{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:9652af1a-1869-4cdc-9df8-f580a4ae9367",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-20T23:37:49Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.7",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.7",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.7",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "bare-inspect",
      "group": "",
      "version": "3.1.10",
      "description": "Inspect objects as strings for debugging",
      "purl": "pkg:npm/bare-inspect@3.1.10",
      "bom-ref": "pkg:npm/bare-inspect@3.1.10",
      "author": "Holepunch",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "format, lint, test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "components": [
        {
          "group": "",
          "name": "_bare",
          "version": "",
          "purl": "pkg:npm/_bare",
          "type": "application",
          "bom-ref": "pkg:npm/_bare"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/holepunchto/bare-inspect#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/holepunchto/bare-inspect.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@jridgewell\\n@types"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "build/android-arm/_bare/package-lock.json\\nbuild/android-arm64/_bare/package-lock.json\\nbuild/android-ia32/_bare/package-lock.json\\nbuild/android-x64/_bare/package-lock.json\\nbuild/linux-arm64/_bare/package-lock.json\\nbuild/linux-x64/_bare/package-lock.json\\npackage-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "bare-ansi-escapes",
      "version": "2.2.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d36112e3f13645baed6529c727d2e7b4185890b03a94fa5211e3fc8aa4b731c701215855065126aee17523b1d9ab1e50f1a8937987d055eaa6ad4f583b6c98a1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-ansi-escapes@2.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-ansi-escapes/-/bare-ansi-escapes-2.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-ansi-escapes@2.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-ansi-escapes/-/bare-ansi-escapes-2.2.3.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "bare-ansi-escapes"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "index.js",
            "line": 1
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-buffer",
      "version": "3.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ff14536c1b8b8aceec1372338a2d00d323a6f96a87d7f821d76515aa4a4800e2d9e205a5bb22b44c76c607e532b0a23c6418dc67e31a12cf40bb17328b3db22c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-buffer@3.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-buffer/-/bare-buffer-3.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-buffer@3.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-buffer/-/bare-buffer-3.7.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-stream",
      "version": "2.13.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3dcad0f2554b6e226c70d9b529ecfe629e06cb800719c375973c23bdfe4dc9b59e9fb56f12051fc9f9d7609db336a5a7cce7c26f501baba947f2d8b4b3242ccc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-stream@2.13.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-stream/-/bare-stream-2.13.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-stream@2.13.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-stream/-/bare-stream-2.13.4.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-events",
      "version": "2.9.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0083ca8a857bfd8ffc29f6770008633c9c4b2db638f52eb8626e436a4665520ef9a90893814abd8442681306b87947b33d4957472fe2e4da6c2afa3d8e02a6a0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-events@2.9.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-events/-/bare-events-2.9.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-events@2.9.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-events/-/bare-events-2.9.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "b4a",
      "version": "1.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6a2aab7b536bd01ffa0e0136379bf04dcfb6fe8419e16875b783739d8638134d32f0b0ade8da9d46ff35b28d34a28dbb0fc315293a546bf330514b412d70a80f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/b4a@1.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/b4a/-/b4a-1.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/b4a@1.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/b4a/-/b4a-1.8.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "streamx",
      "version": "2.28.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cc4cd76f4b3909db3bb6a307eab859d3995c2727425a240f13088d9e056acecc4273deb6bcb638530fa65bba1df240c7db9f24d94cff26b3a474800085287d54"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/streamx@2.28.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/streamx/-/streamx-2.28.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/streamx@2.28.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/streamx/-/streamx-2.28.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "events-universal",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2d47797aebdb30ba70385f26ea2bcf09b85079289854d6fc56cd1f43c4235e8d094e4107a73f29c5d41fd204ad96d68fa70d0271af1bdfd2b1bcaf5c7ca46203"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/events-universal@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/events-universal/-/events-universal-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/events-universal@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/events-universal/-/events-universal-1.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-fifo",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fddf6c7e8b38cb1ce9c240e4b8dee4d92a852ad60d9824f381f129cfcdb1df820cf7fcdcf0a1b14285e0d6588d0bf8b3a5133f30176de38366c78d595aa93e15"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fast-fifo@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-fifo/-/fast-fifo-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-fifo@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-fifo/-/fast-fifo-1.3.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "text-decoder",
      "version": "1.2.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "be52f2b5791e3f8c6f12ada8b477897d24084725b1a3fa191846d7aed10417d1e79ab765cb9f6c51bcd9fd08325ae2d81dcb421f1145e2d45064d43d93ad04c5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/text-decoder@1.2.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/text-decoder/-/text-decoder-1.2.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/text-decoder@1.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/text-decoder/-/text-decoder-1.2.7.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "teex",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "79813a88423ad8d8b51fca086bb2a50d4eae401b6aaf811a8e78b7c17eeba5f5c3f32b05c7ccf4f9dae2f8a5843d6a41b315dfc6ee7cc7fd23bd3553d5e90e4a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/teex@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/teex/-/teex-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/teex@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/teex/-/teex-1.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-type",
      "version": "1.1.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e47c1b8c36e762bf8bc2ee48e7d22ac0e15c45c568e23c68e34f2de3680a84a9e2930d288f0c8f5cf971e7c0103f8751d95bc6c39ee9a57feac580a7eb45ae8f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-type@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-type/-/bare-type-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-type@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-type/-/bare-type-1.1.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "bare-type"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "index.js",
