<?xml version="1.0" encoding="UTF-8"?>
<bom xmlns="http://cyclonedx.org/schema/bom/1.4" version="1">
  <components>
    <component type="library">
      <name>@cyclonedx/bom</name>
      <version>4.1.0</version>
      <licenses>
        <license><id>Apache-2.0</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>@cyclonedx/cyclonedx-library</name>
      <version>8.4.0</version>
      <licenses>
        <license><id>Apache-2.0</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>@cyclonedx/cyclonedx-npm</name>
      <version>4.0.0</version>
      <licenses>
        <license><id>Apache-2.0</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>@cyclonedx/yarn-plugin-cyclonedx</name>
      <version>3.1.0</version>
      <licenses>
        <license><id>Apache-2.0</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>@isaacs/cliui</name>
      <version>8.0.2</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>@isaacs/fs-minipass</name>
      <version>4.0.1</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>@npmcli/agent</name>
      <version>3.0.0</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>@npmcli/fs</name>
      <version>3.1.1</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>@npmcli/fs</name>
      <version>4.0.0</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>@oozcitak/dom</name>
      <version>1.15.10</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>@oozcitak/infra</name>
      <version>1.0.8</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>@oozcitak/url</name>
      <version>1.0.4</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>@oozcitak/util</name>
      <version>8.3.8</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>@pkgjs/parseargs</name>
      <version>0.11.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>@types/sarif</name>
      <version>2.1.7</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>abbrev</name>
      <version>2.0.0</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>abbrev</name>
      <version>3.0.1</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>agent-base</name>
      <version>7.1.3</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>ajv-formats-draft2019</name>
      <version>1.6.1</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>ajv-formats</name>
      <version>3.0.1</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>ajv</name>
      <version>8.17.1</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>ansi-regex</name>
      <version>5.0.1</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>ansi-regex</name>
      <version>6.1.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>ansi-styles</name>
      <version>4.3.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>ansi-styles</name>
      <version>6.2.1</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>argparse</name>
      <version>1.0.10</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>array-find-index</name>
      <version>1.0.2</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>asap</name>
      <version>2.0.6</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>balanced-match</name>
      <version>1.0.2</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>base64-js</name>
      <version>1.5.1</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>bindings</name>
      <version>1.5.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>bl</name>
      <version>4.1.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>brace-expansion</name>
      <version>1.1.12</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>brace-expansion</name>
      <version>2.0.2</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>buffer</name>
      <version>5.7.1</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>cacache</name>
      <version>19.0.1</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>carrot-scan-cli</name>
      <version>0.1.0</version>
      <licenses>
        <license><id>UNKNOWN</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>chalk</name>
      <version>4.1.2</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>chownr</name>
      <version>1.1.4</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>chownr</name>
      <version>3.0.0</version>
      <licenses>
        <license><id>BlueOak-1.0.0</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>color-convert</name>
      <version>2.0.1</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>color-name</name>
      <version>1.1.4</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>commander</name>
      <version>11.1.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>commander</name>
      <version>14.0.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>commander</name>
      <version>2.20.3</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>concat-map</name>
      <version>0.0.1</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>cross-spawn</name>
      <version>7.0.6</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>cyclonedx-bom</name>
      <version>0.0.9</version>
      <licenses>
        <license><id>Apache-2.0</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>data-uri-to-buffer</name>
      <version>4.0.1</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>debug</name>
      <version>4.4.1</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>debuglog</name>
      <version>1.0.1</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>decompress-response</name>
      <version>6.0.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>deep-extend</name>
      <version>0.6.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>detect-libc</name>
      <version>2.0.4</version>
      <licenses>
        <license><id>Apache-2.0</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>dezalgo</name>
      <version>1.0.4</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>discontinuous-range</name>
      <version>1.0.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>eastasianwidth</name>
      <version>0.2.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>emoji-regex</name>
      <version>8.0.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>emoji-regex</name>
      <version>9.2.2</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>encoding</name>
      <version>0.1.13</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>end-of-stream</name>
      <version>1.4.5</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>env-paths</name>
      <version>2.2.1</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>err-code</name>
      <version>2.0.3</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>esprima</name>
      <version>4.0.1</version>
      <licenses>
        <license><id>BSD-2-Clause</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>expand-template</name>
      <version>2.0.3</version>
      <licenses>
        <license><id>(MIT OR WTFPL)</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>exponential-backoff</name>
      <version>3.1.2</version>
      <licenses>
        <license><id>Apache-2.0</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>extend</name>
      <version>3.0.2</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>fast-deep-equal</name>
      <version>3.1.3</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>fast-uri</name>
      <version>3.0.6</version>
      <licenses>
        <license><id>BSD-3-Clause</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>fdir</name>
      <version>6.4.6</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>fetch-blob</name>
      <version>3.2.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>file-uri-to-path</name>
      <version>1.0.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>foreground-child</name>
      <version>3.3.1</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>formdata-polyfill</name>
      <version>4.0.10</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>fs-constants</name>
      <version>1.0.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>fs-extra</name>
      <version>11.3.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>fs-minipass</name>
      <version>3.0.3</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>fs.realpath</name>
