{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:d7254931-88e1-41e6-b58c-4a7de441bddf",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-23T11:11:09Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.9.0",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "bare-assert",
      "group": "",
      "version": "1.2.0",
      "description": "Assertion library for JavaScript",
      "purl": "pkg:npm/bare-assert@1.2.0",
      "bom-ref": "pkg:npm/bare-assert@1.2.0",
      "author": "Holepunch",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/holepunchto/bare-assert#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/holepunchto/bare-assert.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@jridgewell\\n@types"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "bare-inspect",
      "version": "3.1.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8df5b929103ce28dd112923a56be276ef327fa1a95030f0653598c751c14b18e72268bd06a6c5878a195286a9dcecfbc65b1b88d1cc65173ffdc98bf0e7a9f3e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-inspect@3.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-inspect/-/bare-inspect-3.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-inspect@3.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-inspect/-/bare-inspect-3.1.4.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "bare-inspect"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "index.js",
            "line": 1
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-ansi-escapes",
      "version": "2.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d36112e3f13645baed6529c727d2e7b4185890b03a94fa5211e3fc8aa4b731c701215855065126aee17523b1d9ab1e50f1a8937987d055eaa6ad4f583b6c98a1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-ansi-escapes@2.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-ansi-escapes/-/bare-ansi-escapes-2.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-ansi-escapes@2.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-ansi-escapes/-/bare-ansi-escapes-2.2.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-stream",
      "version": "2.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a325d0362715d72f2773668a7df1fe0541c54579b1e95acfce59da12f321ada9b49cf06b29c11d732060e6bd3c0f48bc5719e01c50225729f540a5e9486d01f0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-stream@2.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-stream/-/bare-stream-2.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-stream@2.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-stream/-/bare-stream-2.7.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-events",
      "version": "2.8.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ae2263cafd7f9872c83d7e11c222bea16f7fe1cdd311478e44729e7ca00a9d9e64cac95b37e1d7a30b5b69512ab7820c501ece5e57e2c5cb3a82c15ea3f8e189"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-events@2.8.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-events/-/bare-events-2.8.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-events@2.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-events/-/bare-events-2.8.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "streamx",
      "version": "2.23.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "927f9ee387ac55f9f615afced023c571ec76edf8c82fa32455a7b4326eaaf84e9fd215afe7bf1808445bbfee26d36723c6f0ec3ca2e79b1ada97fad1ea504c02"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/streamx@2.23.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/streamx/-/streamx-2.23.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/streamx@2.23.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/streamx/-/streamx-2.23.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "events-universal",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2d47797aebdb30ba70385f26ea2bcf09b85079289854d6fc56cd1f43c4235e8d094e4107a73f29c5d41fd204ad96d68fa70d0271af1bdfd2b1bcaf5c7ca46203"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/events-universal@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/events-universal/-/events-universal-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/events-universal@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/events-universal/-/events-universal-1.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-fifo",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fddf6c7e8b38cb1ce9c240e4b8dee4d92a852ad60d9824f381f129cfcdb1df820cf7fcdcf0a1b14285e0d6588d0bf8b3a5133f30176de38366c78d595aa93e15"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fast-fifo@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-fifo/-/fast-fifo-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-fifo@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-fifo/-/fast-fifo-1.3.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "text-decoder",
      "version": "1.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dffa3dcf75f45f47d3ba9c2c62f474de927f0e35aeaaaadfc018134337560e24129bd2a2b40cb3ffd5aab13d89416eca5769be6c2da897fceaa56dfb347c4b68"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/text-decoder@1.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/text-decoder/-/text-decoder-1.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/text-decoder@1.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/text-decoder/-/text-decoder-1.2.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "b4a",