            "line": 2
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brittle",
      "version": "3.19.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e1379dd4cb7da3d07aa0803a2262490ad07f16ffbe64edc80cd42045c1ce5d6498191522760c5c85a1ab5016919fee26967797ae02273e408fce2d233bca8a6c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/brittle@3.19.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/brittle/-/brittle-3.19.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brittle@3.19.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/brittle/-/brittle-3.19.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/brittle, /app/node_modules/.bin/brittle-bare, /app/node_modules/.bin/brittle-node, /app/node_modules/.bin/brittle-pear"
        },
        {
          "name": "cdx:npm:bin",
          "value": "brittle, brittle-bare, brittle-node, brittle-pear"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-assert",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "73abaf82f4c906ca530f1b559cf82b04a98b81ca56dc5a7bd8d54a0cb83aa13e108d06e11adbeb90732119830ad6c878be30473819ae51a972b7d852cd5dfb7d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-assert@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-assert/-/bare-assert-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-assert@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-assert/-/bare-assert-1.2.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-inspect",
      "version": "3.1.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "42ed355d9353213dbf6d2f64edce80dce5ee0330675b00c27a31ab8bbe81525b5d16a55ee84b7f23154e4926dc0e9ade4925b0a90e6902efdbc4513a84f0d645"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-inspect@3.1.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-inspect/-/bare-inspect-3.1.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-inspect@3.1.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-inspect/-/bare-inspect-3.1.10.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-cov",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "77f6f81dd2f9a21643c01bc37a025e4a49a8d57d8c1a59b6da35f3b98d83ef09765b5fbb9e4fdbefe1cca20c2051afb38bcad55512502870873c7601269be5bf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-cov@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-cov/-/bare-cov-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-cov@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-cov/-/bare-cov-1.2.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-fs",
      "version": "4.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3759e75dd1d900e4acb73d178878a4192e0718c1f80a74b086a59d19040caaa76fa782726e6f6c1374755959e959577848591cf2bc8f0c12d588d2f0884a840a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-fs@4.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-fs/-/bare-fs-4.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-fs@4.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-fs/-/bare-fs-4.8.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-path",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "67229bb2ebaa2ba020d0af295fa5794f1aba5de251bd8fb05ee7271464638b25583fd6160e9210ba093f6fe7a7458ac460125aa8bce08514295cf311ef7e3537"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-path@3.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-path/-/bare-path-3.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-path@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-path/-/bare-path-3.1.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-url",
      "version": "2.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dda6ec7c4ce8c85a2c593f2ff3765c2606d3271bfe4bfb08ee305f7823255156ad49a79f466c307aa061169325950bfe1d3c6cfc56db4e854ec35734e4d39191"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-url@2.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-url/-/bare-url-2.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-url@2.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-url/-/bare-url-2.5.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-inspector",
      "version": "6.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3d1c66678805f8add32f31ae6e0445bf37440b26d309229a72480db0075de1eed276f202c4c9068fea79897edb48a6129a00e7c60091fb667a517996ca42a1bf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-inspector@6.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-inspector/-/bare-inspector-6.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-inspector@6.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-inspector/-/bare-inspector-6.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-tcp",
      "version": "2.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f1ff1414fecedbb80819a55624fcac4366a6f0b483e980ae5526e74db3ab423503d119161197b1be2d90eba3fdf4c2f149ea619728e853498bc569a8cd124c9c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-tcp@2.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-tcp/-/bare-tcp-2.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-tcp@2.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-tcp/-/bare-tcp-2.6.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-pipe",
      "version": "4.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dcfe0c61380ecacd416f3e5d816cf07eba0d38e97cc75cd62474c7565c2ca234e1855fee24f45ffaa16b61804e9c8d2f4222492c9b47970f1ae0eb23fe472c25"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-pipe@4.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-pipe/-/bare-pipe-4.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-pipe@4.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-pipe/-/bare-pipe-4.3.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-dns",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "884aa38f5db679775b0cfe605f093f346fd7548e71a068d0036e1494604f69f51e30819eb31519e6bc43be33573c11c3c9390ef87dc8b15e62cd9f13e481805c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-dns@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-dns/-/bare-dns-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-dns@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-dns/-/bare-dns-2.2.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-http1",
      "version": "4.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cad0fddeee9b2752293ac16a6a646774145e55bc0b3f0f571f15fcc3823f36fa4b306a511c8169c11d889fb21ec29f82e3d50e9a8ee5cb6e243e1aa2c9fdf8e2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-http1@4.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-http1/-/bare-http1-4.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-http1@4.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-http1/-/bare-http1-4.6.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-hrtime",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "78fbb46b1a276dec2fb94bfd4c5aa37ef9d94dac3e98be09371d6aefd770f13dc3210123a87b3ea57ca3f768217a96bc2b5e0a2ed5f719d52e01507e7da6860f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-hrtime@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-hrtime/-/bare-hrtime-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-hrtime@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-hrtime/-/bare-hrtime-2.1.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-http-parser",
