{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:89d63b57-8712-445e-85c2-1583603c6f49",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-20T15:32:40Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.6",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.6",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.6",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "electron-installer-debian",
      "group": "",
      "version": "4.0.0",
      "description": "Create a Debian package for your Electron app.",
      "purl": "pkg:npm/electron-installer-debian@4.0.0",
      "bom-ref": "pkg:npm/electron-installer-debian@4.0.0",
      "author": "Daniel Perez Alvarez <unindented@gmail.com> (http://unindented.org/)",
      "properties": [
        {
          "name": "cdx:npm:bin",
          "value": "src/cli.js"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "coverage, lint, lint:fix, spec, test"
        },
        {
          "name": "cdx:npm:os",
          "value": "darwin, linux"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/electron-userland/electron-installer-debian.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@malept\\n@oxlint\\n@types"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "yarn.lock"
      }
    ]
  },
  "components": [
    {
      "group": "@malept",
      "name": "cross-spawn-promise",
      "version": "1.1.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "74c427a152ffff0f19b74af6479d05bef1e996d5e081cfc3b8c47477b9240bd1c42a930884cbcd0c89ee3835201a3bd88d0b0bfd754c0cbb56fc84a28996a8e7"
        }
      ],
      "purl": "pkg:npm/%40malept/cross-spawn-promise@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/@malept/cross-spawn-promise@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "ImportedModules",
          "value": "@malept/cross-spawn-promise,spawn,@malept/cross-spawn-promise/spawn"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "src/spawn.js",
            "line": 1
          },
          {
            "location": "src/spawn.js",
            "line": 12
          }
        ]
      }
    },
    {
      "group": "@malept",
      "name": "cross-spawn-promise",
      "version": "2.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "84d60b8d467f4252114849f0a33c3763f07898335269eec5c94978ccac9d5680e1e268d993dd1a6d25a91476f9e0992759d7e1f385f9f3a090d862f9bb949603"
        }
      ],
      "purl": "pkg:npm/%40malept/cross-spawn-promise@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/@malept/cross-spawn-promise@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "ImportedModules",
          "value": "@malept/cross-spawn-promise,spawn,@malept/cross-spawn-promise/spawn"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "src/spawn.js",
            "line": 1
          },
          {
            "location": "src/spawn.js",
            "line": 12
          }
        ]
      }
    },
    {
      "group": "@oxlint",
      "name": "binding-android-arm-eabi",
      "version": "1.67.0",
      "scope": "optional",
      "purl": "pkg:npm/%40oxlint/binding-android-arm-eabi@1.67.0",
      "type": "library",
      "bom-ref": "pkg:npm/@oxlint/binding-android-arm-eabi@1.67.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@oxlint",
      "name": "binding-android-arm64",
      "version": "1.67.0",
      "scope": "optional",
      "purl": "pkg:npm/%40oxlint/binding-android-arm64@1.67.0",
      "type": "library",
      "bom-ref": "pkg:npm/@oxlint/binding-android-arm64@1.67.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@oxlint",
      "name": "binding-darwin-arm64",
      "version": "1.67.0",
      "scope": "optional",
      "purl": "pkg:npm/%40oxlint/binding-darwin-arm64@1.67.0",
      "type": "library",
      "bom-ref": "pkg:npm/@oxlint/binding-darwin-arm64@1.67.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@oxlint",
      "name": "binding-darwin-x64",
      "version": "1.67.0",
      "scope": "optional",
      "purl": "pkg:npm/%40oxlint/binding-darwin-x64@1.67.0",
      "type": "library",
      "bom-ref": "pkg:npm/@oxlint/binding-darwin-x64@1.67.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@oxlint",
      "name": "binding-freebsd-x64",
      "version": "1.67.0",
      "scope": "optional",
      "purl": "pkg:npm/%40oxlint/binding-freebsd-x64@1.67.0",
      "type": "library",
      "bom-ref": "pkg:npm/@oxlint/binding-freebsd-x64@1.67.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@oxlint",
      "name": "binding-linux-arm-gnueabihf",
      "version": "1.67.0",
      "scope": "optional",
      "purl": "pkg:npm/%40oxlint/binding-linux-arm-gnueabihf@1.67.0",
      "type": "library",
      "bom-ref": "pkg:npm/@oxlint/binding-linux-arm-gnueabihf@1.67.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@oxlint",
      "name": "binding-linux-arm-musleabihf",
      "version": "1.67.0",
      "scope": "optional",
      "purl": "pkg:npm/%40oxlint/binding-linux-arm-musleabihf@1.67.0",
      "type": "library",
      "bom-ref": "pkg:npm/@oxlint/binding-linux-arm-musleabihf@1.67.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@oxlint",
      "name": "binding-linux-arm64-gnu",
      "version": "1.67.0",
      "scope": "optional",
      "purl": "pkg:npm/%40oxlint/binding-linux-arm64-gnu@1.67.0",
      "type": "library",
      "bom-ref": "pkg:npm/@oxlint/binding-linux-arm64-gnu@1.67.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@oxlint",
      "name": "binding-linux-arm64-musl",
      "version": "1.67.0",
      "scope": "optional",
      "purl": "pkg:npm/%40oxlint/binding-linux-arm64-musl@1.67.0",
      "type": "library",
      "bom-ref": "pkg:npm/@oxlint/binding-linux-arm64-musl@1.67.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@oxlint",
      "name": "binding-linux-ppc64-gnu",
      "version": "1.67.0",
      "scope": "optional",