      "version": "1.7.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e50da67ead967c6b85a77b92fffd2ce9b68e24b32855db8f61578d983631bb9394035fdc05fbebd91212eef8bad8b74d8ffbab93585f9a3f3aec8deab7ab99ed"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/b4a@1.7.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/b4a/-/b4a-1.7.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/b4a@1.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/b4a/-/b4a-1.7.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-type",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2ddb679c411895d39cf3b0ebe06a6c2a74ad4ad664df37e0a04317cbccaf119917adc0aff51b580eb518585b01407b5a074b351145a672f4ba5e61196088f707"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-type@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-type/-/bare-type-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-type@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-type/-/bare-type-1.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brittle",
      "version": "3.19.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e1379dd4cb7da3d07aa0803a2262490ad07f16ffbe64edc80cd42045c1ce5d6498191522760c5c85a1ab5016919fee26967797ae02273e408fce2d233bca8a6c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/brittle@3.19.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/brittle/-/brittle-3.19.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brittle@3.19.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/brittle/-/brittle-3.19.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/brittle, /app/node_modules/.bin/brittle-bare, /app/node_modules/.bin/brittle-node, /app/node_modules/.bin/brittle-pear"
        },
        {
          "name": "cdx:npm:bin",
          "value": "brittle, brittle-bare, brittle-node, brittle-pear"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-assert",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "73abaf82f4c906ca530f1b559cf82b04a98b81ca56dc5a7bd8d54a0cb83aa13e108d06e11adbeb90732119830ad6c878be30473819ae51a972b7d852cd5dfb7d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-assert@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-assert/-/bare-assert-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-assert@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-assert/-/bare-assert-1.2.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-cov",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "48736a6ff586f6e754123f26e6a1927a1a1443da345f3bfc9eb7f81c87661be28d53f5dd84f2e14cfe553eb1e74803005e1033101e10fb6218674c7da8fccdd6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-cov@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-cov/-/bare-cov-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-cov@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-cov/-/bare-cov-1.2.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-fs",
      "version": "4.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bde4e747391be9a3c73af48a20ecbad0acd445f05d51f96be5545e23e35268f2fac5ff972dd38d420660a58bd4b992d543c742ab1a4102e75a38cd7e2a9014c7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-fs@4.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-fs/-/bare-fs-4.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-fs@4.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-fs/-/bare-fs-4.5.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-path",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b727d6d9c41c07934df126a28eb86a9f4661ec09c536c9dccd172e58e0c7d1e6005c1b09e60571014b8dafbb6c1d20ba219efb700d128adcd3face3b928b7c33"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-path@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-path/-/bare-path-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-path@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-path/-/bare-path-3.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-os",
      "version": "3.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4fe575fb5b2b536a98341989097664518e6f43407815294bdd00d13a729060ea9e89047c51b8cd1e53daf9321b33872e89d88df4669368e66048482cbcf6e1e4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-os@3.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-os/-/bare-os-3.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-os@3.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-os/-/bare-os-3.6.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-url",
      "version": "2.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "64cab881df67815e5a4cc6b9a7df947d8d1bdec93084710b6839211077ad31d5f42d1916f64cdaca6e28a3f121f86866d02083b8c4ec44818cff2b547356589b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-url@2.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-url/-/bare-url-2.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-url@2.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-url/-/bare-url-2.3.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-inspector",
      "version": "4.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c9893afbbb5354a24a1ce8dae7e4019fdf3d113bfca15b26c281f49c233e4180bac39302d37182e1a40d2be962a40652cf511a023e36599f167b08e9cb42fd4c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-inspector@4.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-inspector/-/bare-inspector-4.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-inspector@4.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-inspector/-/bare-inspector-4.0.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-tcp",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bf3423c0efe0da0a815e757626e2462e7021615e25fd8ad6b0d26bd2cc03dc8fe787ba21062fced4577d90fd4d36562adceec4f8a418f41327a6a94704477468"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-tcp@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-tcp/-/bare-tcp-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-tcp@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-tcp/-/bare-tcp-2.2.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-dns",
