location": "src/node/parentheses.js",
            "line": 199
          },
          {
            "location": "src/node/parentheses.js",
            "line": 200
          },
          {
            "location": "src/node/parentheses.js",
            "line": 218
          },
          {
            "location": "src/node/parentheses.js",
            "line": 232
          },
          {
            "location": "src/node/parentheses.js",
            "line": 237
          },
          {
            "location": "src/node/parentheses.js",
            "line": 238
          },
          {
            "location": "src/node/parentheses.js",
            "line": 239
          },
          {
            "location": "src/node/parentheses.js",
            "line": 240
          },
          {
            "location": "src/node/parentheses.js",
            "line": 241
          },
          {
            "location": "src/node/parentheses.js",
            "line": 242
          },
          {
            "location": "src/node/parentheses.js",
            "line": 255
          },
          {
            "location": "src/node/parentheses.js",
            "line": 256
          },
          {
            "location": "src/node/parentheses.js",
            "line": 267
          },
          {
            "location": "src/node/parentheses.js",
            "line": 277
          },
          {
            "location": "src/node/parentheses.js",
            "line": 280
          },
          {
            "location": "src/node/parentheses.js",
            "line": 282
          },
          {
            "location": "src/node/parentheses.js",
            "line": 298
          },
          {
            "location": "src/node/parentheses.js",
            "line": 300
          },
          {
            "location": "src/node/parentheses.js",
            "line": 301
          },
          {
            "location": "src/node/parentheses.js",
            "line": 307
          },
          {
            "location": "src/node/parentheses.js",
            "line": 308
          },
          {
            "location": "src/node/parentheses.js",
            "line": 309
          },
          {
            "location": "src/node/parentheses.js",
            "line": 310
          },
          {
            "location": "src/node/parentheses.js",
            "line": 311
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-string-parser",
      "version": "7.29.7",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3dbe628cfad9f3d1831fcdb6dcbe143fc8ba400a56c6cd3845b3d02537960d5d3f91e476137e8c78a9f2afa2d899452fa91448f88bfced2b85d56e84ac837363"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-string-parser@7.29.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-string-parser/-/helper-string-parser-7.29.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-string-parser@7.29.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-string-parser/-/helper-string-parser-7.29.7.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "@babel",
      "name": "helper-validator-identifier",
      "version": "7.29.7",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a9e8711a4463e7987f7dff0431a27e71887268a947231a980e7ebcdb0403ed1369f54ba3390b07a20dae4b4af6bf3af8a56fac5dff7435e79aca370d697ddf16"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-validator-identifier@7.29.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.29.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-validator-identifier@7.29.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.29.7.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsesc",
      "version": "2.5.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "398bbb5c4ce39024370b93ecdd0219b107cda6aa09c99640f7dc1df5a59dd39342b42e6958e91284ada690be875d047afc2cb695b35d3e5641a6e4075c4eb780"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jsesc@2.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsesc/-/jsesc-2.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsesc@2.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsesc/-/jsesc-2.5.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/babel-generator/node_modules/.bin/jsesc"
        },
        {
          "name": "cdx:npm:bin",
          "value": "jsesc"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "jsesc"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/generators/types.js",
            "line": 27
          },
          {
            "location": "src/generators/types.js",
            "line": 2
          },
          {
            "location": "src/generators/types.js",
            "line": 189
          },
          {
            "location": "src/generators/types.js",
            "line": 211
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash",
      "version": "4.18.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "74c22789c4cf544f1dd5ee68b5fc269a3971919a14a6254bc32793754b22fc26a3fe07f3cdb941702139b111d5fc0b23b829b15abb5ed93346498b82782abed1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash@4.18.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@4.18.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "lodash/isInteger,lodash/repeat"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/printer.js",
            "line": 8
          },
          {
            "location": "lib/printer.js",
            "line": 10
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.5.7",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2dbae624e31449d115c482af75c273402fa74217bc1546504d7432ebe23be6c90d827dcea10d03640f189c56bb829f2daad2f728f7f5926a344790e802979219"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/source-map@0.5.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.5.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.5.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.5.7.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "source-map"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/source-map.js",
            "line": 8