      "purl": "pkg:npm/%40oxlint/binding-linux-ppc64-gnu@1.67.0",
      "type": "library",
      "bom-ref": "pkg:npm/@oxlint/binding-linux-ppc64-gnu@1.67.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@oxlint",
      "name": "binding-linux-riscv64-gnu",
      "version": "1.67.0",
      "scope": "optional",
      "purl": "pkg:npm/%40oxlint/binding-linux-riscv64-gnu@1.67.0",
      "type": "library",
      "bom-ref": "pkg:npm/@oxlint/binding-linux-riscv64-gnu@1.67.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@oxlint",
      "name": "binding-linux-riscv64-musl",
      "version": "1.67.0",
      "scope": "optional",
      "purl": "pkg:npm/%40oxlint/binding-linux-riscv64-musl@1.67.0",
      "type": "library",
      "bom-ref": "pkg:npm/@oxlint/binding-linux-riscv64-musl@1.67.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@oxlint",
      "name": "binding-linux-s390x-gnu",
      "version": "1.67.0",
      "scope": "optional",
      "purl": "pkg:npm/%40oxlint/binding-linux-s390x-gnu@1.67.0",
      "type": "library",
      "bom-ref": "pkg:npm/@oxlint/binding-linux-s390x-gnu@1.67.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@oxlint",
      "name": "binding-linux-x64-gnu",
      "version": "1.67.0",
      "scope": "optional",
      "purl": "pkg:npm/%40oxlint/binding-linux-x64-gnu@1.67.0",
      "type": "library",
      "bom-ref": "pkg:npm/@oxlint/binding-linux-x64-gnu@1.67.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@oxlint",
      "name": "binding-linux-x64-musl",
      "version": "1.67.0",
      "scope": "optional",
      "purl": "pkg:npm/%40oxlint/binding-linux-x64-musl@1.67.0",
      "type": "library",
      "bom-ref": "pkg:npm/@oxlint/binding-linux-x64-musl@1.67.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@oxlint",
      "name": "binding-openharmony-arm64",
      "version": "1.67.0",
      "scope": "optional",
      "purl": "pkg:npm/%40oxlint/binding-openharmony-arm64@1.67.0",
      "type": "library",
      "bom-ref": "pkg:npm/@oxlint/binding-openharmony-arm64@1.67.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@oxlint",
      "name": "binding-win32-arm64-msvc",
      "version": "1.67.0",
      "scope": "optional",
      "purl": "pkg:npm/%40oxlint/binding-win32-arm64-msvc@1.67.0",
      "type": "library",
      "bom-ref": "pkg:npm/@oxlint/binding-win32-arm64-msvc@1.67.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@oxlint",
      "name": "binding-win32-ia32-msvc",
      "version": "1.67.0",
      "scope": "optional",
      "purl": "pkg:npm/%40oxlint/binding-win32-ia32-msvc@1.67.0",
      "type": "library",
      "bom-ref": "pkg:npm/@oxlint/binding-win32-ia32-msvc@1.67.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@oxlint",
      "name": "binding-win32-x64-msvc",
      "version": "1.67.0",
      "scope": "optional",
      "purl": "pkg:npm/%40oxlint/binding-win32-x64-msvc@1.67.0",
      "type": "library",
      "bom-ref": "pkg:npm/@oxlint/binding-win32-x64-msvc@1.67.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "fs-extra",
      "version": "9.0.13",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "576d4e9d382393316ed815c593f7f5c157408ec5e184521d077fcb15d514b5a985245f153ef52142b9b976cb9bd8f801850d51238153ebd0dc9e96b7a7548588"
        }
      ],
      "purl": "pkg:npm/%40types/fs-extra@9.0.13",
      "type": "library",
      "bom-ref": "pkg:npm/@types/fs-extra@9.0.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "glob",
      "version": "7.2.0",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a8eb5d5cb5c48fc58c7ca3ff1e1ddf771ee07ca5043da6e4871e6757b4472e2e73b4cfef2644c38983174a4bc728c73f8da02845c28a1212f98cabd293ecae98"
        }
      ],
      "purl": "pkg:npm/%40types/glob@7.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/@types/glob@7.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "minimatch",
      "version": "5.1.2",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83cf1c11748891b714e129de0585af4c55dd4c2cafb1f1d5233d79246e5e1e19d1b5ad9e8db449667b3ffa2b6c80125c429dbee1054e9efb45758dbc4e118562"
        }
      ],
      "purl": "pkg:npm/%40types/minimatch@5.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/@types/minimatch@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "node",
      "version": "25.9.1",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9a04682842bebbcf21a1779dfeab9aa733d7bd7bbc0a0edb641ab3a9a3d43eac543225acf669c334f458f1956443ebc072bc3c72840c543b8b356cab5c82d456"
        }
      ],
      "purl": "pkg:npm/%40types/node@25.9.1",
      "type": "library",
      "bom-ref": "pkg:npm/@types/node@25.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-regex",
      "version": "6.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "05d4acb1d2f59ab2cf4b794339c7b168890d44dda4bf0ce01152a8da0213aca207802f930442ce8cd22d7a92f44907664aac6508904e75e038fa944d2601b30f"
        }
      ],
      "purl": "pkg:npm/ansi-regex@6.2.2",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@6.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "6.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "23b8a4ce14e18fb854693b95351e286b771d23d8844057ed2e7d083cd3e708376c3323707ec6a24365f7d7eda3ca00327fe04092e29e551499ec4c8b7bfac868"
        }
      ],
      "purl": "pkg:npm/ansi-styles@6.2.3",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@6.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asar",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1eea9686e3df8102251b911951d374c4bb758ce2881471c94c3999f7c473c96be6036ac09aafbd9453ba43b901e96ad0082d7e1bafc12f6768571353297c516f"
        }
      ],
      "purl": "pkg:npm/asar@3.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/asar@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "at-least-node",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4c058baf6df1bc5a1697cf182e2029c58cd99975288a13f9e70068ef5d6f4e1f1fd7c4d2c3c4912eae44797d1725be9700995736deca441b39f3e66d8dee97ef"