      "version": "2.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e82463c6a31dac4a0a281092e856dd654b95b11b72aaad7c05469ef65f4de6891257be52f6550017d7f968548a4cdc9b052fe172797114da1c7695db7763a16b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-http-parser@2.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-http-parser/-/bare-http-parser-2.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-http-parser@2.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-http-parser/-/bare-http-parser-2.1.4.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "bare-ws",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9e249fc0e7d40413362012b83b09d2925a1890b9d0f4a7a290cd577c01ada395052fa0c52d883684013d392d625a5b02bf66f476d1816549ded154eb65185f53"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-ws@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-ws/-/bare-ws-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-ws@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-ws/-/bare-ws-3.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-crypto",
      "version": "1.15.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "99a715f656f2253b0b3d15c9901b73f22bd3184a372c2c892272d3f4807f3d627ba515f0bc7b3f14fe1bc7f7d6c3e1d99227a921808057672e539091f765d60b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-crypto@1.15.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-crypto/-/bare-crypto-1.15.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-crypto@1.15.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-crypto/-/bare-crypto-1.15.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "crypto"
      ]
    },
    {
      "group": "",
      "name": "bare-https",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1cd012d2aec20405c60c5472ff1698244b0069572fc83457294d5bfcac52ff375c7c15ac4150744e7b52cf3dc896a6796561e268e3ab31800efe82038294cb91"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-https@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-https/-/bare-https-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-https@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-https/-/bare-https-3.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-tls",
      "version": "3.1.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "601a693dc9dbf681228b073a06ea67745305dd100ae8a3ed9030ddf49c58d5a4b9af0617dec00b1c6f15d9712f2218f397cc68958f0f3ddd24bc285961e9429f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-tls@3.1.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-tls/-/bare-tls-3.1.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-tls@3.1.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-tls/-/bare-tls-3.1.10.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-net",
      "version": "2.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ab59e85c524a9fe78d8babd762fd98fb91539e7fa8eeaa658b89b695465374af1c06356cdb319aca4bb34d421adbdbfbd1e3ac408f4e008c98c0ddce0c7b4569"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-net@2.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-net/-/bare-net-2.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-net@2.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-net/-/bare-net-2.3.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-process",
      "version": "4.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "09a02fcb5b6ba6eb43e3d9adc1f27a1bbe6fc9d8678ab2eb5bf1774b39e9e07e79e9ed6e667f18328f442e27014eb198cbb44135480f97d6e907f111cd10a20f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-process@4.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-process/-/bare-process-4.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-process@4.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-process/-/bare-process-4.5.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-abort",
      "version": "2.0.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cdd73c97cf1e075d49b33e6b0ddeac08082fda45055e076b656a0c96053a24c91f022d7fbae1850b72041ecc0a6c84504e4e47dd3e4232e79c86c5d8c6268795"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-abort@2.0.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-abort/-/bare-abort-2.0.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-abort@2.0.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-abort/-/bare-abort-2.0.13.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-env",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "05da0bbe7cda591d18cb226b784c78cc6d8e774002fecf49499f845f23192ae9e99fccc4811fdd1afdfb85d154698d5b8c391c44abdc2a4172248c2527409a60"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-env@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-env/-/bare-env-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-env@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-env/-/bare-env-3.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-os",
      "version": "3.9.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7c5e10ed0b32295179463d2abc8f01814363ab30b626f425a5368f2e3549571615517e59afdba7fb2df0d47980e2734a745991053f33fd69ab8ef5f35d57ab29"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-os@3.9.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-os/-/bare-os-3.9.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-os@3.9.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-os/-/bare-os-3.9.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-posix",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6f8aae03c772455bd7d1a14800889ebf9cc50131f02141abe361a6b7e0aa881360fdb76c364ae3e1b6e47a8b4c38c8a58c94b80c2304e64cb024efd31702a8d4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-posix@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-posix/-/bare-posix-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-posix@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-posix/-/bare-posix-1.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-signals",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f069fc6c1154876014089f70596163486588a351c85122109d74491929bf7fb1820ccaacb89851991d5d4fe1ed0da0c191ebb697c2a8c6dd892eeadf279c8757"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-signals@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-signals/-/bare-signals-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-signals@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-signals/-/bare-signals-5.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-stdio",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f0144cc7b45631609b0662a1c87801728eb627e3e0b2cefe10f236d4bdd1f7ec34529c0361651471b13461339eb06cadecce8ded5b68b2161bcf0acfd29239d9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-stdio@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-stdio/-/bare-stdio-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-stdio@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-stdio/-/bare-stdio-1.0.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-tty",
      "version": "5.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bc7f6081dbbaabe1e294229c6027d2cf0b8dd90691e3e8063fe26260de7328c84c23ab4a78a9d9302b84fc026817d95b4a8d05ae23dd668280e5b3b66f4324df"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-tty@5.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-tty/-/bare-tty-5.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-tty@5.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-tty/-/bare-tty-5.2.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-v8-to-istanbul",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "08cd303e0c90b574d0ee1e2af0d8db4d9fc51f985ed09922c20a6ad25159640e6d915673990ffdba5e11ec4f9c365199248665419f6fe02c1b8156851b7cce00"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-v8-to-istanbul@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-v8-to-istanbul/-/bare-v8-to-istanbul-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-v8-to-istanbul@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-v8-to-istanbul/-/bare-v8-to-istanbul-1.0.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "bare-module",