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-fixtures",
      "version": "7.29.7",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "729e3762b837f8715880b4010556526cdd2ed8b6f179279b84d5bd6f7d39b7f5fd34429e394bac81c8b1e9f064676ca4bb355a6c5481502143fd5133ab63ffb3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-fixtures@7.29.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-fixtures/-/helper-fixtures-7.29.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-fixtures@7.29.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-fixtures/-/helper-fixtures-7.29.7.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "gen-mapping",
      "version": "0.3.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "da492dffb9e227a32010fc45d1b61d43a7ad65a03e7d0bc370b29c921cb5c8840ecdaa0a8c10634a3eb7fda2d58d8137aa146de5dbccfae5327c283a50a0816c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/gen-mapping@0.3.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/gen-mapping@0.3.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.13.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "sourcemap-codec",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4fb8dffb9ce0b191f0349e25bd0eff69ecdbca4d27357fb32555a998703b558b04c7b6bbaabe5183921bb4916a920cdee58dacaeeab545463c43cdfb39dee217"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/sourcemap-codec@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.6.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "trace-mapping",
      "version": "0.3.31",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf3351f9275048327373c8e869e3fc410a0242bf0db98c76748232b65d507811191c9f6e5ba85e6ecad881bcfc849c1441aa374d608cb667d5f0dbb5b7038b03"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.31",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.31.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/trace-mapping@0.3.31",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.31.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "resolve-uri",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6d12128022233f6d3fb5b5923d63048b9e1054f45913192e0fd9492fe508c542adc15240f305b54eb6f58ccb354455e8d42053359ff98690bd42f98a59da292b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/resolve-uri@3.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/resolve-uri@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "6.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "051ed5bc30951cefaadb10445ac9314ba0c9135a919dbec3c7352ba206fbd425a849f89c07162c88019df8a9749a6abf329ac6f7202b464cab4314cee978cccc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/semver@6.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@6.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/babel-generator/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:bin",
          "value": "semver"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "parser",
      "version": "7.29.9",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0a35eb3474e7bea055a8781d072b18def9364fcb692476f9fd131e1c9053c956bdc60ba0081d02253c7fde83bc455d904503f7f75456a41ec3ea12e39bc57db8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/parser@7.29.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/parser/-/parser-7.29.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/parser@7.29.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/parser/-/parser-7.29.9.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/babel-generator/node_modules/.bin/parser"
        },
        {
          "name": "cdx:npm:bin",
          "value": "parser"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/@babel/helper-string-parser@7.29.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/helper-validator-identifier@7.29.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/types@7.29.8",
      "dependsOn": [
        "pkg:npm/@babel/helper-string-parser@7.29.7",
        "pkg:npm/@babel/helper-validator-identifier@7.29.7"
      ]
    },
    {
      "ref": "pkg:npm/jsesc@2.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash@4.18.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map@0.5.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/sourcemap-codec@1.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/resolve-uri@3.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/trace-mapping@0.3.31",
      "dependsOn": [
        "pkg:npm/@jridgewell/resolve-uri@3.1.2",
        "pkg:npm/@jridgewell/sourcemap-codec@1.6.0"
      ]
    },
    {
      "ref": "pkg:npm/@jridgewell/gen-mapping@0.3.13",
      "dependsOn": [
        "pkg:npm/@jridgewell/sourcemap-codec@1.6.0",
        "pkg:npm/@jridgewell/trace-mapping@0.3.31"
      ]
    },
    {
      "ref": "pkg:npm/semver@6.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/helper-fixtures@7.29.7",
      "dependsOn": [
        "pkg:npm/@jridgewell/gen-mapping@0.3.13",
        "pkg:npm/semver@6.3.1"
      ]
    },
    {
      "ref": "pkg:npm/@babel/parser@7.29.9",
      "dependsOn": [
        "pkg:npm/@babel/types@7.29.8"
      ]
    },
    {
      "ref": "pkg:npm/@babel/generator@7.10.0",
      "dependsOn": [
        "pkg:npm/@babel/helper-fixtures@7.29.7",
        "pkg:npm/@babel/parser@7.29.9",
        "pkg:npm/@babel/types@7.29.8",
        "pkg:npm/jsesc@2.5.2",
        "pkg:npm/lodash@4.18.1",
        "pkg:npm/source-map@0.5.7"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/@babel/generator@7.10.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.6",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.6",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.6",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-10-18T04:13:12Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Sunday, October 18, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'generator' with version '7.10.0'. The package type in this SBOM is npm with 2 purl namespaces described under components. The components were identified from the source files: package-lock.json."
    }
  ]
}