        }
      ],
      "purl": "pkg:npm/at-least-node@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/at-least-node@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "author-regex",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3f3a5ad6660be010bd5b979fac180f435bd9615e81db2b1cdac081eb3f639461f6c3927ced956e377a5c91cc789e3de3a3e900e296c1423971043c8fd8be0b73"
        }
      ],
      "purl": "pkg:npm/author-regex@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/author-regex@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "balanced-match",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9308baf0a7e4838a82bbfd11e01b1cb0f0cf2893bc1676c27c2a8c0e70cbae1c59120c3268517a8ae7fb6376b4639ef81ca22582611dbee4ed28df945134aaee"
        }
      ],
      "purl": "pkg:npm/balanced-match@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/balanced-match@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brace-expansion",
      "version": "1.1.15",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "648e273f57cfa9ed67d8a77bdb15b408205465d33da9331808ee3c188d8b55674c9cdbf1f320b65bc562e485e1263360ae62ad355e128e0435891f6430e795d7"
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.15",
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@1.1.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chai",
      "version": "6.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e6c69e5f0c11dffe6ea13d0290936ebb68fcc1ad688b8e952e131df6a6d5797d5e860bc55cef1aca2e950c3e1f96daf79e9d5a70fb7dbaab4e46355e2635ed53"
        }
      ],
      "purl": "pkg:npm/chai@6.2.2",
      "type": "library",
      "bom-ref": "pkg:npm/chai@6.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "chromium-pickle-js",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0a95bd280acdf05b0e08fa1a0e1db58c815dd24e92d639add8f494d23a8a49c26e4829721224d68f2f0e57a69047714db29bcff6deb5d029332321223416cb29"
        }
      ],
      "purl": "pkg:npm/chromium-pickle-js@0.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/chromium-pickle-js@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cliui",
      "version": "9.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "13441832e9efe7c7a76bd2b8e683555c478d461a9f249dc5db9b17fe8d4b47fa9277b503914b90bd00e4a151abb6b9b02b2288972ffe2e5e3ca40bcb1c2330d3"
        }
      ],
      "purl": "pkg:npm/cliui@9.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/cliui@9.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "da9d71dbe4ce039faf1fe9eac3771dca8c11d66963341f62602f7b66e36d2a3f8883407af4f9a37b1db1a55c59c0c1325f186425764c2e963dc1d67aec2a4b6d"
        }
      ],
      "purl": "pkg:npm/commander@5.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/commander@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concat-map",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c996b1cfdf95b6c90fee4dae37e332c8b6eb7d106430c17d538034c0ad9a1630cb194d2ab37293b1bdd4d779494beee7786d586a50bd9376fd6f7bcc2bd4c98f"
        }
      ],
      "purl": "pkg:npm/concat-map@0.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/concat-map@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cross-spawn",
      "version": "7.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "053ea8b2135caff68a9e81470e845613e374e7309a47731e81639de3eaeb90c3d01af0e0b44d2ab9d50b43467223b88567dfeb3262db942dc063b9976718ffc1"
        }
      ],
      "purl": "pkg:npm/cross-spawn@7.0.6",
      "type": "library",
      "bom-ref": "pkg:npm/cross-spawn@7.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "4.4.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d79136ec6c83ecbefd0f6a5593da6a9c91ec4d7ddc4b54c883d6e71ec9accb5f67a1a5e96d00a328196b5b5c86d365e98d8a3a70856aaf16b4e7b1985e67f5a6"
        }
      ],
      "purl": "pkg:npm/debug@4.4.3",
      "type": "library",
      "bom-ref": "pkg:npm/debug@4.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "ImportedModules",
          "value": "debug"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "src/installer.js",
            "line": 2
          },
          {
            "location": "src/installer.js",
            "line": 11
          }
        ]
      }
    },
    {
      "group": "",
      "name": "electron-installer-common",
      "version": "0.10.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c52c0f2d59f66fea9bf4d1009895d0df5790ed5c1796fb4b6a689c4bb9de1a31518cb8f6c6b3506e73bd39da89b0547b08a373a3ded897bb26d6108a9c3d7258"
        }
      ],
      "purl": "pkg:npm/electron-installer-common@0.10.3",
      "type": "library",
      "bom-ref": "pkg:npm/electron-installer-common@0.10.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "ImportedModules",
          "value": "electron-installer-common"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "src/dependencies.js",
            "line": 1
          },
          {
            "location": "src/dependencies.js",
            "line": 28
          },
          {
            "location": "src/dependencies.js",
            "line": 37
          },
          {
            "location": "src/installer.js",
            "line": 1
          },
          {
            "location": "src/installer.js",
            "line": 88
          },
          {
            "location": "src/installer.js",
            "line": 117
          },
          {
            "location": "src/installer.js",
            "line": 128
          },
          {
            "location": "src/installer.js",
            "line": 152
          },
          {
            "location": "src/installer.js",
            "line": 154
          },
          {
            "location": "src/installer.js",
            "line": 157
          },