      "version": "2.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "69bc231e6a56a9244d07b579eb5e50c4f1fdd8bef5015cc59bf90a4ecf15622353022db155da27a6fd018c9d21c172f0a26a16fb1b1238f8d6e8f64f3b5e1ab2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-dns@2.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-dns/-/bare-dns-2.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-dns@2.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-dns/-/bare-dns-2.1.4.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-http1",
      "version": "4.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "21b41960964307ed2cae23131fbb16ff280efa67d29be7791ffaabe085212951f89221b0003c37feb992206027921a694b491e85bca98e9988239e2705b91a36"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-http1@4.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-http1/-/bare-http1-4.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-http1@4.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-http1/-/bare-http1-4.1.6.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-http-parser",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0372d30d37042dc98d27783996221a4b4dfcbff050c4e840f5c8e10444a7edea15ed00ae32821104a2c369d0ded3c7e5c722dbc48d9ffb5976319ff9f879ca3c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-http-parser@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-http-parser/-/bare-http-parser-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-http-parser@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-http-parser/-/bare-http-parser-1.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "bare-ws",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "490317cc16276bd7518f9ec3cf5fda83e5561c24576df0a33078327ccd85da586454bccc8e755264fef669578558f16a7b8f7845def42b385ed891251b016525"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-ws@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-ws/-/bare-ws-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-ws@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-ws/-/bare-ws-2.0.4.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-crypto",
      "version": "1.12.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "18b799392d9142411ac1534fbc12a6559416c12b388cb85cba54efb8e7cb74ff914cc3751afde9cfea08f5f7108fbfcb13640933870f3877f1e2ed22cc16931c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-crypto@1.12.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-crypto/-/bare-crypto-1.12.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-crypto@1.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-crypto/-/bare-crypto-1.12.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "crypto"
      ]
    },
    {
      "group": "",
      "name": "bare-https",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d726a68d6e5320f0688b0443195ad32e16ec4fcb16293a4308688dac9ca55455090f6f6bc21c2b06e77d294fd77b57d6b9571e7de4632a8c9ddb3b45543bfe4b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-https@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-https/-/bare-https-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-https@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-https/-/bare-https-2.1.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-tls",
      "version": "2.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a2e73a46a8e2cc846c51025c6e8508e86888bf052bdf417dc533f3c9616b0e9900d620ec5a2b4b0bf9921e37955d4d47e7caef16f9c7d7110d63cbe1247e5ee8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-tls@2.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-tls/-/bare-tls-2.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-tls@2.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-tls/-/bare-tls-2.1.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-net",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "505edc01b1ec184f87eae12a585e4850b068c35c79f1c859cf883700b807b6fef066c15c09b443b7424a584ba67f93a66b74164b543a68b8b4469965f1112532"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-net@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-net/-/bare-net-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-net@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-net/-/bare-net-2.2.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-pipe",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d130f735422187b2a03cc44bc8406a49795367c5ff8dcc35ba5023984ac35b0a0b74817d15d557bdba5bcf2288978e6cafd650e24e402938403a5aebb5972b5e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-pipe@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-pipe/-/bare-pipe-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-pipe@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-pipe/-/bare-pipe-4.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-process",
      "version": "4.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8a4cc4c3e1c62c1fb6952fd62d512caa2f015c1c3395e1b79fb0d8234bfafd836496f35a6ce20694b7757687feec9c39a1be23b0144fb727e5c1e55a858eeb14"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-process@4.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-process/-/bare-process-4.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-process@4.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-process/-/bare-process-4.2.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-env",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d2ef7ae0fe592c0c538be956e0a8e9ed8449439819afdc9c60eb632f1b12aeea60333dec9f967d9f8487fc92227c7c2f69db1fd5bac0d890233fef48396c138b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-env@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-env/-/bare-env-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-env@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-env/-/bare-env-3.