      "version": "6.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "627e15e60e44a8640be0b6143a6b7b7e32b38f624f5b224ea84de53e8799c1f507e6b93808a51f663e89843c1bce10580aaaa65208e0439698f1c8a100f20b2c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-module@6.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-module/-/bare-module-6.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-module@6.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-module/-/bare-module-6.4.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-bundle",
      "version": "1.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e0b5659c9007af4d0787a56ee995094b7f2b704b494f76f7bc28574ac06c2769a4d53374950fa0cddf83c392f4695eeea8366ff38b26bb05be3b4d97ecf7c397"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-bundle@1.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-bundle/-/bare-bundle-1.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-bundle@1.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-bundle/-/bare-bundle-1.10.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-module-lexer",
      "version": "1.6.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9ed4a7a5df8fc5b191314d21d6c21b6705e77c5f7f7e116278ba8a6392ef34383517b87d42aff0a76925f133c05589b13e1aae9cfaaaa70d6be3c0d8d4f36f48"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-module-lexer@1.6.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-module-lexer/-/bare-module-lexer-1.6.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-module-lexer@1.6.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-module-lexer/-/bare-module-lexer-1.6.4.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "require-addon",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "54d3c36656202184305a9f63313ce58f1fa4d19b5ab4a95cbce864b59fda9cd3c8ddd43d35793b72ad94e22275c1df48af2b519d887212870559b91d3dbf8c60"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/require-addon@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/require-addon/-/require-addon-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/require-addon@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/require-addon/-/require-addon-1.2.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-addon-resolve",
      "version": "1.10.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "17f483d9dbbc91eb9849be318a99c6cf98f613aca135d1c0f19571b4769eea1dae3aba412238db857be3cca65baf95d43b3a81ce1fe2f06545c9c8f60e515020"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-addon-resolve@1.10.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-addon-resolve/-/bare-addon-resolve-1.10.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-addon-resolve@1.10.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-addon-resolve/-/bare-addon-resolve-1.10.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-module-resolve",
      "version": "1.12.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5c7e0836bbb1ea80988199a87bd4ef6fbdd1408070af92a0bf5920b63bb05b828b28735782fc159effa2032783ac7ca964c6ebc2fd30d65c2fa81f9c9e5bc98"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-module-resolve@1.12.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-module-resolve/-/bare-module-resolve-1.12.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-module-resolve@1.12.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-module-resolve/-/bare-module-resolve-1.12.4.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-semver",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d47c39a89ee15dd56ddee3d4aa37854eec72bc15096aebf3e40d48da393c8338d9307a74e27fffea757d3036c6f42330efc247636946574c3ab3ffcbac04a6db"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-semver@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-semver/-/bare-semver-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-semver@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-semver/-/bare-semver-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "build/linux-x64/_bare/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "build/linux-arm64/_bare/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "build/android-x64/_bare/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "build/android-ia32/_bare/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "build/android-arm64/_bare/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "build/android-arm/_bare/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "build/android-arm/_bare/package-lock.json"
              }
            ],
            "concludedValue": "build/android-arm/_bare/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-type-stripper",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1d592a4f1301f6f82c31cb6ba9165879d7f2992f8ecdea50d469fdbb617f1a031be27f404484b7d7e7f8ee59ee084bb6291151d4a629db2bbccf4be5c38b505c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-type-stripper@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-type-stripper/-/bare-type-stripper-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-type-stripper@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-type-stripper/-/bare-type-stripper-0.1.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-utils",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5a1404224900c644a75bbbb5420ac8d007cd9b926932bb844d7798b1be6a9e4049d134df34aca0666b21eab9281c100d695f82ffb25e77b6c93fd3a61071bbad"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-utils@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-utils/-/bare-utils-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-utils@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-utils/-/bare-utils-1.6.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-debug-log",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "562e363e4310b0d57d3d4a71d8697586292c871e4ef45ccc27aa3d367a29b1e83ba8b0412bb365df577444771fc0b1007e670f029cada5cd1915fabaf2edb615"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-debug-log@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-debug-log/-/bare-debug-log-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-debug-log@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-debug-log/-/bare-debug-log-2.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-encoding",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2aa7feb7f6b3b35de551ec8ae136fb85ae3074b45729609743cc35ad59adecab683c23dd1c3fd7c2decb048b024b0c06825adc99b968e5538b6b96af909a942c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-encoding@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-encoding/-/bare-encoding-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-encoding@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-encoding/-/bare-encoding-1.0.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-format",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1acc1d8673a73fd42dc116eb7f8c0b029c39c2276468b32c2ded973acdf97d00f661f10dd40a681a46be719ecf7efcf13207d85e63218ffd8e1a5567e7f0f183"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-format@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-format/-/bare-format-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-format@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-format/-/bare-format-1.0.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-stylize",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "977323988978efa6d68a36167f745b13ea2c9788ae5d238cb9dce9d2f02acc82bb80f827ffe1b7a00c69f0e8a7f42145f75d4a04fd0b3bd92db3c0a2f2619969"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-stylize@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-stylize/-/bare-stylize-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-stylize@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-stylize/-/bare-stylize-0.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "v8-to-istanbul",