          {
            "location": "src/installer.js",
            "line": 201
          },
          {
            "location": "src/installer.js",
            "line": 251
          }
        ]
      }
    },
    {
      "group": "",
      "name": "emoji-regex",
      "version": "10.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1e4aa097bb007301c3b4b1913879ae27327fdc48e93eeefefe3b87e495eb33c5af155300be951b4349ff6ac084f4403dc9eff970acba7c1c572d89396a9a32d7"
        }
      ],
      "purl": "pkg:npm/emoji-regex@10.6.0",
      "type": "library",
      "bom-ref": "pkg:npm/emoji-regex@10.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "err-code",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b642f7b4dd4a376e954947550a3065a9ece6733ab8e51ad80db727aaae0817c2e99b02a97a3d6cecc648a97848305e728289cf312d09af395403a90c9d4d8a66"
        }
      ],
      "purl": "pkg:npm/err-code@2.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/err-code@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escalade",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ced4dd3a78e15897ed3be74e635110bbf3b08877b0a41be50dcb325ee0e0b5f65fc2d50e9845194d7c4633f327e2e1c6cce00a71b617c5673df0374201d67f65"
        }
      ],
      "purl": "pkg:npm/escalade@3.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/escalade@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-extra",
      "version": "9.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9b808bd884beff5cb940773018179a6b94a966381d005479f00adda6b44e5e3d4abf765135773d849cc27efe68c349e4a7b86acd7d3306d5932c14f3a4b17a92"
        }
      ],
      "purl": "pkg:npm/fs-extra@9.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/fs-extra@9.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs.realpath",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "444cf1291d997165dfd4c0d58b69f0e4782bfd9149fd72faa4fe299e68e0e93d6db941660b37dd29153bf7186672ececa3b50b7e7249477b03fdf850f287c948"
        }
      ],
      "purl": "pkg:npm/fs.realpath@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/fs.realpath@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-caller-file",
      "version": "2.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c6c7b60271931fa752aeb92f2b47e355eac1af3a2673f47c9589e8f8a41adc74d45551c1bc57b5e66a80609f10ffb72b6f575e4370d61cc3f7f3aaff01757cde"
        }
      ],
      "purl": "pkg:npm/get-caller-file@2.0.5",
      "type": "library",
      "bom-ref": "pkg:npm/get-caller-file@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-east-asian-width",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e72e9550fd49ca5b246f9af6bb2afc129c96412845ff6556b3274fd44817a381702ca17028efe9866b261a3d44254cbf21e6c90cf05b4b61675630af776d431"
        }
      ],
      "purl": "pkg:npm/get-east-asian-width@1.6.0",
      "type": "library",
      "bom-ref": "pkg:npm/get-east-asian-width@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "7.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "65676153e2b0c9095100fe7f25a778bf45608eeb32c6048cf307f579649bcc30353277b3b898a3792602c65764e5baa4f643714dfbdfd64ea271d210c7a425fe"
        }
      ],
      "purl": "pkg:npm/glob@7.2.3",
      "type": "library",
      "bom-ref": "pkg:npm/glob@7.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "4.2.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "386d011a553e02bc594ac2ca0bd6d9e4c22d7fa8cfbfc448a6d148c59ea881b092db9dbe3547ae4b88e55f1b01f7c4a2ecc53b310c042793e63aa44cf6c257f2"
        }
      ],
      "purl": "pkg:npm/graceful-fs@4.2.11",
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@4.2.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inflight",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7faca22584600a9dc5b9fca2cd5feb7135ac8c935449837b315676b4c90aa4f391ec4f42240178244b5a34e8bede1948627fda392ca3191522fc46b34e985ab2"
        }
      ],
      "purl": "pkg:npm/inflight@1.0.6",
      "type": "library",
      "bom-ref": "pkg:npm/inflight@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4e531f648b29039fb7426fb94075e6545faa1eb9fe83c29f0b6d9e7263aceb4289d2d4557db0d428188eeb449cc7c5e77b0a0b2c4e248ff2a65933a0dee49ef2"
        }
      ],
      "purl": "pkg:npm/inherits@2.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isexe",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "228cfa503fadc2c31596ab06ed6aa82c9976eec2bfd83397e7eaf06d0ccf42cd1dfd6743bf9aeb01aebd4156d009994c5f76ea898d2832c1fe342da923ca457d"
        }
      ],
      "purl": "pkg:npm/isexe@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/isexe@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsonfile",
      "version": "6.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e1abf000ecee9942d4d028a8e02dc752617face227d72afd1cfb2187e2433079e625bf82b807a313689db71b6472c6b2b389a2340d2798737b1199a39631c28a"
        }
      ],
      "purl": "pkg:npm/jsonfile@6.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/jsonfile@6.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash",
      "version": "4.18.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "757228fc68805c59789e82185135cf85f05d0b2d3d54631d680ca79ec21944ec8314d4533639a14b8bcfbd97a517e78960933041a5af17ecb693ec6eecb99a27"
        }
      ],
      "purl": "pkg:npm/lodash@4.18.1",
      "type": "library",
      "bom-ref": "pkg:npm/lodash@4.18.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "3.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2ecbdc0d33f07bddb0315a8b5afbcb761307a8778b48f0b312418ccbced99f104a2d17d8aca7573433c70e8ccd1c56823a441897a45e384ea76ef401a26ace70"
        }
      ],
      "purl": "pkg:npm/minimatch@3.1.5",
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@3.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d924b57e7312b3b63ad21fc5b3dc0af5e78d61a1fc7cfb5457edaf26326bf62be5307cc87ffb6862ef1c2b33b0233cdb5d4f01c4c958cc0d660948b65a287a48"