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-hrtime",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "54c6f7b47a34e60b276eedce5d39a40e2c138cc94eb1b4262a8cac2aa284c91d3d9bbed3b83ad815b8f7439186935d1d00ab141eb9d79b009a789ab356907964"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-hrtime@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-hrtime/-/bare-hrtime-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-hrtime@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-hrtime/-/bare-hrtime-2.1.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-signals",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7cd1cc39d408958b93bcc0773a1f40a64f7d84b2a7df9d7e22bf2fcfe92188f4dc3aa232186e2e5968dd2d3cf159d606b00d1e4fe59edf2d0aef88638f69eaec"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-signals@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-signals/-/bare-signals-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-signals@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-signals/-/bare-signals-4.2.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-tty",
      "version": "5.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d6db844159164e307b921160bd9a1f3050a3b9594365d145944cd3e7df267caa43aac1af2f695d9d4776be06f6e538d3e4ed5df9c2ebcaf4ff39d3cfa3b9d02"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-tty@5.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-tty/-/bare-tty-5.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-tty@5.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-tty/-/bare-tty-5.0.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-v8-to-istanbul",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "08cd303e0c90b574d0ee1e2af0d8db4d9fc51f985ed09922c20a6ad25159640e6d915673990ffdba5e11ec4f9c365199248665419f6fe02c1b8156851b7cce00"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-v8-to-istanbul@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-v8-to-istanbul/-/bare-v8-to-istanbul-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-v8-to-istanbul@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-v8-to-istanbul/-/bare-v8-to-istanbul-1.0.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "bare-module",
      "version": "6.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9ff33efa81e0abc2b120409ba18da8f7327894331198c0f61173bdd088a9f0626e4bcd31f99d0c702c02f1d4f052442b586e4a1aecfc3299a8662b5fc8b409ad"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-module@6.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-module/-/bare-module-6.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-module@6.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-module/-/bare-module-6.1.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-bundle",
      "version": "1.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e0b5659c9007af4d0787a56ee995094b7f2b704b494f76f7bc28574ac06c2769a4d53374950fa0cddf83c392f4695eeea8366ff38b26bb05be3b4d97ecf7c397"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-bundle@1.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-bundle/-/bare-bundle-1.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-bundle@1.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-bundle/-/bare-bundle-1.10.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-module-lexer",
      "version": "1.4.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d24954e1e32c8e1ff07318bc15d1e63689b68f61789269173a1c8914bf6a4da485a76944de6e81b5b2a030763c4799a2a82f6bf3f21f03cc335e70b93acd7858"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-module-lexer@1.4.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-module-lexer/-/bare-module-lexer-1.4.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-module-lexer@1.4.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-module-lexer/-/bare-module-lexer-1.4.7.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "require-addon",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "54d3c36656202184305a9f63313ce58f1fa4d19b5ab4a95cbce864b59fda9cd3c8ddd43d35793b72ad94e22275c1df48af2b519d887212870559b91d3dbf8c60"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/require-addon@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/require-addon/-/require-addon-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/require-addon@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/require-addon/-/require-addon-1.2.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-addon-resolve",
      "version": "1.9.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "86f390635cc32babb4ad2af6ed3e909542e854bc22f09da4f071c7265c527d3ed741d43fedbb12f809e36241edbbf4e42fe826dda31700ab9c2642406eb0c6fe"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-addon-resolve@1.9.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-addon-resolve/-/bare-addon-resolve-1.9.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-addon-resolve@1.9.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-addon-resolve/-/bare-addon-resolve-1.9.6.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-module-resolve",