      <version>1.0.0</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>function-bind</name>
      <version>1.1.2</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>github-from-package</name>
      <version>0.0.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>glob</name>
      <version>10.4.5</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>glob</name>
      <version>7.2.3</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>graceful-fs</name>
      <version>4.2.11</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>has-flag</name>
      <version>4.0.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>hasown</name>
      <version>2.0.2</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>hosted-git-info</name>
      <version>2.8.9</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>hosted-git-info</name>
      <version>6.1.3</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>hosted-git-info</name>
      <version>8.1.0</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>http-cache-semantics</name>
      <version>4.2.0</version>
      <licenses>
        <license><id>BSD-2-Clause</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>http-proxy-agent</name>
      <version>7.0.2</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>https-proxy-agent</name>
      <version>7.0.6</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>iconv-lite</name>
      <version>0.6.3</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>ieee754</name>
      <version>1.2.1</version>
      <licenses>
        <license><id>BSD-3-Clause</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>imurmurhash</name>
      <version>0.1.4</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>inflight</name>
      <version>1.0.6</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>inherits</name>
      <version>2.0.4</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>ini</name>
      <version>1.3.8</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>ip-address</name>
      <version>9.0.5</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>is-core-module</name>
      <version>2.16.1</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>is-fullwidth-code-point</name>
      <version>3.0.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>isexe</name>
      <version>2.0.0</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>isexe</name>
      <version>3.1.1</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>jackspeak</name>
      <version>3.4.3</version>
      <licenses>
        <license><id>BlueOak-1.0.0</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>js-yaml</name>
      <version>3.14.1</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>jsbn</name>
      <version>1.1.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>json-parse-even-better-errors</name>
      <version>2.3.1</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>json-parse-even-better-errors</name>
      <version>3.0.2</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>json-schema-traverse</name>
      <version>1.0.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>jsonfile</name>
      <version>6.1.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>libxmljs2</name>
      <version>0.37.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>license-checker-rseidelsohn</name>
      <version>4.4.2</version>
      <licenses>
        <license><id>BSD-3-Clause</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>lodash.clonedeep</name>
      <version>4.5.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>lru-cache</name>
      <version>10.4.3</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>lru-cache</name>
      <version>7.18.3</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>make-fetch-happen</name>
      <version>14.0.3</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>mimic-response</name>
      <version>3.1.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>minimatch</name>
      <version>3.1.2</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>minimatch</name>
      <version>9.0.5</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>minimist</name>
      <version>1.2.8</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>minipass-collect</name>
      <version>2.0.1</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>minipass-fetch</name>
      <version>4.0.1</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>minipass-flush</name>
      <version>1.0.5</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>minipass-pipeline</name>
      <version>1.2.4</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>minipass-sized</name>
      <version>1.0.3</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>minipass</name>
      <version>3.3.6</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>minipass</name>
      <version>7.1.2</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>minizlib</name>
      <version>3.0.2</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>mkdirp-classic</name>
      <version>0.5.3</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>mkdirp</name>
      <version>1.0.4</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>mkdirp</name>
      <version>3.0.1</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>moo</name>
      <version>0.5.2</version>
      <licenses>
        <license><id>BSD-3-Clause</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>ms</name>
      <version>2.1.3</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>nan</name>
      <version>2.22.2</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>napi-build-utils</name>
      <version>2.0.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>nearley</name>
      <version>2.20.1</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>negotiator</name>
      <version>1.0.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>node-abi</name>
      <version>3.75.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>node-domexception</name>
      <version>1.0.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>node-fetch</name>
      <version>3.3.2</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>node-gyp</name>
      <version>11.2.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>node-sarif-builder</name>
      <version>3.2.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>nopt</name>
      <version>7.2.1</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>nopt</name>
      <version>8.1.0</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>normalize-package-data</name>
      <version>2.5.0</version>
      <licenses>
        <license><id>BSD-2-Clause</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>normalize-package-data</name>
      <version>5.0.0</version>
      <licenses>
        <license><id>BSD-2-Clause</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>normalize-package-data</name>
      <version>7.0.0</version>
      <licenses>
        <license><id>BSD-2-Clause</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>npm-normalize-package-bin</name>
      <version>1.0.1</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>npm-normalize-package-bin</name>
      <version>3.0.1</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>once</name>
      <version>1.4.0</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>p-limit</name>
      <version>6.2.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>p-map</name>
      <version>7.0.3</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>package-json-from-dist</name>
      <version>1.0.1</version>
      <licenses>
        <license><id>BlueOak-1.0.0</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>packageurl-js</name>
      <version>2.0.1</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>path-is-absolute</name>
      <version>1.0.1</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>path-key</name>
      <version>3.1.1</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>path-parse</name>
      <version>1.0.7</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>path-scurry</name>
      <version>1.11.1</version>
      <licenses>
        <license><id>BlueOak-1.0.0</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>picomatch</name>