        }
      ],
      "purl": "pkg:npm/ms@2.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "once",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5d48aca287dfefabd756621c5dfce5c91a549a93e9fdb7b8246bc4c4790aa2ec17b34a260530474635147aeb631a2dcc8b32c613df0675f96041cbb8244517d0"
        }
      ],
      "purl": "pkg:npm/once@1.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/once@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "oxlint",
      "version": "1.67.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2532bebc3ed26f04e14bad2932763d1b71990c9b0bc103ab830eda990a97b9cc195b286ca5f174034684f9b1c842cbdcfd47c99adfb9519193ef23d0d3892507"
        }
      ],
      "purl": "pkg:npm/oxlint@1.67.0",
      "type": "library",
      "bom-ref": "pkg:npm/oxlint@1.67.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-author",
      "version": "2.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8b4c19523588a4271c89f64e8167be7c80b4765059c865d38a996c37d080c7e5123e3e2d07d47290891628ad27f4dfb692e3b61156c52fcc0af6cdce3ed57afd"
        }
      ],
      "purl": "pkg:npm/parse-author@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/parse-author@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "ImportedModules",
          "value": "parse-author"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "src/installer.js",
            "line": 4
          },
          {
            "location": "src/installer.js",
            "line": 213
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-is-absolute",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "127da03c82172a2a50099cddbf02510c1791fc2cc5f7713ddb613a56838db1e8168b121a920079d052e0936c23005562059756d653b7c544c53185efe53be078"
        }
      ],
      "purl": "pkg:npm/path-is-absolute@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/path-is-absolute@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-key",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "748c43efd5a569c039d7a00a03b58eecd1d75f3999f5a28303d75f521288df4823bc057d8784eb72358b2895a05f29a070bc9f1f17d28226cc4e62494cc58c4c"
        }
      ],
      "purl": "pkg:npm/path-key@3.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/path-key@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "promise-retry",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9c7045a1a2928094b5b9b15336dcd2a7b1c052f674550df63cc3f36cd44028e5080448175b6f6ca32b642de81150f5e7b1a98b728f15cb069f2dd60ac2616b96"
        }
      ],
      "purl": "pkg:npm/promise-retry@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/promise-retry@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "retry",
      "version": "0.12.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "59933e8501727ba13ad73ef4a04d5280b3717fd650408460c987392efe9d7be2040778ed8ebe933c5cbd63da3dcc37919c141ef8af0a54a6e4fca5a2af177bfe"
        }
      ],
      "purl": "pkg:npm/retry@0.12.0",
      "type": "library",
      "bom-ref": "pkg:npm/retry@0.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "7.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "92d6871d6347e1f99d0ba396a70f2545ccf2a032cda3d378fa0699edf7506b5c6d266aed55c8b88e72bd91a30d2351e4f39db479375374430fcdc4b58f4e3c1a"
        }
      ],
      "purl": "pkg:npm/semver@7.8.1",
      "type": "library",
      "bom-ref": "pkg:npm/semver@7.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shebang-command",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a41692e7d89a553ef21d324a5cceb5f686d1f3c040759c50aab69688634688c5c327f26f3ecf7001ebfd78c01f3c7c0a11a7c8bfd0a8bc9f6240d4f40b224e4e"
        }
      ],
      "purl": "pkg:npm/shebang-command@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/shebang-command@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shebang-regex",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1dbed0726dd0e1152a92696c76c7f06084eb32a90f0528d11acd764043aacf76994b2fb30aa1291a21bd019d6699164d048286309a278855ee7bec06cf6fb690"
        }
      ],
      "purl": "pkg:npm/shebang-regex@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/shebang-regex@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string-width",
      "version": "7.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eb0430dd43f3199c7a46dcbf7a0b34539c76fe3aa62763d0b0655acdcbdf360b3f66f3d58ca25ba0205f42ea3491fa00f09426d3b7d3040e506878fc7664c9b9"
        }
      ],
      "purl": "pkg:npm/string-width@7.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/string-width@7.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-ansi",
      "version": "7.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "544d13b7582f8254811ea97db202f519e189e59d35740c46095897e254e4f1aa9fe1524a83ad6bc5ad67d4dd6c0281d2e0219ed62b880a6238a16a17d375f221"
        }
      ],
      "purl": "pkg:npm/strip-ansi@7.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@7.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tmp-promise",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "23b47dcb2e82b14bbd8f61ed7a9d9353cdb6a6f09d7716616cfd27d0087040cd40152965a518e598d7aabe1489b9569bf1eebde0c5fadeaf3ec8098adcebea4e"
        }
      ],
      "purl": "pkg:npm/tmp-promise@3.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/tmp-promise@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tmp",
      "version": "0.2.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "59eb55584f2f07210d3231b6a1f6b5c2b9794d8a7b509c8ee867ed2acad6d2245ee2448b7937b676ffbff3155a70077edde8a69f9d7cf0f90c86a62e8910c357"
        }
      ],
      "purl": "pkg:npm/tmp@0.2.7",
      "type": "library",
      "bom-ref": "pkg:npm/tmp@0.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "undici-types",