      "version": "1.12.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "26bcebaa50b74ddb3488a47042cf3120827e15189e280f659748daaa9a2d0cb66d8c93d57afcd1a1eb94619e46228d6dd73effa4845d93ce50de2ff6c502df11"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-module-resolve@1.12.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-module-resolve/-/bare-module-resolve-1.12.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-module-resolve@1.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-module-resolve/-/bare-module-resolve-1.12.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-semver",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "11255a3769f35a1708e6d7f767372af5aa8267aefa556ceac34ede119d2ac4070438015805ad295aaf2c2b7e0e41e1cb63726c7ca5d94bd983cb3cb11a378bcc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-semver@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-semver/-/bare-semver-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-semver@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-semver/-/bare-semver-1.0.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-utils",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9b10a416f9835379a50ff99bfa94fae242973acc7628cb162d06e780dd4b07e34e5df85f9d19f2be9cb755973a9bb8334317b9ec1b22f9a4c206a038fd2dde95"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-utils@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-utils/-/bare-utils-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-utils@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-utils/-/bare-utils-1.5.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-debug-log",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "562e363e4310b0d57d3d4a71d8697586292c871e4ef45ccc27aa3d367a29b1e83ba8b0412bb365df577444771fc0b1007e670f029cada5cd1915fabaf2edb615"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-debug-log@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-debug-log/-/bare-debug-log-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-debug-log@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-debug-log/-/bare-debug-log-2.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-encoding",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f53e424826b2b5a216669156c7d2d02c9ebfcff9b64a59da9fdb5004a98ebe8abf52d3c16ce293fc1d9fa36f57862e17d4516d371f0315db6b160aa6db2b1efd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-encoding@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-encoding/-/bare-encoding-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-encoding@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-encoding/-/bare-encoding-1.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-format",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d684be2d9ad62bab67627bcd4870c696373630fba7471c21a45ae2b82833345fa8925ae7c2604a0fdd6d4b4cadfa3a65da3dd481c483cc120c8954ef2ecf40f3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-format@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-format/-/bare-format-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-format@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-format/-/bare-format-1.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "v8-to-istanbul",
      "version": "9.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9221946a558dfab80127fd4e1d9b01b54e2b5d939f8ffeeb290c542ca948cf0cd04af3095143603f0244121ee053ac445710b46a1a0e06f376608f061fa14d80"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/v8-to-istanbul@9.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/v8-to-istanbul/-/v8-to-istanbul-9.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/v8-to-istanbul@9.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/v8-to-istanbul/-/v8-to-istanbul-9.3.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "@jridgewell",
      "name": "trace-mapping",
      "version": "0.3.31",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf3351f9275048327373c8e869e3fc410a0242bf0db98c76748232b65d507811191c9f6e5ba85e6ecad881bcfc849c1441aa374d608cb667d5f0dbb5b7038b03"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.31",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.31.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/trace-mapping@0.3.31",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.31.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "resolve-uri",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6d12128022233f6d3fb5b5923d63048b9e1054f45913192e0fd9492fe508c542adc15240f305b54eb6f58ccb354455e8d42053359ff98690bd42f98a59da292b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/resolve-uri@3.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/resolve-uri@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "sourcemap-codec",
      "version": "1.5.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "71843ddf5d20aeac6e7966e5f96b885086a251a0dc8fb58eab97d58449633558117ce52163d7f2db34ef7e8a96b2779b87c4a5ef45527056c80af2672ca0743a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.5.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/sourcemap-codec@1.5.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "istanbul-lib-coverage",
      "version": "2.0.6",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d9017fb7f6ae5a6d25b32f17b4a54f1b5f6fdec48e42525efd81d981f8dbfca0411ce19257e276abf4baef5adcabdb9306b2c05e6669a8989a41b313fb3354d7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40types/istanbul-lib-coverage@2.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/istanbul-lib-coverage/-/istanbul-lib-coverage-2.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/istanbul-lib-coverage@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/istanbul-lib-coverage/-/istanbul-lib-coverage-2.0.6.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/istanbul-lib-coverage"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "convert-source-map",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2afa78e7d1eb576144275080b22d4abbe318de46ac1f5f53172913cf6c5698c7aae9b936354dd75ef7c9f90eb59b4c64b56c2dfb51d261fdc966c4e6b3769126"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/convert-source-map@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/convert-source-map@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-2.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which-runtime",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e64c027d69a5efe6f634eecaacb321622863471d2d78a91ddf21a9d5793955a7f624675287eae05611002c00fd73fe7d74ff98c091d7a043bb7bc40fcbb80e93"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/which-runtime@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which-runtime/-/which-runtime-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which-runtime@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which-runtime/-/which-runtime-1.3.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "picomatch",