      "version": "9.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9221946a558dfab80127fd4e1d9b01b54e2b5d939f8ffeeb290c542ca948cf0cd04af3095143603f0244121ee053ac445710b46a1a0e06f376608f061fa14d80"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/v8-to-istanbul@9.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/v8-to-istanbul/-/v8-to-istanbul-9.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/v8-to-istanbul@9.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/v8-to-istanbul/-/v8-to-istanbul-9.3.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "@jridgewell",
      "name": "trace-mapping",
      "version": "0.3.31",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf3351f9275048327373c8e869e3fc410a0242bf0db98c76748232b65d507811191c9f6e5ba85e6ecad881bcfc849c1441aa374d608cb667d5f0dbb5b7038b03"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.31",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.31.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/trace-mapping@0.3.31",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.31.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "resolve-uri",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6d12128022233f6d3fb5b5923d63048b9e1054f45913192e0fd9492fe508c542adc15240f305b54eb6f58ccb354455e8d42053359ff98690bd42f98a59da292b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/resolve-uri@3.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/resolve-uri@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "sourcemap-codec",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4fb8dffb9ce0b191f0349e25bd0eff69ecdbca4d27357fb32555a998703b558b04c7b6bbaabe5183921bb4916a920cdee58dacaeeab545463c43cdfb39dee217"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/sourcemap-codec@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.6.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "istanbul-lib-coverage",
      "version": "2.0.6",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d9017fb7f6ae5a6d25b32f17b4a54f1b5f6fdec48e42525efd81d981f8dbfca0411ce19257e276abf4baef5adcabdb9306b2c05e6669a8989a41b313fb3354d7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40types/istanbul-lib-coverage@2.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/istanbul-lib-coverage/-/istanbul-lib-coverage-2.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/istanbul-lib-coverage@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/istanbul-lib-coverage/-/istanbul-lib-coverage-2.0.6.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/istanbul-lib-coverage"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "convert-source-map",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2afa78e7d1eb576144275080b22d4abbe318de46ac1f5f53172913cf6c5698c7aae9b936354dd75ef7c9f90eb59b4c64b56c2dfb51d261fdc966c4e6b3769126"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/convert-source-map@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/convert-source-map@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-2.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which-runtime",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d2e81b3f80895b87b60f6d23bc4702e3def7742808687238470d4f4fedba53dcc4bdeec5c98756008c149e878e62fa027e7fb05c7a074ca6f52a191895beb43f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/which-runtime@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which-runtime/-/which-runtime-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which-runtime@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which-runtime/-/which-runtime-1.4.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "picomatch",
      "version": "4.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a9c26ef3c436216a89b030f9dbd24a31dc069bf76f2275b81ef427470887f49b62849bf318eb1c0ed1c4df1d6904a794393cac43c91598b9c9da426eef285c18"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/picomatch@4.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/picomatch@4.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.7.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-subprocess",
      "version": "5.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d3bc30b30955eccdec0bd23291b65167f8c7024ad715654ba9d0561afd72d288c28a6b510fd846c31747991e455059835192cdb01993609350aa08a8e7e03ce5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-subprocess@5.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-subprocess/-/bare-subprocess-5.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-subprocess@5.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-subprocess/-/bare-subprocess-5.2.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "error-stack-parser",
      "version": "2.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4a4e55eb055accf86ae4c8693be014c499f9c7b5d25c697547ddd59fb8becd2d792835714228de8cd0abcfcdf8d3fd9b80b06347d1ad106f1954a38d0e372a19"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/error-stack-parser@2.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/error-stack-parser/-/error-stack-parser-2.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/error-stack-parser@2.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/error-stack-parser/-/error-stack-parser-2.1.4.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "stackframe",
      "version": "1.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a1e56db7b796412f8d6ba17ffd2e242762b655b4654bd0f8de6025332569556a2fcbda3e8df807f0ef5a83300dcda88b8dc940d2863351710ce0fbab85250287"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/stackframe@1.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stackframe/-/stackframe-1.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stackframe@1.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stackframe/-/stackframe-1.3.4.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globbie",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "19cc5249f5a29d9359356dfe46c3c18b69d6e2325c509b0e2a226fb97a1e3b763ca5d774e393553c82c2028342cd852c3f0e5701403f197c115c5f8005c01e39"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/globbie@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/globbie/-/globbie-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globbie@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/globbie/-/globbie-1.0.6.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "paparam",
      "version": "1.13.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "595f2f0a71013ca71248420349a01eb69a4ef82d3e39427a8233b50466e1bc8a768dcf337d5f42ffc340463106827528e430f074db063ab15364a2c54d3781d0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/paparam@1.13.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/paparam/-/paparam-1.13.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/paparam@1.13.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/paparam/-/paparam-1.13.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "same-object",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "72c1d686f52c2db20e1c333f9cff8a1d633e04b3ec2335a415af076f3688d06ec1a8a5e0c7eec52692931a02d7cb3e5a99f758d8e5417265d3a9838c124d38a2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/same-object@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/same-object/-/same-object-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/same-object@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/same-object/-/same-object-1.0.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "test-tmp",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "195820c4683e8d7a8fd966e3bb9d0954ba3ef44fa720e3cfc96aa0afadc46ce9cd22d20abb57046c9a5358025e7e59f21aa5ceb5c308ee28c7469f3c19491f0c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/test-tmp@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/test-tmp/-/test-tmp-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/test-tmp@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/test-tmp/-/test-tmp-1.4.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tmatch",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "21bf4eb419291e7d3bb573f4e1294dd52611c4581393ac123361019a38f1ba0e2ee515cf4552e47452524b53e6ad089d69207c2ebbbd9d1b5589006c6f1cc4e5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tmatch@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tmatch/-/tmatch-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tmatch@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tmatch/-/tmatch-5.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cmake-bare",