      "version": "7.24.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d9cd8befb643ac904615c280a095ba4240531f6bb4a5e75a22a7483630ca8d3f1016d2ab6ace6ceda1f63b3a2db2fe037fafe121d6917a0187573aa548ff78ca"
        }
      ],
      "purl": "pkg:npm/undici-types@7.24.6",
      "type": "library",
      "bom-ref": "pkg:npm/undici-types@7.24.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "universalify",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "73e8ee3809041ca8b818efb141801a1004e3fc0002727f1531f4de613ea281b494a40909596dae4a042a4fb6cd385af5d4db2e137b1362e0e91384b828effd3a"
        }
      ],
      "purl": "pkg:npm/universalify@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/universalify@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "66522872a768b60c2a65a57e8ad184e5372f5b6a9ca6d5f033d4b0dc98aff63995655a7503b9c0a2598936f532120e81dd8cc155e2e92ed662a2b9377cc4374f"
        }
      ],
      "purl": "pkg:npm/which@2.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/which@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "word-wrap",
      "version": "1.2.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e0e4a1ca27599c92a6ca4c32260e8a92e8a44f4ef6ef93f803f8ed823f486e0889fc0b93be4db59c8d51b3064951d25e43d434e95dc8c960cc3a63d65d00ba20"
        }
      ],
      "purl": "pkg:npm/word-wrap@1.2.5",
      "type": "library",
      "bom-ref": "pkg:npm/word-wrap@1.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "ImportedModules",
          "value": "word-wrap"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "src/installer.js",
            "line": 6
          },
          {
            "location": "src/installer.js",
            "line": 242
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrap-ansi",
      "version": "9.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3305839b9a0d6fb930cb63a52f34d3936013d8b0682ff3ec133c9826512620f213800ffa19ea22904876d5b7e9a3c1f40682f03597d986a4ca881fa7b033688c"
        }
      ],
      "purl": "pkg:npm/wrap-ansi@9.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/wrap-ansi@9.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrappy",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "56fece1a4018c6a6c8e28fbc88c87e0fbf4ea8fd64fc6c63b18f4acc4bd13e0ad2515189786dd2c30d3eec9663d70f4ecf699330002f8ccb547e4a18231fc9f0"
        }
      ],
      "purl": "pkg:npm/wrappy@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/wrappy@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "y18n",
      "version": "5.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4df2842c36e468590c3691c894bc9cdbac41f520566e76e24f59401ba7d8b4811eb1e34524d57e54bc6d864bcb66baab7ffd9ca42bf1eda596618f9162b91249"
        }
      ],
      "purl": "pkg:npm/y18n@5.0.8",
      "type": "library",
      "bom-ref": "pkg:npm/y18n@5.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs-parser",
      "version": "22.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cb7ef81759c4271cb1d96b9351dbbc9a9ce35d3e1122d2b739bf6c432603824fa02c67cc12dcef6ea80283379d63495686e8f41cc7b06c6576e792aba4d33e1c"
        }
      ],
      "purl": "pkg:npm/yargs-parser@22.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/yargs-parser@22.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "yargs",
      "version": "18.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bf290e4723876ea9c638c786a5c42ac28e03c9ca2325e1424bf43b94e5876456292d3ed905b853ebbba6daf43ed29e772ac2a6b3c5fb1b16533245d6211778f3"
        }
      ],
      "purl": "pkg:npm/yargs@18.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/yargs@18.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "ImportedModules",
          "value": "yargs,yargs/helpers,hideBin,yargs/helpers/hideBin"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "src/cli.js",
            "line": 5
          },
          {
            "location": "src/cli.js",
            "line": 6
          },
          {
            "location": "src/cli.js",
            "line": 12
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/@malept/cross-spawn-promise@1.1.1",
      "dependsOn": [
        "pkg:npm/cross-spawn@7.0.6"
      ]
    },
    {
      "ref": "pkg:npm/@malept/cross-spawn-promise@2.0.0",
      "dependsOn": [
        "pkg:npm/cross-spawn@7.0.6"
      ]
    },
    {
      "ref": "pkg:npm/@oxlint/binding-android-arm-eabi@1.67.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@oxlint/binding-android-arm64@1.67.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@oxlint/binding-darwin-arm64@1.67.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@oxlint/binding-darwin-x64@1.67.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@oxlint/binding-freebsd-x64@1.67.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@oxlint/binding-linux-arm-gnueabihf@1.67.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@oxlint/binding-linux-arm-musleabihf@1.67.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@oxlint/binding-linux-arm64-gnu@1.67.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@oxlint/binding-linux-arm64-musl@1.67.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@oxlint/binding-linux-ppc64-gnu@1.67.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@oxlint/binding-linux-riscv64-gnu@1.67.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@oxlint/binding-linux-riscv64-musl@1.67.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@oxlint/binding-linux-s390x-gnu@1.67.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@oxlint/binding-linux-x64-gnu@1.67.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@oxlint/binding-linux-x64-musl@1.67.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@oxlint/binding-openharmony-arm64@1.67.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@oxlint/binding-win32-arm64-msvc@1.67.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@oxlint/binding-win32-ia32-msvc@1.67.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@oxlint/binding-win32-x64-msvc@1.67.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/fs-extra@9.0.13",