      "version": "4.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e604e680463fb2a2ba8055cb22c40d1f5f6559be1e6cf0cb03849d2cfeddb169085c75a51baea83ee56f5d21853e9a58673f190d9ab475862b6c77c109551bd5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/picomatch@4.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/picomatch@4.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-subprocess",
      "version": "5.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bb3fd0c48e3f873a0436b03383c3859a9647307b32beb9444d55775267b08340ff56193add3404ff90d10b53d093757396966821e2e1b2c4ab04bc94a3642a02"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-subprocess@5.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-subprocess/-/bare-subprocess-5.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-subprocess@5.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-subprocess/-/bare-subprocess-5.2.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "error-stack-parser",
      "version": "2.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4a4e55eb055accf86ae4c8693be014c499f9c7b5d25c697547ddd59fb8becd2d792835714228de8cd0abcfcdf8d3fd9b80b06347d1ad106f1954a38d0e372a19"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/error-stack-parser@2.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/error-stack-parser/-/error-stack-parser-2.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/error-stack-parser@2.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/error-stack-parser/-/error-stack-parser-2.1.4.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "stackframe",
      "version": "1.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a1e56db7b796412f8d6ba17ffd2e242762b655b4654bd0f8de6025332569556a2fcbda3e8df807f0ef5a83300dcda88b8dc940d2863351710ce0fbab85250287"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/stackframe@1.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stackframe/-/stackframe-1.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stackframe@1.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stackframe/-/stackframe-1.3.4.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globbie",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "85caf226629c7ed7fcdb17c15935b1b9421358822860edde735d38575ed230718597a54b6e6d5dd49bbd2d7f4bfa3c894f0202a5e997fdd98f23f1c66282abd4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/globbie@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/globbie/-/globbie-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globbie@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/globbie/-/globbie-1.0.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "paparam",
      "version": "1.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "639c3d62e9885c8506dbc9faa9487eccd0fb2f2ea558cb24e28ad0db84ee6027f56666178fcbdf72d38b661bd94dc2d74f8deee85ff96663d35cd4d54b6f70cd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/paparam@1.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/paparam/-/paparam-1.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/paparam@1.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/paparam/-/paparam-1.9.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "same-object",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "72c1d686f52c2db20e1c333f9cff8a1d633e04b3ec2335a415af076f3688d06ec1a8a5e0c7eec52692931a02d7cb3e5a99f758d8e5417265d3a9838c124d38a2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/same-object@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/same-object/-/same-object-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/same-object@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/same-object/-/same-object-1.0.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "test-tmp",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "195820c4683e8d7a8fd966e3bb9d0954ba3ef44fa720e3cfc96aa0afadc46ce9cd22d20abb57046c9a5358025e7e59f21aa5ceb5c308ee28c7469f3c19491f0c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/test-tmp@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/test-tmp/-/test-tmp-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/test-tmp@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/test-tmp/-/test-tmp-1.4.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tmatch",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "21bf4eb419291e7d3bb573f4e1294dd52611c4581393ac123361019a38f1ba0e2ee515cf4552e47452524b53e6ad089d69207c2ebbbd9d1b5589006c6f1cc4e5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tmatch@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tmatch/-/tmatch-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tmatch@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tmatch/-/tmatch-5.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prettier",
      "version": "3.7.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bfa50d8b5fb7852955beff1f49aa146e0804339544aca9a6a4603b3e5dc717c57ab8a63baef0a504e2651fac8dc10b5f4ee78d9065693affe6b562fd2f86e044"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/prettier@3.7.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/prettier/-/prettier-3.7.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prettier@3.7.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/prettier/-/prettier-3.7.4.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/prettier"