      "version": "1.8.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5b5f723c2bc40f9943a219699f7d31e3e3e9981bff83e2082e2e431050eff220f08898dd00035f7e6d4f95b742e9a3ccc12ecc2661868f5ca05a15a4c1336674"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cmake-bare@1.8.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cmake-bare/-/cmake-bare-1.8.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cmake-bare@1.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cmake-bare/-/cmake-bare-1.8.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cmake-npm",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "09f379dcebfdbac34179a22cafc4ed110c305de4599095994a819ed2ac9bafd6e88f11a5c137711e4f0b430245372a6c4a016863239650c8ca1ae6a1b221a27c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cmake-npm@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cmake-npm/-/cmake-npm-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cmake-npm@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cmake-npm/-/cmake-npm-1.1.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lunte",
      "version": "1.8.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bba7231564836cf07c426fdf33ff6e2172dc35ffb06bdd6dd36b878eac1518f15d3f7540536837e39893788d52bfa5d8e0fc69c2f715d079211bf4adddd35f01"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lunte@1.8.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lunte/-/lunte-1.8.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lunte@1.8.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lunte/-/lunte-1.8.4.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/lunte"
        },
        {
          "name": "cdx:npm:bin",
          "value": "lunte"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-subprocess",
      "version": "6.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f0be8ab5b9ab783cb815cd41743a9a0e8f5f8349db79d5264d2150c583d5d2e1c8336041017f3e1342f23032a0924d08fa694ab68f34598cce9c8853f150dd3a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-subprocess@6.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-subprocess/-/bare-subprocess-6.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-subprocess@6.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-subprocess/-/bare-subprocess-6.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-structured-clone",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0198c4111caa17b900bae7659a0af0793d8ac3058cd0bb061b81b1fdb5b217026b294ec4df0346f1cd3dcf60c8addc3dde9def0ed7ce5fc7f21ce7177f2e66fa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-structured-clone@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-structured-clone/-/bare-structured-clone-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-structured-clone@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-structured-clone/-/bare-structured-clone-1.6.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "compact-encoding",
      "version": "3.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6e067ce28552ce34265475c161638dfb041491d55f96bafc7cce7ed17e94c101d9cb3a25b0622476c8cd2b7bcb2e7db6761740486173e664ba2dfeeb7eb3dd96"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/compact-encoding@3.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/compact-encoding/-/compact-encoding-3.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/compact-encoding@3.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/compact-encoding/-/compact-encoding-3.3.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prettier",
      "version": "3.9.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3a9374cf355d89a880871a6eba3e5e7e9212e2c63d8fb6d8eae4799a78f9c8fcc691d92334a4897944e13dbeb4270dbd42e019800e28fbf881e3d90589a057ea"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/prettier@3.9.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/prettier/-/prettier-3.9.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prettier@3.9.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/prettier/-/prettier-3.9.6.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/prettier"
        },
        {
          "name": "cdx:npm:bin",
          "value": "prettier"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prettier-config-holepunch",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "caeb2471d3d17d060b14f90e1afc52e1316609bed0bc0a308cef9868d2cf2c15917affaabba1d7a0a90f587f657cdb0bf60513855ec8799eadfc1d504aefe39e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/prettier-config-holepunch@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/prettier-config-holepunch/-/prettier-config-holepunch-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prettier-config-holepunch@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/prettier-config-holepunch/-/prettier-config-holepunch-2.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-headers",
      "version": "1.35.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3880018391701cdd2f2f0fe04c83dfd6fd2d798fbb0d57860d847589fbc39e264774651d9bcff3f591638e432eb804b1d453ffd897a8b607d7d1e17683a0939f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-headers@1.35.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-headers/-/bare-headers-1.35.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-headers@1.35.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "build/linux-x64/_bare/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-headers/-/bare-headers-1.35.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "build/linux-arm64/_bare/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "build/android-x64/_bare/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "build/android-ia32/_bare/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "build/android-arm64/_bare/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "build/android-arm/_bare/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "build/android-arm/_bare/package-lock.json"
              }
            ],
            "concludedValue": "build/android-arm/_bare/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "require-asset",
      "version": "1.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c06a99632f2b0ca1cdbc1278aa6c4cfb7e336ad1b0b864211e94f1ba79e78c9913dbdc0ef2f19f6504427cdea1091eeab2d10d41b7a6e1f009d97ab02b73bc29"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/require-asset@1.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/require-asset/-/require-asset-1.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/require-asset@1.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "build/linux-x64/_bare/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/require-asset/-/require-asset-1.2.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "build/linux-arm64/_bare/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "build/android-x64/_bare/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "build/android-ia32/_bare/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "build/android-arm64/_bare/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "build/android-arm/_bare/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "build/android-arm/_bare/package-lock.json"