      "dependsOn": [
        "pkg:npm/@types/node@25.9.1"
      ]
    },
    {
      "ref": "pkg:npm/@types/glob@7.2.0",
      "dependsOn": [
        "pkg:npm/@types/minimatch@5.1.2",
        "pkg:npm/@types/node@25.9.1"
      ]
    },
    {
      "ref": "pkg:npm/@types/minimatch@5.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/node@25.9.1",
      "dependsOn": [
        "pkg:npm/undici-types@7.24.6"
      ]
    },
    {
      "ref": "pkg:npm/ansi-regex@6.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-styles@6.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/asar@3.2.0",
      "dependsOn": [
        "pkg:npm/@types/glob@7.2.0",
        "pkg:npm/chromium-pickle-js@0.2.0",
        "pkg:npm/commander@5.1.0",
        "pkg:npm/glob@7.2.3",
        "pkg:npm/minimatch@3.1.5"
      ]
    },
    {
      "ref": "pkg:npm/at-least-node@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/author-regex@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/balanced-match@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/brace-expansion@1.1.15",
      "dependsOn": [
        "pkg:npm/balanced-match@1.0.2",
        "pkg:npm/concat-map@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/chai@6.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/chromium-pickle-js@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cliui@9.0.1",
      "dependsOn": [
        "pkg:npm/string-width@7.2.0",
        "pkg:npm/strip-ansi@7.2.0",
        "pkg:npm/wrap-ansi@9.0.2"
      ]
    },
    {
      "ref": "pkg:npm/commander@5.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/concat-map@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cross-spawn@7.0.6",
      "dependsOn": [
        "pkg:npm/path-key@3.1.1",
        "pkg:npm/shebang-command@2.0.0",
        "pkg:npm/which@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/debug@4.4.3",
      "dependsOn": [
        "pkg:npm/ms@2.1.3"
      ]
    },
    {
      "ref": "pkg:npm/electron-installer-common@0.10.3",
      "dependsOn": [
        "pkg:npm/@malept/cross-spawn-promise@1.1.1",
        "pkg:npm/@types/fs-extra@9.0.13",
        "pkg:npm/asar@3.2.0",
        "pkg:npm/debug@4.4.3",
        "pkg:npm/fs-extra@9.1.0",
        "pkg:npm/glob@7.2.3",
        "pkg:npm/lodash@4.18.1",
        "pkg:npm/parse-author@2.0.0",
        "pkg:npm/semver@7.8.1",
        "pkg:npm/tmp-promise@3.0.3"
      ]
    },
    {
      "ref": "pkg:npm/electron-installer-debian@4.0.0",
      "dependsOn": [
        "pkg:npm/@malept/cross-spawn-promise@1.1.1",
        "pkg:npm/@malept/cross-spawn-promise@2.0.0",
        "pkg:npm/@oxlint/binding-android-arm-eabi@1.67.0",
        "pkg:npm/@oxlint/binding-android-arm64@1.67.0",
        "pkg:npm/@oxlint/binding-darwin-arm64@1.67.0",
        "pkg:npm/@oxlint/binding-darwin-x64@1.67.0",
        "pkg:npm/@oxlint/binding-freebsd-x64@1.67.0",
        "pkg:npm/@oxlint/binding-linux-arm-gnueabihf@1.67.0",
        "pkg:npm/@oxlint/binding-linux-arm-musleabihf@1.67.0",
        "pkg:npm/@oxlint/binding-linux-arm64-gnu@1.67.0",
        "pkg:npm/@oxlint/binding-linux-arm64-musl@1.67.0",
        "pkg:npm/@oxlint/binding-linux-ppc64-gnu@1.67.0",
        "pkg:npm/@oxlint/binding-linux-riscv64-gnu@1.67.0",
        "pkg:npm/@oxlint/binding-linux-riscv64-musl@1.67.0",
        "pkg:npm/@oxlint/binding-linux-s390x-gnu@1.67.0",
        "pkg:npm/@oxlint/binding-linux-x64-gnu@1.67.0",
        "pkg:npm/@oxlint/binding-linux-x64-musl@1.67.0",
        "pkg:npm/@oxlint/binding-openharmony-arm64@1.67.0",
        "pkg:npm/@oxlint/binding-win32-arm64-msvc@1.67.0",
        "pkg:npm/@oxlint/binding-win32-ia32-msvc@1.67.0",
        "pkg:npm/@oxlint/binding-win32-x64-msvc@1.67.0",
        "pkg:npm/@types/fs-extra@9.0.13",
        "pkg:npm/@types/glob@7.2.0",
        "pkg:npm/@types/minimatch@5.1.2",
        "pkg:npm/@types/node@25.9.1",
        "pkg:npm/ansi-regex@6.2.2",
        "pkg:npm/ansi-styles@6.2.3",
        "pkg:npm/asar@3.2.0",
        "pkg:npm/at-least-node@1.0.0",
        "pkg:npm/author-regex@1.0.0",
        "pkg:npm/balanced-match@1.0.2",
        "pkg:npm/brace-expansion@1.1.15",
        "pkg:npm/chai@6.2.2",
        "pkg:npm/chromium-pickle-js@0.2.0",
        "pkg:npm/cliui@9.0.1",
        "pkg:npm/commander@5.1.0",
        "pkg:npm/concat-map@0.0.1",
        "pkg:npm/cross-spawn@7.0.6",
        "pkg:npm/debug@4.4.3",
        "pkg:npm/electron-installer-common@0.10.3",
        "pkg:npm/emoji-regex@10.6.0",
        "pkg:npm/err-code@2.0.3",
        "pkg:npm/escalade@3.2.0",
        "pkg:npm/fs-extra@9.1.0",
        "pkg:npm/fs.realpath@1.0.0",
        "pkg:npm/get-caller-file@2.0.5",
        "pkg:npm/get-east-asian-width@1.6.0",
        "pkg:npm/glob@7.2.3",
        "pkg:npm/graceful-fs@4.2.11",
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/isexe@2.0.0",
        "pkg:npm/jsonfile@6.2.1",
        "pkg:npm/lodash@4.18.1",
        "pkg:npm/minimatch@3.1.5",
        "pkg:npm/ms@2.1.3",
        "pkg:npm/once@1.4.0",
        "pkg:npm/oxlint@1.67.0",
        "pkg:npm/parse-author@2.0.0",
        "pkg:npm/path-is-absolute@1.0.1",
        "pkg:npm/path-key@3.1.1",
        "pkg:npm/promise-retry@2.0.1",
        "pkg:npm/retry@0.12.0",
        "pkg:npm/semver@7.8.1",
        "pkg:npm/shebang-command@2.0.0",
        "pkg:npm/shebang-regex@3.0.0",
        "pkg:npm/string-width@7.2.0",
        "pkg:npm/strip-ansi@7.2.0",
        "pkg:npm/tmp-promise@3.0.3",
        "pkg:npm/tmp@0.2.7",
        "pkg:npm/undici-types@7.24.6",
        "pkg:npm/universalify@2.0.1",
        "pkg:npm/which@2.0.2",
        "pkg:npm/word-wrap@1.2.5",
        "pkg:npm/wrap-ansi@9.0.2",
        "pkg:npm/wrappy@1.0.2",
        "pkg:npm/y18n@5.0.8",