        },
        {
          "name": "cdx:npm:bin",
          "value": "prettier"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prettier-config-standard",
      "version": "7.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "360672e1362ea4947a68c32e57f02ab3438d9d5865153f0f5d591846c931444abc1148491ce75d55f0713d5e9f5a981c012a494a0bef8552e4d0204ee4cdc7bf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/prettier-config-standard@7.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/prettier-config-standard/-/prettier-config-standard-7.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prettier-config-standard@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/prettier-config-standard/-/prettier-config-standard-7.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/bare-events@2.8.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/events-universal@1.0.1",
      "dependsOn": [
        "pkg:npm/bare-events@2.8.2"
      ]
    },
    {
      "ref": "pkg:npm/fast-fifo@1.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/b4a@1.7.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/text-decoder@1.2.3",
      "dependsOn": [
        "pkg:npm/b4a@1.7.3"
      ]
    },
    {
      "ref": "pkg:npm/streamx@2.23.0",
      "dependsOn": [
        "pkg:npm/events-universal@1.0.1",
        "pkg:npm/fast-fifo@1.3.2",
        "pkg:npm/text-decoder@1.2.3"
      ]
    },
    {
      "ref": "pkg:npm/bare-stream@2.7.0",
      "dependsOn": [
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/streamx@2.23.0"
      ]
    },
    {
      "ref": "pkg:npm/bare-ansi-escapes@2.2.3",
      "dependsOn": [
        "pkg:npm/bare-stream@2.7.0"
      ]
    },
    {
      "ref": "pkg:npm/bare-type@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-inspect@3.1.4",
      "dependsOn": [
        "pkg:npm/bare-ansi-escapes@2.2.3",
        "pkg:npm/bare-type@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/bare-assert@1.2.0",
      "dependsOn": [
        "pkg:npm/bare-inspect@3.1.4",
        "pkg:npm/brittle@3.19.1",
        "pkg:npm/prettier-config-standard@7.0.0",
        "pkg:npm/prettier@3.7.4"
      ]
    },
    {
      "ref": "pkg:npm/bare-os@3.6.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-path@3.0.0",
      "dependsOn": [
        "pkg:npm/bare-os@3.6.2"
      ]
    },
    {
      "ref": "pkg:npm/bare-url@2.3.2",
      "dependsOn": [
        "pkg:npm/bare-path@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/bare-fs@4.5.2",
      "dependsOn": [
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/bare-path@3.0.0",
        "pkg:npm/bare-stream@2.7.0",
        "pkg:npm/bare-url@2.3.2",
        "pkg:npm/fast-fifo@1.3.2"
      ]
    },
    {
      "ref": "pkg:npm/bare-dns@2.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-tcp@2.2.0",
      "dependsOn": [
        "pkg:npm/bare-dns@2.1.4",
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/bare-stream@2.7.0"
      ]
    },
    {
      "ref": "pkg:npm/bare-http-parser@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-http1@4.1.6",
      "dependsOn": [
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/bare-http-parser@1.0.1",
        "pkg:npm/bare-stream@2.7.0",
        "pkg:npm/bare-tcp@2.2.0",
        "pkg:npm/bare-url@2.3.2"
      ]
    },
    {
      "ref": "pkg:npm/bare-crypto@1.12.0",
      "dependsOn": [
        "pkg:npm/bare-stream@2.7.0"
      ]
    },
    {
      "ref": "pkg:npm/bare-pipe@4.1.0",
      "dependsOn": [
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/bare-stream@2.7.0"
      ]
    },
    {
      "ref": "pkg:npm/bare-net@2.2.0",
      "dependsOn": [
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/bare-pipe@4.1.0",
        "pkg:npm/bare-stream@2.7.0",
        "pkg:npm/bare-tcp@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/bare-tls@2.1.5",
      "dependsOn": [
        "pkg:npm/bare-net@2.2.0",
        "pkg:npm/bare-stream@2.7.0"
      ]
    },
    {
      "ref": "pkg:npm/bare-https@2.1.1",
      "dependsOn": [
        "pkg:npm/bare-http1@4.1.6",
        "pkg:npm/bare-tcp@2.2.0",
        "pkg:npm/bare-tls@2.1.5"
      ]
    },
    {
      "ref": "pkg:npm/bare-ws@2.0.4",
      "dependsOn": [
        "pkg:npm/bare-crypto@1.12.0",
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/bare-http1@4.1.6",
        "pkg:npm/bare-https@2.1.1",
        "pkg:npm/bare-stream@2.7.0",
        "pkg:npm/bare-url@2.3.2"
      ]
    },
    {
      "ref": "pkg:npm/bare-inspector@4.0.3",
      "dependsOn": [
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/bare-http1@4.1.6",
        "pkg:npm/bare-stream@2.7.0",
        "pkg:npm/bare-tcp@2.2.0",
        "pkg:npm/bare-url@2.3.2",
        "pkg:npm/bare-ws@2.0.4"
      ]
    },
    {
      "ref": "pkg:npm/bare-env@3.0.0",
      "dependsOn": [
        "pkg:npm/bare-os@3.6.2"
      ]
    },
    {
      "ref": "pkg:npm/bare-hrtime@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-signals@4.2.0",
      "dependsOn": [
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/bare-os@3.6.2"
      ]
    },
    {
      "ref": "pkg:npm/bare-tty@5.0.3",
      "dependsOn": [
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/bare-signals@4.2.0",
        "pkg:npm/bare-stream@2.7.0"
      ]
    },
    {
      "ref": "pkg:npm/bare-process@4.2.2",
      "dependsOn": [
        "pkg:npm/bare-env@3.0.0",
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/bare-hrtime@2.1.1",
        "pkg:npm/bare-os@3.6.2",
        "pkg:npm/bare-pipe@4.1.0",
        "pkg:npm/bare-signals@4.2.0",
        "pkg:npm/bare-tty@5.0.3"
      ]
    },
    {