              }
            ],
            "concludedValue": "build/android-arm/_bare/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-module-resolve",
      "version": "1.12.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b6ca0ea879ad17a566357e0b603059c2f4159129846a09dbca43632b7d4b331cff6a6c8a7e30ace0af7bea7eee25dd5bbd67f16e92d0dc5cbbaaaf1a9fa8d1e9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bare-module-resolve@1.12.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bare-module-resolve/-/bare-module-resolve-1.12.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-module-resolve@1.12.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "build/linux-x64/_bare/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bare-module-resolve/-/bare-module-resolve-1.12.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "build/linux-arm64/_bare/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "build/android-x64/_bare/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "build/android-ia32/_bare/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "build/android-arm64/_bare/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "build/android-arm/_bare/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "build/android-arm/_bare/package-lock.json"
              }
            ],
            "concludedValue": "build/android-arm/_bare/package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/bare-buffer@3.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-events@2.9.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/b4a@1.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/events-universal@1.0.1",
      "dependsOn": [
        "pkg:npm/bare-events@2.9.2"
      ]
    },
    {
      "ref": "pkg:npm/fast-fifo@1.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/text-decoder@1.2.7",
      "dependsOn": [
        "pkg:npm/b4a@1.8.1"
      ]
    },
    {
      "ref": "pkg:npm/streamx@2.28.1",
      "dependsOn": [
        "pkg:npm/events-universal@1.0.1",
        "pkg:npm/fast-fifo@1.3.2",
        "pkg:npm/text-decoder@1.2.7"
      ]
    },
    {
      "ref": "pkg:npm/teex@1.0.1",
      "dependsOn": [
        "pkg:npm/streamx@2.28.1"
      ]
    },
    {
      "ref": "pkg:npm/bare-stream@2.13.4",
      "dependsOn": [
        "pkg:npm/b4a@1.8.1",
        "pkg:npm/bare-buffer@3.7.0",
        "pkg:npm/bare-events@2.9.2",
        "pkg:npm/streamx@2.28.1",
        "pkg:npm/teex@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/bare-ansi-escapes@2.2.3",
      "dependsOn": [
        "pkg:npm/bare-buffer@3.7.0",
        "pkg:npm/bare-stream@2.13.4"
      ]
    },
    {
      "ref": "pkg:npm/bare-type@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-inspect@3.1.10",
      "dependsOn": [
        "pkg:npm/bare-ansi-escapes@2.2.3",
        "pkg:npm/bare-type@1.1.1",
        "pkg:npm/brittle@3.19.1",
        "pkg:npm/cmake-bare@1.8.3",
        "pkg:npm/lunte@1.8.4",
        "pkg:npm/prettier-config-holepunch@2.0.0",
        "pkg:npm/prettier@3.9.6"
      ]
    },
    {
      "ref": "pkg:npm/bare-assert@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-path@3.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-url@2.5.3",
      "dependsOn": [
        "pkg:npm/bare-path@3.1.2"
      ]
    },
    {
      "ref": "pkg:npm/bare-fs@4.8.1",
      "dependsOn": [
        "pkg:npm/bare-buffer@3.7.0",
        "pkg:npm/bare-events@2.9.2",
        "pkg:npm/bare-path@3.1.2",
        "pkg:npm/bare-stream@2.13.4",
        "pkg:npm/bare-url@2.5.3",
        "pkg:npm/fast-fifo@1.3.2"
      ]
    },
    {
      "ref": "pkg:npm/bare-pipe@4.3.1",
      "dependsOn": [
        "pkg:npm/bare-buffer@3.7.0",
        "pkg:npm/bare-events@2.9.2",
        "pkg:npm/bare-stream@2.13.4"
      ]
    },
    {
      "ref": "pkg:npm/bare-dns@2.2.0",
      "dependsOn": [
        "pkg:npm/bare-buffer@3.7.0"
      ]
    },
    {
      "ref": "pkg:npm/bare-tcp@2.6.1",
      "dependsOn": [
        "pkg:npm/bare-dns@2.2.0",
        "pkg:npm/bare-events@2.9.2",
        "pkg:npm/bare-pipe@4.3.1",
        "pkg:npm/bare-stream@2.13.4"
      ]
    },
    {
      "ref": "pkg:npm/bare-hrtime@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-http-parser@2.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-http1@4.6.1",
      "dependsOn": [
        "pkg:npm/bare-buffer@3.7.0",
        "pkg:npm/bare-events@2.9.2",
        "pkg:npm/bare-hrtime@2.1.2",
        "pkg:npm/bare-http-parser@2.1.4",
        "pkg:npm/bare-stream@2.13.4",
        "pkg:npm/bare-tcp@2.6.1",
        "pkg:npm/bare-url@2.5.3"
      ]
    },
    {
      "ref": "pkg:npm/bare-crypto@1.15.3",
      "dependsOn": [
        "pkg:npm/bare-assert@1.2.0",
        "pkg:npm/bare-buffer@3.7.0",
        "pkg:npm/bare-stream@2.13.4"
      ]
    },
    {
      "ref": "pkg:npm/bare-net@2.3.3",
      "dependsOn": [
        "pkg:npm/bare-events@2.9.2",
        "pkg:npm/bare-pipe@4.3.1",
        "pkg:npm/bare-stream@2.13.4",
        "pkg:npm/bare-tcp@2.6.1"
      ]
    },
    {
      "ref": "pkg:npm/bare-tls@3.1.10",
      "dependsOn": [
        "pkg:npm/bare-net@2.3.3",
        "pkg:npm/bare-stream@2.13.4"
      ]
    },
    {
      "ref": "pkg:npm/bare-https@3.1.0",
      "dependsOn": [
        "pkg:npm/bare-http1@4.6.1",
        "pkg:npm/bare-tcp@2.6.1",
        "pkg:npm/bare-tls@3.1.10"
      ]
    },
    {
      "ref": "pkg:npm/bare-ws@3.1.0",
      "dependsOn": [
        "pkg:npm/bare-buffer@3.7.0",
        "pkg:npm/bare-crypto@1.15.3",
        "pkg:npm/bare-events@2.9.2",
        "pkg:npm/bare-http1@4.6.1",
        "pkg:npm/bare-https@3.1.0",
        "pkg:npm/bare-stream@2.13.4",
        "pkg:npm/bare-url@2.5.3"
      ]
    },
    {
      "ref": "pkg:npm/bare-inspector@6.1.0",
      "dependsOn": [
        "pkg:npm/bare-events@2.9.2",
        "pkg:npm/bare-http1@4.6.1",
        "pkg:npm/bare-stream@2.13.4",
        "pkg:npm/bare-tcp@2.6.1",
        "pkg:npm/bare-url@2.5.3",
        "pkg:npm/bare-ws@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/bare-abort@2.0.13",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-os@3.9.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-env@3.0.1",
      "dependsOn": [
        "pkg:npm/bare-os@3.9.3"
      ]
    },
    {
      "ref": "pkg:npm/bare-posix@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-signals@5.0.0",
      "dependsOn": [
        "pkg:npm/bare-events@2.9.2"
      ]
    },
    {
      "ref": "pkg:npm/bare-tty@5.2.1",
      "dependsOn": [
        "pkg:npm/bare-events@2.9.2",
        "pkg:npm/bare-signals@5.0.0",
        "pkg:npm/bare-stream@2.13.4"
      ]
    },
    {
      "ref": "pkg:npm/bare-stdio@1.0.3",
      "dependsOn": [
        "pkg:npm/bare-fs@4.8.1",
        "pkg:npm/bare-pipe@4.3.1",
        "pkg:npm/bare-tty@5.2.1"
      ]
    },
    {
      "ref": "pkg:npm/bare-process@4.5.1",
      "dependsOn": [
        "pkg:npm/bare-abort@2.0.13",
        "pkg:npm/bare-env@3.0.1",
        "pkg:npm/bare-events@2.9.2",
        "pkg:npm/bare-hrtime@2.1.2",
        "pkg:npm/bare-os@3.9.3",
        "pkg:npm/bare-posix@1.0.1",
        "pkg:npm/bare-signals@5.0.0",
        "pkg:npm/bare-stdio@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/bare-bundle@1.10.0",
      "dependsOn": [
        "pkg:npm/bare-buffer@3.7.0",
        "pkg:npm/bare-url@2.5.3"
      ]
    },
    {
      "ref": "pkg:npm/bare-semver@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-module-resolve@1.12.4",
      "dependsOn": [
        "pkg:npm/bare-semver@1.1.0",
        "pkg:npm/bare-url@2.5.3"
      ]
    },
    {
      "ref": "pkg:npm/bare-addon-resolve@1.10.1",
      "dependsOn": [
        "pkg:npm/bare-module-resolve@1.12.4",