        "pkg:npm/yargs-parser@22.0.0",
        "pkg:npm/yargs@18.0.0"
      ]
    },
    {
      "ref": "pkg:npm/emoji-regex@10.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/err-code@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/escalade@3.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fs-extra@9.1.0",
      "dependsOn": [
        "pkg:npm/at-least-node@1.0.0",
        "pkg:npm/graceful-fs@4.2.11",
        "pkg:npm/jsonfile@6.2.1",
        "pkg:npm/universalify@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/fs.realpath@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-caller-file@2.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-east-asian-width@1.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob@7.2.3",
      "dependsOn": [
        "pkg:npm/fs.realpath@1.0.0",
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/minimatch@3.1.5",
        "pkg:npm/once@1.4.0",
        "pkg:npm/path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/graceful-fs@4.2.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/inflight@1.0.6",
      "dependsOn": [
        "pkg:npm/once@1.4.0",
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/inherits@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isexe@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsonfile@6.2.1",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.11",
        "pkg:npm/universalify@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash@4.18.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimatch@3.1.5",
      "dependsOn": [
        "pkg:npm/brace-expansion@1.1.15"
      ]
    },
    {
      "ref": "pkg:npm/ms@2.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/once@1.4.0",
      "dependsOn": [
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/oxlint@1.67.0",
      "dependsOn": [
        "pkg:npm/@oxlint/binding-android-arm-eabi@1.67.0",
        "pkg:npm/@oxlint/binding-android-arm64@1.67.0",
        "pkg:npm/@oxlint/binding-darwin-arm64@1.67.0",
        "pkg:npm/@oxlint/binding-darwin-x64@1.67.0",
        "pkg:npm/@oxlint/binding-freebsd-x64@1.67.0",
        "pkg:npm/@oxlint/binding-linux-arm-gnueabihf@1.67.0",
        "pkg:npm/@oxlint/binding-linux-arm-musleabihf@1.67.0",
        "pkg:npm/@oxlint/binding-linux-arm64-gnu@1.67.0",
        "pkg:npm/@oxlint/binding-linux-arm64-musl@1.67.0",
        "pkg:npm/@oxlint/binding-linux-ppc64-gnu@1.67.0",
        "pkg:npm/@oxlint/binding-linux-riscv64-gnu@1.67.0",
        "pkg:npm/@oxlint/binding-linux-riscv64-musl@1.67.0",
        "pkg:npm/@oxlint/binding-linux-s390x-gnu@1.67.0",
        "pkg:npm/@oxlint/binding-linux-x64-gnu@1.67.0",
        "pkg:npm/@oxlint/binding-linux-x64-musl@1.67.0",
        "pkg:npm/@oxlint/binding-openharmony-arm64@1.67.0",
        "pkg:npm/@oxlint/binding-win32-arm64-msvc@1.67.0",
        "pkg:npm/@oxlint/binding-win32-ia32-msvc@1.67.0",
        "pkg:npm/@oxlint/binding-win32-x64-msvc@1.67.0"
      ]
    },
    {
      "ref": "pkg:npm/parse-author@2.0.0",
      "dependsOn": [
        "pkg:npm/author-regex@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/path-is-absolute@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-key@3.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/promise-retry@2.0.1",
      "dependsOn": [
        "pkg:npm/err-code@2.0.3",
        "pkg:npm/retry@0.12.0"
      ]
    },
    {
      "ref": "pkg:npm/retry@0.12.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/semver@7.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shebang-command@2.0.0",
      "dependsOn": [
        "pkg:npm/shebang-regex@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/shebang-regex@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string-width@7.2.0",
      "dependsOn": [
        "pkg:npm/emoji-regex@10.6.0",
        "pkg:npm/get-east-asian-width@1.6.0",
        "pkg:npm/strip-ansi@7.2.0"
      ]
    },
    {
      "ref": "pkg:npm/strip-ansi@7.2.0",
      "dependsOn": [
        "pkg:npm/ansi-regex@6.2.2"
      ]
    },
    {
      "ref": "pkg:npm/tmp-promise@3.0.3",
      "dependsOn": [
        "pkg:npm/tmp@0.2.7"
      ]
    },
    {
      "ref": "pkg:npm/tmp@0.2.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/undici-types@7.24.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/universalify@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/which@2.0.2",
      "dependsOn": [
        "pkg:npm/isexe@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/word-wrap@1.2.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wrap-ansi@9.0.2",
      "dependsOn": [
        "pkg:npm/ansi-styles@6.2.3",
        "pkg:npm/string-width@7.2.0",
        "pkg:npm/strip-ansi@7.2.0"
      ]
    },
    {
      "ref": "pkg:npm/wrappy@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/y18n@5.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs-parser@22.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs@18.0.0",
      "dependsOn": [
        "pkg:npm/cliui@9.0.1",
        "pkg:npm/escalade@3.2.0",
        "pkg:npm/get-caller-file@2.0.5",
        "pkg:npm/string-width@7.2.0",
        "pkg:npm/y18n@5.0.8",
        "pkg:npm/yargs-parser@22.0.0"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/electron-installer-debian@4.0.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.6",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.6",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.6",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-10-20T15:32:40Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Tuesday, October 20, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'electron-installer-debian' with version '4.0.0'. The package type in this SBOM is npm with 3 purl namespaces described under components. The components were identified from the source files: yarn.lock."
    }
  ]
}