      "ref": "pkg:npm/bare-bundle@1.10.0",
      "dependsOn": [
        "pkg:npm/bare-url@2.3.2"
      ]
    },
    {
      "ref": "pkg:npm/bare-semver@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-module-resolve@1.12.0",
      "dependsOn": [
        "pkg:npm/bare-semver@1.0.2",
        "pkg:npm/bare-url@2.3.2"
      ]
    },
    {
      "ref": "pkg:npm/bare-addon-resolve@1.9.6",
      "dependsOn": [
        "pkg:npm/bare-module-resolve@1.12.0",
        "pkg:npm/bare-semver@1.0.2",
        "pkg:npm/bare-url@2.3.2"
      ]
    },
    {
      "ref": "pkg:npm/require-addon@1.2.0",
      "dependsOn": [
        "pkg:npm/bare-addon-resolve@1.9.6"
      ]
    },
    {
      "ref": "pkg:npm/bare-module-lexer@1.4.7",
      "dependsOn": [
        "pkg:npm/require-addon@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/bare-module@6.1.2",
      "dependsOn": [
        "pkg:npm/bare-bundle@1.10.0",
        "pkg:npm/bare-module-lexer@1.4.7",
        "pkg:npm/bare-module-resolve@1.12.0",
        "pkg:npm/bare-path@3.0.0",
        "pkg:npm/bare-url@2.3.2"
      ]
    },
    {
      "ref": "pkg:npm/bare-debug-log@2.0.0",
      "dependsOn": [
        "pkg:npm/bare-os@3.6.2"
      ]
    },
    {
      "ref": "pkg:npm/bare-encoding@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-format@1.0.1",
      "dependsOn": [
        "pkg:npm/bare-inspect@3.1.4"
      ]
    },
    {
      "ref": "pkg:npm/bare-utils@1.5.1",
      "dependsOn": [
        "pkg:npm/bare-debug-log@2.0.0",
        "pkg:npm/bare-encoding@1.0.0",
        "pkg:npm/bare-format@1.0.1",
        "pkg:npm/bare-inspect@3.1.4",
        "pkg:npm/bare-type@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/@jridgewell/resolve-uri@3.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/sourcemap-codec@1.5.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/trace-mapping@0.3.31",
      "dependsOn": [
        "pkg:npm/@jridgewell/resolve-uri@3.1.2",
        "pkg:npm/@jridgewell/sourcemap-codec@1.5.5"
      ]
    },
    {
      "ref": "pkg:npm/@types/istanbul-lib-coverage@2.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/convert-source-map@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/v8-to-istanbul@9.3.0",
      "dependsOn": [
        "pkg:npm/@jridgewell/trace-mapping@0.3.31",
        "pkg:npm/@types/istanbul-lib-coverage@2.0.6",
        "pkg:npm/convert-source-map@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/which-runtime@1.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-v8-to-istanbul@1.0.2",
      "dependsOn": [
        "pkg:npm/bare-fs@4.5.2",
        "pkg:npm/bare-module@6.1.2",
        "pkg:npm/bare-path@3.0.0",
        "pkg:npm/bare-process@4.2.2",
        "pkg:npm/bare-url@2.3.2",
        "pkg:npm/bare-utils@1.5.1",
        "pkg:npm/v8-to-istanbul@9.3.0",
        "pkg:npm/which-runtime@1.3.2"
      ]
    },
    {
      "ref": "pkg:npm/picomatch@4.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-cov@1.2.1",
      "dependsOn": [
        "pkg:npm/bare-fs@4.5.2",
        "pkg:npm/bare-inspector@4.0.3",
        "pkg:npm/bare-path@3.0.0",
        "pkg:npm/bare-process@4.2.2",
        "pkg:npm/bare-url@2.3.2",
        "pkg:npm/bare-v8-to-istanbul@1.0.2",
        "pkg:npm/picomatch@4.0.3",
        "pkg:npm/which-runtime@1.3.2"
      ]
    },
    {
      "ref": "pkg:npm/bare-subprocess@5.2.1",
      "dependsOn": [
        "pkg:npm/bare-env@3.0.0",
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/bare-os@3.6.2",
        "pkg:npm/bare-pipe@4.1.0",
        "pkg:npm/bare-url@2.3.2"
      ]
    },
    {
      "ref": "pkg:npm/stackframe@1.3.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/error-stack-parser@2.1.4",
      "dependsOn": [
        "pkg:npm/stackframe@1.3.4"
      ]
    },
    {
      "ref": "pkg:npm/globbie@1.0.3",
      "dependsOn": [
        "pkg:npm/bare-fs@4.5.2",
        "pkg:npm/bare-path@3.0.0",
        "pkg:npm/bare-process@4.2.2",
        "pkg:npm/picomatch@4.0.3"
      ]
    },
    {
      "ref": "pkg:npm/paparam@1.9.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/same-object@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/test-tmp@1.4.0",
      "dependsOn": [
        "pkg:npm/bare-fs@4.5.2",
        "pkg:npm/bare-os@3.6.2",
        "pkg:npm/bare-path@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/tmatch@5.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/brittle@3.19.1",
      "dependsOn": [
        "pkg:npm/b4a@1.7.3",
        "pkg:npm/bare-cov@1.2.1",
        "pkg:npm/bare-fs@4.5.2",
        "pkg:npm/bare-os@3.6.2",
        "pkg:npm/bare-path@3.0.0",
        "pkg:npm/bare-process@4.2.2",
        "pkg:npm/bare-subprocess@5.2.1",
        "pkg:npm/bare-url@2.3.2",
        "pkg:npm/error-stack-parser@2.1.4",
        "pkg:npm/globbie@1.0.3",
        "pkg:npm/paparam@1.9.1",
        "pkg:npm/same-object@1.0.2",
        "pkg:npm/test-tmp@1.4.0",
        "pkg:npm/tmatch@5.0.0"
      ]
    },
    {
      "ref": "pkg:npm/prettier@3.7.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/prettier-config-standard@7.0.0",
      "dependsOn": [
        "pkg:npm/prettier@3.7.4"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/bare-assert@1.2.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.9.0",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.0",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.0",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-10-23T11:11:09Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Friday, October 23, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'bare-assert' with version '1.2.0'. The package type in this SBOM is npm with 2 purl namespaces described under components. The components were identified from the source files: package-lock.json."
    }
  ]
}