        "pkg:npm/bare-semver@1.1.0",
        "pkg:npm/bare-url@2.5.3"
      ]
    },
    {
      "ref": "pkg:npm/require-addon@1.2.0",
      "dependsOn": [
        "pkg:npm/bare-addon-resolve@1.10.1"
      ]
    },
    {
      "ref": "pkg:npm/bare-module-lexer@1.6.4",
      "dependsOn": [
        "pkg:npm/bare-buffer@3.7.0",
        "pkg:npm/require-addon@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/bare-type-stripper@0.1.5",
      "dependsOn": [
        "pkg:npm/bare-buffer@3.7.0",
        "pkg:npm/require-addon@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/bare-module@6.4.0",
      "dependsOn": [
        "pkg:npm/bare-buffer@3.7.0",
        "pkg:npm/bare-bundle@1.10.0",
        "pkg:npm/bare-module-lexer@1.6.4",
        "pkg:npm/bare-module-resolve@1.12.4",
        "pkg:npm/bare-path@3.1.2",
        "pkg:npm/bare-type-stripper@0.1.5",
        "pkg:npm/bare-url@2.5.3"
      ]
    },
    {
      "ref": "pkg:npm/bare-debug-log@2.0.0",
      "dependsOn": [
        "pkg:npm/bare-os@3.9.3"
      ]
    },
    {
      "ref": "pkg:npm/bare-encoding@1.0.3",
      "dependsOn": [
        "pkg:npm/bare-buffer@3.7.0"
      ]
    },
    {
      "ref": "pkg:npm/bare-format@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-stylize@0.0.1",
      "dependsOn": [
        "pkg:npm/bare-ansi-escapes@2.2.3",
        "pkg:npm/bare-process@4.5.1"
      ]
    },
    {
      "ref": "pkg:npm/bare-utils@1.6.0",
      "dependsOn": [
        "pkg:npm/bare-debug-log@2.0.0",
        "pkg:npm/bare-encoding@1.0.3",
        "pkg:npm/bare-format@1.0.2",
        "pkg:npm/bare-stylize@0.0.1",
        "pkg:npm/bare-type@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/@jridgewell/resolve-uri@3.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/sourcemap-codec@1.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/trace-mapping@0.3.31",
      "dependsOn": [
        "pkg:npm/@jridgewell/resolve-uri@3.1.2",
        "pkg:npm/@jridgewell/sourcemap-codec@1.6.0"
      ]
    },
    {
      "ref": "pkg:npm/@types/istanbul-lib-coverage@2.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/convert-source-map@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/v8-to-istanbul@9.3.0",
      "dependsOn": [
        "pkg:npm/@jridgewell/trace-mapping@0.3.31",
        "pkg:npm/@types/istanbul-lib-coverage@2.0.6",
        "pkg:npm/convert-source-map@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/which-runtime@1.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-v8-to-istanbul@1.0.2",
      "dependsOn": [
        "pkg:npm/bare-assert@1.2.0",
        "pkg:npm/bare-fs@4.8.1",
        "pkg:npm/bare-module@6.4.0",
        "pkg:npm/bare-path@3.1.2",
        "pkg:npm/bare-process@4.5.1",
        "pkg:npm/bare-url@2.5.3",
        "pkg:npm/bare-utils@1.6.0",
        "pkg:npm/v8-to-istanbul@9.3.0",
        "pkg:npm/which-runtime@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/picomatch@4.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-cov@1.2.2",
      "dependsOn": [
        "pkg:npm/bare-fs@4.8.1",
        "pkg:npm/bare-inspector@6.1.0",
        "pkg:npm/bare-path@3.1.2",
        "pkg:npm/bare-process@4.5.1",
        "pkg:npm/bare-url@2.5.3",
        "pkg:npm/bare-v8-to-istanbul@1.0.2",
        "pkg:npm/picomatch@4.0.7",
        "pkg:npm/which-runtime@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/bare-subprocess@5.2.3",
      "dependsOn": [
        "pkg:npm/bare-buffer@3.7.0",
        "pkg:npm/bare-env@3.0.1",
        "pkg:npm/bare-events@2.9.2",
        "pkg:npm/bare-os@3.9.3",
        "pkg:npm/bare-pipe@4.3.1",
        "pkg:npm/bare-url@2.5.3"
      ]
    },
    {
      "ref": "pkg:npm/stackframe@1.3.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/error-stack-parser@2.1.4",
      "dependsOn": [
        "pkg:npm/stackframe@1.3.4"
      ]
    },
    {
      "ref": "pkg:npm/globbie@1.0.6",
      "dependsOn": [
        "pkg:npm/bare-fs@4.8.1",
        "pkg:npm/bare-path@3.1.2",
        "pkg:npm/bare-process@4.5.1",
        "pkg:npm/picomatch@4.0.7"
      ]
    },
    {
      "ref": "pkg:npm/paparam@1.13.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/same-object@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/test-tmp@1.4.0",
      "dependsOn": [
        "pkg:npm/bare-fs@4.8.1",
        "pkg:npm/bare-os@3.9.3",
        "pkg:npm/bare-path@3.1.2"
      ]
    },
    {
      "ref": "pkg:npm/tmatch@5.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/brittle@3.19.1",
      "dependsOn": [
        "pkg:npm/b4a@1.8.1",
        "pkg:npm/bare-assert@1.2.0",
        "pkg:npm/bare-cov@1.2.2",
        "pkg:npm/bare-fs@4.8.1",
        "pkg:npm/bare-os@3.9.3",
        "pkg:npm/bare-path@3.1.2",
        "pkg:npm/bare-process@4.5.1",
        "pkg:npm/bare-subprocess@5.2.3",
        "pkg:npm/bare-url@2.5.3",
        "pkg:npm/error-stack-parser@2.1.4",
        "pkg:npm/globbie@1.0.6",
        "pkg:npm/paparam@1.13.0",
        "pkg:npm/same-object@1.0.2",
        "pkg:npm/test-tmp@1.4.0",
        "pkg:npm/tmatch@5.0.0"
      ]
    },
    {
      "ref": "pkg:npm/cmake-npm@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cmake-bare@1.8.3",
      "dependsOn": [
        "pkg:npm/cmake-npm@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/compact-encoding@3.3.2",
      "dependsOn": [
        "pkg:npm/b4a@1.8.1"
      ]
    },
    {
      "ref": "pkg:npm/bare-structured-clone@1.6.0",
      "dependsOn": [
        "pkg:npm/bare-buffer@3.7.0",
        "pkg:npm/bare-type@1.1.1",
        "pkg:npm/bare-url@2.5.3",
        "pkg:npm/compact-encoding@3.3.2"
      ]
    },
    {
      "ref": "pkg:npm/bare-subprocess@6.1.0",
      "dependsOn": [
        "pkg:npm/bare-buffer@3.7.0",
        "pkg:npm/bare-env@3.0.1",
        "pkg:npm/bare-events@2.9.2",
        "pkg:npm/bare-os@3.9.3",
        "pkg:npm/bare-pipe@4.3.1",
        "pkg:npm/bare-structured-clone@1.6.0",
        "pkg:npm/bare-tcp@2.6.1",
        "pkg:npm/bare-url@2.5.3"
      ]
    },
    {
      "ref": "pkg:npm/lunte@1.8.4",
      "dependsOn": [
        "pkg:npm/bare-events@2.9.2",
        "pkg:npm/bare-fs@4.8.1",
        "pkg:npm/bare-module@6.4.0",
        "pkg:npm/bare-os@3.9.3",
        "pkg:npm/bare-path@3.1.2",
        "pkg:npm/bare-process@4.5.1",
        "pkg:npm/bare-subprocess@6.1.0",
        "pkg:npm/bare-url@2.5.3",
        "pkg:npm/bare-utils@1.6.0",
        "pkg:npm/paparam@1.13.0"
      ]
    },
    {
      "ref": "pkg:npm/prettier@3.9.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/prettier-config-holepunch@2.0.0",
      "dependsOn": [
        "pkg:npm/prettier@3.9.6"
      ]
    },
    {
      "ref": "pkg:npm/bare-module-resolve@1.12.6",
      "dependsOn": [
        "pkg:npm/bare-semver@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/require-asset@1.2.4",
      "dependsOn": [
        "pkg:npm/bare-module-resolve@1.12.6"
      ]
    },
    {
      "ref": "pkg:npm/bare-headers@1.35.0",
      "dependsOn": [
        "pkg:npm/require-asset@1.2.4"
      ]
    },
    {
      "ref": "pkg:npm/_bare",
      "dependsOn": [
        "pkg:npm/bare-headers@1.35.0"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/bare-inspect@3.1.10"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.7",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.7",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.7",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-10-20T23:37:49Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Tuesday, October 20, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'bare-inspect' with version '3.1.10'. The application also has 1 child modules/components. The package type in this SBOM is npm with 2 purl namespaces described under components. The components were identified from 7 source files."
    }
  ]
}