[
  {
    "path": "node_modules/webpack-dev-server",
    "justification": "Devmode live reload server - not used in production"
  },
  {
    "path": "node_modules/@uirouter/core/_doc/assets/js/main.js",
    "justification": "Not included in our build outputs"
  },
  {
    "component": "hoek",
    "version" : "4.2.0",
    "justification": "Low-severity, not used at runtime, community fixes pending. See https://hackerone.com/reports/310439."
  },
  {
    "component": "hoek",
    "version" : "2.16.3",
    "justification": "Low-severity, not used at runtime, community fixes pending. See https://hackerone.com/reports/310439."
  },
  {
    "component": "lodash",
    "version": "3.10.1",
    "justification": "Low-severity, not used at runtime, community fixes pending. See https://hackerone.com/reports/310443."
  },
  {
    "component": "lodash",
    "version": "3.7.0",
    "justification": "Low-severity, not used at runtime, community fixes pending. See https://hackerone.com/reports/310443."
  },
  {
    "component": "sshpk",
    "version": "1.13.0",
    "justification": "Not used at runtime, awaiting new release of fsevents: https://hackerone.com/reports/319593"
  },
  {
    "component": "atob",
    "version": "2.0.3",
    "justification": "Not used at runtime. https://hackerone.com/reports/321686"
  }
]