      <version>4.0.2</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>prebuild-install</name>
      <version>7.1.3</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>proc-log</name>
      <version>5.0.0</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>promise-retry</name>
      <version>2.0.1</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>pump</name>
      <version>3.0.3</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>punycode</name>
      <version>2.3.1</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>railroad-diagrams</name>
      <version>1.0.0</version>
      <licenses>
        <license><id>CC0-1.0</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>randexp</name>
      <version>0.4.6</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>rc</name>
      <version>1.2.8</version>
      <licenses>
        <license><id>(BSD-2-Clause OR MIT OR Apache-2.0)</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>read-installed-packages</name>
      <version>2.0.1</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>read-installed</name>
      <version>4.0.3</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>read-package-json</name>
      <version>2.1.2</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>read-package-json</name>
      <version>6.0.4</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>readable-stream</name>
      <version>3.6.2</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>readdir-scoped-modules</name>
      <version>1.1.0</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>require-from-string</name>
      <version>2.0.2</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>resolve</name>
      <version>1.22.10</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>ret</name>
      <version>0.1.15</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>retry</name>
      <version>0.12.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>safe-buffer</name>
      <version>5.2.1</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>safer-buffer</name>
      <version>2.1.2</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>sbom</name>
      <version>1.0.0</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>schemes</name>
      <version>1.4.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>semver</name>
      <version>5.7.2</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>semver</name>
      <version>7.7.2</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>shebang-command</name>
      <version>2.0.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>shebang-regex</name>
      <version>3.0.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>signal-exit</name>
      <version>4.1.0</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>simple-concat</name>
      <version>1.0.1</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>simple-get</name>
      <version>4.0.1</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>slide</name>
      <version>1.1.6</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>smart-buffer</name>
      <version>4.2.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>smtp-address-parser</name>
      <version>1.1.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>socks-proxy-agent</name>
      <version>8.0.5</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>socks</name>
      <version>2.8.5</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>spdx-compare</name>
      <version>1.0.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>spdx-correct</name>
      <version>3.2.0</version>
      <licenses>
        <license><id>Apache-2.0</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>spdx-exceptions</name>
      <version>2.5.0</version>
      <licenses>
        <license><id>CC-BY-3.0</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>spdx-expression-parse</name>
      <version>3.0.1</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>spdx-expression-parse</name>
      <version>4.0.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>spdx-license-ids</name>
      <version>3.0.21</version>
      <licenses>
        <license><id>CC0-1.0</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>spdx-ranges</name>
      <version>2.1.1</version>
      <licenses>
        <license><id>(MIT AND CC-BY-3.0)</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>spdx-satisfies</name>
      <version>5.0.1</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>sprintf-js</name>
      <version>1.0.3</version>
      <licenses>
        <license><id>BSD-3-Clause</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>sprintf-js</name>
      <version>1.1.3</version>
      <licenses>
        <license><id>BSD-3-Clause</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>ssri</name>
      <version>12.0.0</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>string-width</name>
      <version>4.2.3</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>string-width</name>
      <version>5.1.2</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>string_decoder</name>
      <version>1.3.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>strip-ansi</name>
      <version>6.0.1</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>strip-ansi</name>
      <version>7.1.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>strip-json-comments</name>
      <version>2.0.1</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>supports-color</name>
      <version>7.2.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>supports-preserve-symlinks-flag</name>
      <version>1.0.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>tar-fs</name>
      <version>2.1.3</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>tar-stream</name>
      <version>2.2.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>tar</name>
      <version>7.4.3</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>tinyglobby</name>
      <version>0.2.14</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>treeify</name>
      <version>1.1.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>tunnel-agent</name>
      <version>0.6.0</version>
      <licenses>
        <license><id>Apache-2.0</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>unique-filename</name>
      <version>4.0.0</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>unique-slug</name>
      <version>5.0.0</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>universalify</name>
      <version>2.0.1</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>uri-js</name>
      <version>4.4.1</version>
      <licenses>
        <license><id>BSD-2-Clause</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>util-deprecate</name>
      <version>1.0.2</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>util-extend</name>
      <version>1.0.3</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>validate-npm-package-license</name>
      <version>3.0.4</version>
      <licenses>
        <license><id>Apache-2.0</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>web-streams-polyfill</name>
      <version>3.3.3</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>which</name>
      <version>2.0.2</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>which</name>
      <version>5.0.0</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>wrap-ansi</name>
      <version>7.0.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>wrap-ansi</name>
      <version>8.1.0</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>wrappy</name>
      <version>1.0.2</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>xmlbuilder2</name>
      <version>3.1.1</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>yallist</name>
      <version>4.0.0</version>
      <licenses>
        <license><id>ISC</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>yallist</name>
      <version>5.0.0</version>
      <licenses>
        <license><id>BlueOak-1.0.0</id></license>
      </licenses>
    </component>
    <component type="library">
      <name>yocto-queue</name>
      <version>1.2.1</version>
      <licenses>
        <license><id>MIT</id></license>
      </licenses>
    </component>
  </components>
</bom>